This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json) Hash identifier: XSGgzwcS3/FfqbvT6VmtGjSMA/nNHxcGeNfNEEvE9k0= Subject key identifier: D7:E0:8B:5D:69:EC:12:33:F0:22:B9:FA:C5:1C:E5:1F:46:4E:A1:41 Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft Manifest number: 35 Signing time: Wed 31 Dec 2025 06:34:44 +0000 Manifest this update: Wed 31 Dec 2025 06:34:44 +0000 Manifest next update: Wed 07 Jan 2026 06:34:44 +0000 Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: KC6YUBlpPCveNcVuhBf8QkLUsClyPoMhKGnFqNLxl5w=) 2: 9F57DB96B42211F09BF7B44BC4F9AE02.roa (hash: GSocOIU4gJGXAsCNtlbHDTRRIj+08JXL+H5AQwRagYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 06:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Validity Not Before: Dec 31 06:34:44 2025 GMT Not After : Jan 7 06:34:44 2026 GMT Subject: CN=6954c404-1a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:80:f6:eb:3f:3e:fd:8c:3e:4e:e5:e2:5b: a4:e2:ed:2a:5f:21:14:8d:16:f6:0d:11:77:fd:b4: a0:2e:23:fa:d1:77:69:7c:96:dc:95:ef:6c:43:0d: 90:6a:2f:07:23:aa:db:cc:d3:00:cd:e4:58:a6:d0: dc:05:67:0a:18:fe:af:42:ad:f1:a3:fb:69:a8:2b: 7e:fd:68:80:8b:4c:c7:8e:56:f2:24:d3:7d:4d:a7: 21:15:d1:16:c4:03:2c:9a:6f:13:fa:36:31:cc:e5: c7:50:3a:99:3b:76:75:a8:ea:c2:f5:78:d2:b1:a6: a9:04:52:14:88:ca:d4:e0:dc:9f:c9:02:96:4e:ee: eb:a6:ac:65:68:29:38:f9:f3:35:39:77:53:6a:68: a9:a7:f6:0e:ed:9c:fd:ad:b3:8b:5a:14:6d:91:38: 53:7e:12:dd:ee:51:1c:19:16:03:bc:75:5f:20:8b: f1:ac:a8:59:b6:f9:37:a1:d5:12:ad:ad:1b:ae:05: e2:d1:d8:46:79:4b:6e:63:46:a6:bb:de:8d:a0:f2: 8a:f7:19:10:f8:55:55:07:65:18:d5:22:c4:a8:ff: 76:61:47:29:fb:d1:95:bc:6f:81:7b:f3:b8:51:4a: 87:b9:87:10:d2:f7:b5:59:25:97:64:c9:8b:0b:27: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E0:8B:5D:69:EC:12:33:F0:22:B9:FA:C5:1C:E5:1F:46:4E:A1:41 X509v3 Authority Key Identifier: keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:57:df:ac:16:b0:cd:2d:99:fc:a0:2d:4c:b0:f8:e8:b9:52: e4:56:4d:78:43:c8:5a:8f:d4:57:e5:fb:d9:b2:86:02:0f:47: 56:48:0a:8f:db:5e:2b:6f:ac:cf:83:1f:43:6c:da:27:d7:32: 2e:3c:48:a1:df:59:dd:52:53:65:fc:36:6b:39:01:36:b5:ed: c6:98:86:ad:6b:05:b3:41:43:87:b3:b6:27:1f:24:79:3e:dd: 34:69:70:ab:41:74:97:7b:2e:81:69:63:22:dd:5b:85:5c:02: 55:8f:75:2d:30:6a:c3:ad:eb:5c:24:db:a8:e1:d5:c8:53:01: 77:d4:21:ea:dc:d0:b8:e0:39:fb:10:1f:43:52:e9:f5:b7:45: 52:42:b3:1c:1a:fb:37:91:23:93:3b:3e:a9:12:fb:af:1c:1c: 59:6c:42:81:d2:76:23:5a:79:a3:10:95:fb:46:5b:20:7e:2e: 02:f5:4b:92:6c:21:be:e3:41:11:04:fd:a4:8f:93:cd:7f:bd: 77:de:d0:6a:15:1a:16:10:0b:37:a8:f5:54:d3:4e:09:ff:6f: 24:a4:f4:fa:ef:d1:93:85:8c:74:33:7b:26:c2:31:02:be:0f: fd:8b:5e:07:06:be:08:d2:ce:3b:77:eb:57:16:79:ae:5b:1e: ab:3d:7a:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoMDA4NEY0N0E0MzcyQzhGOEE3RDUxMTgzRDUwMzZDNTkz RDE5RTFDMzAeFw0yNTEyMzEwNjM0NDRaFw0yNjAxMDcwNjM0NDRaMBgxFjAUBgNV BAMMDTY5NTRjNDA0LTFhNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqDoD26z8+/Yw+TuXiW6Ti7SpfIRSNFvYNEXf9tKAuI/rRd2l8ltyV72xDDZBq LwcjqtvM0wDN5Fim0NwFZwoY/q9CrfGj+2moK379aICLTMeOVvIk031NpyEV0RbE AyyabxP6NjHM5cdQOpk7dnWo6sL1eNKxpqkEUhSIytTg3J/JApZO7uumrGVoKTj5 8zU5d1NqaKmn9g7tnP2ts4taFG2ROFN+Et3uURwZFgO8dV8gi/GsqFm2+Teh1RKt rRuuBeLR2EZ5S25jRqa73o2g8or3GRD4VVUHZRjVIsSo/3ZhRyn70ZW8b4F787hR Soe5hxDS97VZJZdkyYsLJ6E9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1+CLXWns EjPwIrn6xRzlH0ZOoUEwHwYDVR0jBBgwFoAUAIT0ekNyyPin1RGD1QNsWT0Z4cMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzQ0Q0U0RUQyQTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUlUMGVrTnl5UGluMVJHRDFRTnNXVDBaNGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzQ0Q0U0RUQyQTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBp bjFSR0QxUU5zV1QwWjRjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABhX36wWsM0tmfygLUyw+Oi5UuRWTXhDyFqP1Ffl+9myhgIPR1ZICo/b XitvrM+DH0Ns2ifXMi48SKHfWd1SU2X8Nms5ATa17caYhq1rBbNBQ4ezticfJHk+ 3TRpcKtBdJd7LoFpYyLdW4VcAlWPdS0wasOt61wk26jh1chTAXfUIerc0LjgOfsQ H0NS6fW3RVJCsxwa+zeRI5M7PqkS+68cHFlsQoHSdiNaeaMQlftGWyB+LgL1S5Js Ib7jQREE/aSPk81/vXfe0GoVGhYQCzeo9VTTTgn/bySk9Prv0ZOFjHQzeybCMQK+ D/2LXgcGvgjSzjt361cWea5bHqs9en8= -----END CERTIFICATE-----Generated at Wed Dec 31 08:16:39 2025 by rpki-client