This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: XxZUHZ3LoqwzxEQoVM8xexG24k0slxI7946AIjq8dFk= Subject key identifier: E7:B8:01:12:4F:8A:31:08:CF:B9:B2:DA:9E:6E:85:4F:20:2E:29:F2 Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 1942 Signing time: Sat 06 Dec 2025 17:01:12 +0000 Manifest this update: Sat 06 Dec 2025 17:01:11 +0000 Manifest next update: Sat 13 Dec 2025 17:01:11 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: 1BaYAXq8dc50K6SplgoM+dRK09YxY57MD9V9/FQ8gHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: Dec 6 17:01:11 2025 GMT Not After : Dec 13 17:01:11 2025 GMT Subject: CN=69346158-cd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f5:dd:a0:44:2a:fb:2c:7e:2e:68:b0:8f:34: d3:18:32:61:6e:78:2e:ed:27:00:5d:a9:bf:df:0e: ef:c1:94:3a:4c:af:77:b4:fc:f5:b8:73:5c:3f:38: e4:01:74:1e:f1:51:b4:1c:81:d6:76:2f:d5:2b:c1: 01:9b:be:d9:7f:1f:70:6f:84:fa:7a:f3:9d:aa:a8: 38:ec:a2:cc:2c:b5:de:92:dd:1c:ce:d6:a8:3d:db: 44:26:69:d3:4d:f4:eb:06:da:81:dc:bc:46:4c:f0: 77:aa:0d:7c:c8:94:26:e1:55:11:11:db:14:29:35: 48:dc:66:f0:8a:df:ef:33:6d:1c:55:e6:31:8d:fb: 5f:b6:54:a9:d2:f1:55:7a:a9:4e:86:2b:4e:2f:e7: 8d:63:ab:e4:42:a9:17:54:80:e0:22:da:07:5e:22: 7c:16:82:80:4c:3a:fa:13:fd:b0:67:fa:2b:75:84: 44:01:93:fc:86:92:80:bc:6c:51:b2:97:77:f3:50: bb:4b:66:96:f4:3c:fc:51:44:05:fc:79:63:57:f7: 45:64:16:f3:25:65:fc:38:1c:35:81:e2:e9:e9:c0: 14:e7:db:24:32:1b:b5:56:3e:5b:ef:bb:4f:d8:b5: b9:4b:3b:49:a1:bc:49:01:23:39:38:3c:e4:96:a4: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B8:01:12:4F:8A:31:08:CF:B9:B2:DA:9E:6E:85:4F:20:2E:29:F2 X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b1:1e:ec:70:fa:58:5b:a2:83:ee:a2:38:79:06:de:d9:c4: 55:cc:7e:b7:a6:27:cd:96:56:80:6c:46:36:ef:f6:55:5d:88: 34:f8:d2:11:a5:a4:b3:1d:39:19:30:96:46:32:da:0c:11:d9: b5:93:e0:d3:97:71:44:2c:df:55:b2:f4:ad:08:25:5a:2d:06: 9f:1a:fc:da:34:40:f3:2c:c6:e3:36:b6:a0:38:1d:03:87:ef: 52:1a:5a:40:21:62:39:04:85:bd:86:32:51:f4:b6:6b:46:2e: 30:ac:10:7c:7f:50:5d:d8:81:5f:a1:72:1e:7e:05:df:7a:38: a8:c6:73:0d:1b:98:ac:8b:88:aa:a2:6b:62:79:44:99:8d:e3: ba:5b:d5:a6:54:69:99:ed:4f:77:b7:71:23:51:91:25:f6:0a: 55:97:48:43:c5:ec:81:8f:49:8a:7f:b6:2c:48:b3:96:27:a4: 7b:9d:9e:53:b2:85:83:dc:c2:dc:86:b1:1e:eb:b4:07:43:ca: c4:99:e4:de:01:fe:92:da:d2:e2:47:c2:cd:29:ae:fd:e4:ed: 5f:d5:68:ce:ed:24:e6:40:a2:7b:7a:f8:e3:73:bf:62:a1:72: 59:b2:45:f5:fc:c4:14:81:d6:d5:ee:50:1f:25:93:b4:a6:27: 8f:ec:d9:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjUxMjA2MTcwMTExWhcNMjUxMjEzMTcwMTExWjAYMRYwFAYD VQQDEw02OTM0NjE1OC1jZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/XdoEQq+yx+LmiwjzTTGDJhbngu7ScAXam/3w7vwZQ6TK93tPz1uHNcPzjk AXQe8VG0HIHWdi/VK8EBm77Zfx9wb4T6evOdqqg47KLMLLXekt0cztaoPdtEJmnT TfTrBtqB3LxGTPB3qg18yJQm4VUREdsUKTVI3Gbwit/vM20cVeYxjftftlSp0vFV eqlOhitOL+eNY6vkQqkXVIDgItoHXiJ8FoKATDr6E/2wZ/ordYREAZP8hpKAvGxR spd381C7S2aW9Dz8UUQF/HljV/dFZBbzJWX8OBw1geLp6cAU59skMhu1Vj5b77tP 2LW5SztJobxJASM5ODzklqRolQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe4ARJP ijEIz7my2p5uhU8gLinyMB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwsR7scPpYW6KD7qI4eQbe2cRVzH63pifNllaAbEY27/ZVXYg0+NIR paSzHTkZMJZGMtoMEdm1k+DTl3FELN9VsvStCCVaLQafGvzaNEDzLMbjNragOB0D h+9SGlpAIWI5BIW9hjJR9LZrRi4wrBB8f1Bd2IFfoXIefgXfejioxnMNG5isi4iq omtieUSZjeO6W9WmVGmZ7U93t3EjUZEl9gpVl0hDxeyBj0mKf7YsSLOWJ6R7nZ5T soWD3MLchrEe67QHQ8rEmeTeAf6S2tLiR8LNKa795O1f1WjO7STmQKJ7evjjc79i oXJZskX1/MQUgdbV7lAfJZO0pieP7NmQ -----END CERTIFICATE-----Generated at Sun Dec 7 03:44:46 2025 by rpki-client