This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft File: u59Cz844jtxLKepl3rYWKyVtIQI.mft (raw, json) Hash identifier: v1B28t/J54FBr1PfMOetRNXAOioJtKWp3NbSoQP3BA8= Subject key identifier: F7:5A:01:A5:70:CE:8D:8C:47:1D:0E:EA:24:FE:02:E9:D4:43:C8:BF Authority key identifier: BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02 Certificate issuer: /CN=A915DAF1/serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102 Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft Manifest number: 07A1 Signing time: Sat 06 Dec 2025 20:29:10 +0000 Manifest this update: Sat 06 Dec 2025 20:29:10 +0000 Manifest next update: Sat 13 Dec 2025 20:29:10 +0000 Files and hashes: 1: u59Cz844jtxLKepl3rYWKyVtIQI.crl (hash: mMrMPl0k1XEqjtgO+9I9QNnQbyRVGufczRUbsrhCEX4=) 2: 84F992E67BB911EFA4CC334CC4F9AE02.roa (hash: YklgGoKPIC5Pmt2tOtwd4ysgwGERG7auCGi5OoDyTlg=) 3: 5A9BEA702D7611EB9827C368C4F9AE02.roa (hash: ebO9+Vms5oQoG4HlIUTD5BkVkXKCz/huR2BUpn+lQwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DAF1, serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102 Validity Not Before: Dec 6 20:29:10 2025 GMT Not After : Dec 13 20:29:10 2025 GMT Subject: CN=69349216-96a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:1b:c9:38:29:c2:cc:0f:5d:4e:32:73:26: 70:4b:aa:ab:de:e5:7a:b6:73:2f:ee:73:8a:a3:f7: c9:52:fb:76:38:93:9c:20:98:6a:44:d5:ed:cc:d1: cf:c9:fa:4e:81:06:a1:c8:65:8a:6a:e1:23:3c:c9: aa:91:88:00:51:7f:c3:06:87:6b:13:80:28:22:72: d2:65:bd:d0:af:be:2f:20:79:a0:41:68:cc:4f:fd: 81:8c:28:87:d3:07:87:9c:18:c6:85:29:43:60:2c: 59:5c:12:f1:01:e3:75:82:b0:f8:a3:f3:e2:7e:e2: a0:6d:95:8d:fa:f3:b3:09:0d:23:d0:6f:29:f0:1f: 79:44:57:5a:02:88:2f:09:48:5b:d5:df:19:f2:98: a9:ec:18:28:47:88:8d:e0:3d:3f:58:82:73:fe:db: de:1e:3c:dd:0c:c9:f1:bf:0d:05:fb:a5:dd:1f:05: 13:b5:14:42:43:c4:46:2d:79:16:57:d0:2e:4f:11: 15:30:fa:ae:2d:e7:15:32:c3:2c:32:e3:2e:00:a0: eb:90:3b:4a:5b:fd:d8:dd:ef:7a:83:e3:17:ea:75: 9e:72:5e:e1:72:4d:73:dc:b7:f8:ae:1a:69:df:57: 24:58:0e:cf:bb:c3:85:e5:8b:30:3d:d8:1c:18:80: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5A:01:A5:70:CE:8D:8C:47:1D:0E:EA:24:FE:02:E9:D4:43:C8:BF X509v3 Authority Key Identifier: keyid:BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bc:b3:3f:f8:9d:ee:dd:81:d1:e6:22:c7:8c:0e:d9:f5:9e: b9:a0:cb:22:d6:c9:38:5c:de:23:4a:40:f5:8e:1f:b5:7f:2c: a4:99:17:8b:27:b2:e9:22:47:fb:ce:8f:77:b6:39:ba:35:5d: 29:65:b5:86:2d:04:fb:ec:9c:6b:46:f1:28:74:0f:41:80:fe: c8:34:22:48:5f:a2:f1:46:14:e4:08:9b:1d:8c:de:63:f6:e4: a8:67:21:b0:09:8f:09:3d:10:7e:fa:e1:54:5e:5d:0b:46:5e: 79:70:31:b7:35:5b:09:77:0c:cf:49:27:5b:3e:ce:b0:3b:af: 53:fd:95:9a:b2:70:8f:6f:12:2b:19:df:0b:8f:8d:f4:8b:8e: 87:c1:fb:8c:41:9d:98:1c:05:80:5a:cc:03:a5:98:ae:0d:97: 56:c5:e4:48:c7:ed:81:80:a4:b2:1a:38:fd:91:10:0f:c2:c5: dc:20:cb:bd:4d:10:e5:c8:d6:b0:ae:d2:1a:54:22:cd:63:ba: 70:23:e4:db:92:66:71:f2:67:fa:64:a8:5e:4d:99:79:6d:b6: 91:59:e4:64:95:d7:74:e7:62:94:79:df:fb:d9:a0:78:67:92: 8c:44:82:df:c8:4d:ca:8e:52:83:b6:1e:e2:9a:1c:c1:2c:69: 7a:b5:30:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBRjExMTAvBgNVBAUTKEJCOUY0MkNGQ0UzODhFREM0QjI5RUE2NURFQjYxNjJC MjU2RDIxMDIwHhcNMjUxMjA2MjAyOTEwWhcNMjUxMjEzMjAyOTEwWjAYMRYwFAYD VQQDEw02OTM0OTIxNi05NmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyl0byTgpwswPXU4ycyZwS6qr3uV6tnMv7nOKo/fJUvt2OJOcIJhqRNXtzNHP yfpOgQahyGWKauEjPMmqkYgAUX/DBodrE4AoInLSZb3Qr74vIHmgQWjMT/2BjCiH 0weHnBjGhSlDYCxZXBLxAeN1grD4o/PifuKgbZWN+vOzCQ0j0G8p8B95RFdaAogv CUhb1d8Z8pip7BgoR4iN4D0/WIJz/tveHjzdDMnxvw0F+6XdHwUTtRRCQ8RGLXkW V9AuTxEVMPquLecVMsMsMuMuAKDrkDtKW/3Y3e96g+MX6nWecl7hck1z3Lf4rhpp 31ckWA7Pu8OF5YswPdgcGIDbeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdaAaVw zo2MRx0O6iT+AunUQ8i/MB8GA1UdIwQYMBaAFLufQs/OOI7cSynqZd62FislbSEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REFGMS8wQjJCOTBBNDJE NzUxMUVCOTM2RTM0NThDNEY5QUUwMi91NTlDejg0NGp0eExLZXBsM3JZV0t5VnRJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1OUN6ODQ0anR4TEtlcGwzcllXS3lWdElRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REFGMS8wQjJCOTBBNDJENzUxMUVCOTM2RTM0NThDNEY5QUUwMi91NTlDejg0NGp0 eExLZXBsM3JZV0t5VnRJUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYvLM/+J3u3YHR5iLHjA7Z9Z65oMsi1sk4XN4jSkD1jh+1fyykmReL J7LpIkf7zo93tjm6NV0pZbWGLQT77JxrRvEodA9BgP7INCJIX6LxRhTkCJsdjN5j 9uSoZyGwCY8JPRB++uFUXl0LRl55cDG3NVsJdwzPSSdbPs6wO69T/ZWasnCPbxIr Gd8Lj430i46HwfuMQZ2YHAWAWswDpZiuDZdWxeRIx+2BgKSyGjj9kRAPwsXcIMu9 TRDlyNawrtIaVCLNY7pwI+TbkmZx8mf6ZKheTZl5bbaRWeRkldd052KUed/72aB4 Z5KMRILfyE3KjlKDth7imhzBLGl6tTDQ -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:47 2025 by rpki-client