This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft File: usH6Gx5O5DACOyddInpdBDx_lqM.mft (raw, json) Hash identifier: G7BqrKDeAPFom7DtNFdOSOU752ooGn23LsYq2QRJSS0= Subject key identifier: 45:EA:9F:58:D9:31:7D:69:7B:13:65:26:40:2A:95:34:FE:EE:9A:7D Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3 Certificate issuer: /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft Manifest number: 67 Signing time: Thu 25 Dec 2025 05:57:34 +0000 Manifest this update: Thu 25 Dec 2025 05:57:33 +0000 Manifest next update: Thu 01 Jan 2026 05:57:33 +0000 Files and hashes: 1: usH6Gx5O5DACOyddInpdBDx_lqM.crl (hash: xlp1P3dqxLt7QqEqwNEfehA3RxKhiexqtNcGyTE8T1c=) 2: 7D7ECB70480611F08B614210C4F9AE02.roa (hash: PHW92SRejl/mbnatTD1r3a2U+gvK6WAe5C24ZUPT5mA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 05:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3 Validity Not Before: Dec 25 05:57:33 2025 GMT Not After : Jan 1 05:57:33 2026 GMT Subject: CN=694cd24e-c28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:8b:ca:2b:20:c0:ef:d9:70:f4:65:d6:16: 82:cf:de:47:53:a4:1d:de:ad:a9:01:07:8c:da:77: 7a:6d:f6:5c:2c:fb:c2:fc:82:03:1d:c3:73:88:49: 3f:6e:dc:c0:17:81:b6:42:e3:a2:83:2c:e9:e4:0c: 60:7d:aa:7a:d9:dc:4a:a7:e4:7a:79:1d:2a:03:e1: d7:89:c3:f2:46:a5:dd:34:1e:28:02:61:34:80:b3: 55:ae:53:a7:c1:66:de:d0:a1:63:4e:33:fd:19:b0: c7:cd:e7:03:b4:c7:71:8b:a4:5c:f9:d5:3d:02:79: 16:13:2d:6d:f5:56:bb:c7:3a:38:d4:c9:93:9a:e6: 03:ad:81:72:62:5f:c9:2a:61:20:86:d6:18:94:ed: ed:1b:c2:37:75:00:9f:cc:02:b3:5e:55:52:b5:09: 98:77:0c:24:46:d3:cf:92:b7:86:70:30:b3:fa:4b: 1e:b0:d6:4d:19:78:ff:f8:d0:05:1a:1b:d8:60:45: 0d:a2:c0:6d:9f:24:72:6a:4a:66:27:4a:7c:4c:78: ee:6f:f8:e5:9f:e4:de:2b:8d:61:2f:19:ef:44:bc: 8e:6c:f8:e1:22:f2:78:1e:8d:f4:3e:e1:ea:ef:38: 94:49:4d:77:e3:fe:cd:50:b9:3c:e9:00:3a:74:66: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EA:9F:58:D9:31:7D:69:7B:13:65:26:40:2A:95:34:FE:EE:9A:7D X509v3 Authority Key Identifier: keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:16:76:73:4a:14:44:67:48:55:54:1b:35:8f:7d:2f:54:43: 23:e6:2a:74:0a:e5:32:d4:87:27:5a:f7:9c:5f:1a:35:75:21: f4:90:41:84:ef:6d:16:d9:01:e0:ec:af:aa:4c:7d:7a:b8:d1: 48:39:70:89:2e:35:6d:11:bb:25:a1:7b:c0:f5:19:40:36:ea: b7:26:48:c9:21:e1:de:8a:3a:e7:73:81:6b:9c:e6:4b:a2:a0: ff:e1:ca:56:67:f7:96:7d:5a:e9:05:15:63:84:1f:15:87:65: 95:f5:39:0c:94:e4:a9:07:49:f1:a4:b4:0a:14:fa:7d:3a:7f: 42:e8:d7:f6:4e:57:5e:48:8d:4b:9d:c7:1a:67:e3:a7:3f:4a: 85:77:ea:44:37:75:20:4b:6c:93:a2:40:95:1c:1d:df:45:84: d6:d9:2e:99:9b:c8:17:d9:f5:0d:0f:a7:2d:2a:2e:5c:9a:eb: e6:70:2f:b2:f8:a3:d0:fa:aa:27:68:8b:08:b9:5c:c2:a7:7f: 83:bf:b9:8f:d1:fe:d7:10:dd:11:46:06:7c:de:f0:d4:01:9e: d9:65:51:aa:b1:9c:3d:ce:0d:64:b8:a3:48:a8:25:df:78:62: a7:09:22:67:26:51:91:ad:0f:39:aa:ad:5d:ef:1a:a6:8b:c4: 03:ff:e5:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoQkFDMUZBMUIxRTRFRTQzMDAyM0IyNzVEMjI3QTVEMDQz QzdGOTZBMzAeFw0yNTEyMjUwNTU3MzNaFw0yNjAxMDEwNTU3MzNaMBgxFjAUBgNV BAMMDTY5NGNkMjRlLWMyOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2MovKKyDA79lw9GXWFoLP3kdTpB3erakBB4zad3pt9lws+8L8ggMdw3OIST9u 3MAXgbZC46KDLOnkDGB9qnrZ3Eqn5Hp5HSoD4deJw/JGpd00HigCYTSAs1WuU6fB Zt7QoWNOM/0ZsMfN5wO0x3GLpFz51T0CeRYTLW31VrvHOjjUyZOa5gOtgXJiX8kq YSCG1hiU7e0bwjd1AJ/MArNeVVK1CZh3DCRG08+St4ZwMLP6Sx6w1k0ZeP/40AUa G9hgRQ2iwG2fJHJqSmYnSnxMeO5v+OWf5N4rjWEvGe9EvI5s+OEi8ngejfQ+4erv OJRJTXfj/s1QuTzpADp0ZvW3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUReqfWNkx fWl7E2UmQCqVNP7umn0wHwYDVR0jBBgwFoAUusH6Gx5O5DACOyddInpdBDx/lqMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzI0Q0FFNEE4NDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL3VzSDZHeDVPNURBQ095ZGRJbnBkQkR4X2xx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdXNINkd4NU81REFDT3lkZElucGRCRHhfbHFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzI0Q0FFNEE4NDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL3VzSDZHeDVPNURB Q095ZGRJbnBkQkR4X2xxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACkWdnNKFERnSFVUGzWPfS9UQyPmKnQK5TLUhyda95xfGjV1IfSQQYTv bRbZAeDsr6pMfXq40Ug5cIkuNW0RuyWhe8D1GUA26rcmSMkh4d6KOudzgWuc5kui oP/hylZn95Z9WukFFWOEHxWHZZX1OQyU5KkHSfGktAoU+n06f0Lo1/ZOV15IjUud xxpn46c/SoV36kQ3dSBLbJOiQJUcHd9FhNbZLpmbyBfZ9Q0Ppy0qLlya6+ZwL7L4 o9D6qidoiwi5XMKnf4O/uY/R/tcQ3RFGBnze8NQBntllUaqxnD3ODWS4o0ioJd94 YqcJImcmUZGtDzmqrV3vGqaLxAP/5QY= -----END CERTIFICATE-----Generated at Thu Dec 25 19:54:47 2025 by rpki-client