This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json) Hash identifier: ozE4Ps9czGlz2igyUiAr5wKfU2ZzLGFe0kQHIGMHyUM= Subject key identifier: C0:FE:B9:3D:97:1C:6D:F1:73:E4:2A:5F:CD:CC:79:5D:6B:67:6B:E6 Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Certificate serial: 35C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft Manifest number: 356E Signing time: Thu 18 Dec 2025 14:57:16 +0000 Manifest this update: Thu 18 Dec 2025 14:57:15 +0000 Manifest next update: Thu 25 Dec 2025 14:57:15 +0000 Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: Y3gPYorz9swV/Ez6FKZ5ts01eTlYOrjnLotmClkuggU=) 2: 8A5484F6CB7E11F083D55078C4F9AE02.roa (hash: uM4f086LJzkkoa7xXHIa0o6HFRbtc1FhCKMEP/oqLJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13768 (0x35c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Validity Not Before: Dec 18 14:57:15 2025 GMT Not After : Dec 25 14:57:15 2025 GMT Subject: CN=6944164c-3f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:e2:de:77:3c:ed:51:80:5b:17:c1:2d:0a: 52:19:61:e9:2b:0e:2f:d0:36:b9:31:4a:90:fe:61: f3:af:09:b8:b9:50:22:50:e5:b4:52:58:71:9e:26: b8:bb:84:0a:d4:8b:34:a9:02:57:86:95:f5:8e:25: 3b:10:e7:83:1c:ab:79:9e:22:b3:41:dd:ca:c9:93: 91:a0:eb:4e:99:8b:c7:5c:47:7e:aa:a4:c9:6b:3a: 57:e9:c5:4a:c0:89:0f:47:12:1e:ff:ea:2c:ea:87: a2:86:86:86:29:00:35:b2:af:84:a4:a7:e9:d6:71: 41:ff:1b:14:5f:6e:6f:d6:70:33:f0:11:80:ed:39: 04:19:0c:67:ff:eb:4d:a8:ce:ef:0c:14:f3:71:b7: 68:f8:71:b8:ed:a9:b4:9d:10:09:52:6f:dc:b4:12: 06:f8:5f:5a:1f:bf:e6:03:0b:d2:6e:85:28:3d:92: 29:c8:c3:88:4a:72:44:52:ec:77:e1:9c:69:4f:c9: 8c:ac:14:3f:55:ac:e3:4a:3b:9e:99:9c:2d:f5:92: a3:ba:8d:70:aa:aa:6f:6f:73:d3:ea:a5:2b:26:36: ea:90:a5:e5:de:43:90:19:19:17:51:cd:da:77:74: c4:b3:04:65:e3:27:5a:85:4c:41:27:de:cf:59:4e: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FE:B9:3D:97:1C:6D:F1:73:E4:2A:5F:CD:CC:79:5D:6B:67:6B:E6 X509v3 Authority Key Identifier: keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:26:13:95:48:b3:bd:b0:a2:3c:28:f0:ae:5f:67:da:37:d0: 91:9e:50:9d:ac:52:c3:7e:76:eb:d0:c0:9b:02:98:06:6a:bb: 1c:1e:3b:2e:85:f4:c3:d3:fa:87:e3:b4:8f:3e:f6:4a:02:b7: 04:0e:18:e4:3a:b2:74:fe:cb:7b:d5:70:19:75:10:a7:34:ed: f4:54:12:cb:9c:0a:6f:86:8e:9e:93:4a:14:a2:c3:9a:e8:e5: 87:93:93:72:5a:88:e1:f5:62:5f:ce:56:9f:4f:e6:29:3b:d9: bd:82:18:21:8a:1b:b1:08:76:a9:86:cc:82:1d:94:b1:e0:16: 16:bb:42:2c:a0:3f:cb:5c:9e:34:99:e2:57:05:98:1f:cf:fa: 0b:8c:49:3e:be:7e:c5:47:fa:83:77:40:e3:87:c2:1b:8c:90: fa:81:df:ff:d7:1d:92:14:ca:d4:f6:95:02:cd:38:79:2e:77: 22:73:2e:2d:f2:e8:ef:d0:35:2c:7e:07:e7:91:a2:57:de:27: 6f:d3:2b:7e:1d:37:54:77:ce:15:2d:a5:5b:d6:95:b8:84:1b: af:73:3a:22:e6:91:4f:93:47:34:97:57:52:29:b4:b7:56:6e: 2d:17:8c:a1:ef:6a:19:c6:67:1a:98:3d:64:2e:9d:24:12:71: 23:6b:14:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD ODA1MkM2NEUwHhcNMjUxMjE4MTQ1NzE1WhcNMjUxMjI1MTQ1NzE1WjAYMRYwFAYD VQQDDA02OTQ0MTY0Yy0zZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMzi3nc87VGAWxfBLQpSGWHpKw4v0Da5MUqQ/mHzrwm4uVAiUOW0Ulhxnia4 u4QK1Is0qQJXhpX1jiU7EOeDHKt5niKzQd3KyZORoOtOmYvHXEd+qqTJazpX6cVK wIkPRxIe/+os6oeihoaGKQA1sq+EpKfp1nFB/xsUX25v1nAz8BGA7TkEGQxn/+tN qM7vDBTzcbdo+HG47am0nRAJUm/ctBIG+F9aH7/mAwvSboUoPZIpyMOISnJEUux3 4ZxpT8mMrBQ/VazjSjuemZwt9ZKjuo1wqqpvb3PT6qUrJjbqkKXl3kOQGRkXUc3a d3TEswRl4ydahUxBJ97PWU5WzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD+uT2X HG3xc+QqX83MeV1rZ2vmMB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H dWxralVrR2hBV0RJQlN4azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxJhOVSLO9sKI8KPCuX2faN9CRnlCdrFLDfnbr0MCbApgGarscHjsu hfTD0/qH47SPPvZKArcEDhjkOrJ0/st71XAZdRCnNO30VBLLnApvho6ek0oUosOa 6OWHk5NyWojh9WJfzlafT+YpO9m9ghghihuxCHaphsyCHZSx4BYWu0IsoD/LXJ40 meJXBZgfz/oLjEk+vn7FR/qDd0Djh8IbjJD6gd//1x2SFMrU9pUCzTh5Lncicy4t 8ujv0DUsfgfnkaJX3idv0yt+HTdUd84VLaVb1pW4hBuvczoi5pFPk0c0l1dSKbS3 Vm4tF4yh72oZxmcamD1kLp0kEnEjaxQw -----END CERTIFICATE-----Generated at Fri Dec 19 17:35:59 2025 by rpki-client