This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft File: UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json) Hash identifier: lm0m8TmCSO+aL9HzE53xTjz+RibfdxxdWISVPUSZsxY= Subject key identifier: FE:F6:E7:98:1D:17:92:2D:6A:27:D6:A9:F2:C1:9C:82:E3:B4:45:50 Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft Manifest number: 0619 Signing time: Mon 22 Dec 2025 21:59:46 +0000 Manifest this update: Mon 22 Dec 2025 21:59:46 +0000 Manifest next update: Mon 29 Dec 2025 21:59:46 +0000 Files and hashes: 1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: FspdOtLpVidNuOStLxy0lFreeiFPLXyWG79FwvZbILA=) 2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: mwVl4hNEaIqbBNWJudlbCJK/THwSQhv97GiC3rtYAeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Validity Not Before: Dec 22 21:59:46 2025 GMT Not After : Dec 29 21:59:46 2025 GMT Subject: CN=6949bf52-5d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:db:77:ad:7c:64:ef:d1:14:84:45:fc:22: 24:48:80:7a:0e:a3:bb:a4:83:8d:78:c3:00:fd:59: 3d:0a:cc:91:de:7a:54:89:14:55:19:fe:00:06:14: 7b:4e:27:4a:4f:94:68:7c:33:b3:83:19:ca:43:6c: 36:9e:db:0e:63:6b:dd:45:a4:83:21:a8:79:dd:0e: 18:2b:d9:5b:63:a4:ff:82:63:ba:dc:f0:44:bc:8f: a2:c8:10:0f:3e:2b:9b:3d:f1:56:e6:17:16:80:08: 70:6b:51:56:d1:36:1f:e2:c5:09:19:be:87:b7:b6: c3:32:af:35:47:e0:70:27:ea:25:c2:5c:53:e5:fe: ac:8a:22:41:e7:56:77:c6:37:60:a2:9e:3f:f6:57: 8c:89:91:ae:62:55:25:72:eb:53:ff:c4:51:16:c6: 15:6c:32:9e:87:74:f3:26:55:b4:93:50:c3:79:f9: a7:44:21:80:f3:1f:32:61:29:60:8e:12:1b:44:0b: 46:ab:85:f7:94:28:bd:10:72:b1:57:fe:c3:be:9c: 9b:5e:3f:e4:1d:0b:9b:f1:fc:21:17:de:4d:5f:bf: b3:35:86:cf:6b:3d:77:18:ae:1e:10:58:f2:a0:9f: 42:70:31:7b:31:b0:07:a6:a4:4d:4d:c6:65:ed:c0: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F6:E7:98:1D:17:92:2D:6A:27:D6:A9:F2:C1:9C:82:E3:B4:45:50 X509v3 Authority Key Identifier: keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:fe:cc:8c:88:2a:93:aa:c2:d3:7a:9a:d3:e9:e3:5e:de:6b: d4:18:55:55:0c:3c:25:85:80:5e:99:9f:ba:7e:99:02:a8:41: a8:ce:67:14:eb:94:61:aa:3f:8b:3f:5f:e3:21:d4:e5:2a:54: d6:08:7a:87:ee:64:aa:fc:6f:e3:00:7f:74:55:cb:a7:58:8d: 11:51:d7:72:19:94:9c:32:fe:a2:32:c3:4e:63:af:5b:27:b3: 9c:7d:ec:c9:46:10:24:bc:02:23:32:40:6c:90:1b:5b:cc:40: 50:c2:6a:95:20:b5:93:89:e6:92:06:f9:e5:99:18:b8:a7:54: 5a:cb:24:72:30:69:15:b5:3d:08:2e:27:79:f3:7a:32:83:03: 28:26:09:25:28:ca:61:74:05:4a:52:0d:c0:2b:10:79:ca:42: cd:3d:01:e9:af:5d:d0:1c:ac:3c:71:2a:e7:9c:1f:fb:58:b1: 05:ae:6b:19:b3:99:41:0b:39:3f:68:c6:1e:51:df:36:27:d1: ce:25:ce:5a:de:0e:b7:0d:4a:1f:1f:d3:12:34:b7:ad:e5:f4: 43:fc:05:f5:40:59:71:85:d4:6d:00:4a:e5:35:76:98:fb:60: 71:86:5f:6e:49:b8:fc:a0:5c:d3:22:76:12:02:e8:f9:6a:66: 83:d7:88:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxQjkxMTAvBgNVBAUTKDUxM0YyMDc3RDhBRDkxMUFDNzdCNUI1QzU5QjNFMjE0 Qzc4QjAyM0IwHhcNMjUxMjIyMjE1OTQ2WhcNMjUxMjI5MjE1OTQ2WjAYMRYwFAYD VQQDDA02OTQ5YmY1Mi01ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZvbd618ZO/RFIRF/CIkSIB6DqO7pIONeMMA/Vk9CsyR3npUiRRVGf4ABhR7 TidKT5RofDOzgxnKQ2w2ntsOY2vdRaSDIah53Q4YK9lbY6T/gmO63PBEvI+iyBAP PiubPfFW5hcWgAhwa1FW0TYf4sUJGb6Ht7bDMq81R+BwJ+olwlxT5f6siiJB51Z3 xjdgop4/9leMiZGuYlUlcutT/8RRFsYVbDKeh3TzJlW0k1DDefmnRCGA8x8yYSlg jhIbRAtGq4X3lCi9EHKxV/7DvpybXj/kHQub8fwhF95NX7+zNYbPaz13GK4eEFjy oJ9CcDF7MbAHpqRNTcZl7cCAkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7255gd F5ItaifWqfLBnILjtEVQMB8GA1UdIwQYMBaAFFE/IHfYrZEax3tbXFmz4hTHiwI7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFCOS9DREI3MDJGNkM4 N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtSckhlMXRjV2JQaUZNZUxB anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUOGdkOWl0a1JySGUxdGNXYlBpRk1lTEFqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFCOS9DREI3MDJGNkM4N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtS ckhlMXRjV2JQaUZNZUxBanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl/syMiCqTqsLTeprT6eNe3mvUGFVVDDwlhYBemZ+6fpkCqEGozmcU 65Rhqj+LP1/jIdTlKlTWCHqH7mSq/G/jAH90VcunWI0RUddyGZScMv6iMsNOY69b J7OcfezJRhAkvAIjMkBskBtbzEBQwmqVILWTieaSBvnlmRi4p1RayyRyMGkVtT0I Lid583oygwMoJgklKMphdAVKUg3AKxB5ykLNPQHpr13QHKw8cSrnnB/7WLEFrmsZ s5lBCzk/aMYeUd82J9HOJc5a3g63DUofH9MSNLet5fRD/AX1QFlxhdRtAErlNXaY +2Bxhl9uSbj8oFzTInYSAuj5amaD14jl -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:53 2025 by rpki-client