This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: 7P2wdIP90HgN2YRjYkFtrbVghaCnYbZqZLSfvqlNcA8= Subject key identifier: 92:FA:79:96:D6:AB:D3:AC:67:A4:E9:94:E0:3D:DF:2B:7E:94:FD:47 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 351E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 3500 Signing time: Thu 18 Dec 2025 14:42:45 +0000 Manifest this update: Thu 18 Dec 2025 14:42:45 +0000 Manifest next update: Thu 25 Dec 2025 14:42:45 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: wWoDNtHTzr6FohlgrvEr2mhG767jn5Khj0hCV+H1JvM=) 2: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: iWI19VTOrnz2nGN4modDRd0Vbot3Y2khTy6hDIMLekE=) 3: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: Z9gsewhzEhlUHszkRSNsuOY1JzZl8Vjgyk5xiyq8V24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13598 (0x351e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Dec 18 14:42:45 2025 GMT Not After : Dec 25 14:42:45 2025 GMT Subject: CN=694412e5-73a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:33:ba:ff:d3:a7:09:8c:19:96:7a:f4:f4:a8: 1d:a5:93:5f:99:a3:26:f9:63:ce:e5:fc:3a:29:4c: 1d:c2:9e:e3:ff:77:a1:51:e8:75:1f:34:a9:e2:8f: e0:47:0f:b9:48:da:06:5d:e2:30:8c:c5:70:42:e2: 3b:12:8b:c8:4d:44:a5:c6:bb:4a:4f:29:f0:fe:46: b8:23:e1:79:5a:e9:f7:f0:e2:bc:1f:fd:d6:89:27: d2:4e:4f:bd:76:19:b6:99:a3:a2:e1:8a:b7:23:74: 2d:2c:ae:e2:c5:28:80:bc:22:ad:5c:f0:38:f5:58: 0e:3d:a9:e2:7d:e2:c1:4c:e6:17:6d:27:50:29:aa: c2:d0:71:a6:6c:67:93:a3:21:b5:1b:42:80:3b:8e: 50:cf:c8:31:12:fd:b6:4e:da:63:e2:4d:82:3f:32: 68:ce:85:e2:73:42:6a:2b:93:1b:ae:6e:11:cb:89: ec:b1:a0:f3:ca:14:20:8e:31:a4:8e:c6:88:36:08: d1:c0:18:6e:b9:f8:34:16:b8:5b:f9:eb:50:d1:77: 56:99:36:40:e7:0c:28:b8:3c:ae:f3:b4:da:b2:8b: 91:7e:72:ff:dd:56:83:bf:83:33:f4:e3:b7:4f:ba: a4:bd:64:b1:17:cf:da:aa:52:3b:b4:70:ac:ba:0d: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FA:79:96:D6:AB:D3:AC:67:A4:E9:94:E0:3D:DF:2B:7E:94:FD:47 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:56:49:17:dc:08:0e:41:a8:91:5e:18:47:ef:ae:cb:9e:05: 90:a0:a5:45:e5:1d:40:49:db:79:6a:52:0c:d0:1b:bc:55:6c: 99:66:66:0a:cd:62:7e:1d:e7:4c:6f:2f:48:d6:f3:ae:49:ac: 6e:2f:c3:7f:aa:7b:5f:45:2c:7f:81:57:5a:b7:ed:93:1f:35: 1a:55:5b:5f:be:d7:bd:e6:cc:ab:98:f0:2e:71:8a:47:15:e8: d5:00:b4:95:cf:f8:cf:22:09:93:d7:ee:1e:b6:b7:fb:14:61: 13:38:b9:b0:a6:7b:45:84:df:37:ea:8d:4e:a5:ae:98:23:42: a8:4e:9b:7b:13:80:47:e1:9e:fa:ea:86:3f:48:a4:96:88:fb: 15:79:03:48:de:f6:f4:80:c1:fe:d7:93:28:3d:c3:90:78:6f: 9a:c0:c7:86:26:ed:70:aa:44:8f:e0:8e:9e:67:e5:ea:82:c1: 08:82:3f:7d:2f:64:11:6e:7d:ec:82:64:06:f2:1e:55:c7:01: 49:ae:44:63:92:e5:b0:0f:9e:92:76:5a:2f:55:ee:98:c0:5b: 78:2a:53:56:50:27:5b:9d:86:dc:77:c4:80:bc:d6:6f:43:37: fc:27:8d:07:9c:76:f9:08:17:1d:06:cc:a7:41:00:f3:b1:c6: 37:28:72:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjUxMjE4MTQ0MjQ1WhcNMjUxMjI1MTQ0MjQ1WjAYMRYwFAYD VQQDDA02OTQ0MTJlNS03M2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+TO6/9OnCYwZlnr09KgdpZNfmaMm+WPO5fw6KUwdwp7j/3ehUeh1HzSp4o/g Rw+5SNoGXeIwjMVwQuI7EovITUSlxrtKTynw/ka4I+F5Wun38OK8H/3WiSfSTk+9 dhm2maOi4Yq3I3QtLK7ixSiAvCKtXPA49VgOPanifeLBTOYXbSdQKarC0HGmbGeT oyG1G0KAO45Qz8gxEv22Ttpj4k2CPzJozoXic0JqK5Mbrm4Ry4nssaDzyhQgjjGk jsaINgjRwBhuufg0Frhb+etQ0XdWmTZA5wwouDyu87TasouRfnL/3VaDv4Mz9OO3 T7qkvWSxF8/aqlI7tHCsug0SPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL6eZbW q9OsZ6TplOA93yt+lP1HMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdVkkX3AgOQaiRXhhH767LngWQoKVF5R1ASdt5alIM0Bu8VWyZZmYK zWJ+HedMby9I1vOuSaxuL8N/qntfRSx/gVdat+2THzUaVVtfvte95syrmPAucYpH FejVALSVz/jPIgmT1+4etrf7FGETOLmwpntFhN836o1Opa6YI0KoTpt7E4BH4Z76 6oY/SKSWiPsVeQNI3vb0gMH+15MoPcOQeG+awMeGJu1wqkSP4I6eZ+XqgsEIgj99 L2QRbn3sgmQG8h5VxwFJrkRjkuWwD56SdlovVe6YwFt4KlNWUCdbnYbcd8SAvNZv Qzf8J40HnHb5CBcdBsynQQDzscY3KHKz -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:06 2025 by rpki-client