This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft File: U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json) Hash identifier: 5wAzH73I99BYKwgbhsqv/QBtyV0L4hrt7wS+IcMUQgQ= Subject key identifier: A1:84:D7:9D:A1:29:69:57:A5:DB:73:5E:96:4D:C8:1D:CF:98:CB:38 Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft Manifest number: D0 Signing time: Sun 21 Dec 2025 04:55:07 +0000 Manifest this update: Sun 21 Dec 2025 04:55:07 +0000 Manifest next update: Sun 28 Dec 2025 04:55:07 +0000 Files and hashes: 1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: KrDXL2h4E08pcs9qLkWOThPOH3sRSIouqq+agDNY/Tk=) 2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: R1ZRqn0ylt//iP3Dpq4PDjSTmlLC/ZvrxfTWyncyjuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: Dec 21 04:55:07 2025 GMT Not After : Dec 28 04:55:07 2025 GMT Subject: CN=69477dab-c74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:b8:44:6f:cd:30:0e:d3:c8:e0:26:45:c4: c0:4b:ae:fe:a2:df:30:d7:d4:6c:e0:64:b2:61:05: 4a:f4:7e:f0:61:51:93:e3:59:70:c6:de:c6:85:71: 98:a3:b8:28:32:fb:8e:13:b5:c1:78:91:98:e8:8d: c4:0f:01:81:b1:dd:ca:60:87:40:49:b4:6d:80:75: 9d:8d:44:56:83:f2:de:83:b0:d1:87:d1:81:f1:a9: bd:c2:98:ed:65:b7:c0:2c:98:18:da:6e:0f:79:9c: ae:1b:b3:26:cc:a4:6b:31:d9:47:0e:d3:c5:6c:31: c0:2a:d0:9f:59:e4:a5:7c:ec:90:15:27:d5:fa:5a: a1:ea:52:58:9f:be:e6:c2:23:91:09:66:b0:16:0e: 57:62:62:23:a1:db:8d:0e:de:1f:d5:05:6f:25:b1: de:72:b9:01:51:ba:11:a1:78:6b:da:4e:c7:da:ba: 01:85:17:96:3e:f2:88:b3:60:ee:99:02:26:a2:d5: 28:ee:da:75:0c:a4:1f:05:6b:a7:a0:f0:ae:6f:4d: 7f:bc:f7:a4:2a:a7:d6:27:6e:65:83:fa:d5:1f:37: d5:c4:a8:5d:a5:f1:70:2e:67:48:34:6e:5e:76:f5: 7c:1a:ff:a8:49:ce:59:b5:a6:01:56:78:74:35:79: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:84:D7:9D:A1:29:69:57:A5:DB:73:5E:96:4D:C8:1D:CF:98:CB:38 X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:64:a7:5a:91:5d:10:51:86:9c:b4:3d:72:e2:d9:5c:a1:e4: 36:6c:2c:f4:ee:a5:c9:e3:b3:f8:71:c9:b4:76:59:d4:74:12: da:8a:dc:49:55:e9:83:d4:b7:dc:6d:25:2b:2a:ee:40:49:bd: 42:5a:5e:8d:b6:95:89:e4:d5:ad:93:87:05:58:f2:1f:47:05: f3:61:35:eb:16:cb:3c:e7:2e:1e:8c:e7:d8:b6:15:09:4b:21: 28:15:a3:73:3c:b0:df:b8:77:bd:65:79:34:f7:b5:eb:17:23: db:e0:a4:f0:46:91:62:dd:42:98:97:fc:8f:25:e4:be:53:cc: e8:ac:22:8d:40:01:7e:0b:42:b2:ac:f5:19:66:9f:6f:d1:2e: d6:95:00:c0:f1:02:f5:a5:59:78:e7:1e:6b:2a:72:8c:de:32: 21:fc:c7:2f:4f:c3:e9:49:d7:55:5c:f9:32:50:a2:15:37:f6: c5:11:e5:2d:cc:be:7d:11:b6:4b:51:01:48:7d:ab:fb:16:37: 25:1b:b8:67:8f:69:6d:c2:9f:40:69:92:27:d8:b9:83:3f:cb: 27:fc:0c:22:b6:4f:13:98:3e:0c:b9:ee:4b:f9:d9:dc:fd:95: 95:de:f0:c5:18:df:c7:e9:58:6b:c6:4b:e0:d9:c3:89:d2:aa: 1d:79:76:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDUxMTAvBgNVBAUTKDUzNDRENkJCMzdFQTBDQzM5MUQxMjQyMDdBRDk5NUZD RDc3QjlFOTUwHhcNMjUxMjIxMDQ1NTA3WhcNMjUxMjI4MDQ1NTA3WjAYMRYwFAYD VQQDDA02OTQ3N2RhYi1jNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjFm4RG/NMA7TyOAmRcTAS67+ot8w19Rs4GSyYQVK9H7wYVGT41lwxt7GhXGY o7goMvuOE7XBeJGY6I3EDwGBsd3KYIdASbRtgHWdjURWg/Leg7DRh9GB8am9wpjt ZbfALJgY2m4PeZyuG7MmzKRrMdlHDtPFbDHAKtCfWeSlfOyQFSfV+lqh6lJYn77m wiORCWawFg5XYmIjoduNDt4f1QVvJbHecrkBUboRoXhr2k7H2roBhReWPvKIs2Du mQImotUo7tp1DKQfBWunoPCub01/vPekKqfWJ25lg/rVHzfVxKhdpfFwLmdING5e dvV8Gv+oSc5ZtaYBVnh0NXmOOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGE152h KWlXpdtzXpZNyB3PmMs4MB8GA1UdIwQYMBaAFFNE1rs36gzDkdEkIHrZlfzXe56V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFENS82NjVEQjdDNkE3 QzAxMUVGOThCQTVFMkFDNEY5QUUwMi9VMFRXdXpmcURNT1IwU1FnZXRtVl9OZDdu cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODFENS82NjVEQjdDNkE3QzAxMUVGOThCQTVFMkFDNEY5QUUwMi9VMFRXdXpmcURN T1IwU1FnZXRtVl9OZDducFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRZKdakV0QUYactD1y4tlcoeQ2bCz07qXJ47P4ccm0dlnUdBLaitxJ VemD1LfcbSUrKu5ASb1CWl6NtpWJ5NWtk4cFWPIfRwXzYTXrFss85y4ejOfYthUJ SyEoFaNzPLDfuHe9ZXk097XrFyPb4KTwRpFi3UKYl/yPJeS+U8zorCKNQAF+C0Ky rPUZZp9v0S7WlQDA8QL1pVl45x5rKnKM3jIh/McvT8PpSddVXPkyUKIVN/bFEeUt zL59EbZLUQFIfav7FjclG7hnj2ltwp9AaZIn2LmDP8sn/Awitk8TmD4Mue5L+dnc /ZWV3vDFGN/H6Vhrxkvg2cOJ0qodeXZl -----END CERTIFICATE-----Generated at Sun Dec 21 21:32:15 2025 by rpki-client