This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft File: _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json) Hash identifier: 3Du4CZ1Lyiwh5gtRpl/RcLSjWWyeps+gkLHZ67GPv+w= Subject key identifier: CF:DA:42:25:86:3B:D6:AD:65:F2:17:78:6A:3F:D0:DC:E8:CF:36:22 Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE Certificate issuer: /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft Manifest number: 086B Signing time: Thu 04 Dec 2025 19:45:19 +0000 Manifest this update: Thu 04 Dec 2025 19:45:19 +0000 Manifest next update: Thu 11 Dec 2025 19:45:19 +0000 Files and hashes: 1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: +hi+PDtdZjps/QQkOA27GhrwctArt4U4iKpNSnbeUjM=) 2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: fmTA3xXjU3MtioARHLhk0XmrYZWzaoGTX30tUFAbkPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Validity Not Before: Dec 4 19:45:19 2025 GMT Not After : Dec 11 19:45:19 2025 GMT Subject: CN=6931e4cf-c178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:e5:58:84:09:9f:c8:f4:9b:2d:7c:aa:69: a2:9a:07:f9:98:d8:7d:6b:c6:db:42:b2:5e:87:95: c3:81:07:e7:b0:25:01:db:05:1c:a3:63:62:6b:02: 80:cc:24:3c:6e:aa:5c:ed:b5:04:80:11:b5:f1:5e: bb:b4:9d:0d:ad:af:3f:d6:1d:65:d6:f8:d7:4f:5f: 4d:ea:43:4f:ba:53:c4:d2:68:e6:95:e5:df:3c:a6: 05:ef:67:9a:db:da:c6:19:1e:88:c7:1e:b8:e2:ea: 9c:d6:f1:89:04:49:6e:60:2b:c3:46:75:0b:59:5b: 0c:9c:b1:ae:a3:9f:dc:39:ca:53:51:74:45:70:09: f0:ab:bb:2b:f7:5e:7e:2c:91:fd:31:2e:af:8a:84: 53:d0:f4:07:11:9d:da:8f:4d:c6:2a:a0:64:c5:3e: 41:4c:97:03:54:3c:49:a6:2b:e6:c1:25:74:22:6d: f9:08:c1:7a:c3:37:4f:7b:dc:a5:94:31:0d:e7:90: 84:cb:12:db:41:64:6e:9c:b3:ce:70:3a:36:52:f1: f3:f6:6f:81:70:37:87:ed:d5:9c:66:68:ba:3c:5b: ee:f9:8a:cc:a5:72:fd:63:a3:c3:28:f5:2b:e4:cb: 11:d0:59:10:c5:f9:18:50:85:f2:07:b7:f6:1f:01: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DA:42:25:86:3B:D6:AD:65:F2:17:78:6A:3F:D0:DC:E8:CF:36:22 X509v3 Authority Key Identifier: keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:72:3f:a8:3f:20:12:46:b1:28:cf:4e:54:c9:ae:f7:3c:e8: 72:55:b2:30:63:1c:55:34:c2:ac:d9:fc:37:58:d4:30:36:ae: 4d:42:4c:b2:ff:79:96:95:17:de:85:8f:31:d8:03:25:60:ca: 6f:d2:e3:63:35:df:bd:63:b1:c2:6c:93:43:bd:74:a0:dc:21: 94:b4:41:25:a7:c5:8f:45:48:9b:29:da:16:04:d8:93:7e:52: d4:b5:0f:02:f7:70:d2:9d:74:b5:f1:89:5f:03:2c:8a:ea:8e: 67:f9:13:cd:ae:08:cb:e2:78:17:d2:53:65:48:89:85:a6:ff: be:3f:87:71:10:45:10:74:ac:f1:d7:fe:e8:78:b5:f4:69:92: 2b:67:fa:cd:ce:00:ee:9b:fb:b4:1d:44:dd:62:10:ac:c9:dd: db:88:a5:5a:c5:9c:9c:a7:10:f6:75:29:11:d4:69:0d:bb:7b: df:06:4a:0b:8c:fc:f5:ef:7a:34:81:d3:7d:7c:34:72:ce:0c: 39:e8:27:dd:c6:d2:79:1d:f4:c3:7c:fe:78:48:f8:4e:a6:32: 5c:28:52:ad:a6:85:8b:4d:b8:2b:26:5b:93:7c:4b:55:20:8e: 85:4e:77:35:6f:25:c3:66:18:3f:6c:74:35:e0:a2:99:79:16: 9b:f8:d5:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI0NjIxMTAvBgNVBAUTKEZENEQ4QzYzOUFEQzE1ODQ3QzdCNDkxMTE1OURFNzFC RDgxMzkzQUUwHhcNMjUxMjA0MTk0NTE5WhcNMjUxMjExMTk0NTE5WjAYMRYwFAYD VQQDEw02OTMxZTRjZi1jMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AflWIQJn8j0my18qmmimgf5mNh9a8bbQrJeh5XDgQfnsCUB2wUco2NiawKA zCQ8bqpc7bUEgBG18V67tJ0Nra8/1h1l1vjXT19N6kNPulPE0mjmleXfPKYF72ea 29rGGR6Ixx644uqc1vGJBEluYCvDRnULWVsMnLGuo5/cOcpTUXRFcAnwq7sr915+ LJH9MS6vioRT0PQHEZ3aj03GKqBkxT5BTJcDVDxJpivmwSV0Im35CMF6wzdPe9yl lDEN55CEyxLbQWRunLPOcDo2UvHz9m+BcDeH7dWcZmi6PFvu+YrMpXL9Y6PDKPUr 5MsR0FkQxfkYUIXyB7f2HwHsqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/aQiWG O9atZfIXeGo/0NzozzYiMB8GA1UdIwQYMBaAFP1NjGOa3BWEfHtJERWd5xvYE5Ou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjQ2Mi8zMkM3NTdFNkRD NDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZUjhlMGtSRlozbkc5Z1Rr NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VMk1ZNXJjRllSOGUwa1JGWjNuRzlnVGs2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjQ2Mi8zMkM3NTdFNkRDNDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZ UjhlMGtSRlozbkc5Z1RrNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1cj+oPyASRrEoz05Uya73POhyVbIwYxxVNMKs2fw3WNQwNq5NQkyy /3mWlRfehY8x2AMlYMpv0uNjNd+9Y7HCbJNDvXSg3CGUtEElp8WPRUibKdoWBNiT flLUtQ8C93DSnXS18YlfAyyK6o5n+RPNrgjL4ngX0lNlSImFpv++P4dxEEUQdKzx 1/7oeLX0aZIrZ/rNzgDum/u0HUTdYhCsyd3biKVaxZycpxD2dSkR1GkNu3vfBkoL jPz173o0gdN9fDRyzgw56CfdxtJ5HfTDfP54SPhOpjJcKFKtpoWLTbgrJluTfEtV II6FTnc1byXDZhg/bHQ14KKZeRab+NUu -----END CERTIFICATE-----Generated at Sat Dec 6 16:28:46 2025 by rpki-client