This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft File: U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json) Hash identifier: W9bNjviI5j68P1k0800l6ZnQMxUv9AfCcuvsG9BOzcA= Subject key identifier: 31:FE:87:6E:7B:5B:23:57:64:CA:54:A9:86:F5:9A:B8:A4:27:1F:F5 Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft Manifest number: 23 Signing time: Sun 21 Dec 2025 03:39:19 +0000 Manifest this update: Sun 21 Dec 2025 03:39:18 +0000 Manifest next update: Sun 28 Dec 2025 03:39:18 +0000 Files and hashes: 1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: L5YRr/YKWs2h/uAy9KopgCwyyF7Q8uJk8hdlPnbn02I=) 2: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (hash: 6FoXdKnh4FobFCJ2G0tpVqFddIfSVlw09KcFje53gKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E Validity Not Before: Dec 21 03:39:18 2025 GMT Not After : Dec 28 03:39:18 2025 GMT Subject: CN=69476be7-eb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:34:0f:5a:0b:e8:1d:d4:db:27:6f:25:94: 23:28:f7:e8:3e:2d:12:fe:d4:77:59:91:dd:4c:a7: 75:71:6e:fa:77:cb:6b:2c:07:32:08:b2:fa:2d:2c: cd:5f:f8:d8:c5:18:68:21:dc:9a:12:b6:88:dc:5d: 05:95:e8:83:8a:9d:06:aa:9a:ec:a8:35:98:c0:2c: 3b:b5:f3:14:ed:9f:0c:12:ab:41:5e:4d:93:e6:25: 2e:18:47:e5:9e:4c:2c:eb:5c:d3:bc:ba:da:0b:45: 68:31:14:3a:55:1b:40:cb:fe:26:29:25:3c:a0:29: 34:b9:15:36:7d:cb:b4:a3:bd:a1:df:00:50:b2:6c: 06:a2:92:73:d4:c2:97:ac:fd:bc:10:62:8d:9f:33: d4:bf:08:51:92:db:ea:cc:73:ad:3f:5a:63:e2:69: 56:6b:0b:4d:28:6c:e8:28:fa:91:9f:06:bf:4e:51: eb:4d:b9:33:80:fe:85:99:a4:39:9d:ca:56:a9:e0: 0b:50:7c:68:e3:ad:33:f8:3a:cf:b7:b3:34:c4:a9: 08:3c:75:e1:15:17:6f:c8:d4:ab:0b:b9:fa:7a:82: 2d:ba:5d:b4:87:ff:3b:aa:1c:a9:a3:dd:53:19:b0: 4c:d7:c7:3d:ca:22:5a:9b:b8:d9:4f:f5:03:27:4b: 9f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FE:87:6E:7B:5B:23:57:64:CA:54:A9:86:F5:9A:B8:A4:27:1F:F5 X509v3 Authority Key Identifier: keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:92:15:58:a1:ee:6a:1e:1a:7c:e5:f4:bf:8c:57:52:20:8c: 81:91:67:98:84:0e:12:f6:68:cc:a4:0b:5a:d4:5e:da:66:6a: ee:06:d4:46:80:57:83:de:b1:73:88:2d:fe:b0:93:b9:40:53: 46:11:4c:50:80:c3:35:9a:cd:8c:b0:67:9d:ae:71:a6:08:51: 4d:d0:41:9d:7e:df:b3:05:ae:ad:df:12:0f:37:54:45:ff:fd: d2:df:4d:34:ec:a1:b8:70:e5:aa:4a:84:7e:f7:ed:cf:10:38: 70:4d:c7:a1:bf:1e:96:d2:84:d4:af:f1:fd:8e:a0:02:1c:5d: 63:94:41:9f:d3:b5:ab:68:8b:bd:12:ba:44:38:e7:e9:36:e7: 23:de:7d:60:84:c8:e5:1d:b1:dd:ba:e1:db:bf:02:ef:a2:e8: 02:b1:2c:47:63:1d:21:36:8d:1c:40:9a:7a:be:99:29:d5:af: a3:44:d0:9b:d2:42:61:13:4a:48:c3:88:d0:79:a9:8d:e1:37: 76:4b:92:ee:c7:98:bc:12:a7:f7:dd:79:72:0b:5d:e1:14:cf: 92:66:7c:c6:f1:82:45:c6:86:0e:ea:cc:6b:74:36:da:50:4f: 16:e2:ae:71:6a:1c:5f:43:1a:70:83:b9:b0:c1:9b:d3:e9:49: 6c:34:d0:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNTM0OTJCOTlENkQwN0Q5NDlGNjkwQTkzNjk1QjE0OTI4 MjE2OUEyRTAeFw0yNTEyMjEwMzM5MThaFw0yNTEyMjgwMzM5MThaMBgxFjAUBgNV BAMMDTY5NDc2YmU3LWViNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxGzQPWgvoHdTbJ28llCMo9+g+LRL+1HdZkd1Mp3Vxbvp3y2ssBzIIsvotLM1f +NjFGGgh3JoStojcXQWV6IOKnQaqmuyoNZjALDu18xTtnwwSq0FeTZPmJS4YR+We TCzrXNO8utoLRWgxFDpVG0DL/iYpJTygKTS5FTZ9y7SjvaHfAFCybAaiknPUwpes /bwQYo2fM9S/CFGS2+rMc60/WmPiaVZrC00obOgo+pGfBr9OUetNuTOA/oWZpDmd ylap4AtQfGjjrTP4Os+3szTEqQg8deEVF2/I1KsLufp6gi26XbSH/zuqHKmj3VMZ sEzXxz3KIlqbuNlP9QMnS58hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMf6Hbntb I1dkylSphvWauKQnH/UwHwYDVR0jBBgwFoAUU0krmdbQfZSfaQqTaVsUkoIWmi4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzkwNzAwMEY2QUIy NDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpTZmFRcVRhVnNVa29JV21p NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVTBrcm1kYlFmWlNmYVFxVGFWc1Vrb0lXbWk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx NjIzLzkwNzAwMEY2QUIyNDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpT ZmFRcVRhVnNVa29JV21pNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACWSFVih7moeGnzl9L+MV1IgjIGRZ5iEDhL2aMykC1rUXtpmau4G1EaA V4PesXOILf6wk7lAU0YRTFCAwzWazYywZ52ucaYIUU3QQZ1+37MFrq3fEg83VEX/ /dLfTTTsobhw5apKhH737c8QOHBNx6G/HpbShNSv8f2OoAIcXWOUQZ/Ttatoi70S ukQ45+k25yPefWCEyOUdsd264du/Au+i6AKxLEdjHSE2jRxAmnq+mSnVr6NE0JvS QmETSkjDiNB5qY3hN3ZLku7HmLwSp/fdeXILXeEUz5JmfMbxgkXGhg7qzGt0NtpQ TxbirnFqHF9DGnCDubDBm9PpSWw00DA= -----END CERTIFICATE-----Generated at Mon Dec 22 06:11:20 2025 by rpki-client