This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json) Hash identifier: 6LVytlUSYBXbSHZrnWZSDG73GqAEGwgAMtV8M5mouUQ= Subject key identifier: 95:18:D7:73:54:60:BB:28:E1:C8:51:A7:46:10:E7:ED:0A:3C:16:0B Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Certificate serial: 35CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft Manifest number: 3570 Signing time: Mon 22 Dec 2025 14:55:23 +0000 Manifest this update: Mon 22 Dec 2025 14:55:23 +0000 Manifest next update: Mon 29 Dec 2025 14:55:23 +0000 Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: RyBBPa2f/vRMli7BEYiWmeCm672ISgl0H/3LLnHXl/E=) 2: 8A5484F6CB7E11F083D55078C4F9AE02.roa (hash: uM4f086LJzkkoa7xXHIa0o6HFRbtc1FhCKMEP/oqLJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13770 (0x35ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Validity Not Before: Dec 22 14:55:23 2025 GMT Not After : Dec 29 14:55:23 2025 GMT Subject: CN=69495bdb-fa59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:38:60:13:a6:a8:e1:d2:a7:0b:fa:94:18: 2e:7f:d0:e8:4b:83:39:23:37:0c:b4:e0:53:02:7d: 5a:0b:24:f5:41:8d:93:45:b7:c3:d5:09:e4:07:00: 09:e7:8a:36:58:2a:d4:b5:df:c6:8e:95:7f:4c:95: b0:18:2a:89:88:f1:67:57:86:a2:ee:53:28:09:38: c7:f5:10:fb:e0:d0:3d:ef:8b:9b:a0:64:bc:02:d7: 8c:66:f2:7d:b4:c1:c3:79:2b:cb:bd:9b:bd:dd:94: 70:5a:6c:a4:44:4b:fb:33:8d:c0:76:48:fc:4c:9a: 2b:62:99:32:2f:0a:27:1d:3b:97:fc:29:e4:5b:07: e7:07:35:96:19:16:ed:2d:31:34:ca:a3:c0:22:91: 13:83:55:55:48:c4:fd:1b:8c:3c:da:c9:e0:ad:bc: 0a:22:03:3f:d4:79:17:89:49:aa:0d:98:32:24:0f: 38:79:fc:29:d3:14:85:2b:91:28:fd:1b:9f:15:dc: 32:e4:c6:e9:d1:ef:e0:4c:73:39:54:a2:f0:cf:ee: dd:9b:1c:bd:ad:20:50:03:c2:7b:c7:0e:df:e3:3b: d5:9a:97:19:ea:86:7a:dd:8a:79:f1:76:71:96:fc: 3b:6f:6f:15:4a:50:75:5e:b3:67:a3:7e:ea:98:43: 0c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:18:D7:73:54:60:BB:28:E1:C8:51:A7:46:10:E7:ED:0A:3C:16:0B X509v3 Authority Key Identifier: keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:aa:ef:51:56:d0:cd:28:2b:a3:3a:62:ef:3f:46:3b:b2:dd: 57:5c:25:a2:62:d1:eb:38:77:c4:a3:0d:aa:9d:36:91:89:e8: 4d:1f:51:1e:c0:13:ef:a2:00:da:ac:20:78:75:d9:43:73:fe: 8d:ef:6f:15:1a:82:42:df:ae:0a:fa:c3:1b:ee:70:65:6b:59: 15:29:f4:91:30:bb:fa:05:a0:9f:7f:46:b3:77:1e:76:78:d9: 15:de:b2:bf:3a:ce:4b:ca:5a:f1:46:f9:e7:55:4b:3c:f2:34: b7:97:92:5b:d8:c0:6e:d7:db:1e:c4:1f:3b:f3:79:f2:f6:04: c7:0b:23:d6:7b:f8:58:e9:05:e3:4f:09:16:de:41:0e:28:bf: c8:f0:35:82:bc:be:88:1c:58:00:36:76:25:9d:35:83:b4:bb: 41:df:d5:35:02:c1:e8:e9:62:9e:dc:f4:49:a4:a5:cf:ee:c7: df:c5:fe:b8:18:b5:d3:62:aa:f2:20:ce:be:e9:74:d8:b5:60: b2:d3:32:ee:ed:c8:24:0f:94:3b:63:87:a4:a3:de:5d:3d:fe: a0:9a:a1:0d:8d:29:33:77:4f:40:da:52:5c:2b:e4:b3:de:e7: cb:37:be:ea:4f:20:31:5f:20:b6:77:ea:78:f6:f1:c7:c8:1f: ce:69:c5:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD ODA1MkM2NEUwHhcNMjUxMjIyMTQ1NTIzWhcNMjUxMjI5MTQ1NTIzWjAYMRYwFAYD VQQDDA02OTQ5NWJkYi1mYTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyE4YBOmqOHSpwv6lBguf9DoS4M5IzcMtOBTAn1aCyT1QY2TRbfD1QnkBwAJ 54o2WCrUtd/GjpV/TJWwGCqJiPFnV4ai7lMoCTjH9RD74NA974uboGS8AteMZvJ9 tMHDeSvLvZu93ZRwWmykREv7M43Adkj8TJorYpkyLwonHTuX/CnkWwfnBzWWGRbt LTE0yqPAIpETg1VVSMT9G4w82sngrbwKIgM/1HkXiUmqDZgyJA84efwp0xSFK5Eo /RufFdwy5Mbp0e/gTHM5VKLwz+7dmxy9rSBQA8J7xw7f4zvVmpcZ6oZ63Yp58XZx lvw7b28VSlB1XrNno37qmEMM3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUY13NU YLso4chRp0YQ5+0KPBYLMB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H dWxralVrR2hBV0RJQlN4azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoqu9RVtDNKCujOmLvP0Y7st1XXCWiYtHrOHfEow2qnTaRiehNH1Ee wBPvogDarCB4ddlDc/6N728VGoJC364K+sMb7nBla1kVKfSRMLv6BaCff0azdx52 eNkV3rK/Os5LylrxRvnnVUs88jS3l5Jb2MBu19sexB8783ny9gTHCyPWe/hY6QXj TwkW3kEOKL/I8DWCvL6IHFgANnYlnTWDtLtB39U1AsHo6WKe3PRJpKXP7sffxf64 GLXTYqryIM6+6XTYtWCy0zLu7cgkD5Q7Y4eko95dPf6gmqENjSkzd09A2lJcK+Sz 3ufLN77qTyAxXyC2d+p49vHHyB/OacXE -----END CERTIFICATE-----Generated at Tue Dec 23 09:21:16 2025 by rpki-client