This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: 5UlOSO+HZTeklAPq2MyXPSCtFColb6kpjJ9jSOsi+Y4= Subject key identifier: C4:09:1D:57:5C:3D:E3:D6:69:74:6C:CC:4D:C7:C4:54:F1:A0:C1:93 Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 040C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 0401 Signing time: Fri 26 Dec 2025 23:30:40 +0000 Manifest this update: Fri 26 Dec 2025 23:30:40 +0000 Manifest next update: Fri 02 Jan 2026 23:30:40 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: FQKb4ZXn/a8h+yMy7NqNltCtuV5H4HpqWeAYJU1tT1s=) 2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: /k7UGLxYpMRjSXOkhilDp1PbyHK35jDBnjLpEab1SqY=) 3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: nXP2TkV2xaQf8NtZFSYlzBkdLiCf/hTO1Pti6MrwpUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 23:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1036 (0x40c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Dec 26 23:30:40 2025 GMT Not After : Jan 2 23:30:40 2026 GMT Subject: CN=694f1aa0-b873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:5b:76:3f:aa:f2:b1:f1:93:8f:21:89:92: 60:1b:aa:4f:fe:a2:2f:99:29:d3:a0:bc:e6:90:08: ac:4d:09:c9:35:f1:41:9e:63:1d:3d:6f:0a:f5:50: 1f:f4:46:0d:9a:c9:4a:b5:06:e1:14:e7:c7:3e:55: 5e:76:ee:99:b6:05:72:bf:e8:6a:0f:98:47:b7:10: d2:a1:49:6f:53:55:4f:5e:e7:1b:a7:28:e2:e0:4f: 05:7e:93:28:fc:b4:49:e1:38:a7:34:10:e0:01:06: ac:98:bb:02:b3:0a:db:48:82:f7:a2:ae:3b:e6:b8: fe:41:99:84:6b:dc:5a:e9:39:54:93:3a:66:ef:c1: d8:1b:98:4c:07:a4:c3:8f:4a:ee:bb:a8:86:63:70: 87:e9:48:a2:f7:c6:6e:0d:f8:8a:ba:b4:96:b7:0d: 83:9a:85:12:99:d5:4d:6c:75:95:0f:2f:1f:e0:d5: b3:80:1c:8c:04:80:ce:49:40:27:de:ff:26:1d:28: 1e:18:86:f7:6f:3e:02:a2:68:18:b2:73:e2:8d:cc: 9d:6a:56:7a:d7:ee:76:9e:49:ee:6a:75:02:3d:fa: 46:a4:a3:36:b4:72:c9:dc:83:b8:e9:75:21:72:a3: 98:6f:5b:91:77:84:37:b7:63:f0:63:46:0b:2e:05: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:09:1D:57:5C:3D:E3:D6:69:74:6C:CC:4D:C7:C4:54:F1:A0:C1:93 X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:71:5c:e1:87:76:ac:43:2d:24:2c:ab:32:48:92:54:7b:e0: 92:4a:88:d2:a7:59:2e:5f:df:c5:d6:97:0b:8d:58:07:75:0d: 94:71:8a:a0:c4:72:2e:2a:48:48:28:c3:86:b0:11:fe:1c:56: db:2d:6c:ee:3d:2e:4e:0b:c6:69:93:5c:64:d3:e3:32:50:7e: 9b:55:f0:3c:3e:c6:55:11:ac:39:c6:99:08:63:07:5b:49:5b: 96:10:44:40:4a:14:3c:14:a7:27:18:58:66:cd:6f:64:e7:58: c1:f0:55:7c:3f:5e:4d:81:98:f8:5d:a2:47:5c:67:6a:63:1e: 02:75:34:0c:14:03:57:10:63:79:ab:86:d7:67:5c:50:3e:bb: 9d:10:a0:c6:5f:34:7c:48:d3:77:2f:85:9b:7c:e4:bd:6a:34: 30:ef:6f:5e:ec:27:99:39:c6:b0:13:b9:e9:7d:8b:d7:39:e1: 46:64:79:95:d2:84:27:40:13:9e:0f:65:6b:04:30:9a:12:6e: b3:9d:7a:a2:73:03:a3:65:f0:86:45:ca:c7:23:3a:0f:17:47: 73:c4:38:db:33:08:c2:09:c9:0d:7f:85:01:b4:d1:b7:8a:21: d4:70:a1:4f:22:c0:b1:69:dc:f6:0e:90:22:d8:cf:ab:66:30: 90:7a:b0:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjUxMjI2MjMzMDQwWhcNMjYwMTAyMjMzMDQwWjAYMRYwFAYD VQQDDA02OTRmMWFhMC1iODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthNbdj+q8rHxk48hiZJgG6pP/qIvmSnToLzmkAisTQnJNfFBnmMdPW8K9VAf 9EYNmslKtQbhFOfHPlVedu6ZtgVyv+hqD5hHtxDSoUlvU1VPXucbpyji4E8FfpMo /LRJ4TinNBDgAQasmLsCswrbSIL3oq475rj+QZmEa9xa6TlUkzpm78HYG5hMB6TD j0ruu6iGY3CH6Uii98ZuDfiKurSWtw2DmoUSmdVNbHWVDy8f4NWzgByMBIDOSUAn 3v8mHSgeGIb3bz4ComgYsnPijcydalZ61+52nknuanUCPfpGpKM2tHLJ3IO46XUh cqOYb1uRd4Q3t2PwY0YLLgWgnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQJHVdc PePWaXRszE3HxFTxoMGTMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfcVzhh3asQy0kLKsySJJUe+CSSojSp1kuX9/F1pcLjVgHdQ2UcYqg xHIuKkhIKMOGsBH+HFbbLWzuPS5OC8Zpk1xk0+MyUH6bVfA8PsZVEaw5xpkIYwdb SVuWEERAShQ8FKcnGFhmzW9k51jB8FV8P15NgZj4XaJHXGdqYx4CdTQMFANXEGN5 q4bXZ1xQPrudEKDGXzR8SNN3L4WbfOS9ajQw729e7CeZOcawE7npfYvXOeFGZHmV 0oQnQBOeD2VrBDCaEm6znXqicwOjZfCGRcrHIzoPF0dzxDjbMwjCCckNf4UBtNG3 iiHUcKFPIsCxadz2DpAi2M+rZjCQerCh -----END CERTIFICATE-----Generated at Sun Dec 28 20:28:35 2025 by rpki-client