This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: YEaYLv1QHNvp1fpqWb2vhPUFab/UqpMgwRf+GlBRC10= Subject key identifier: A3:DD:98:D9:C2:41:69:88:95:CA:0A:52:7D:91:DB:41:79:63:51:2A Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 03D0 Signing time: Fri 26 Dec 2025 23:41:42 +0000 Manifest this update: Fri 26 Dec 2025 23:41:42 +0000 Manifest next update: Fri 02 Jan 2026 23:41:42 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: Dz2+e2iRiIpE8voiVoYeCO+tNdq+SoTCAQQrfLzMSeI=) 2: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: Qo8S4vnL8vk6lsjFg8E5pxu1jHSHJhkqcg0rzkOHusw=) 3: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: 2CusgDeod/GNoY/LuvI1PPosNLPCfcqPbyc433D/0Uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 23:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Dec 26 23:41:42 2025 GMT Not After : Jan 2 23:41:42 2026 GMT Subject: CN=694f1d36-e619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:4e:2c:f8:32:c9:ab:71:f7:40:16:53:5f: e4:81:11:64:42:2d:0b:5e:16:60:19:ef:eb:d2:33: bf:86:b9:6a:1e:f2:12:57:4b:51:18:55:b3:0d:ab: 99:62:31:00:2a:ae:08:53:50:5c:4b:1c:dd:22:40: 52:50:cc:93:50:f1:dd:ac:e9:dc:40:4f:b5:31:a9: b0:e5:2c:63:fa:cb:b2:7c:5f:62:aa:c1:88:d0:a4: bb:0e:39:5f:af:5e:44:4c:47:6b:fb:93:65:ad:1f: 29:38:72:65:f5:5d:72:21:05:fd:43:2f:cc:72:26: 3a:9c:fa:cc:88:41:7b:4e:05:c8:d7:dd:25:f9:89: 3d:40:54:21:04:6b:e1:f0:ed:c3:23:74:9b:a4:79: 62:69:6f:ed:12:77:bb:61:50:45:7c:bb:66:0e:8e: 65:01:48:c1:b0:31:f3:d8:23:60:81:e5:97:1a:d6: af:57:e8:75:bb:a9:81:38:d2:7b:6d:71:6d:3c:16: d9:7f:0c:2c:58:f1:4f:05:7e:a6:c6:45:7d:64:04: 3d:dc:6b:43:8d:b8:52:ba:5a:ba:37:a8:53:40:0e: 68:21:87:92:fd:e7:35:bc:21:ae:e7:44:50:14:2a: a0:cf:9b:af:ba:47:ec:a5:80:b6:2a:d0:7d:c1:bd: c1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DD:98:D9:C2:41:69:88:95:CA:0A:52:7D:91:DB:41:79:63:51:2A X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:2b:cd:15:df:3d:5c:f5:a2:fe:b1:16:7c:e3:89:23:f4:32: ad:95:4f:ac:75:97:ae:88:e0:49:8d:70:c9:7d:ad:67:9b:db: 4c:37:84:80:6c:a8:e0:c8:93:bd:70:30:12:4f:05:29:ab:64: 5a:30:41:d0:a9:c9:89:b5:52:99:0c:fb:28:90:de:59:e0:5e: 46:e1:db:0e:54:d7:bf:a6:ea:b5:08:5c:a8:04:43:4c:57:ce: 95:21:36:69:81:d0:1f:4a:0b:d8:ef:4e:95:cd:7e:4c:3b:2e: 69:45:4e:13:d1:82:b8:e9:d2:97:f6:39:4f:05:a6:6d:d2:06: 04:8a:4b:8d:95:b3:ed:f0:65:c6:8a:f4:0b:23:02:8e:42:d2: d3:51:9d:bc:34:2b:fd:d2:db:43:11:0c:83:ad:49:e8:70:30: 01:8d:2d:2a:27:2e:e0:d8:bc:57:b5:df:b4:75:01:23:57:01: d1:f5:96:79:63:d9:4e:b9:86:46:9e:7a:78:f5:3b:01:3b:11: 39:b1:c2:ea:4d:6e:a2:ff:e6:04:bc:15:37:ee:d6:5d:b4:3a: ca:2a:61:4c:d7:60:40:f9:2b:e1:ed:05:ef:4f:8a:ac:ac:6c: b9:25:56:76:5d:03:c6:7b:22:f1:fc:e3:3c:c6:dd:2d:63:ac: 90:48:48:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjUxMjI2MjM0MTQyWhcNMjYwMTAyMjM0MTQyWjAYMRYwFAYD VQQDDA02OTRmMWQzNi1lNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRZOLPgyyatx90AWU1/kgRFkQi0LXhZgGe/r0jO/hrlqHvISV0tRGFWzDauZ YjEAKq4IU1BcSxzdIkBSUMyTUPHdrOncQE+1Mamw5Sxj+suyfF9iqsGI0KS7Djlf r15ETEdr+5NlrR8pOHJl9V1yIQX9Qy/MciY6nPrMiEF7TgXI190l+Yk9QFQhBGvh 8O3DI3SbpHliaW/tEne7YVBFfLtmDo5lAUjBsDHz2CNggeWXGtavV+h1u6mBONJ7 bXFtPBbZfwwsWPFPBX6mxkV9ZAQ93GtDjbhSulq6N6hTQA5oIYeS/ec1vCGu50RQ FCqgz5uvukfspYC2KtB9wb3BvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPdmNnC QWmIlcoKUn2R20F5Y1EqMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSK80V3z1c9aL+sRZ844kj9DKtlU+sdZeuiOBJjXDJfa1nm9tMN4SA bKjgyJO9cDASTwUpq2RaMEHQqcmJtVKZDPsokN5Z4F5G4dsOVNe/puq1CFyoBENM V86VITZpgdAfSgvY706VzX5MOy5pRU4T0YK46dKX9jlPBaZt0gYEikuNlbPt8GXG ivQLIwKOQtLTUZ28NCv90ttDEQyDrUnocDABjS0qJy7g2LxXtd+0dQEjVwHR9ZZ5 Y9lOuYZGnnp49TsBOxE5scLqTW6i/+YEvBU37tZdtDrKKmFM12BA+Svh7QXvT4qs rGy5JVZ2XQPGeyLx/OM8xt0tY6yQSEjj -----END CERTIFICATE-----Generated at Sat Dec 27 07:23:32 2025 by rpki-client