This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: sLKPMa5cUkmswyIGrfNUAba3M+pFQeKen4t7AYL0Ego= Subject key identifier: 70:FC:54:4C:BC:79:E6:B8:23:8E:A1:7D:B2:65:85:09:D9:56:02:29 Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 0317 Signing time: Fri 19 Dec 2025 00:20:57 +0000 Manifest this update: Fri 19 Dec 2025 00:20:56 +0000 Manifest next update: Fri 26 Dec 2025 00:20:56 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: oKJhockARZI5XVo+XsHBo5SDsC11x5OBUmUWD4e5YFo=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: t6gPHMURjmA0yTxJeNB9SOwe/egrKymREeoN93WnBuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: Dec 19 00:20:56 2025 GMT Not After : Dec 26 00:20:56 2025 GMT Subject: CN=69449a68-5939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:2d:f3:4f:55:7c:e8:37:67:a3:d8:a6:d0: 66:68:89:ff:fb:ec:ae:a1:f5:29:b6:50:67:ab:8e: e9:00:a1:6c:bf:42:ea:e3:ef:ce:9d:52:d4:8c:de: 54:ec:b6:52:e3:7d:5c:72:81:4a:8e:f5:9a:94:d3: f4:02:df:7d:5c:29:c6:7c:56:d7:5f:58:da:3b:90: 28:f5:fd:52:ee:cf:93:69:59:3c:19:49:cd:23:45: ef:57:87:73:77:73:23:6e:38:ff:79:55:44:bf:cc: 44:95:d1:1e:a9:a0:52:e0:1a:dd:ef:5d:50:51:68: f4:3f:ba:e4:71:c1:57:16:d3:02:c8:f6:a7:4f:ab: be:c3:01:95:8e:17:4b:e0:b9:79:7e:fd:d8:f2:00: a9:2a:bf:dd:e5:e3:88:0e:42:bb:0a:71:3f:94:36: bf:26:b7:e4:fc:d3:fa:69:d4:01:4c:2a:e3:a2:06: e3:0b:63:7d:04:f5:a8:ac:f9:41:85:52:3b:fd:25: d8:dc:10:ed:5f:96:de:cf:6b:86:4c:d8:a8:48:3f: 5f:70:4d:94:38:04:b2:65:46:b2:68:a9:33:e2:42: ad:95:7b:46:29:14:c7:09:00:5b:d9:07:e2:58:8c: 82:51:81:00:f3:fd:09:55:3c:7d:52:dd:9c:61:1a: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FC:54:4C:BC:79:E6:B8:23:8E:A1:7D:B2:65:85:09:D9:56:02:29 X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:42:76:d8:79:1d:58:6c:62:9d:47:58:dd:d6:37:58:02:bf: ef:ba:59:1e:85:d2:e1:68:4c:e6:f3:ca:52:5a:9a:1b:65:b1: 52:3e:64:fc:7b:85:cf:86:f6:75:61:df:9c:05:2d:41:c9:d4: 6f:9a:67:5a:87:a3:3e:54:c8:bb:f6:08:75:ae:e7:7b:46:0b: 44:1d:13:b8:37:30:05:4b:38:2a:ef:75:7a:69:43:4d:fd:5f: 9b:e6:ef:2a:8e:7c:9c:c1:cb:85:0b:8e:8a:f4:39:09:4b:5c: a9:1e:42:33:f1:2b:79:a3:1a:8c:5f:73:20:f9:e2:b1:3c:5c: b6:c2:1a:29:77:cd:d6:9e:78:1a:8f:29:c0:5e:04:ad:e6:95: 6d:e4:0e:12:be:53:2a:0b:03:8a:66:88:31:0a:6b:ac:40:89: b6:dc:62:92:94:3d:f2:35:65:2d:f4:c1:c4:1c:30:6d:9a:b7: 4b:ef:9b:45:7f:e1:57:c6:b4:39:d4:1b:32:37:40:d9:d1:b0: 40:b2:1f:68:2e:9b:54:05:2a:32:69:5d:12:22:b7:e1:56:c2: a1:34:a5:14:b6:9a:7a:7f:27:ef:92:14:25:27:11:28:da:9e: 7a:d2:a1:35:97:d7:3d:3c:97:43:0f:15:91:ba:ca:c0:e7:ce: cc:5d:b2:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjUxMjE5MDAyMDU2WhcNMjUxMjI2MDAyMDU2WjAYMRYwFAYD VQQDDA02OTQ0OWE2OC01OTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4It809VfOg3Z6PYptBmaIn/++yuofUptlBnq47pAKFsv0Lq4+/OnVLUjN5U 7LZS431ccoFKjvWalNP0At99XCnGfFbXX1jaO5Ao9f1S7s+TaVk8GUnNI0XvV4dz d3Mjbjj/eVVEv8xEldEeqaBS4Brd711QUWj0P7rkccFXFtMCyPanT6u+wwGVjhdL 4Ll5fv3Y8gCpKr/d5eOIDkK7CnE/lDa/Jrfk/NP6adQBTCrjogbjC2N9BPWorPlB hVI7/SXY3BDtX5bez2uGTNioSD9fcE2UOASyZUayaKkz4kKtlXtGKRTHCQBb2Qfi WIyCUYEA8/0JVTx9Ut2cYRo2zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHD8VEy8 eea4I46hfbJlhQnZVgIpMB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxQnbYeR1YbGKdR1jd1jdYAr/vulkehdLhaEzm88pSWpobZbFSPmT8 e4XPhvZ1Yd+cBS1BydRvmmdah6M+VMi79gh1rud7RgtEHRO4NzAFSzgq73V6aUNN /V+b5u8qjnycwcuFC46K9DkJS1ypHkIz8St5oxqMX3Mg+eKxPFy2whopd83Wnnga jynAXgSt5pVt5A4SvlMqCwOKZogxCmusQIm23GKSlD3yNWUt9MHEHDBtmrdL75tF f+FXxrQ51BsyN0DZ0bBAsh9oLptUBSoyaV0SIrfhVsKhNKUUtpp6fyfvkhQlJxEo 2p560qE1l9c9PJdDDxWRusrA587MXbLx -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:38 2025 by rpki-client