This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json) Hash identifier: tdzdN12dVIkzI/EEpZeKBNezaXvP7bbg0/aH+4hBhO8= Subject key identifier: D0:27:A9:18:25:F8:D5:5B:83:A7:4D:4C:CE:B8:3C:55:79:29:82:16 Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Certificate serial: 0674 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft Manifest number: 07FD Signing time: Thu 18 Dec 2025 22:05:19 +0000 Manifest this update: Thu 18 Dec 2025 22:05:19 +0000 Manifest next update: Thu 25 Dec 2025 22:05:19 +0000 Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: rK3vAyyI6dG2/fqeOBuEzI+oEH83I91Lp1l7aO8YNmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Validity Not Before: Dec 18 22:05:19 2025 GMT Not After : Dec 25 22:05:19 2025 GMT Subject: CN=69447a9f-e64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:89:67:86:69:90:af:5d:66:cc:93:0f:42: 77:64:69:59:42:0c:07:4e:95:d2:6d:bd:4c:53:43: f6:af:15:39:68:55:11:22:08:c8:03:82:9c:59:9a: 12:10:c5:b3:16:cb:a4:cb:5b:a1:29:06:d1:2e:e9: 78:13:6b:56:a6:6e:ab:ac:09:55:cb:bb:8b:14:92: 5a:0d:48:53:16:b2:d0:b7:7b:b4:94:80:0a:be:95: 0d:9c:29:c3:45:09:65:c5:6d:07:f9:25:68:57:74: e5:36:07:fa:6c:ec:50:87:bd:2a:fc:2b:65:c5:19: 80:87:ba:58:97:8e:63:e6:b2:4a:ea:1b:f1:3b:0e: 86:df:06:70:b0:6e:35:42:19:a5:cd:d1:1a:fe:61: 82:44:62:81:b5:f7:78:dd:37:99:17:7e:24:b4:6e: f6:2c:e9:4a:0d:b0:9c:96:93:9d:9d:22:26:8f:cc: 6d:7b:2d:39:05:93:1e:c6:eb:d8:45:17:57:e7:56: 8d:1f:6b:24:c8:64:6a:ed:7d:d1:7f:15:d0:26:69: e8:c4:37:62:e1:65:2f:62:32:d8:37:50:21:0a:42: 07:51:24:46:4f:44:67:07:4d:f4:8e:d4:da:f8:35: d6:80:42:6e:dd:50:03:00:55:ef:e1:d5:95:0e:31: b6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:27:A9:18:25:F8:D5:5B:83:A7:4D:4C:CE:B8:3C:55:79:29:82:16 X509v3 Authority Key Identifier: keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:74:4b:2c:bf:0f:a4:f4:b3:ec:2b:f6:27:0e:33:e7:f7:de: 1c:7a:24:fd:e6:bf:62:e4:17:9e:07:fc:59:54:bb:78:f9:ba: 76:55:a5:b7:7f:01:57:8b:a7:54:ec:88:d9:11:2e:c9:d9:64: 2c:81:66:9b:d5:24:4f:b1:db:2c:1d:a9:4f:50:9d:ae:1f:e4: 96:1a:74:62:ce:fb:cb:f9:2c:70:cd:38:b3:25:69:56:5f:18: c6:41:0e:d7:db:97:02:d2:98:77:f1:ee:ac:84:0d:86:70:93: 5b:1f:9a:10:76:aa:51:9e:ce:9c:e3:91:3c:cd:30:1f:91:91: 13:ab:ac:7a:86:c1:9c:84:5b:a0:33:9a:09:e2:c8:b1:8d:6d: 5b:18:1c:fd:8b:78:35:12:d9:ad:88:89:c1:be:f5:03:45:97: 06:f4:02:28:5a:ce:1b:33:d5:8f:28:9c:5c:d2:21:d1:a9:c0: 3b:8f:f9:4c:8e:35:0a:35:0b:e2:b9:88:78:fe:5d:f4:7e:8e: ad:f0:4f:10:28:b0:9d:e9:11:35:00:97:20:16:4e:52:17:6d: d8:50:1f:a5:9b:2d:68:5a:04:80:a0:36:95:34:ab:ec:4b:de: 79:7d:7a:26:c6:f8:69:d3:c7:f1:de:01:84:09:b8:bc:a2:12: 1a:b2:2b:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKDY4ODBEMzIzQUEzRjJENTE0NjA1MDY0MEYzMjFBNjEy OTAwMERGMDMwHhcNMjUxMjE4MjIwNTE5WhcNMjUxMjI1MjIwNTE5WjAYMRYwFAYD VQQDDA02OTQ0N2E5Zi1lNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkCJZ4ZpkK9dZsyTD0J3ZGlZQgwHTpXSbb1MU0P2rxU5aFURIgjIA4KcWZoS EMWzFsuky1uhKQbRLul4E2tWpm6rrAlVy7uLFJJaDUhTFrLQt3u0lIAKvpUNnCnD RQllxW0H+SVoV3TlNgf6bOxQh70q/CtlxRmAh7pYl45j5rJK6hvxOw6G3wZwsG41 QhmlzdEa/mGCRGKBtfd43TeZF34ktG72LOlKDbCclpOdnSImj8xtey05BZMexuvY RRdX51aNH2skyGRq7X3RfxXQJmnoxDdi4WUvYjLYN1AhCkIHUSRGT0RnB030jtTa +DXWgEJu3VADAFXv4dWVDjG2tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAnqRgl +NVbg6dNTM64PFV5KYIWMB8GA1UdIwQYMBaAFGiA0yOqPy1RRgUGQPMhphKQAN8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xWRkdCUVpBOHlHbUVwQUEz d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJRFRJNm9fTFZGR0JRWkE4eUdtRXBBQTN3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xW RkdCUVpBOHlHbUVwQUEzd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNdEssvw+k9LPsK/YnDjPn994ceiT95r9i5BeeB/xZVLt4+bp2VaW3 fwFXi6dU7IjZES7J2WQsgWab1SRPsdssHalPUJ2uH+SWGnRizvvL+SxwzTizJWlW XxjGQQ7X25cC0ph38e6shA2GcJNbH5oQdqpRns6c45E8zTAfkZETq6x6hsGchFug M5oJ4sixjW1bGBz9i3g1EtmtiInBvvUDRZcG9AIoWs4bM9WPKJxc0iHRqcA7j/lM jjUKNQviuYh4/l30fo6t8E8QKLCd6RE1AJcgFk5SF23YUB+lmy1oWgSAoDaVNKvs S955fXomxvhp08fx3gGECbi8ohIasisJ -----END CERTIFICATE-----Generated at Fri Dec 19 19:23:16 2025 by rpki-client