This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: exn6SVmLpcg2aMD42UGUgjWfHipTNo35/L8A0gWNJCg= Subject key identifier: 7B:2C:CC:A0:F6:7A:E5:CB:9F:3F:6F:89:F3:C1:08:E4:D7:7D:6F:76 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 1049 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 103C Signing time: Wed 24 Dec 2025 17:09:06 +0000 Manifest this update: Wed 24 Dec 2025 17:09:06 +0000 Manifest next update: Wed 31 Dec 2025 17:09:06 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: 1GlsyAI8L7kvjwi7pGbXOvON9gGvOGafaXuwqLNjZbE=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: RkelPLg7E6uL52G5WbWQ45BxHbDDvE+59Nsvn5kHeGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4169 (0x1049) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Dec 24 17:09:06 2025 GMT Not After : Dec 31 17:09:06 2025 GMT Subject: CN=694c1e32-b936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:46:41:e4:f1:23:fa:13:57:1c:b9:1e:a8: f4:9e:ef:39:0f:b9:bc:e4:1c:1a:52:33:6c:59:6a: 1c:04:4c:88:b0:f0:d4:6b:db:eb:f6:db:51:fc:d8: 6a:9e:30:c5:3e:02:c8:f6:93:ae:8c:db:72:57:79: 1c:a8:3e:ec:94:00:4d:8a:c8:ad:60:59:aa:10:98: b0:5e:e1:a8:6f:d3:a0:e8:56:68:df:c3:aa:89:07: 4f:c3:ba:57:b3:39:41:a5:13:9e:69:d6:20:7f:52: d3:57:7a:22:5b:d7:c7:b4:6c:59:d5:08:11:40:d1: 2f:dd:e1:98:b1:58:9d:9c:80:94:bb:f4:85:2f:b6: 51:19:18:2e:1a:3c:df:00:54:38:9a:85:4b:b6:5a: a7:26:95:d2:9b:83:3d:86:86:f6:86:36:cc:00:85: 17:5a:61:fa:09:80:c7:2b:f5:38:32:1a:db:35:2f: 16:c2:42:6d:93:f8:46:07:7a:f3:3e:8b:05:6c:d7: e3:a1:09:5a:4a:38:26:0d:b5:0a:c4:51:11:e3:d4: c0:6a:44:c1:ec:06:0f:35:9e:53:0e:6f:81:7e:20: a8:73:73:94:77:3c:ef:74:0c:7c:4e:f9:90:61:b6: 62:82:35:36:c6:be:28:c8:db:5c:c9:4c:21:a8:f8: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2C:CC:A0:F6:7A:E5:CB:9F:3F:6F:89:F3:C1:08:E4:D7:7D:6F:76 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d8:d5:32:9e:36:02:01:4a:1b:42:96:33:b1:5c:cf:ce:33: 18:23:a0:5f:ef:e0:7b:29:37:9f:39:8b:8f:a5:72:f1:0d:c2: e6:4d:85:ee:d0:24:ba:74:9b:05:ab:4c:27:90:0d:be:52:92: 7a:23:19:16:78:36:bd:d5:b9:7c:b4:64:dc:61:71:90:d8:93: ba:d5:ba:e4:79:05:f4:48:7c:b8:27:da:72:0f:65:bf:9e:e7: a5:eb:ed:59:53:af:7a:39:3e:98:34:08:42:26:12:c5:79:1c: 1b:6d:95:5a:f4:3b:e6:77:1c:de:bb:fe:5a:df:04:76:b5:99: 46:ac:c8:6c:3e:b3:00:11:d6:ba:cd:7e:21:0f:9c:db:fd:22: 61:f9:9d:87:ef:dc:2a:f5:8f:5a:9f:d8:bc:e6:2e:42:d2:54: 30:a6:fd:08:75:f3:e7:38:c0:de:42:d2:88:bb:d1:02:78:12: 6f:07:3a:d1:ed:19:dc:78:8f:ab:5f:8b:25:6d:76:33:73:e0: 65:4b:f3:da:01:10:44:72:56:12:c3:97:f8:18:18:c3:96:de: 2f:c2:20:fa:85:7c:b1:70:ba:24:2a:b1:4c:8c:94:fb:65:91: bc:c9:fe:bc:65:e9:17:33:1a:89:82:e8:f8:86:11:f3:4a:d4: 9f:fd:33:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUxMjI0MTcwOTA2WhcNMjUxMjMxMTcwOTA2WjAYMRYwFAYD VQQDDA02OTRjMWUzMi1iOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpJGQeTxI/oTVxy5Hqj0nu85D7m85BwaUjNsWWocBEyIsPDUa9vr9ttR/Nhq njDFPgLI9pOujNtyV3kcqD7slABNisitYFmqEJiwXuGob9Og6FZo38OqiQdPw7pX szlBpROeadYgf1LTV3oiW9fHtGxZ1QgRQNEv3eGYsVidnICUu/SFL7ZRGRguGjzf AFQ4moVLtlqnJpXSm4M9hob2hjbMAIUXWmH6CYDHK/U4MhrbNS8WwkJtk/hGB3rz PosFbNfjoQlaSjgmDbUKxFER49TAakTB7AYPNZ5TDm+BfiCoc3OUdzzvdAx8TvmQ YbZigjU2xr4oyNtcyUwhqPjIQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsszKD2 euXLnz9vifPBCOTXfW92MB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr2NUynjYCAUobQpYzsVzPzjMYI6Bf7+B7KTefOYuPpXLxDcLmTYXu 0CS6dJsFq0wnkA2+UpJ6IxkWeDa91bl8tGTcYXGQ2JO61brkeQX0SHy4J9pyD2W/ nuel6+1ZU696OT6YNAhCJhLFeRwbbZVa9Dvmdxzeu/5a3wR2tZlGrMhsPrMAEda6 zX4hD5zb/SJh+Z2H79wq9Y9an9i85i5C0lQwpv0IdfPnOMDeQtKIu9ECeBJvBzrR 7RnceI+rX4slbXYzc+BlS/PaARBEclYSw5f4GBjDlt4vwiD6hXyxcLokKrFMjJT7 ZZG8yf68ZekXMxqJguj4hhHzStSf/TOR -----END CERTIFICATE-----Generated at Thu Dec 25 12:47:28 2025 by rpki-client