This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json) Hash identifier: cIOzx1V9BsKuVvBHM0SCerVc7TSw92slaRCV0lKJWbY= Subject key identifier: 02:A5:E5:64:8A:36:69:D4:7E:29:3F:29:2B:B2:62:C8:D3:B8:7B:FB Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0B7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft Manifest number: 0B6F Signing time: Thu 04 Dec 2025 18:30:06 +0000 Manifest this update: Thu 04 Dec 2025 18:30:06 +0000 Manifest next update: Thu 11 Dec 2025 18:30:06 +0000 Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: NS3ceDUBxcXHCqv0wLRvwqJViSlH1LlQqOaNumg5WGM=) 2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: pLnncZW/+2aMcnpBmFNNa8a+AYjIGNXBznPCsUBo+1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Dec 4 18:30:06 2025 GMT Not After : Dec 11 18:30:06 2025 GMT Subject: CN=6931d32e-076f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:86:20:39:f5:c3:17:db:e9:f1:5e:d2:66: 2c:48:f4:f9:38:d2:73:15:0c:fa:25:f5:1f:cf:82: ca:da:91:22:d0:23:b8:cd:d4:b6:d4:85:c1:c1:ec: af:05:23:81:62:61:93:d7:e5:58:76:9f:49:fb:cb: 42:0d:1e:63:d2:74:fc:da:4a:5f:db:b7:34:90:fa: d7:54:80:5b:59:1e:5e:49:b7:e6:21:94:3b:29:f9: dc:9f:ab:fa:9b:c3:e9:72:80:83:bd:2a:b9:23:7c: 7f:05:96:72:6b:b7:c5:ee:e5:af:f3:b3:64:96:64: e3:a3:cf:ed:c3:0d:54:0f:95:8d:6f:05:80:ec:a4: 2a:0f:5f:0f:70:39:20:3e:18:79:ea:68:91:ba:98: 6a:16:90:2a:b9:1f:9e:b4:09:15:49:62:b0:e5:46: f6:31:ba:74:3a:a8:09:c6:5f:20:59:18:b2:54:33: b5:93:d6:9f:16:53:89:43:74:e6:10:ba:c1:8e:ca: 75:81:8a:9a:53:f2:7f:e6:37:87:41:0b:8d:c2:10: a1:49:0f:af:09:ff:9a:18:0f:08:13:f5:7a:f8:c7: fc:8d:24:f6:9d:be:ad:cf:1a:59:94:a4:ff:e7:f3: fa:56:4c:8a:e5:e0:49:7b:e0:08:54:e5:21:f7:ba: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A5:E5:64:8A:36:69:D4:7E:29:3F:29:2B:B2:62:C8:D3:B8:7B:FB X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ec:fa:e9:4b:07:fc:f1:e9:e5:1d:cd:07:d2:51:07:a6:76: bb:93:29:9c:83:b7:a8:df:f6:6f:00:4e:4e:03:bf:23:f4:95: 8e:a5:54:98:53:77:1c:d4:cc:94:9c:19:1b:c9:4e:89:b0:c0: 01:a3:3c:07:17:f8:1a:bf:ef:d7:18:4a:04:83:71:bb:ca:d4: 4d:83:db:7f:39:b7:7c:a8:4e:54:5a:4f:5f:9c:9c:7c:00:e3: 77:b4:54:b2:f7:59:2e:8c:88:12:26:7d:07:12:73:c5:69:cd: 9a:6f:f1:a3:e6:c1:da:c3:44:74:e7:57:4d:c9:35:d1:90:45: 99:6f:72:cd:07:26:17:7a:26:0d:2e:73:f3:45:aa:f7:85:bf: e3:2e:2f:4e:4a:f9:f5:16:cc:23:0a:f0:84:1e:97:c2:94:2c: 71:3e:12:16:3b:6c:b6:56:78:86:1c:da:d9:30:b7:42:78:51: 3f:f4:19:46:b0:d2:f2:7a:b8:1d:3d:66:9a:01:25:0a:9d:d3: 55:1d:e1:a5:39:36:8e:74:9a:b4:9b:2f:15:12:c4:2e:bc:41: 6d:b3:30:c9:c9:e2:62:88:60:b6:a8:ac:1b:c2:94:09:0d:6d: 6f:dd:21:12:1a:63:27:6d:cf:17:8e:ef:5c:d9:cb:53:a9:bf: e0:6f:a6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjUxMjA0MTgzMDA2WhcNMjUxMjExMTgzMDA2WjAYMRYwFAYD VQQDEw02OTMxZDMyZS0wNzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqseGIDn1wxfb6fFe0mYsSPT5ONJzFQz6JfUfz4LK2pEi0CO4zdS21IXBweyv BSOBYmGT1+VYdp9J+8tCDR5j0nT82kpf27c0kPrXVIBbWR5eSbfmIZQ7Kfncn6v6 m8PpcoCDvSq5I3x/BZZya7fF7uWv87NklmTjo8/tww1UD5WNbwWA7KQqD18PcDkg Phh56miRuphqFpAquR+etAkVSWKw5Ub2Mbp0OqgJxl8gWRiyVDO1k9afFlOJQ3Tm ELrBjsp1gYqaU/J/5jeHQQuNwhChSQ+vCf+aGA8IE/V6+Mf8jST2nb6tzxpZlKT/ 5/P6VkyK5eBJe+AIVOUh97rB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKl5WSK NmnUfik/KSuyYsjTuHv7MB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy84QTFDNDYxNjQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndE M0p6OHE2bDVVWURfQlJXUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA27PrpSwf88enlHc0H0lEHpna7kymcg7eo3/ZvAE5OA78j9JWOpVSY U3cc1MyUnBkbyU6JsMABozwHF/gav+/XGEoEg3G7ytRNg9t/Obd8qE5UWk9fnJx8 AON3tFSy91kujIgSJn0HEnPFac2ab/Gj5sHaw0R051dNyTXRkEWZb3LNByYXeiYN LnPzRar3hb/jLi9OSvn1FswjCvCEHpfClCxxPhIWO2y2VniGHNrZMLdCeFE/9BlG sNLyergdPWaaASUKndNVHeGlOTaOdJq0my8VEsQuvEFtszDJyeJiiGC2qKwbwpQJ DW1v3SESGmMnbc8Xju9c2ctTqb/gb6YU -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:40 2025 by rpki-client