This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: 87wJD+Qlmaq/9bdigTTaR+d6gTVeBI9qVvkwTJ9IAso= Subject key identifier: E9:10:85:5F:09:07:7D:CD:5C:B5:2D:B6:C7:9C:34:DD:1C:B4:1B:73 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 0244 Signing time: Fri 19 Dec 2025 01:11:04 +0000 Manifest this update: Fri 19 Dec 2025 01:11:03 +0000 Manifest next update: Fri 26 Dec 2025 01:11:03 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: N6enOJlCoVVg/bctXWhj268ZSS2Plm+6mmrbH1M+PVQ=) 2: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: B4BkdpTo1qZHacqSMnVvogHOqStnqdG0ex859T6dd8w=) 3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: TDlTkXNyk/OE7AIzmPKhh2DU+PZI5hEvSUbR0akOStU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Dec 19 01:11:03 2025 GMT Not After : Dec 26 01:11:03 2025 GMT Subject: CN=6944a628-69cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:e6:9b:cc:e7:dc:86:73:cb:92:4f:e5:51: 06:7a:8a:e8:67:95:ee:da:5d:f8:71:6b:f7:52:fa: b9:9a:0b:d5:cd:73:63:ea:42:6e:91:72:f2:33:d1: a8:8a:74:e7:35:f4:6a:da:f0:17:2d:eb:3e:9d:5a: 2e:52:da:25:8f:45:da:6a:b1:db:62:a0:b2:2d:d4: e3:10:f7:1b:1b:80:db:81:b4:41:af:a9:b8:e1:38: 4c:4a:c1:97:d6:58:94:e5:e9:09:5b:8a:0d:4b:88: 6c:be:96:93:fb:20:89:5f:05:f0:76:31:5b:c1:e2: 35:64:f8:da:fe:66:77:68:bc:bf:94:51:63:5f:82: 7c:86:a3:63:5a:dd:1a:2f:eb:57:0a:5e:94:f6:30: 90:3a:65:7a:c0:c9:e7:69:f1:26:b7:54:9b:6b:10: 9c:9d:b1:78:8f:dd:76:4f:f9:d6:e0:53:64:bf:4b: 10:7b:16:be:20:b7:e4:19:27:b2:ef:ac:38:bf:53: 2f:3f:60:4f:54:f5:20:0d:ec:ed:1f:72:4d:6f:ee: df:84:e0:40:b3:c9:8b:72:49:db:3f:79:f8:65:b5: 06:8e:23:65:ce:0f:f2:59:5e:4c:e2:48:c8:b3:bf: 3d:f8:7a:87:7d:79:43:d9:47:18:86:6e:5e:32:77: 79:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:10:85:5F:09:07:7D:CD:5C:B5:2D:B6:C7:9C:34:DD:1C:B4:1B:73 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d6:9d:2a:95:e2:d3:ce:04:21:9a:e3:1d:38:92:27:b0:77: 26:69:21:06:19:a1:f6:dd:c9:9c:f6:d1:a8:dc:62:50:c0:f8: 79:ea:a6:3a:37:37:33:b3:69:60:2c:85:8b:83:26:a5:3f:3c: 7b:d1:89:cf:18:db:9c:8b:16:90:c1:db:ae:0f:99:c1:c2:87: 0c:d0:77:14:02:3d:27:bc:1d:57:5b:99:85:6e:19:ce:0b:bf: b5:9d:f2:07:65:5e:0e:18:5e:f3:a3:38:05:02:fd:4e:8a:d3: c7:87:06:20:ba:2f:85:9b:a2:5c:57:e3:f2:74:f0:1a:7e:93: a2:32:bc:73:f4:b4:3e:0d:a4:51:83:24:38:e1:86:3b:8d:d8: 03:27:ab:84:12:e5:35:29:88:26:7c:80:52:72:92:cc:c1:32: 0c:72:db:1c:99:b0:d4:5e:0f:29:0f:7e:97:c5:9f:cd:de:f5: df:16:51:af:02:e8:a1:4b:10:c0:87:4d:6a:11:90:b7:e3:fb: ba:31:cb:9e:5d:bb:ee:d2:e7:49:7d:6b:b5:01:8f:6b:b4:f9: 42:73:28:87:25:28:62:00:e4:ee:ec:f3:67:94:56:5d:cb:68: a7:23:1b:6c:09:62:96:3f:eb:1a:9e:3a:00:c9:09:1a:80:73: ae:23:03:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUxMjE5MDExMTAzWhcNMjUxMjI2MDExMTAzWjAYMRYwFAYD VQQDDA02OTQ0YTYyOC02OWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsrmm8zn3IZzy5JP5VEGeoroZ5Xu2l34cWv3Uvq5mgvVzXNj6kJukXLyM9Go inTnNfRq2vAXLes+nVouUtolj0XaarHbYqCyLdTjEPcbG4DbgbRBr6m44ThMSsGX 1liU5ekJW4oNS4hsvpaT+yCJXwXwdjFbweI1ZPja/mZ3aLy/lFFjX4J8hqNjWt0a L+tXCl6U9jCQOmV6wMnnafEmt1SbaxCcnbF4j912T/nW4FNkv0sQexa+ILfkGSey 76w4v1MvP2BPVPUgDeztH3JNb+7fhOBAs8mLcknbP3n4ZbUGjiNlzg/yWV5M4kjI s789+HqHfXlD2UcYhm5eMnd5hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkQhV8J B33NXLUttsecNN0ctBtzMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW1p0qleLTzgQhmuMdOJInsHcmaSEGGaH23cmc9tGo3GJQwPh56qY6 Nzczs2lgLIWLgyalPzx70YnPGNucixaQwduuD5nBwocM0HcUAj0nvB1XW5mFbhnO C7+1nfIHZV4OGF7zozgFAv1OitPHhwYgui+Fm6JcV+PydPAafpOiMrxz9LQ+DaRR gyQ44YY7jdgDJ6uEEuU1KYgmfIBScpLMwTIMctscmbDUXg8pD36XxZ/N3vXfFlGv AuihSxDAh01qEZC34/u6McueXbvu0udJfWu1AY9rtPlCcyiHJShiAOTu7PNnlFZd y2inIxtsCWKWP+sanjoAyQkagHOuIwPJ -----END CERTIFICATE-----Generated at Sat Dec 20 09:35:39 2025 by rpki-client