This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: XbJRtOeyTzIZaG7ezXplJNACAjmZCjX4oKOun1Egc4w= Subject key identifier: 80:42:49:B3:26:B6:8F:C3:31:6F:B5:F0:98:AF:9A:3C:7C:24:5F:78 Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 1954 Signing time: Thu 18 Dec 2025 17:21:50 +0000 Manifest this update: Thu 18 Dec 2025 17:21:49 +0000 Manifest next update: Thu 25 Dec 2025 17:21:49 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: Ov28PkcmfYm3qlj3raR3z2UMmMMGK6AuOX43o1UHD0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: Dec 18 17:21:49 2025 GMT Not After : Dec 25 17:21:49 2025 GMT Subject: CN=6944382e-5a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:82:b4:5c:7d:60:be:33:d4:44:c1:44:d9: a7:54:6a:93:2a:f4:58:55:d6:74:da:e9:91:5d:38: 8d:3c:0e:28:a1:38:a3:56:84:e7:be:6c:e7:b3:59: 38:94:76:92:fd:75:67:17:e5:1b:4f:f9:6b:08:0d: 8d:29:9f:6f:94:89:46:2b:0d:e2:68:8b:7a:f7:9d: ff:3f:1a:90:e5:0d:5f:b3:25:14:87:49:b5:05:7b: 67:43:e1:08:00:6c:fa:dc:3d:d1:9c:9c:f6:b1:61: 73:4e:26:a5:e4:fb:10:36:a2:d4:b2:7b:50:b8:bc: 63:75:30:ba:7e:c1:35:ba:6d:79:9c:2b:cf:b2:f4: ec:a9:e8:dd:82:75:5a:03:19:63:a2:58:11:ad:a2: cd:1c:81:e7:69:39:27:e2:ba:1e:5c:ac:66:39:7b: 80:a4:67:7c:d4:48:6a:f3:22:4d:83:c1:a1:92:ab: 3e:84:5b:1b:ae:0a:3f:94:21:05:6b:6a:9f:89:17: f1:e4:75:b9:e8:e8:9e:d3:7d:a6:6f:c2:2c:0f:96: d5:bc:fd:15:ee:ba:38:12:90:67:9e:2c:ca:76:67: 8e:f2:db:b1:dd:a7:94:d9:9c:61:e2:6e:b8:8f:c8: df:59:e4:fa:8b:3a:70:e5:83:87:08:74:0c:bd:bf: 06:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:42:49:B3:26:B6:8F:C3:31:6F:B5:F0:98:AF:9A:3C:7C:24:5F:78 X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:79:42:e9:13:52:44:9a:5b:4e:64:ac:6c:be:bd:f7:6f:0b: 10:62:b9:5b:a6:cf:c0:83:33:e7:41:44:8e:fe:31:d9:f9:9e: 6f:cd:36:fd:56:13:b7:6e:7d:72:3d:c1:47:51:59:de:aa:01: 1c:7f:1d:c0:91:d1:75:59:de:ab:2c:1c:f7:aa:31:7c:aa:e2: fa:1e:73:21:1a:34:9a:68:a1:81:e4:1e:63:7f:53:f7:f9:23: c9:11:58:c7:29:89:53:aa:ba:9b:5e:5b:bd:3b:73:3e:b9:6a: 34:a4:a6:d8:4f:cc:9b:26:0d:6e:33:4d:f0:d9:f8:ac:be:8e: 9f:73:52:c0:d1:cf:d5:56:ac:2c:a2:74:d3:d2:bb:6e:62:bb: 3a:32:ab:3c:a5:ff:1e:91:be:ca:88:22:34:95:68:2e:9d:f8: 07:c2:77:af:a1:96:1c:51:a7:ec:b9:65:19:98:8e:f6:35:50: 19:ea:21:70:7a:5a:91:97:dc:4d:60:58:44:91:db:b3:b2:79: 65:cb:4f:71:01:44:5a:25:9b:5d:a4:f3:bc:63:6d:8a:ac:bc: dd:ca:d4:07:51:45:7c:f5:7a:8b:ec:eb:ca:6b:3d:55:a3:88: 52:fd:fe:2b:29:7d:a9:1c:db:cd:9b:b6:21:c8:b0:d6:63:99: 65:2e:ff:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjUxMjE4MTcyMTQ5WhcNMjUxMjI1MTcyMTQ5WjAYMRYwFAYD VQQDDA02OTQ0MzgyZS01YTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XSCtFx9YL4z1ETBRNmnVGqTKvRYVdZ02umRXTiNPA4ooTijVoTnvmzns1k4 lHaS/XVnF+UbT/lrCA2NKZ9vlIlGKw3iaIt6953/PxqQ5Q1fsyUUh0m1BXtnQ+EI AGz63D3RnJz2sWFzTial5PsQNqLUsntQuLxjdTC6fsE1um15nCvPsvTsqejdgnVa AxljolgRraLNHIHnaTkn4roeXKxmOXuApGd81Ehq8yJNg8Ghkqs+hFsbrgo/lCEF a2qfiRfx5HW56Oie032mb8IsD5bVvP0V7ro4EpBnnizKdmeO8tux3aeU2Zxh4m64 j8jfWeT6izpw5YOHCHQMvb8GiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBCSbMm to/DMW+18Jivmjx8JF94MB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1eULpE1JEmltOZKxsvr33bwsQYrlbps/AgzPnQUSO/jHZ+Z5vzTb9 VhO3bn1yPcFHUVneqgEcfx3AkdF1Wd6rLBz3qjF8quL6HnMhGjSaaKGB5B5jf1P3 +SPJEVjHKYlTqrqbXlu9O3M+uWo0pKbYT8ybJg1uM03w2fisvo6fc1LA0c/VVqws onTT0rtuYrs6Mqs8pf8ekb7KiCI0lWgunfgHwnevoZYcUafsuWUZmI72NVAZ6iFw elqRl9xNYFhEkduzsnlly09xAURaJZtdpPO8Y22KrLzdytQHUUV89XqL7OvKaz1V o4hS/f4rKX2pHNvNm7YhyLDWY5llLv/W -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:55 2025 by rpki-client