This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: 8rY6jmefQkppvToSqKNJ2jJR7sZK0TSCNMCtj9iJpA8= Subject key identifier: A9:14:46:E2:46:EE:83:34:59:56:92:20:AE:09:24:AC:F8:BD:E7:3A Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0EBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0EB7 Signing time: Sat 20 Dec 2025 17:22:20 +0000 Manifest this update: Sat 20 Dec 2025 17:22:20 +0000 Manifest next update: Sat 27 Dec 2025 17:22:20 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: Ie++a+OsUe85ILW7BtemCVB0/Z04DZnGx3BE9E5i3ow=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: qIQKdkJiQ6vR/a23UDA9XAzbB7yWjWrazranQiTao60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3773 (0xebd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Dec 20 17:22:20 2025 GMT Not After : Dec 27 17:22:20 2025 GMT Subject: CN=6946db4c-edcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:66:0c:bb:6f:af:27:4e:24:12:8a:9c:e8: f2:3d:07:a9:1c:50:7d:fc:7e:ba:76:6a:cc:f9:9f: 7f:ec:6e:84:ff:12:15:d9:e9:41:6c:25:1a:f8:1f: e5:72:81:62:13:a7:0a:19:98:9d:10:e8:b2:9e:2c: 60:b0:f1:b9:12:0a:25:a8:92:99:77:94:fe:b5:12: 2c:cd:44:32:89:10:8e:a0:50:c5:c3:2f:fb:f6:bd: 5c:92:af:0d:01:d1:9a:1e:e5:3c:f0:e4:88:2c:69: 78:a1:7b:ca:68:54:30:17:b3:6d:34:22:85:38:7d: 28:42:d6:23:90:70:7a:39:11:04:f4:3d:e8:21:b0: 1a:33:f0:25:6d:27:2e:4f:3a:d4:7a:d0:e4:4d:43: 4f:e8:40:f3:b8:34:f7:45:47:e4:01:4c:1c:d1:ef: 75:e1:61:33:e4:66:41:ad:de:37:fe:ed:09:15:30: 72:9c:2a:dd:cc:a6:91:50:0e:93:ae:7f:3b:ff:35: 00:47:22:06:f1:1b:65:0c:6b:ff:e0:be:51:09:c1: 6d:57:57:1f:a1:e0:17:37:3f:5d:a0:c3:78:37:45: f8:03:58:be:02:dd:81:e8:4b:3e:8e:9f:da:db:a0: 22:66:6e:63:b0:ed:6d:73:5c:fc:95:3d:f4:82:7d: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:14:46:E2:46:EE:83:34:59:56:92:20:AE:09:24:AC:F8:BD:E7:3A X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:39:8b:bf:aa:35:71:71:8e:c8:41:90:42:e9:d8:c4:c7:07: 12:b9:98:4e:05:b8:b2:ce:bc:8e:8d:9d:da:df:ad:de:46:60: c5:81:ad:be:b2:62:03:b5:16:ff:90:e0:71:cd:a1:41:3d:0f: 47:90:8f:67:80:eb:e0:62:a6:bf:17:bc:22:ba:56:d6:d2:ac: 62:86:10:e9:7c:11:e4:ff:e8:cc:94:19:c7:17:52:7a:ee:fe: c5:15:65:47:24:6d:44:58:f4:bf:5a:28:06:aa:53:ad:80:74: a4:65:82:d8:0d:1d:75:e9:4c:b1:ff:47:7e:a6:85:bc:56:0b: 0f:c6:12:d3:bb:37:77:1b:e4:7b:2a:6c:93:0d:81:e3:9f:36: e9:33:bd:e4:62:03:f9:9c:98:48:84:01:f4:ce:d4:c6:20:54: 5f:3f:67:8d:8e:d8:03:1c:17:c2:b3:c4:68:e3:f2:10:be:3b: 94:92:97:94:29:a8:d0:2f:20:e9:53:95:cd:3d:6d:a9:02:87: 26:53:9d:1d:6c:00:ae:9f:89:93:88:9c:cf:e2:bf:4b:0f:62: cf:7d:55:53:24:16:51:ae:9e:a7:18:ff:14:b8:14:3c:4a:cf: 8a:8d:41:41:ee:d1:09:c7:0a:32:4d:d0:4d:bf:63:5f:c8:2a: 3d:02:55:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjUxMjIwMTcyMjIwWhcNMjUxMjI3MTcyMjIwWjAYMRYwFAYD VQQDDA02OTQ2ZGI0Yy1lZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGVmDLtvrydOJBKKnOjyPQepHFB9/H66dmrM+Z9/7G6E/xIV2elBbCUa+B/l coFiE6cKGZidEOiynixgsPG5EgolqJKZd5T+tRIszUQyiRCOoFDFwy/79r1ckq8N AdGaHuU88OSILGl4oXvKaFQwF7NtNCKFOH0oQtYjkHB6OREE9D3oIbAaM/AlbScu TzrUetDkTUNP6EDzuDT3RUfkAUwc0e914WEz5GZBrd43/u0JFTBynCrdzKaRUA6T rn87/zUARyIG8RtlDGv/4L5RCcFtV1cfoeAXNz9doMN4N0X4A1i+At2B6Es+jp/a 26AiZm5jsO1tc1z8lT30gn1zAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkURuJG 7oM0WVaSIK4JJKz4vec6MB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClOYu/qjVxcY7IQZBC6djExwcSuZhOBbiyzryOjZ3a363eRmDFga2+ smIDtRb/kOBxzaFBPQ9HkI9ngOvgYqa/F7wiulbW0qxihhDpfBHk/+jMlBnHF1J6 7v7FFWVHJG1EWPS/WigGqlOtgHSkZYLYDR116Uyx/0d+poW8VgsPxhLTuzd3G+R7 KmyTDYHjnzbpM73kYgP5nJhIhAH0ztTGIFRfP2eNjtgDHBfCs8Ro4/IQvjuUkpeU KajQLyDpU5XNPW2pAocmU50dbACun4mTiJzP4r9LD2LPfVVTJBZRrp6nGP8UuBQ8 Ss+KjUFB7tEJxwoyTdBNv2NfyCo9AlUf -----END CERTIFICATE-----Generated at Mon Dec 22 12:04:11 2025 by rpki-client