This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json) Hash identifier: 3kNZzKD/uYQfSN3PYngAhS/ic61VnGA6IL8bueLb8wM= Subject key identifier: D2:3B:87:B9:F7:9E:09:30:70:10:51:26:D3:E4:0C:41:52:B2:1A:B3 Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft Manifest number: 0341 Signing time: Thu 25 Dec 2025 00:06:21 +0000 Manifest this update: Thu 25 Dec 2025 00:06:21 +0000 Manifest next update: Thu 01 Jan 2026 00:06:21 +0000 Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: 5nnjS093YEjY4019xpDBJuC2BeKlYsgK3MpVhWH9Tyo=) 2: AB8BCCA8908011F0B114A05CC4F9AE02.roa (hash: 1T0eskndL4iFaUJFcifTZvjR+o1R27ZKYdF+XD5eXWc=) 3: 5B4371EC907B11F085A8B481C4F9AE02.roa (hash: KjJmL1gLMQuW3NghzJwADbK1HaHP/M/oXcXExJSaN+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 00:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: Dec 25 00:06:21 2025 GMT Not After : Jan 1 00:06:21 2026 GMT Subject: CN=694c7ffd-75c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:66:77:b3:7b:dd:cf:bb:ae:e8:b5:4d:5e: f1:0c:1c:10:0f:b4:7c:99:76:af:a8:d0:a1:cd:e0: 1c:25:2d:cc:ce:04:6c:66:1c:c1:85:40:00:f5:6e: 9e:2d:4c:c2:50:ed:74:94:08:32:fa:a0:fd:ca:5e: a6:91:52:22:33:10:8f:4f:92:79:67:51:5e:c7:01: 75:0d:9d:2b:92:8f:6c:d7:98:e0:c7:f3:c4:1d:47: a6:d0:22:7a:31:66:e8:f2:ed:5b:fe:17:f0:79:5a: ed:9c:b5:1d:aa:2c:63:3f:a2:c2:77:24:24:d4:18: 15:58:31:f1:59:94:7a:38:4d:bf:41:68:47:5b:7d: 57:91:bc:4d:a4:b8:4f:01:5e:94:9b:cd:a3:6f:84: db:37:fc:8b:fe:f0:dd:91:1a:b0:71:88:44:8f:85: 1a:ba:e4:05:4e:6b:1c:19:e4:c9:23:3b:54:df:7d: 53:10:ab:bd:a4:8e:b2:2f:58:5c:dd:a2:ad:a6:21: 61:42:21:f8:4a:56:2a:16:0b:a4:7f:d3:e2:5c:52: 56:b9:98:f6:d3:e2:60:39:ca:b2:e0:5a:bd:92:dd: 99:67:ff:9d:22:6c:fc:2c:6f:45:e8:a5:7c:b4:ba: 10:67:a6:a5:ce:34:f3:f8:54:95:1a:5b:30:06:74: fd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3B:87:B9:F7:9E:09:30:70:10:51:26:D3:E4:0C:41:52:B2:1A:B3 X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d8:9f:d0:b3:46:3e:54:d3:4d:c3:00:e5:99:be:fd:b1:17: c2:d1:fe:4b:4a:1a:59:99:e9:73:b3:15:2f:eb:d4:e6:20:55: 23:7f:5d:4f:f8:cf:ba:e6:db:32:cf:33:3e:80:e2:22:2e:99: 85:da:d8:4c:d0:3d:c5:d2:b3:1f:30:26:8e:8f:2d:5c:91:96: 35:af:13:55:95:b0:56:e3:f8:8e:65:3f:c2:aa:7e:c2:b3:5f: 1f:e1:ff:25:ec:99:8e:cd:9b:6e:d4:b1:f8:35:9e:b8:21:d8: 14:79:ae:e6:7c:ca:bc:14:d2:90:9a:f8:fe:99:5b:9a:43:37: 81:fd:3d:e4:b0:b2:50:69:67:7a:f6:47:fb:34:be:13:ca:8b: f5:6b:cd:87:1a:ee:26:8a:89:ea:0e:49:93:bf:94:1d:1c:de: 91:88:4e:12:c9:50:12:90:1f:e0:b2:4d:88:0a:e0:70:d3:13: 01:93:7b:68:8f:e0:23:21:c6:b3:ca:05:2d:f6:eb:7f:5f:90: f4:2b:cb:60:17:2d:14:92:29:dc:86:49:32:9e:23:15:3e:1e: 60:e7:08:8b:9d:e0:0d:4a:15:f4:03:4f:d1:09:99:4d:30:cf: ff:84:d8:13:86:82:1a:99:17:8b:60:4d:58:d2:1e:e9:d8:85: d9:6d:6f:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjUxMjI1MDAwNjIxWhcNMjYwMTAxMDAwNjIxWjAYMRYwFAYD VQQDDA02OTRjN2ZmZC03NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWZmd7N73c+7rui1TV7xDBwQD7R8mXavqNChzeAcJS3MzgRsZhzBhUAA9W6e LUzCUO10lAgy+qD9yl6mkVIiMxCPT5J5Z1FexwF1DZ0rko9s15jgx/PEHUem0CJ6 MWbo8u1b/hfweVrtnLUdqixjP6LCdyQk1BgVWDHxWZR6OE2/QWhHW31XkbxNpLhP AV6Um82jb4TbN/yL/vDdkRqwcYhEj4UauuQFTmscGeTJIztU331TEKu9pI6yL1hc 3aKtpiFhQiH4SlYqFgukf9PiXFJWuZj20+JgOcqy4Fq9kt2ZZ/+dImz8LG9F6KV8 tLoQZ6alzjTz+FSVGlswBnT9owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI7h7n3 ngkwcBBRJtPkDEFSshqzMB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH2J/Qs0Y+VNNNwwDlmb79sRfC0f5LShpZmelzsxUv69TmIFUjf11P +M+65tsyzzM+gOIiLpmF2thM0D3F0rMfMCaOjy1ckZY1rxNVlbBW4/iOZT/Cqn7C s18f4f8l7JmOzZtu1LH4NZ64IdgUea7mfMq8FNKQmvj+mVuaQzeB/T3ksLJQaWd6 9kf7NL4Tyov1a82HGu4mionqDkmTv5QdHN6RiE4SyVASkB/gsk2ICuBw0xMBk3to j+AjIcazygUt9ut/X5D0K8tgFy0UkinchkkyniMVPh5g5wiLneANShX0A0/RCZlN MM//hNgThoIamReLYE1Y0h7p2IXZbW9J -----END CERTIFICATE-----Generated at Thu Dec 25 16:01:23 2025 by rpki-client