This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json) Hash identifier: v7+1ewF4k3AdppFLqP8dawutBvPk7ApSfhKHpM7TpZQ= Subject key identifier: 5F:59:39:99:D1:CE:70:B8:19:6F:D8:A7:8B:A4:14:EF:D3:9E:A1:79 Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37 Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37 Certificate serial: 0B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft Manifest number: 0B2A Signing time: Fri 26 Dec 2025 18:45:41 +0000 Manifest this update: Fri 26 Dec 2025 18:45:40 +0000 Manifest next update: Fri 02 Jan 2026 18:45:40 +0000 Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: 8+ItoMSZotqQz1+AKEyVskRJ0Ro56es4nHyvIdJKrrw=) 2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: q02Hd4XFE+H9p8qEMOu2AbjA5nPs5WOETsJPUT9HbXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 18:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37 Validity Not Before: Dec 26 18:45:40 2025 GMT Not After : Jan 2 18:45:40 2026 GMT Subject: CN=694ed7d4-71fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:f2:73:51:5f:2a:44:fe:1e:48:99:09:56: 89:3e:4c:1f:c3:8e:46:68:fa:bd:4c:9d:9e:a9:69: 6b:b3:ed:a3:9f:06:f8:78:b6:b2:d9:ed:3a:17:8e: 51:2b:90:6f:9a:4c:b7:59:0a:36:58:78:38:e0:1f: a0:9f:21:c0:c9:13:a5:3d:84:32:d7:9c:3f:9b:bd: e4:ff:b3:37:31:7b:fa:38:2a:85:74:90:a9:8c:2c: 8f:88:f5:9b:f4:13:d6:db:b9:f4:e9:95:ef:d7:44: 86:4f:43:10:cd:cb:f8:d9:5f:46:61:b1:7d:94:94: 63:90:fc:d4:5e:b4:41:8b:97:b0:7e:9e:6b:82:7e: 0b:7b:ab:1c:ed:98:eb:3b:a8:13:20:ea:49:5b:5c: 6f:1f:c6:39:c1:f7:a0:bb:30:c8:e7:72:f6:12:69: b3:ed:f8:e9:eb:d6:ab:92:01:37:6c:a0:7a:c6:82: cb:72:14:89:46:da:68:ea:85:76:1b:b1:72:4e:5d: d4:ac:93:36:41:88:9a:46:20:03:90:4f:06:f5:24: 3c:03:f5:76:b5:ed:3b:52:4d:93:b5:62:9f:b0:35: be:fc:79:ef:97:e4:41:3f:e1:9f:36:1d:d8:47:25: 4e:ad:8a:ca:cc:81:23:27:7f:10:32:7f:81:56:c3: a3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:59:39:99:D1:CE:70:B8:19:6F:D8:A7:8B:A4:14:EF:D3:9E:A1:79 X509v3 Authority Key Identifier: keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a7:fe:86:fd:59:c9:2e:3c:70:e1:03:51:22:92:7d:9b:56: c1:bb:a5:60:ee:59:66:d4:ab:f1:87:d9:56:89:d4:17:8b:ad: 13:87:16:c0:5b:c7:af:43:4a:ae:18:1f:cd:8e:26:21:1d:cd: 30:35:c1:db:6c:57:66:8b:47:d3:7a:c0:a2:04:a3:cb:1b:2d: 32:c3:b8:f3:ce:ce:2b:0c:a8:4b:31:a8:48:55:04:42:f2:2b: b7:d7:03:59:19:1e:d2:e2:01:33:6d:01:1c:fb:0f:dc:2b:65: be:64:78:0c:3d:98:4d:d7:54:03:d6:90:97:3f:46:de:be:36: b0:58:41:8b:94:c5:e2:cc:c6:45:e7:0f:9e:9c:41:18:d5:8e: eb:bd:5f:80:00:dc:e7:fc:8c:5a:b8:8a:5e:26:63:b6:02:de: b0:18:cb:67:21:97:34:d6:63:1a:17:7a:97:d1:46:04:59:f5: f3:00:b9:ad:1e:68:57:c3:61:68:fe:03:e0:1c:d9:49:81:92: ed:8a:ac:0c:7b:fb:f6:91:37:4a:7c:51:58:2d:f1:30:e4:65: 4d:0c:2a:f9:12:cb:ee:c2:d3:be:f4:01:00:7c:f4:ae:b5:25: b3:d3:da:a0:74:3c:4e:93:d5:2d:c1:78:a8:9e:dc:59:05:3d: 38:fb:23:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0M0IxMTAvBgNVBAUTKEQ2NjAxQTgyMDA4MEM3OTBGMEE1MUE2QzM3NjVGNUI0 QjBEMDFCMzcwHhcNMjUxMjI2MTg0NTQwWhcNMjYwMTAyMTg0NTQwWjAYMRYwFAYD VQQDDA02OTRlZDdkNC03MWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VPyc1FfKkT+HkiZCVaJPkwfw45GaPq9TJ2eqWlrs+2jnwb4eLay2e06F45R K5Bvmky3WQo2WHg44B+gnyHAyROlPYQy15w/m73k/7M3MXv6OCqFdJCpjCyPiPWb 9BPW27n06ZXv10SGT0MQzcv42V9GYbF9lJRjkPzUXrRBi5ewfp5rgn4Le6sc7Zjr O6gTIOpJW1xvH8Y5wfeguzDI53L2Emmz7fjp69arkgE3bKB6xoLLchSJRtpo6oV2 G7FyTl3UrJM2QYiaRiADkE8G9SQ8A/V2te07Uk2TtWKfsDW+/Hnvl+RBP+GfNh3Y RyVOrYrKzIEjJ38QMn+BVsOj1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9ZOZnR znC4GW/Yp4ukFO/TnqF5MB8GA1UdIwQYMBaAFNZgGoIAgMeQ8KUabDdl9bSw0Bs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQzQi82QTAzODNFNjUw QTUxMUVBOTc2Q0I3N0ZDNEY5QUUwMi8xbUFhZ2dDQXg1RHdwUnBzTjJYMXRMRFFH emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtQWFnZ0NBeDVEd3BScHNOMlgxdExEUUd6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQzQi82QTAzODNFNjUwQTUxMUVBOTc2Q0I3N0ZDNEY5QUUwMi8xbUFhZ2dDQXg1 RHdwUnBzTjJYMXRMRFFHemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxp/6G/VnJLjxw4QNRIpJ9m1bBu6Vg7llm1Kvxh9lWidQXi60ThxbA W8evQ0quGB/NjiYhHc0wNcHbbFdmi0fTesCiBKPLGy0yw7jzzs4rDKhLMahIVQRC 8iu31wNZGR7S4gEzbQEc+w/cK2W+ZHgMPZhN11QD1pCXP0bevjawWEGLlMXizMZF 5w+enEEY1Y7rvV+AANzn/IxauIpeJmO2At6wGMtnIZc01mMaF3qX0UYEWfXzALmt HmhXw2Fo/gPgHNlJgZLtiqwMe/v2kTdKfFFYLfEw5GVNDCr5EsvuwtO+9AEAfPSu tSWz09qgdDxOk9UtwXiontxZBT04+yOh -----END CERTIFICATE-----Generated at Sat Dec 27 01:01:11 2025 by rpki-client