This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: sjNiXiv5cT+kA8YCqL+wdsxZEzZLg8Stb1GMoIl3NDo= Subject key identifier: 8E:1F:3E:62:9E:CA:18:CD:BF:76:8F:70:A4:59:6A:80:C4:6F:F5:CF Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: 01B4 Signing time: Sun 28 Dec 2025 23:56:37 +0000 Manifest this update: Sun 28 Dec 2025 23:56:37 +0000 Manifest next update: Sun 04 Jan 2026 23:56:37 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: tp2yMQlmRIgKV3AZntvj07n2f25I61TH0s8sN7PCNLg=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: leuMzpLaxFsvYZtfj5XFjNm4DVLoebp+rvO2FUHNRVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 23:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: Dec 28 23:56:37 2025 GMT Not After : Jan 4 23:56:37 2026 GMT Subject: CN=6951c3b5-81ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:16:f4:32:5d:49:37:a4:f6:85:98:98:ce: e4:6a:a0:29:c2:21:9c:61:a9:33:2f:d2:79:bc:86: a5:85:13:81:64:49:f3:cc:8e:f7:5f:a8:2c:1f:0a: 66:7a:69:30:d7:cd:c5:d9:d8:86:a0:86:cf:3e:a9: 6b:c7:bf:cf:21:b0:20:99:d3:6e:fb:8d:67:a5:c4: 73:1e:d5:b9:3c:59:c6:73:fc:4c:ba:a0:1e:63:b5: 66:42:70:cf:e3:4c:85:7f:3f:c5:73:5b:1c:d7:c4: 1e:61:f8:a3:95:98:ae:eb:e0:a9:ff:44:2e:78:47: 42:2f:cd:0e:a0:00:29:e2:8d:27:65:e6:f1:cb:0a: c1:6f:d9:6d:55:bb:1f:8f:c5:42:2b:cb:44:2e:09: 2c:48:c3:57:93:cc:b8:cc:6f:00:1c:33:a5:75:9f: 39:25:63:0f:85:98:fd:ae:7e:83:e3:d5:2c:b1:a5: a5:f1:c4:a1:10:d2:4b:de:1f:b8:05:66:75:02:51: b3:89:e8:62:62:f8:54:4b:29:3e:5f:34:8e:8d:f7: 72:e1:63:bd:85:58:0c:2e:13:bd:2a:6d:c2:38:e1: 2a:2c:9a:5a:17:6e:da:16:bd:23:47:78:d4:3c:f3: 3f:7d:47:85:12:9b:37:40:eb:c5:44:0c:f6:0c:58: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1F:3E:62:9E:CA:18:CD:BF:76:8F:70:A4:59:6A:80:C4:6F:F5:CF X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:33:f5:5d:f5:da:4b:39:51:2e:7f:eb:6d:ac:3d:fd:05:fd: 6d:d2:e4:4d:b8:26:34:ca:a4:13:38:83:4c:de:bb:d4:d1:8b: 89:36:55:18:a1:88:cc:b5:3a:8d:fa:03:af:52:90:84:67:20: 14:e3:9d:e0:54:3c:38:36:6b:1b:3a:e5:5f:77:9a:55:17:b9: 7e:dc:79:4f:0f:b5:15:86:7a:7e:6a:f8:b3:9f:a7:5c:42:45: c9:fa:d2:c6:21:8c:11:9c:62:57:bd:33:f3:f2:30:c6:06:ba: 25:6c:24:b0:00:9f:11:a2:1b:34:07:a7:c1:1c:ee:d7:ad:f4: 02:c9:04:a0:fa:68:a5:68:8b:09:c9:6c:7a:16:50:1c:b2:8e: c9:ab:3a:02:5a:d6:a3:31:7d:d6:cf:7f:a5:9e:d4:66:11:e2: 88:33:1b:3c:47:5c:82:8f:ab:8b:3a:57:20:22:ae:ba:ae:fd: 33:4a:b0:22:84:e5:09:fd:7a:10:56:c9:bf:c5:2c:44:a1:22: 53:43:77:f1:e3:67:1c:86:15:62:c5:82:84:95:e6:c6:0f:a5: df:99:13:03:23:9e:94:c7:ea:30:29:f6:b3:b4:6c:e3:95:19: 4b:96:56:3c:c5:e8:0d:2c:52:8b:7f:2f:5e:c8:b8:76:6c:85: f0:eb:9a:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjUxMjI4MjM1NjM3WhcNMjYwMTA0MjM1NjM3WjAYMRYwFAYD VQQDDA02OTUxYzNiNS04MWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDgW9DJdSTek9oWYmM7kaqApwiGcYakzL9J5vIalhROBZEnzzI73X6gsHwpm emkw183F2diGoIbPPqlrx7/PIbAgmdNu+41npcRzHtW5PFnGc/xMuqAeY7VmQnDP 40yFfz/Fc1sc18QeYfijlZiu6+Cp/0QueEdCL80OoAAp4o0nZebxywrBb9ltVbsf j8VCK8tELgksSMNXk8y4zG8AHDOldZ85JWMPhZj9rn6D49UssaWl8cShENJL3h+4 BWZ1AlGziehiYvhUSyk+XzSOjfdy4WO9hVgMLhO9Km3COOEqLJpaF27aFr0jR3jU PPM/fUeFEps3QOvFRAz2DFiTKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4fPmKe yhjNv3aPcKRZaoDEb/XPMB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7M/Vd9dpLOVEuf+ttrD39Bf1t0uRNuCY0yqQTOINM3rvU0YuJNlUY oYjMtTqN+gOvUpCEZyAU453gVDw4NmsbOuVfd5pVF7l+3HlPD7UVhnp+avizn6dc QkXJ+tLGIYwRnGJXvTPz8jDGBrolbCSwAJ8Rohs0B6fBHO7XrfQCyQSg+milaIsJ yWx6FlAcso7JqzoCWtajMX3Wz3+lntRmEeKIMxs8R1yCj6uLOlcgIq66rv0zSrAi hOUJ/XoQVsm/xSxEoSJTQ3fx42cchhVixYKElebGD6XfmRMDI56Ux+owKfaztGzj lRlLllY8xegNLFKLfy9eyLh2bIXw65pQ -----END CERTIFICATE-----Generated at Mon Dec 29 05:22:34 2025 by rpki-client