This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft File: akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json) Hash identifier: APfzCEob/Z6ZX5p4vXi87m+fznZ/3GpHoBCROVF9unQ= Subject key identifier: E1:D5:52:2A:46:C3:EF:AF:6F:89:2C:42:47:0C:58:6E:59:5F:BD:FC Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Certificate serial: 08E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft Manifest number: 08C8 Signing time: Sat 20 Dec 2025 19:55:45 +0000 Manifest this update: Sat 20 Dec 2025 19:55:45 +0000 Manifest next update: Sat 27 Dec 2025 19:55:45 +0000 Files and hashes: 1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: v2oBpmjus81Yf8l1wn8rz0LYYtRQLkAXxYYhlBNQTy8=) 2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: z3K308cWVqAEh897XBjNlJlHxtZw2Llz47fylxLHRHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2272 (0x8e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Validity Not Before: Dec 20 19:55:45 2025 GMT Not After : Dec 27 19:55:45 2025 GMT Subject: CN=6946ff41-abd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d8:36:75:22:9d:2c:78:85:cd:30:89:c9:da: 20:95:39:07:47:d8:8b:14:31:14:60:5b:f3:98:64: 61:1d:7e:88:2d:99:8a:fd:c5:c1:d8:63:2e:28:08: 17:de:af:ec:90:1d:d1:0e:38:08:e3:0e:9d:54:01: 4f:86:ca:ed:04:7a:26:ad:9a:09:7a:c5:7c:d9:e7: 96:e2:39:64:4d:fa:05:07:6b:2b:89:94:52:0a:5e: 76:87:cb:d2:1b:2f:03:42:95:d2:a4:f0:5e:66:78: 6c:7e:a0:5b:eb:e9:de:34:d1:52:56:b4:e4:49:d6: a3:1b:6f:36:6e:72:a7:28:bc:90:71:55:85:3a:8e: 14:57:9a:d4:fd:7c:e5:ff:38:36:ee:7e:5a:aa:46: 76:58:b8:1d:8c:b2:14:dd:ce:bd:34:76:20:5c:a9: cc:47:3f:99:ff:55:c2:fc:e6:01:9a:34:d2:e5:68: 9b:02:f9:97:14:ab:9a:60:ad:f5:52:fd:41:ba:86: df:55:6f:8d:17:23:cb:0a:d9:f5:93:f4:3f:f8:89: 33:07:1b:c5:ad:94:75:6c:f7:22:0f:2f:40:70:74: 3d:7a:a3:cb:b8:b6:c9:74:a9:14:2a:18:84:e6:e2: 8e:31:22:1e:06:7d:b0:59:96:d3:bb:39:a3:78:a1: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D5:52:2A:46:C3:EF:AF:6F:89:2C:42:47:0C:58:6E:59:5F:BD:FC X509v3 Authority Key Identifier: keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:f2:c4:96:35:64:be:b9:34:00:c1:0c:4d:41:12:fc:02:0d: c9:c5:83:28:03:8b:a5:4a:06:f7:5a:72:6f:57:eb:f5:0a:dc: b7:5f:66:43:c1:67:86:ab:1b:8b:a6:e1:9e:f2:1b:e8:1d:60: da:49:02:7e:71:4f:94:59:0c:89:7a:23:bc:63:f2:0e:0c:f8: ed:51:21:c2:0b:91:be:46:85:cf:b9:5f:e4:97:e4:df:7f:3f: ec:15:2b:16:19:9e:c0:97:dc:60:c6:bb:c8:67:69:c8:c2:f3: 8c:54:af:91:11:6e:68:3c:4c:fb:8b:cd:da:9d:7e:60:cf:47: 26:d2:ae:eb:db:9b:d5:32:5e:f4:b8:59:12:25:fb:f6:b4:af: 75:07:16:a8:ec:9f:4e:e7:b6:c2:fd:c2:87:4e:1a:be:07:82: cc:f2:b6:7e:54:3e:10:50:e7:92:45:40:1c:1d:e5:58:0a:14: e0:51:60:b7:8d:25:02:b3:ea:e3:cc:f8:08:7f:9d:90:c3:29: 07:a2:c7:6e:77:84:90:f4:80:4f:67:86:79:aa:d2:e2:d2:f9: 91:23:40:5f:ba:30:e7:db:1c:9e:ff:3c:bb:8f:b7:10:63:ac: f1:b1:11:d9:05:0b:8e:67:6d:ef:be:b4:64:47:f1:57:f0:3b: a0:16:09:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2 NUIxQTJEQUQwHhcNMjUxMjIwMTk1NTQ1WhcNMjUxMjI3MTk1NTQ1WjAYMRYwFAYD VQQDDA02OTQ2ZmY0MS1hYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9g2dSKdLHiFzTCJydoglTkHR9iLFDEUYFvzmGRhHX6ILZmK/cXB2GMuKAgX 3q/skB3RDjgI4w6dVAFPhsrtBHomrZoJesV82eeW4jlkTfoFB2sriZRSCl52h8vS Gy8DQpXSpPBeZnhsfqBb6+neNNFSVrTkSdajG282bnKnKLyQcVWFOo4UV5rU/Xzl /zg27n5aqkZ2WLgdjLIU3c69NHYgXKnMRz+Z/1XC/OYBmjTS5WibAvmXFKuaYK31 Uv1BuobfVW+NFyPLCtn1k/Q/+IkzBxvFrZR1bPciDy9AcHQ9eqPLuLbJdKkUKhiE 5uKOMSIeBn2wWZbTuzmjeKE1jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHVUipG w++vb4ksQkcMWG5ZX738MB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUE2QS82MkJFMEFDNkNFOUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6 dW9VTE82SVVLV3Rsc2FMYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB8sSWNWS+uTQAwQxNQRL8Ag3JxYMoA4ulSgb3WnJvV+v1Cty3X2ZD wWeGqxuLpuGe8hvoHWDaSQJ+cU+UWQyJeiO8Y/IODPjtUSHCC5G+RoXPuV/kl+Tf fz/sFSsWGZ7Al9xgxrvIZ2nIwvOMVK+REW5oPEz7i83anX5gz0cm0q7r25vVMl70 uFkSJfv2tK91Bxao7J9O57bC/cKHThq+B4LM8rZ+VD4QUOeSRUAcHeVYChTgUWC3 jSUCs+rjzPgIf52QwykHosdud4SQ9IBPZ4Z5qtLi0vmRI0BfujDn2xye/zy7j7cQ Y6zxsRHZBQuOZ23vvrRkR/FX8DugFgk5 -----END CERTIFICATE-----Generated at Sun Dec 21 06:47:34 2025 by rpki-client