This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: qEW0Ry4VQ43ak3LL7gIN1qsy7jf8nFX/HorTXQjjitk= Subject key identifier: 90:57:D4:20:25:7E:97:46:D1:97:28:58:DC:E2:93:D1:6B:CB:BA:53 Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: 020E Signing time: Fri 05 Dec 2025 00:34:48 +0000 Manifest this update: Fri 05 Dec 2025 00:34:48 +0000 Manifest next update: Fri 12 Dec 2025 00:34:48 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: NtjmzpCvlzUBqHJ8QuyVNb4W0dR87wmydzZzWJ8ofoE=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: 5/W5EqvBYrwaBbNXisgVsa/BWjLPbFWwbLiAWCjCMGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Dec 5 00:34:48 2025 GMT Not After : Dec 12 00:34:48 2025 GMT Subject: CN=693228a8-fe42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:f0:66:27:2b:99:f1:9b:0d:e3:23:4e:5c: ad:7b:bc:fd:1f:18:78:25:af:a7:b6:58:97:cf:a0: a2:45:16:cb:73:10:fb:0c:e8:65:8c:ef:f3:30:28: 99:b5:30:70:12:51:b0:61:ee:f4:b0:f7:a1:e7:f4: fd:ad:79:55:92:9e:fd:21:22:a0:12:62:9e:62:7b: 1a:ff:35:49:a1:76:1d:74:c5:4f:3a:70:cc:77:e3: 81:e2:c4:d7:10:ff:d5:17:96:d3:55:12:40:dc:5e: b9:7d:2e:64:a7:7a:a6:b8:36:65:62:31:d0:aa:4b: 77:2f:bf:22:c2:6a:b5:26:b6:5d:1c:5f:66:42:a8: 20:45:8b:e8:66:1f:d0:07:7e:26:d1:f5:42:06:9e: ca:b3:98:a7:f6:51:2a:f5:e0:6d:5e:ca:6b:22:a5: cf:c4:1c:f7:a1:21:d8:89:fa:f0:9a:d3:62:04:67: 1e:e7:b0:35:8d:a6:f0:b7:fc:9d:af:3f:fe:a9:14: 6a:fc:17:1c:71:28:6b:91:b6:a8:a2:fa:d0:65:8d: 10:86:18:50:86:a8:88:fc:d3:61:ed:ee:06:76:69: 59:91:24:1c:83:65:6c:ab:65:45:62:46:a0:46:c0: 31:d8:17:e8:98:81:3e:ab:54:f7:d2:e6:f4:bc:b9: 04:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:57:D4:20:25:7E:97:46:D1:97:28:58:DC:E2:93:D1:6B:CB:BA:53 X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f8:3d:a8:43:e5:32:f5:b2:14:5d:ab:d3:3a:c6:af:40:8a: 3d:95:c8:2b:2d:8d:07:c6:75:51:fa:f7:90:0d:a2:3e:a3:f2: 94:28:84:a1:66:18:9e:16:6f:8d:28:56:d0:00:b0:eb:64:5b: 8b:4f:55:2e:4c:1a:ef:51:3e:de:fc:97:0d:63:d3:fd:26:92: c3:23:33:e9:bd:f2:4e:62:36:79:06:28:ed:e2:cc:c8:c1:a1: 93:a4:08:2b:26:d7:61:29:a0:12:60:2f:9a:fe:2e:f7:6f:8f: 10:62:32:1b:b6:5c:60:69:e7:6d:b2:d3:14:23:4c:62:ba:a2: 37:9d:b5:8a:8d:a1:94:57:98:45:7e:8e:db:46:ab:22:d0:72: f4:26:92:b2:b1:3b:10:bf:e6:44:64:83:a3:58:b6:ac:23:4c: c4:98:70:52:e3:7b:87:9a:68:26:23:65:4d:b8:64:36:da:bd: d3:71:97:ac:85:b0:9d:67:ed:52:eb:6c:ab:3e:c9:7b:66:86: 6c:33:64:3c:9e:12:45:e1:d4:65:ca:47:09:0d:80:0b:a0:42: 00:d5:19:23:fc:e7:ec:15:c5:82:20:7a:6f:5b:41:4b:a9:1c: 24:b7:9f:ff:0e:fa:df:c3:9f:4e:07:13:b8:a3:d6:f4:ca:ca: 11:61:a7:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjUxMjA1MDAzNDQ4WhcNMjUxMjEyMDAzNDQ4WjAYMRYwFAYD VQQDEw02OTMyMjhhOC1mZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YvwZicrmfGbDeMjTlyte7z9Hxh4Ja+ntliXz6CiRRbLcxD7DOhljO/zMCiZ tTBwElGwYe70sPeh5/T9rXlVkp79ISKgEmKeYnsa/zVJoXYddMVPOnDMd+OB4sTX EP/VF5bTVRJA3F65fS5kp3qmuDZlYjHQqkt3L78iwmq1JrZdHF9mQqggRYvoZh/Q B34m0fVCBp7Ks5in9lEq9eBtXsprIqXPxBz3oSHYifrwmtNiBGce57A1jabwt/yd rz/+qRRq/BcccShrkbaoovrQZY0QhhhQhqiI/NNh7e4GdmlZkSQcg2Vsq2VFYkag RsAx2BfomIE+q1T30ub0vLkEswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBX1CAl fpdG0ZcoWNzik9Fry7pTMB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF+D2oQ+Uy9bIUXavTOsavQIo9lcgrLY0HxnVR+veQDaI+o/KUKISh ZhieFm+NKFbQALDrZFuLT1UuTBrvUT7e/JcNY9P9JpLDIzPpvfJOYjZ5Bijt4szI waGTpAgrJtdhKaASYC+a/i73b48QYjIbtlxgaedtstMUI0xiuqI3nbWKjaGUV5hF fo7bRqsi0HL0JpKysTsQv+ZEZIOjWLasI0zEmHBS43uHmmgmI2VNuGQ22r3TcZes hbCdZ+1S62yrPsl7ZoZsM2Q8nhJF4dRlykcJDYALoEIA1Rkj/OfsFcWCIHpvW0FL qRwkt5//Dvrfw59OBxO4o9b0ysoRYaf8 -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:47 2025 by rpki-client