This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: vF2oAq/NG2NmzyJ0L/z/rU0kJp6i/9mu7n+SPkgepIw= Subject key identifier: 09:67:90:89:66:6E:77:21:1C:54:3E:ED:73:1F:D6:2F:2C:E2:4F:56 Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 0395 Signing time: Fri 19 Dec 2025 00:02:17 +0000 Manifest this update: Fri 19 Dec 2025 00:02:17 +0000 Manifest next update: Fri 26 Dec 2025 00:02:17 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: 16mf/uhQz9t96Agh+izsK0wkccQKuSuYDkaUDKWySVw=) 2: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: 7yly3hdDUnooff1AD5UaEbPn8g4l5l4qpcVVzY6AZJk=) 3: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: 3gM1BdbMTDqrDwIX93z+/V+zTYOD4jC/sFTj/5bifAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Dec 19 00:02:17 2025 GMT Not After : Dec 26 00:02:17 2025 GMT Subject: CN=69449609-2487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:7a:78:3f:7d:68:28:55:e4:19:c5:03:a2: 62:da:cb:55:e2:5c:3c:c4:66:cb:24:c1:28:90:08: 1a:01:48:1b:db:90:07:c0:d5:a7:17:01:cb:4b:8c: 70:05:bd:02:91:66:57:fb:32:a5:5b:49:9c:a6:4e: aa:68:85:ed:3c:a2:8a:e5:78:4c:f7:4d:b4:e6:7d: 67:f0:75:49:e1:b3:ff:36:aa:09:49:a5:97:19:17: 00:0e:81:14:86:fc:ee:4f:24:2a:b0:ba:54:2e:31: fb:9f:cd:81:81:28:dc:95:da:48:80:c7:84:eb:4a: f6:19:f0:0b:35:ee:3e:44:71:2f:3d:72:64:c6:6c: fc:3a:bd:90:7b:a8:60:0a:2d:48:9f:03:9f:16:43: 78:60:fc:a1:f1:67:0e:45:c0:ca:09:34:a8:00:4a: e6:c4:a3:08:86:01:28:34:e2:09:34:7a:7f:ab:d6: 85:af:2c:9a:b7:47:aa:0d:4f:73:bb:ab:db:a5:48: cd:2e:76:d2:57:99:d3:d3:0d:bb:e5:06:02:c0:6f: 8d:4b:6b:f9:6f:22:d1:32:a3:0f:79:d5:1c:55:2f: 82:5c:60:90:3a:8d:ec:e0:13:57:6e:ef:06:92:55: f7:61:7e:ee:8e:21:b0:40:84:ed:1d:69:4a:ec:8d: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:67:90:89:66:6E:77:21:1C:54:3E:ED:73:1F:D6:2F:2C:E2:4F:56 X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d2:23:74:b4:f5:f0:ac:cb:84:49:b2:e2:92:99:77:2f:fd: ac:97:5e:1e:ea:59:27:c6:5f:8b:fc:da:c4:60:09:ad:aa:05: 35:ba:76:92:82:e3:69:12:8b:8d:86:d3:e0:59:5e:a0:b5:ba: 45:fe:15:b5:17:a5:ae:4d:30:de:92:46:86:df:45:59:42:33: d3:a6:d5:3c:cc:ec:c3:35:66:4e:34:e7:83:4b:7a:f5:5c:8c: 4d:0c:02:49:cc:70:ae:d5:2d:3c:65:13:e0:da:6c:2e:2b:53: 18:c9:a7:f1:0f:32:74:28:7a:14:65:4a:f7:8d:30:a1:45:1f: 53:39:53:bf:f6:94:4d:26:5a:14:f7:52:d0:93:f5:99:4a:c3: 70:48:6d:2c:b2:58:8f:96:75:8b:10:c9:1e:f9:78:91:7d:45: 8f:6c:a5:24:0c:fd:e6:4b:dd:ec:91:ee:ac:78:b8:a2:a7:af: a4:ef:6e:cc:db:b3:7e:4a:01:35:67:e7:95:7e:cf:07:bf:c3: 22:2d:a9:18:2a:14:fa:5b:c3:35:c0:0d:cc:7a:19:c0:cb:bf: f2:82:7e:3f:6a:75:21:c6:05:4f:fd:4d:85:8e:76:12:ed:bd: 9a:21:41:47:15:a1:ef:74:16:dc:2e:56:7c:1f:9c:f6:58:b4: af:aa:f1:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUxMjE5MDAwMjE3WhcNMjUxMjI2MDAwMjE3WjAYMRYwFAYD VQQDDA02OTQ0OTYwOS0yNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQB6eD99aChV5BnFA6Ji2stV4lw8xGbLJMEokAgaAUgb25AHwNWnFwHLS4xw Bb0CkWZX+zKlW0mcpk6qaIXtPKKK5XhM90205n1n8HVJ4bP/NqoJSaWXGRcADoEU hvzuTyQqsLpULjH7n82BgSjcldpIgMeE60r2GfALNe4+RHEvPXJkxmz8Or2Qe6hg Ci1InwOfFkN4YPyh8WcORcDKCTSoAErmxKMIhgEoNOIJNHp/q9aFryyat0eqDU9z u6vbpUjNLnbSV5nT0w275QYCwG+NS2v5byLRMqMPedUcVS+CXGCQOo3s4BNXbu8G klX3YX7ujiGwQITtHWlK7I19GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlnkIlm bnchHFQ+7XMf1i8s4k9WMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn0iN0tPXwrMuESbLikpl3L/2sl14e6lknxl+L/NrEYAmtqgU1unaS guNpEouNhtPgWV6gtbpF/hW1F6WuTTDekkaG30VZQjPTptU8zOzDNWZONOeDS3r1 XIxNDAJJzHCu1S08ZRPg2mwuK1MYyafxDzJ0KHoUZUr3jTChRR9TOVO/9pRNJloU 91LQk/WZSsNwSG0ssliPlnWLEMke+XiRfUWPbKUkDP3mS93ske6seLiip6+k727M 27N+SgE1Z+eVfs8Hv8MiLakYKhT6W8M1wA3MehnAy7/ygn4/anUhxgVP/U2FjnYS 7b2aIUFHFaHvdBbcLlZ8H5z2WLSvqvHF -----END CERTIFICATE-----Generated at Fri Dec 19 18:34:06 2025 by rpki-client