This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json) Hash identifier: /WXSfS4QbSrxExAGqhw2JgMRgtMt9/pTRN+9T6yF/4o= Subject key identifier: 49:CB:B6:B4:2F:71:E7:05:0C:6C:FD:14:C2:64:76:74:60:F4:3C:40 Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft Manifest number: 0C5E Signing time: Thu 18 Dec 2025 18:20:12 +0000 Manifest this update: Thu 18 Dec 2025 18:20:11 +0000 Manifest next update: Thu 25 Dec 2025 18:20:11 +0000 Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: hsggMmjyuxF2Yw3VGK5ZzMLO/tWDRqrgmn2d//sNDIw=) 2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: 37wRY/Cc6Mq3QSLFvHgV5f/52WNRD8oTGzaqCKYmvRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Validity Not Before: Dec 18 18:20:11 2025 GMT Not After : Dec 25 18:20:11 2025 GMT Subject: CN=694445dc-67ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:15:ae:fa:e4:3d:c1:e1:66:33:f6:00:22: da:d8:0a:08:bc:c4:5d:90:5b:dc:a6:9c:d4:d7:b8: 3b:ab:13:df:d5:6e:49:07:27:09:3c:48:81:b1:44: 72:5b:2b:f3:b8:7e:a0:e4:c1:a7:b1:b6:7d:b2:1c: e9:03:0f:1b:93:47:ee:9d:e9:a9:78:a7:3b:4f:92: ef:b4:39:8c:26:69:02:01:10:e5:f4:5c:10:6e:0d: da:39:a0:32:23:cf:86:6b:c0:b9:bd:4f:c4:62:1a: 95:ee:99:b6:8c:d0:5f:1f:fc:37:da:e0:26:c4:23: ee:0e:fd:5c:dc:a3:8e:19:8d:73:59:0e:be:bd:62: 96:11:14:23:4a:64:be:ad:25:64:8f:5f:4c:49:87: da:36:42:c0:41:20:ac:4e:e0:54:02:0c:36:98:a0: a8:3f:ae:ea:42:28:04:8f:2a:4b:23:95:db:c3:4b: d7:7c:1f:90:e7:49:ba:ae:67:03:ac:31:de:d3:f5: 0c:51:60:07:45:f5:f1:06:77:7e:5f:5a:b4:45:20: dd:31:a3:14:43:e2:60:34:50:50:84:48:6b:3b:1c: 90:4f:50:77:06:df:d9:63:a3:1b:54:18:ed:fc:fa: 58:7b:83:db:f0:64:27:d7:f1:62:5d:6b:52:a8:c5: 3c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CB:B6:B4:2F:71:E7:05:0C:6C:FD:14:C2:64:76:74:60:F4:3C:40 X509v3 Authority Key Identifier: keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d2:42:ff:09:10:f6:3d:04:af:1a:3f:1c:06:f3:13:fc:70: 55:df:0d:ef:49:1d:53:4a:e2:cb:c0:b2:f3:71:bd:ec:83:97: 42:1b:a7:82:a5:59:b0:d0:b9:36:3d:62:80:a5:24:5d:ea:2c: e5:dd:99:83:28:3f:d9:08:2a:ed:be:33:2a:fb:a9:cd:a9:60: c7:a6:96:70:3e:ae:0d:b5:d2:f8:5a:57:3e:83:ec:de:3d:1c: f6:f6:a4:cf:0d:d2:eb:ae:2a:a7:62:c2:0f:5e:06:36:54:01: 9c:3b:cc:67:6a:d8:84:b7:ac:e9:4c:3a:95:75:8d:94:c9:37: 67:b6:eb:88:c9:be:26:d7:b2:f5:fa:2b:b6:ec:22:d9:8f:5f: 19:b8:0a:d2:2f:2a:8b:ad:b7:5a:db:5d:d4:61:1a:47:c1:0b: ec:35:36:7e:30:ee:cd:a1:d0:52:f0:d7:76:96:5e:ae:bb:41: 9e:85:76:9e:93:5a:98:a9:98:47:c0:96:ca:07:7a:3a:53:86: 96:fe:34:5d:44:da:b9:93:f1:4a:51:53:dc:9d:7d:63:f5:8a: 7b:e9:e4:d1:35:d3:74:7b:88:bb:7f:83:11:17:64:c1:79:d1: 50:6a:c7:a8:32:57:08:53:99:9c:54:ea:28:90:1b:3d:f9:4a: 47:2b:2d:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3 MkUzREI0MUYwHhcNMjUxMjE4MTgyMDExWhcNMjUxMjI1MTgyMDExWjAYMRYwFAYD VQQDDA02OTQ0NDVkYy02N2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmIVrvrkPcHhZjP2ACLa2AoIvMRdkFvcppzU17g7qxPf1W5JBycJPEiBsURy WyvzuH6g5MGnsbZ9shzpAw8bk0funempeKc7T5LvtDmMJmkCARDl9FwQbg3aOaAy I8+Ga8C5vU/EYhqV7pm2jNBfH/w32uAmxCPuDv1c3KOOGY1zWQ6+vWKWERQjSmS+ rSVkj19MSYfaNkLAQSCsTuBUAgw2mKCoP67qQigEjypLI5Xbw0vXfB+Q50m6rmcD rDHe0/UMUWAHRfXxBnd+X1q0RSDdMaMUQ+JgNFBQhEhrOxyQT1B3Bt/ZY6MbVBjt /PpYe4Pb8GQn1/FiXWtSqMU8MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnLtrQv cecFDGz9FMJkdnRg9DxAMB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0 QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0 QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVF TE80S2ZnRkFLZjl5NDl0QjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk0kL/CRD2PQSvGj8cBvMT/HBV3w3vSR1TSuLLwLLzcb3sg5dCG6eC pVmw0Lk2PWKApSRd6izl3ZmDKD/ZCCrtvjMq+6nNqWDHppZwPq4NtdL4Wlc+g+ze PRz29qTPDdLrriqnYsIPXgY2VAGcO8xnatiEt6zpTDqVdY2UyTdntuuIyb4m17L1 +iu27CLZj18ZuArSLyqLrbda213UYRpHwQvsNTZ+MO7NodBS8Nd2ll6uu0GehXae k1qYqZhHwJbKB3o6U4aW/jRdRNq5k/FKUVPcnX1j9Yp76eTRNdN0e4i7f4MRF2TB edFQaseoMlcIU5mcVOookBs9+UpHKy3J -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:53 2025 by rpki-client