This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: PAZIotC/t7uBqUfwr8qY0rIqid1IDZw1CaS/QWwWWdw= Subject key identifier: 84:FA:46:74:58:A1:46:D4:A7:78:07:93:3C:35:01:ED:3A:48:A3:10 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 0491 Signing time: Thu 04 Dec 2025 22:34:00 +0000 Manifest this update: Thu 04 Dec 2025 22:34:00 +0000 Manifest next update: Thu 11 Dec 2025 22:34:00 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: zxiEOFNhV8NN7yCTwgYQ/+wTF42AUtT9vZmmkJ8nyms=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Dec 4 22:34:00 2025 GMT Not After : Dec 11 22:34:00 2025 GMT Subject: CN=69320c58-2891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e8:1b:e1:0f:2a:b9:35:2e:20:bb:a3:83:f3: 66:68:0e:46:64:3e:18:8f:72:94:1d:b6:7b:38:50: 7e:aa:cd:22:83:76:94:91:a2:30:1d:a6:07:c4:dd: cc:3c:3b:d7:c7:9f:48:94:14:86:af:29:38:d7:f7: 2c:b7:18:3c:8c:58:7e:ae:b4:17:83:f4:2f:13:2d: 9f:33:d6:ce:ed:b7:35:a7:f3:25:07:55:8c:df:3c: f0:17:f8:81:ec:e0:3a:98:47:b9:1c:85:b7:44:4d: 05:34:b0:9f:64:c3:4b:43:88:7a:99:93:48:2f:94: da:ba:db:c8:9e:54:f8:6f:37:e5:9b:21:2b:e1:83: de:a5:3c:a2:f0:be:4e:8b:5c:a9:19:ce:89:d5:b8: e7:69:13:a5:e0:38:38:e3:87:05:b2:15:85:1d:30: 47:7e:fe:a3:4e:fd:fa:63:c2:1b:a1:47:f9:64:f8: c3:76:90:c6:c7:5c:40:d3:8e:41:e9:bd:2b:95:6f: 45:54:ae:fe:51:88:60:b5:7a:70:67:32:1a:7d:8e: 04:1c:a5:e3:50:68:7a:02:03:eb:a4:b9:63:4b:14: 5b:c2:4a:c9:02:4a:0e:c4:2a:e3:bd:ef:de:ed:02: a8:90:25:e3:1a:91:d7:ef:a7:93:f7:8b:1b:fb:36: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FA:46:74:58:A1:46:D4:A7:78:07:93:3C:35:01:ED:3A:48:A3:10 X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:01:6e:f5:78:48:8d:df:11:92:cb:e5:73:6a:47:e7:d0:09: 6c:52:0d:7e:4f:1c:4b:f8:ef:06:6e:13:33:f7:42:73:c7:83: bd:6e:e8:07:59:fc:99:43:99:e6:af:b5:ed:0f:a4:97:46:4e: fa:1f:de:f1:17:23:4a:8c:6a:07:cc:0f:a6:bc:aa:00:73:68: 69:75:ab:7a:30:cc:83:24:d2:a4:9f:28:93:9a:14:09:52:6d: 08:7b:6e:45:fe:db:97:60:90:74:80:8a:fe:bd:9a:52:ea:94: f4:60:24:c6:15:27:e6:b7:6d:9b:72:2c:f0:92:6b:0d:fc:93: 2c:ea:26:14:b3:fa:47:63:93:91:44:5b:0a:fd:d0:8e:95:d8: 58:d5:03:d0:7b:45:b3:cd:ac:bb:a1:af:f5:7b:4b:d6:e4:b5: 4c:3b:17:8c:09:ed:82:a9:2e:99:66:47:01:4d:19:fb:6e:a7: 34:b1:38:b1:ff:e2:79:d3:60:89:2a:26:ec:43:b2:9d:07:cc: 8c:ab:ee:33:cb:48:02:09:76:8b:94:71:34:10:13:d4:f2:46: 61:b4:8d:67:1f:fb:76:29:57:30:85:d5:11:9a:dc:be:12:25: 74:4c:cf:e6:db:4a:f1:8a:af:85:6f:ec:03:4f:1d:93:35:60: af:f0:1a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjUxMjA0MjIzNDAwWhcNMjUxMjExMjIzNDAwWjAYMRYwFAYD VQQDEw02OTMyMGM1OC0yODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+gb4Q8quTUuILujg/NmaA5GZD4Yj3KUHbZ7OFB+qs0ig3aUkaIwHaYHxN3M PDvXx59IlBSGryk41/cstxg8jFh+rrQXg/QvEy2fM9bO7bc1p/MlB1WM3zzwF/iB 7OA6mEe5HIW3RE0FNLCfZMNLQ4h6mZNIL5TautvInlT4bzflmyEr4YPepTyi8L5O i1ypGc6J1bjnaROl4Dg444cFshWFHTBHfv6jTv36Y8IboUf5ZPjDdpDGx1xA045B 6b0rlW9FVK7+UYhgtXpwZzIafY4EHKXjUGh6AgPrpLljSxRbwkrJAkoOxCrjve/e 7QKokCXjGpHX76eT94sb+zZsswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIT6RnRY oUbUp3gHkzw1Ae06SKMQMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXAW71eEiN3xGSy+Vzakfn0AlsUg1+TxxL+O8GbhMz90Jzx4O9bugH WfyZQ5nmr7XtD6SXRk76H97xFyNKjGoHzA+mvKoAc2hpdat6MMyDJNKknyiTmhQJ Um0Ie25F/tuXYJB0gIr+vZpS6pT0YCTGFSfmt22bcizwkmsN/JMs6iYUs/pHY5OR RFsK/dCOldhY1QPQe0Wzzay7oa/1e0vW5LVMOxeMCe2CqS6ZZkcBTRn7bqc0sTix /+J502CJKibsQ7KdB8yMq+4zy0gCCXaLlHE0EBPU8kZhtI1nH/t2KVcwhdURmty+ EiV0TM/m20rxiq+Fb+wDTx2TNWCv8Brq -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:13 2025 by rpki-client