This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json) Hash identifier: L2FIBIH6b3onTwd+jbgGV5WiwbfG5kS+M9VJeFw7QG8= Subject key identifier: 32:B3:C4:6F:3E:E3:DA:FA:73:1F:92:35:F4:B5:D3:D2:C9:CE:7D:0C Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 2455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft Manifest number: 243F Signing time: Sun 28 Dec 2025 15:38:20 +0000 Manifest this update: Sun 28 Dec 2025 15:38:20 +0000 Manifest next update: Sun 04 Jan 2026 15:38:20 +0000 Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: qY0poIjpjyq97PcRPMFRoroYIlZWk2GP4t0bR1Q7gfg=) 2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: 8qQ0fcDr/aGVnyD7P+G/6xo5kjUt3vBtdFXB7xYrVKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 15:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9301 (0x2455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Dec 28 15:38:20 2025 GMT Not After : Jan 4 15:38:20 2026 GMT Subject: CN=69514eec-e897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:78:97:b8:35:45:96:04:fe:ae:64:b1:0b:73: d8:ba:57:70:f6:87:40:f0:ff:a1:38:8a:cd:27:9d: 74:b6:5c:26:bb:dc:e5:2e:88:07:8a:df:d1:92:75: 51:e2:81:e0:77:4a:42:18:07:40:f6:5c:64:25:b5: a2:e0:d5:2e:b2:0d:24:f3:f8:96:e5:b6:6f:4c:36: d0:fd:6f:64:0b:68:ba:a0:ab:94:4f:f4:f4:d7:8f: 8d:6a:f2:60:44:7f:be:9e:ec:ef:55:e7:3e:16:99: 1b:da:10:fc:12:e4:4f:7d:80:2d:72:b8:2f:8e:a2: bf:8b:f4:d9:a9:65:05:d6:f6:58:ce:50:89:5d:f5: 7c:b2:ec:7c:ee:32:ca:cb:cc:eb:0f:3d:75:48:5e: f7:7d:9f:fd:f8:59:f3:57:c0:5c:2d:4f:cb:cd:0f: ee:1c:0e:3d:9e:90:9b:7a:a2:0e:f3:be:99:94:f1: 93:51:30:91:69:52:79:84:99:57:a1:d2:7f:a1:37: 04:95:02:08:d6:b0:59:d3:a9:59:eb:55:40:ef:60: c9:36:d4:37:30:99:6e:9b:13:79:72:ef:74:01:00: 24:d7:0b:a4:9d:0c:39:a0:fe:62:9c:9e:4e:02:3d: ac:08:cb:77:b7:64:65:79:7c:c1:98:ad:04:dc:1d: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B3:C4:6F:3E:E3:DA:FA:73:1F:92:35:F4:B5:D3:D2:C9:CE:7D:0C X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:16:bc:fd:ea:11:d4:ad:8f:73:20:cd:0c:9a:36:ba:0a:cd: 2e:ee:6e:0e:34:45:d7:2c:18:f4:90:65:d6:8e:55:d9:ab:e3: f4:4e:32:a3:4f:8f:82:40:bd:00:bf:f5:fc:65:26:87:63:89: d6:8c:6b:67:9b:5e:ed:d7:d4:14:0c:c0:bf:56:c8:63:f6:7c: 85:a2:d0:c7:6b:ce:64:13:53:23:5b:7c:40:c0:65:d3:f4:56: f1:98:71:83:dd:18:6f:56:d4:85:01:c1:6a:3f:01:97:ae:17: 53:56:5c:41:4f:a7:aa:02:9c:d5:1c:e2:67:03:8c:b2:1f:48: aa:7a:58:e8:9d:ce:c5:8f:0f:86:3a:4f:44:43:76:cb:11:fe: 21:e5:d8:05:73:05:46:f2:50:c8:65:a5:d4:20:9f:e0:8c:03: 86:ed:52:6c:10:df:bd:14:15:ff:fc:0c:44:0f:50:36:86:fb: ca:b7:d4:13:dc:f3:ef:25:51:c2:e4:7d:da:c8:5c:04:0f:13: 0c:27:f2:13:69:22:03:32:d7:a2:57:1a:e8:27:cd:c1:83:fe: ca:78:82:4b:45:19:89:04:c5:34:8a:92:07:97:b8:00:af:0f: 07:c1:39:aa:74:1c:60:f6:a2:a5:70:2e:91:1c:a3:f4:58:44: b6:05:a9:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjUxMjI4MTUzODIwWhcNMjYwMTA0MTUzODIwWjAYMRYwFAYD VQQDDA02OTUxNGVlYy1lODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2niXuDVFlgT+rmSxC3PYuldw9odA8P+hOIrNJ510tlwmu9zlLogHit/RknVR 4oHgd0pCGAdA9lxkJbWi4NUusg0k8/iW5bZvTDbQ/W9kC2i6oKuUT/T014+NavJg RH++nuzvVec+Fpkb2hD8EuRPfYAtcrgvjqK/i/TZqWUF1vZYzlCJXfV8sux87jLK y8zrDz11SF73fZ/9+FnzV8BcLU/LzQ/uHA49npCbeqIO876ZlPGTUTCRaVJ5hJlX odJ/oTcElQII1rBZ06lZ61VA72DJNtQ3MJlumxN5cu90AQAk1wuknQw5oP5inJ5O Aj2sCMt3t2RleXzBmK0E3B0y/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKzxG8+ 49r6cx+SNfS109LJzn0MMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ Y2JlcnptNk5lRElPdVVScEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Frz96hHUrY9zIM0Mmja6Cs0u7m4ONEXXLBj0kGXWjlXZq+P0TjKj T4+CQL0Av/X8ZSaHY4nWjGtnm17t19QUDMC/Vshj9nyFotDHa85kE1MjW3xAwGXT 9FbxmHGD3RhvVtSFAcFqPwGXrhdTVlxBT6eqApzVHOJnA4yyH0iqeljonc7Fjw+G Ok9EQ3bLEf4h5dgFcwVG8lDIZaXUIJ/gjAOG7VJsEN+9FBX//AxED1A2hvvKt9QT 3PPvJVHC5H3ayFwEDxMMJ/ITaSIDMteiVxroJ83Bg/7KeIJLRRmJBMU0ipIHl7gA rw8HwTmqdBxg9qKlcC6RHKP0WES2BakJ -----END CERTIFICATE-----Generated at Mon Dec 29 22:46:53 2025 by rpki-client