This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft File: kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft (raw, json) Hash identifier: uAKxJGM8JBBtOuEUZ9AOEQ7U5f6rXjYX5obsXOvIRQg= Subject key identifier: 55:2B:FF:C5:48:69:11:EB:BD:D8:1F:EA:5E:BE:F1:38:B9:CC:B8:87 Authority key identifier: 91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E Certificate issuer: /CN=A9179386/serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft Manifest number: 26 Signing time: Fri 05 Dec 2025 05:31:42 +0000 Manifest this update: Fri 05 Dec 2025 05:31:41 +0000 Manifest next update: Fri 12 Dec 2025 05:31:41 +0000 Files and hashes: 1: kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl (hash: N9v/NZydqeT6A2v+X28gqF9Ot+wGcS7B+5De3htC8nI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179386, serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Validity Not Before: Dec 5 05:31:41 2025 GMT Not After : Dec 12 05:31:41 2025 GMT Subject: CN=69326e3e-e0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d6:4f:95:bd:90:40:e9:48:d8:56:4a:94:90: 76:6a:ae:75:e8:71:0a:52:90:3f:a8:ed:32:cb:88: 7e:8f:fb:80:1b:9f:6c:3f:90:f1:df:ee:54:6e:d7: a2:4c:b9:c4:83:28:8c:7c:a0:f7:3a:d0:71:43:21: 9b:51:9c:f5:95:7a:e7:35:eb:b6:76:83:f1:96:09: 3b:0e:a1:35:45:e4:2f:3d:81:a7:5d:92:c3:14:a9: 66:77:30:2b:e8:46:d0:86:04:59:b7:94:70:9d:f1: af:21:1b:88:6d:2b:dd:6f:f8:a0:1d:4e:ad:c8:5a: 01:60:44:8e:b1:2f:20:60:92:20:83:a8:2e:84:d2: 45:62:0d:49:02:ad:1a:e0:e3:c7:8b:a1:6f:3a:23: 36:4b:ff:ec:2d:b5:3f:e2:03:4d:77:47:66:e7:88: 68:2d:02:0f:73:18:b7:46:7c:1b:8e:d7:f6:26:1c: 07:4c:73:0a:e1:cc:56:29:1d:d9:c3:f0:9f:89:e6: ea:d8:5e:c3:be:5e:9f:0b:c8:f3:68:65:9f:9e:41: 6b:8c:83:01:c8:01:68:9d:4d:e9:0a:27:0f:16:4e: e9:48:a8:8c:f1:7a:22:0f:3f:5e:ea:7a:a8:4e:f3: 95:af:63:b6:0a:bd:57:10:10:8e:6c:73:62:3e:eb: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2B:FF:C5:48:69:11:EB:BD:D8:1F:EA:5E:BE:F1:38:B9:CC:B8:87 X509v3 Authority Key Identifier: keyid:91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:fe:c6:ab:ba:3a:05:b3:16:31:fa:5d:eb:0f:0d:63:62:0d: 8f:ad:33:c9:99:06:76:70:cf:b7:c4:e3:33:63:9f:da:94:20: e9:fa:20:b8:ae:a0:fd:99:e9:ce:bf:f2:b8:f1:8a:81:3e:b0: 6f:6b:20:a6:a0:4c:4c:e4:51:2e:58:5b:66:5d:b8:55:5f:57: e4:81:0b:68:0a:b7:53:24:e9:76:33:7e:6a:73:c2:ce:68:4c: 12:5c:71:bd:27:ce:ce:8f:67:ef:d3:1e:cc:6e:89:48:ed:f1: 77:d5:70:95:7e:53:44:c2:9f:01:7b:f6:ec:09:49:f5:5f:90: f0:10:07:b1:8a:6e:b5:a8:b3:04:6b:6d:68:b3:35:2b:1f:64: 27:a1:e3:a2:a6:2e:bb:8e:6d:4d:a1:79:1f:9f:6a:50:ad:70: d0:92:47:40:e8:c7:d6:87:c9:95:f2:ee:57:0f:11:88:74:0c: b2:c2:09:cc:e0:6a:bc:a8:2e:53:68:0d:3f:f9:9c:35:f6:d1: 11:ce:0f:95:c1:6d:dd:63:a9:77:fd:05:a7:31:04:a9:07:46: 37:37:08:a9:11:9f:4b:79:72:e4:11:66:59:8e:06:43:c4:4a: c4:fe:f5:67:34:b1:41:67:7b:09:1a:41:e8:fe:71:81:23:d0: fe:9c:dc:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTM4NjExMC8GA1UEBRMoOTE0RTE4NTQ0Q0NBNEQzMTBBNUU1RjA5MTkwODI5RjY4 RDUxNDA3RTAeFw0yNTEyMDUwNTMxNDFaFw0yNTEyMTIwNTMxNDFaMBgxFjAUBgNV BAMTDTY5MzI2ZTNlLWUwZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR1k+VvZBA6UjYVkqUkHZqrnXocQpSkD+o7TLLiH6P+4Abn2w/kPHf7lRu16JM ucSDKIx8oPc60HFDIZtRnPWVeuc167Z2g/GWCTsOoTVF5C89gaddksMUqWZ3MCvo RtCGBFm3lHCd8a8hG4htK91v+KAdTq3IWgFgRI6xLyBgkiCDqC6E0kViDUkCrRrg 48eLoW86IzZL/+wttT/iA013R2bniGgtAg9zGLdGfBuO1/YmHAdMcwrhzFYpHdnD 8J+J5urYXsO+Xp8LyPNoZZ+eQWuMgwHIAWidTekKJw8WTulIqIzxeiIPP17qeqhO 85WvY7YKvVcQEI5sc2I+62Z1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVSv/xUhp Eeu92B/qXr7xOLnMuIcwHwYDVR0jBBgwFoAUkU4YVEzKTTEKXl8JGQgp9o1RQH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5Mzg2LzJFNjU3QkNFOTdF ODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRFS1hsOEpHUWdwOW8xUlFI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1U0WVZFektUVEVLWGw4SkdRZ3A5bzFSUUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 Mzg2LzJFNjU3QkNFOTdFODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRF S1hsOEpHUWdwOW8xUlFINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMX+xqu6OgWzFjH6XesPDWNiDY+tM8mZBnZwz7fE4zNjn9qUIOn6ILiu oP2Z6c6/8rjxioE+sG9rIKagTEzkUS5YW2ZduFVfV+SBC2gKt1Mk6XYzfmpzws5o TBJccb0nzs6PZ+/THsxuiUjt8XfVcJV+U0TCnwF79uwJSfVfkPAQB7GKbrWoswRr bWizNSsfZCeh46KmLruObU2heR+falCtcNCSR0Dox9aHyZXy7lcPEYh0DLLCCczg aryoLlNoDT/5nDX20RHOD5XBbd1jqXf9BacxBKkHRjc3CKkRn0t5cuQRZlmOBkPE SsT+9Wc0sUFnewkaQej+cYEj0P6c3Eg= -----END CERTIFICATE-----Generated at Sun Dec 7 02:57:05 2025 by rpki-client