This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: IVmXmGw8tc09UAQua2LoKRHOcKQ3ImS+aZrrdTINkTU= Subject key identifier: 4A:77:18:12:57:43:54:4C:A7:96:2E:6B:2D:CC:25:8E:E2:31:5F:6C Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0AE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0AD1 Signing time: Thu 18 Dec 2025 19:03:51 +0000 Manifest this update: Thu 18 Dec 2025 19:03:51 +0000 Manifest next update: Thu 25 Dec 2025 19:03:51 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: V2VKp9kWFg4E43iqS7TKZAQgjzuZk8uogOv89kM0dM0=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: z5ES9QnxCtUmMGb5rTePskEShI6wqlkuHRSuLJa+HEo=) 3: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: QgJRfFH6YN7lRNZNVoON5AcD6zI0xlKC/pPKsOyjCXg=) 4: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2790 (0xae6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Dec 18 19:03:51 2025 GMT Not After : Dec 25 19:03:51 2025 GMT Subject: CN=69445017-593a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:24:05:b3:6c:be:d6:12:9e:cf:19:31:f4: a5:63:68:af:72:4e:1a:07:d3:93:6d:8c:9a:4f:8b: db:5d:ab:32:c8:97:20:83:7e:cb:6d:e1:38:89:9a: 50:ef:1a:b4:b7:10:fe:ed:83:0d:3d:5c:44:e3:86: 92:c8:7c:90:63:14:43:30:f6:60:ed:34:17:66:86: 4c:c3:d5:1e:84:53:d9:32:1b:b0:93:8b:34:5b:0c: 0c:3a:77:ef:0c:da:f6:95:f4:b9:c8:70:32:3f:33: 70:90:4b:d8:4f:e3:ce:2c:d2:6d:6f:88:da:4e:5a: da:78:5d:5a:a8:9a:ed:3c:88:25:1b:5f:30:b5:90: d1:c9:db:20:85:45:92:9c:81:9d:fd:c3:99:3e:5a: f1:2e:8d:fd:c3:93:03:fe:c0:95:0e:eb:27:87:9b: 40:ce:f8:09:4e:42:d4:d7:5c:b2:77:cc:c9:e0:00: 81:9e:8e:66:5d:cc:7b:74:92:df:7e:46:d1:3a:80: 99:47:5d:36:e3:e4:57:59:e3:f8:6c:b5:97:6e:9d: d8:0a:5b:51:f8:bc:10:2b:b0:34:ba:fe:25:a2:04: 17:f4:75:de:eb:8d:3f:78:8d:dc:86:0a:05:9f:71: 94:68:62:8c:46:0e:f4:a3:40:29:35:54:f6:fc:6b: 99:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:77:18:12:57:43:54:4C:A7:96:2E:6B:2D:CC:25:8E:E2:31:5F:6C X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:12:e4:a5:54:15:e6:5b:bc:9b:62:7a:d3:87:aa:72:49:1a: a3:8e:d6:f3:6e:ca:b3:63:bf:35:22:f9:3e:7c:0e:7f:7e:e7: 46:34:d9:a8:8d:5b:36:fc:58:1c:0f:cc:04:6e:ff:6e:ec:3a: 10:51:aa:ec:e1:70:12:f4:15:17:f5:99:3a:7c:3c:9a:b1:a6: 8b:a8:31:2f:ca:72:9b:10:f9:f6:54:12:95:a9:8d:7e:51:21: 37:dc:16:07:8a:ce:0c:ad:04:68:9c:29:40:2b:98:ff:f7:d2: 97:40:18:fa:95:cf:73:2a:dc:9d:64:e6:07:0f:54:14:14:c5: 78:6a:4d:99:d6:c4:18:1c:ed:57:e3:99:38:39:d9:3d:04:16: bb:cf:b5:81:8c:4b:9d:ce:47:06:aa:28:4d:fd:85:4f:0c:c9: d4:16:30:d4:6e:15:ff:c1:fd:30:cc:9e:2b:b6:39:78:98:01: 32:62:ed:82:ce:f2:2f:6d:93:ac:08:14:1c:34:d7:96:a5:11: 73:0b:ac:a1:39:3c:54:11:83:0d:c6:e1:c4:1a:08:b0:18:43: b2:19:f0:11:12:18:70:04:ac:74:81:61:f1:e6:0b:76:12:4a: 1e:f2:aa:24:b3:4b:f4:bb:af:15:87:8e:86:d8:ea:5e:b6:62: 7d:df:8e:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjUxMjE4MTkwMzUxWhcNMjUxMjI1MTkwMzUxWjAYMRYwFAYD VQQDDA02OTQ0NTAxNy01OTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr0kBbNsvtYSns8ZMfSlY2ivck4aB9OTbYyaT4vbXasyyJcgg37LbeE4iZpQ 7xq0txD+7YMNPVxE44aSyHyQYxRDMPZg7TQXZoZMw9UehFPZMhuwk4s0WwwMOnfv DNr2lfS5yHAyPzNwkEvYT+POLNJtb4jaTlraeF1aqJrtPIglG18wtZDRydsghUWS nIGd/cOZPlrxLo39w5MD/sCVDusnh5tAzvgJTkLU11yyd8zJ4ACBno5mXcx7dJLf fkbROoCZR1024+RXWeP4bLWXbp3YCltR+LwQK7A0uv4logQX9HXe640/eI3chgoF n3GUaGKMRg70o0ApNVT2/GuZxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp3GBJX Q1RMp5Yuay3MJY7iMV9sMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzEuSlVBXmW7ybYnrTh6pySRqjjtbzbsqzY781Ivk+fA5/fudGNNmo jVs2/FgcD8wEbv9u7DoQUars4XAS9BUX9Zk6fDyasaaLqDEvynKbEPn2VBKVqY1+ USE33BYHis4MrQRonClAK5j/99KXQBj6lc9zKtydZOYHD1QUFMV4ak2Z1sQYHO1X 45k4Odk9BBa7z7WBjEudzkcGqihN/YVPDMnUFjDUbhX/wf0wzJ4rtjl4mAEyYu2C zvIvbZOsCBQcNNeWpRFzC6yhOTxUEYMNxuHEGgiwGEOyGfAREhhwBKx0gWHx5gt2 Ekoe8qoks0v0u68Vh46G2OpetmJ9344H -----END CERTIFICATE-----Generated at Fri Dec 19 22:00:24 2025 by rpki-client