This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json) Hash identifier: v4CDrvlne77Dr7PXCDszEaoCHrCgHZ21vvISNeimugc= Subject key identifier: 2F:D1:73:BF:9C:A2:7D:91:7B:98:2C:41:A4:6D:E1:74:72:26:64:FD Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Certificate serial: 0408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft Manifest number: 03FF Signing time: Thu 18 Dec 2025 23:45:02 +0000 Manifest this update: Thu 18 Dec 2025 23:45:02 +0000 Manifest next update: Thu 25 Dec 2025 23:45:02 +0000 Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: ykx9s23o4Gfa6vsg3xiFdv+ClNLhIUtQdxB0yadzZis=) 2: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: ge5i/gUk2rLl8NFshkx3QLIeml4hinyetB2nMALgvq0=) 3: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: ASwdm1L9Wn+Rz2UEXw3LVXx6V8cb6bPFge6o2YPGGR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Validity Not Before: Dec 18 23:45:02 2025 GMT Not After : Dec 25 23:45:02 2025 GMT Subject: CN=694491fe-c3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:6c:53:e1:48:07:0a:77:8d:48:4f:02:eb: f1:c1:af:9b:75:d5:8a:d9:76:40:c0:8e:bc:0d:87: ad:49:6b:8b:f7:a2:0f:96:f8:ba:55:0b:74:b1:d7: eb:19:78:79:97:65:da:de:e9:ea:ef:5b:f8:b6:10: 3d:f1:05:2c:bc:c0:23:a8:e2:10:7d:02:98:29:e7: 25:f7:d1:f2:9e:72:e3:84:33:59:26:53:1e:66:87: 2a:bd:5b:a5:0b:81:23:da:c2:8f:97:9c:b9:de:04: d5:fb:28:5b:5c:be:77:0f:36:46:ca:d2:bb:49:98: ee:7f:31:34:6f:d4:88:af:1f:cf:f9:8d:30:49:d2: da:59:0c:af:16:9f:46:5c:b1:12:c2:28:2a:8e:ac: 44:a0:e8:fa:14:e7:0c:0d:eb:84:c1:dd:3d:54:4f: 6a:33:d5:7e:16:72:d1:71:2b:65:2d:55:63:3b:4d: 1c:94:b0:0f:fb:f8:a4:db:d0:25:f4:b0:02:06:2e: fe:76:a3:b3:32:7a:e1:cf:3f:d3:1e:e7:30:0f:8a: 8f:d1:78:e4:c5:b1:f1:45:ef:59:89:ad:5f:50:b8: 30:3a:31:03:2a:96:86:32:04:a9:10:1b:56:f4:2d: 92:21:8c:6d:3c:a8:cb:e3:2c:c2:fe:73:eb:26:3f: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D1:73:BF:9C:A2:7D:91:7B:98:2C:41:A4:6D:E1:74:72:26:64:FD X509v3 Authority Key Identifier: keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:81:cb:ba:51:e8:a9:61:54:e4:0a:f3:5d:10:15:0b:1b:80: 5d:76:df:d7:7e:9f:f3:69:d8:1d:e5:4a:5c:0d:1f:6a:28:ac: 62:f4:8b:7f:08:99:3a:4c:51:13:7d:24:7f:bb:d7:24:b4:7c: c7:ab:06:d3:86:96:ef:3f:aa:22:1f:96:a0:41:83:53:a0:e9: 02:00:7a:cd:9f:0b:e9:79:9f:cb:35:46:8b:a4:2a:d8:86:6c: 53:3d:cb:95:3e:d8:97:46:4d:f1:ec:f9:60:f5:0b:2c:f4:36: e7:af:1a:5d:82:f0:97:5e:16:11:07:d0:82:fa:13:4d:b6:02: 47:2b:f1:55:19:97:78:54:0c:1a:c6:ce:0f:09:bc:bb:1b:59: 7c:97:83:62:cb:db:a0:1b:15:4c:b2:ac:4a:0f:e9:fb:33:bf: 2f:bf:9f:02:bf:51:f9:7e:be:bd:7f:c2:8b:3b:84:5d:d7:4e: a1:29:30:6a:4e:50:61:ab:68:2c:18:9b:34:42:42:c9:60:63: 8b:1a:cf:6c:0d:6d:3c:82:a1:a9:b7:4c:47:17:6d:10:29:6d: 81:33:85:ea:26:0b:05:2c:ce:f9:af:8b:d2:6c:d6:e8:5e:47: f5:db:84:93:bb:7e:c5:0b:a7:af:51:d4:f1:3b:62:88:46:6b: 03:44:53:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDQjUxMTAvBgNVBAUTKDY5RTFDRUNCODgxREE2Qzk2OEJBQUUwNzMyMzdDMjY2 MDk1QTQ1Q0QwHhcNMjUxMjE4MjM0NTAyWhcNMjUxMjI1MjM0NTAyWjAYMRYwFAYD VQQDDA02OTQ0OTFmZS1jM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp15sU+FIBwp3jUhPAuvxwa+bddWK2XZAwI68DYetSWuL96IPlvi6VQt0sdfr GXh5l2Xa3unq71v4thA98QUsvMAjqOIQfQKYKecl99HynnLjhDNZJlMeZocqvVul C4Ej2sKPl5y53gTV+yhbXL53DzZGytK7SZjufzE0b9SIrx/P+Y0wSdLaWQyvFp9G XLESwigqjqxEoOj6FOcMDeuEwd09VE9qM9V+FnLRcStlLVVjO00clLAP+/ik29Al 9LACBi7+dqOzMnrhzz/THucwD4qP0XjkxbHxRe9Zia1fULgwOjEDKpaGMgSpEBtW 9C2SIYxtPKjL4yzC/nPrJj8YpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/Rc7+c on2Re5gsQaRt4XRyJmT9MB8GA1UdIwQYMBaAFGnhzsuIHabJaLquBzI3wmYJWkXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNCNS8zOUQ3NjcyMDlC NkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBzbG91cTRITWpmQ1pnbGFS YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlSE95NGdkcHNsb3VxNEhNamZDWmdsYVJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNCNS8zOUQ3NjcyMDlCNkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBz bG91cTRITWpmQ1pnbGFSYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUgcu6UeipYVTkCvNdEBULG4Bddt/Xfp/zadgd5UpcDR9qKKxi9It/ CJk6TFETfSR/u9cktHzHqwbThpbvP6oiH5agQYNToOkCAHrNnwvpeZ/LNUaLpCrY hmxTPcuVPtiXRk3x7Plg9Qss9DbnrxpdgvCXXhYRB9CC+hNNtgJHK/FVGZd4VAwa xs4PCby7G1l8l4Niy9ugGxVMsqxKD+n7M78vv58Cv1H5fr69f8KLO4Rd106hKTBq TlBhq2gsGJs0QkLJYGOLGs9sDW08gqGpt0xHF20QKW2BM4XqJgsFLM75r4vSbNbo Xkf124STu37FC6evUdTxO2KIRmsDRFOR -----END CERTIFICATE-----Generated at Sat Dec 20 15:31:08 2025 by rpki-client