This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft File: lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json) Hash identifier: Aa8kZR9eqTRQUXya8t+RTpkWCt4HWtvVj3HQkP8De6A= Subject key identifier: B3:B5:A1:22:EF:7D:A9:D7:35:AF:5F:D0:6F:C8:5C:4F:5F:92:9C:AD Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 Certificate issuer: /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft Manifest number: A7 Signing time: Fri 19 Dec 2025 05:19:33 +0000 Manifest this update: Fri 19 Dec 2025 05:19:33 +0000 Manifest next update: Fri 26 Dec 2025 05:19:33 +0000 Files and hashes: 1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: WjZtZF6APFXvpVn9iTFRsFzo6BxyhK35BYIYvcylMSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Validity Not Before: Dec 19 05:19:33 2025 GMT Not After : Dec 26 05:19:33 2025 GMT Subject: CN=6944e065-de5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:df:98:4b:b4:f3:0e:a5:63:b0:c8:1f:36: 5a:3c:45:81:74:64:06:6a:a0:08:c6:7e:64:48:a8: 65:2e:26:87:50:67:a9:11:d7:f4:9f:f7:e1:97:e8: e3:8a:fd:5b:cf:ad:48:3e:ba:0b:74:60:e4:af:90: 91:23:a0:d5:d2:51:5d:fd:3e:85:e2:db:0c:57:29: e9:fb:78:29:08:50:88:48:77:97:cc:b5:aa:5a:f5: c3:5e:09:b4:08:92:7b:53:d6:71:0b:ab:cc:15:8e: 4a:79:71:9f:21:9a:75:7e:ff:43:fe:84:d3:90:65: e1:92:a6:a0:88:7d:b8:80:b1:1d:31:a2:26:18:6e: 7e:17:b3:46:06:8f:e8:ac:90:4c:89:17:4b:2a:ae: 27:00:ff:8b:fa:96:2f:ba:d9:c9:c3:3f:ae:41:3f: aa:42:99:02:a8:63:2c:70:a9:c5:2c:be:08:1a:ac: 86:cf:49:c6:65:14:97:3a:ae:34:ed:25:b6:a2:c6: 42:0f:e2:60:51:3a:bc:be:4a:62:a4:c0:6e:5b:1e: c5:72:49:6e:03:78:12:cb:2d:d3:5a:b9:24:9e:24: 87:d5:8b:3e:6a:53:d1:11:14:af:1a:df:ba:73:72: e4:87:b6:f1:50:12:de:87:bd:48:20:89:4a:8a:e9: 32:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B5:A1:22:EF:7D:A9:D7:35:AF:5F:D0:6F:C8:5C:4F:5F:92:9C:AD X509v3 Authority Key Identifier: keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c8:62:f7:2f:31:5c:82:08:48:02:c4:20:da:15:b5:62:86: 00:ef:34:8c:38:ff:05:9f:43:81:6a:2c:29:16:bc:ab:16:f7: 3e:4e:0d:f5:db:7d:c7:95:3a:91:1b:fe:79:50:09:bb:32:f7: 0b:7d:85:1a:c2:8a:9b:0f:84:10:78:6b:05:57:02:17:98:cf: 2d:76:6c:84:05:c4:2d:b6:e5:1d:6a:9a:22:02:b5:fc:b7:f0: 24:7c:54:aa:0a:97:bc:f4:d7:3d:e3:61:1b:46:52:92:ee:94: 0c:d1:6f:85:d3:26:27:bf:bd:d6:1b:b8:19:60:77:1e:e4:a9: 27:b8:5f:ca:3a:9f:e6:00:2c:98:00:ea:f3:70:ea:ab:86:69: fe:e2:a4:10:b7:71:ab:49:a0:e9:f5:eb:9d:de:ea:cb:40:c9: 43:2a:87:21:09:93:c3:22:4a:97:3b:01:72:dc:52:0c:ce:9c: 9a:4a:5e:00:7c:4d:0a:97:41:ef:99:1d:00:f6:e8:bc:3d:d8: db:a4:7f:f9:8a:a0:87:64:37:35:65:a8:00:6c:d1:a6:d4:99: cd:07:b1:14:93:5d:71:17:07:36:08:99:96:ed:78:9d:c5:1d: 82:c4:2b:73:d3:ae:d5:0f:a0:6a:46:59:5b:df:5d:dc:41:e4: 56:f8:3f:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGNjgxMTAvBgNVBAUTKDk0MDhBMjAxRjAwRTU4RkU5MjU5OEVFMDM5MzkwNzhC QUVGNzc3OTUwHhcNMjUxMjE5MDUxOTMzWhcNMjUxMjI2MDUxOTMzWjAYMRYwFAYD VQQDDA02OTQ0ZTA2NS1kZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkXfmEu08w6lY7DIHzZaPEWBdGQGaqAIxn5kSKhlLiaHUGepEdf0n/fhl+jj iv1bz61IProLdGDkr5CRI6DV0lFd/T6F4tsMVynp+3gpCFCISHeXzLWqWvXDXgm0 CJJ7U9ZxC6vMFY5KeXGfIZp1fv9D/oTTkGXhkqagiH24gLEdMaImGG5+F7NGBo/o rJBMiRdLKq4nAP+L+pYvutnJwz+uQT+qQpkCqGMscKnFLL4IGqyGz0nGZRSXOq40 7SW2osZCD+JgUTq8vkpipMBuWx7FckluA3gSyy3TWrkkniSH1Ys+alPRERSvGt+6 c3Lkh7bxUBLeh71IIIlKiukyfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO1oSLv fanXNa9f0G/IXE9fkpytMB8GA1UdIwQYMBaAFJQIogHwDlj+klmO4Dk5B4uu93eV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC9CQTU2NUY1Q0RG MjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQNlNXWTdnT1RrSGk2NzNk NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xBaWlBZkFPV1A2U1dZN2dPVGtIaTY3M2Q1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkY2OC9CQTU2NUY1Q0RGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQ NlNXWTdnT1RrSGk2NzNkNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWyGL3LzFcgghIAsQg2hW1YoYA7zSMOP8Fn0OBaiwpFryrFvc+Tg31 233HlTqRG/55UAm7MvcLfYUawoqbD4QQeGsFVwIXmM8tdmyEBcQttuUdapoiArX8 t/AkfFSqCpe89Nc942EbRlKS7pQM0W+F0yYnv73WG7gZYHce5KknuF/KOp/mACyY AOrzcOqrhmn+4qQQt3GrSaDp9eud3urLQMlDKochCZPDIkqXOwFy3FIMzpyaSl4A fE0Kl0HvmR0A9ui8PdjbpH/5iqCHZDc1ZagAbNGm1JnNB7EUk11xFwc2CJmW7Xid xR2CxCtz067VD6BqRllb313cQeRW+D+T -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:40 2025 by rpki-client