This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json) Hash identifier: tC3Axl0EqX+3lmuuqHJB5FFlC7uiZ/3iaNV9A5WGI9Y= Subject key identifier: 58:E1:9E:2D:08:23:37:FF:89:31:7F:96:8B:EE:25:02:17:4C:99:F9 Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 2451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft Manifest number: 243B Signing time: Sat 20 Dec 2025 15:39:26 +0000 Manifest this update: Sat 20 Dec 2025 15:39:26 +0000 Manifest next update: Sat 27 Dec 2025 15:39:26 +0000 Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: IKPbd7k2qRzaM+bFDgyNn5JTCKEuTysylHb8pV/vnQ0=) 2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: 8qQ0fcDr/aGVnyD7P+G/6xo5kjUt3vBtdFXB7xYrVKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9297 (0x2451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Dec 20 15:39:26 2025 GMT Not After : Dec 27 15:39:26 2025 GMT Subject: CN=6946c32e-a6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:57:21:a8:ee:ca:7a:50:09:d1:70:7f:51: c0:7b:ea:7b:f7:05:0e:5d:20:75:1d:2f:f6:4e:1e: c6:d9:98:2d:e4:1f:d4:0f:36:46:42:c5:89:9e:6c: 6b:eb:f5:92:d9:10:87:57:e8:08:7e:88:1d:48:1c: 23:17:cc:6e:71:f7:9b:78:a5:d6:49:05:53:4e:a7: c7:64:9b:b7:fe:e2:25:71:c5:dd:08:e5:55:86:c1: c1:b7:ec:d1:d3:13:b8:91:cd:93:07:22:5c:f2:5a: 28:65:1b:7f:2c:e9:96:b5:6a:b1:fa:31:f2:1b:59: 61:a6:01:42:40:a5:69:55:40:63:bd:e2:1d:0f:90: 6e:99:f9:5f:02:cf:c1:cb:16:52:59:dd:23:61:4f: fe:89:d1:d6:5f:4d:dd:43:06:38:b9:8c:40:84:d6: ed:74:ed:27:64:9d:02:1a:6c:cc:10:13:af:e5:9a: c3:fd:7d:15:67:90:f8:8d:95:ac:0a:44:5e:1d:d9: 7f:4b:65:c4:81:33:e6:f0:2b:7d:bd:a3:02:82:53: 1f:3c:02:c3:64:5d:e3:54:fa:64:c8:01:77:23:ec: e2:2f:c2:51:80:cb:18:0a:e3:ec:99:dc:df:99:e8: 21:21:64:9b:bb:69:10:6c:b2:ca:28:c3:08:67:77: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E1:9E:2D:08:23:37:FF:89:31:7F:96:8B:EE:25:02:17:4C:99:F9 X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:94:ad:4a:ad:a5:45:e5:0d:14:b3:ba:46:e0:d8:2f:1c:df: 0d:49:3b:fc:2c:1e:d2:02:5b:ee:c1:50:02:bd:60:b2:70:76: 8e:8d:61:0a:6e:01:cc:1b:06:2c:a0:39:09:ef:24:66:22:ca: 1a:64:3e:d9:fa:33:ef:47:cc:07:b0:4f:c7:12:e9:f3:62:5c: 74:1b:7c:1a:30:46:f3:7e:f4:33:27:b1:59:aa:f2:a0:6f:b2: 62:89:23:81:82:85:3b:ca:ae:4b:ab:4a:de:b1:5f:8a:8e:b5: 7b:b0:93:f5:68:f5:3b:d4:af:90:7a:8b:2d:19:6e:bd:4e:af: 6b:1e:73:a7:02:4f:92:16:6f:21:30:83:21:f2:80:10:86:45: cf:af:4f:59:4f:09:db:f2:c6:a5:15:87:29:af:79:e3:7c:b2: f5:e4:28:4e:83:6b:56:c9:b9:de:73:a0:75:c2:ad:90:49:56: 26:c5:0c:14:1d:b8:f8:4f:c7:69:33:78:e5:95:ed:f1:ce:49: 82:22:cf:7c:eb:b6:9d:63:86:02:fa:6a:87:f3:29:b4:9d:ee: 09:0c:d0:a2:1c:4e:92:9c:f5:55:67:fe:31:6d:70:62:04:d6: 19:86:2a:16:df:f4:19:7a:62:82:f5:9d:7a:7a:06:21:60:4a: 49:cd:ba:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjUxMjIwMTUzOTI2WhcNMjUxMjI3MTUzOTI2WjAYMRYwFAYD VQQDDA02OTQ2YzMyZS1hNmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwENXIajuynpQCdFwf1HAe+p79wUOXSB1HS/2Th7G2Zgt5B/UDzZGQsWJnmxr 6/WS2RCHV+gIfogdSBwjF8xucfebeKXWSQVTTqfHZJu3/uIlccXdCOVVhsHBt+zR 0xO4kc2TByJc8looZRt/LOmWtWqx+jHyG1lhpgFCQKVpVUBjveIdD5BumflfAs/B yxZSWd0jYU/+idHWX03dQwY4uYxAhNbtdO0nZJ0CGmzMEBOv5ZrD/X0VZ5D4jZWs CkReHdl/S2XEgTPm8Ct9vaMCglMfPALDZF3jVPpkyAF3I+ziL8JRgMsYCuPsmdzf meghIWSbu2kQbLLKKMMIZ3dLpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjhni0I Izf/iTF/lovuJQIXTJn5MB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ Y2JlcnptNk5lRElPdVVScEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAulK1KraVF5Q0Us7pG4NgvHN8NSTv8LB7SAlvuwVACvWCycHaOjWEK bgHMGwYsoDkJ7yRmIsoaZD7Z+jPvR8wHsE/HEunzYlx0G3waMEbzfvQzJ7FZqvKg b7JiiSOBgoU7yq5Lq0resV+KjrV7sJP1aPU71K+QeostGW69Tq9rHnOnAk+SFm8h MIMh8oAQhkXPr09ZTwnb8salFYcpr3njfLL15ChOg2tWybnec6B1wq2QSVYmxQwU Hbj4T8dpM3jlle3xzkmCIs9867adY4YC+mqH8ym0ne4JDNCiHE6SnPVVZ/4xbXBi BNYZhioW3/QZemKC9Z16egYhYEpJzbrr -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:40 2025 by rpki-client