This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json) Hash identifier: kUaaJ5E08vao/TkKWmJOMk3mhNGfmgd0dl8xhVYwdJQ= Subject key identifier: BB:7B:55:21:A8:99:E2:A6:F5:CE:74:8D:72:40:D0:7A:B0:47:71:1B Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft Manifest number: 0790 Signing time: Sun 28 Dec 2025 20:53:14 +0000 Manifest this update: Sun 28 Dec 2025 20:53:13 +0000 Manifest next update: Sun 04 Jan 2026 20:53:13 +0000 Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: gHEIvYKEsAfDfaUwjXQ0zGIBfe4Fm43E9oAZX7ntvvY=) 2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: FJap+RLgDx27hEKqAVGCvWdt4Kg4isquEKtc3jOhGvk=) 3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: rLm77yyO5DoBFV+guuBfejob2y9icJNI0289dxVOxYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 20:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: Dec 28 20:53:13 2025 GMT Not After : Jan 4 20:53:13 2026 GMT Subject: CN=695198b9-a911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:90:fa:84:a5:4b:0d:04:2e:d6:10:7b:8c: 12:da:7c:52:8d:9c:07:01:56:f7:1a:e8:1e:27:be: ff:12:b3:bb:08:13:19:5e:bb:54:11:47:92:f8:a0: c1:81:3f:0e:6e:51:ba:92:00:26:6b:ea:4f:5b:71: 18:46:3d:4c:3f:15:a0:87:15:ea:4b:9b:cd:5f:8b: fd:e4:70:43:14:ba:ab:31:30:a1:89:41:f2:ca:c3: d0:97:30:2a:52:2f:b5:0f:fc:54:74:f0:f2:a3:21: 9d:6e:0a:21:58:91:a6:24:18:52:9e:48:c8:6c:41: b4:00:cf:b5:d6:f8:5f:be:14:9c:18:20:61:1f:50: 3c:65:d5:a7:39:5f:c6:26:53:2b:7a:63:66:c4:4b: a4:f3:e6:85:7a:0d:17:65:04:7f:48:6b:7e:92:7e: 84:4f:f6:53:8d:66:64:40:17:99:07:62:5e:aa:01: f8:59:d3:4e:53:1c:6c:3d:95:59:5f:71:fd:6a:ec: b0:40:2c:00:90:b6:c5:8e:73:2a:f4:25:ee:1d:9e: 7f:32:d1:88:4f:fa:d1:70:25:a2:bc:52:bf:f6:48: a7:77:e7:68:bf:39:03:10:a3:27:e8:3b:5d:ab:57: 0c:73:a5:7a:bd:8b:2e:8d:8c:17:ff:97:64:ba:d7: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7B:55:21:A8:99:E2:A6:F5:CE:74:8D:72:40:D0:7A:B0:47:71:1B X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:04:55:d3:7f:88:dc:56:5b:de:54:8b:04:fe:38:b1:f2:e2: f8:9c:59:28:38:78:16:94:b7:56:b3:32:cd:3f:bb:4a:35:ff: ef:23:95:3d:fc:23:48:13:43:d6:b2:f6:c8:fc:3c:a8:db:a0: 1f:8a:6b:7f:e7:e1:c9:35:30:29:68:5a:e5:1e:a4:8e:de:57: 8d:b5:06:6d:85:60:57:23:dc:50:f9:f3:4a:20:67:d3:76:49: 89:7e:77:fa:41:89:43:16:6e:e9:ef:1b:7d:d3:58:86:b0:bb: fd:8c:1d:7c:0e:22:40:03:b2:c1:96:a3:54:84:66:f2:af:a9: a8:9a:55:0d:ca:c8:a9:67:ae:fe:da:0c:5f:41:f9:7c:df:9a: ce:7f:d2:ba:f1:de:3f:63:97:5d:03:0f:e4:e7:b2:29:f0:47: fd:69:3e:85:80:d5:ed:40:a2:ea:dd:31:d4:65:5f:0b:1e:70: d1:6e:e3:7a:56:96:6c:09:4e:c7:cf:6b:71:3b:98:71:a9:72: ac:cd:6f:99:e9:88:6b:d1:60:1d:59:ac:80:43:66:38:74:26: b0:62:97:ac:40:c4:bf:79:bc:ec:33:00:65:84:d4:78:92:61: c0:54:4a:94:f9:ee:f2:fd:1e:f9:c2:fb:d1:b5:20:f2:bf:4f: 45:95:00:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjUxMjI4MjA1MzEzWhcNMjYwMTA0MjA1MzEzWjAYMRYwFAYD VQQDDA02OTUxOThiOS1hOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApN6Q+oSlSw0ELtYQe4wS2nxSjZwHAVb3GugeJ77/ErO7CBMZXrtUEUeS+KDB gT8OblG6kgAma+pPW3EYRj1MPxWghxXqS5vNX4v95HBDFLqrMTChiUHyysPQlzAq Ui+1D/xUdPDyoyGdbgohWJGmJBhSnkjIbEG0AM+11vhfvhScGCBhH1A8ZdWnOV/G JlMremNmxEuk8+aFeg0XZQR/SGt+kn6ET/ZTjWZkQBeZB2JeqgH4WdNOUxxsPZVZ X3H9auywQCwAkLbFjnMq9CXuHZ5/MtGIT/rRcCWivFK/9kind+dovzkDEKMn6Dtd q1cMc6V6vYsujYwX/5dkutcWnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLt7VSGo meKm9c50jXJA0HqwR3EbMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK ajNuVnlUQTM2XzhybFd6OWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnBFXTf4jcVlveVIsE/jix8uL4nFkoOHgWlLdWszLNP7tKNf/vI5U9 /CNIE0PWsvbI/Dyo26Afimt/5+HJNTApaFrlHqSO3leNtQZthWBXI9xQ+fNKIGfT dkmJfnf6QYlDFm7p7xt901iGsLv9jB18DiJAA7LBlqNUhGbyr6momlUNysipZ67+ 2gxfQfl835rOf9K68d4/Y5ddAw/k57Ip8Ef9aT6FgNXtQKLq3THUZV8LHnDRbuN6 VpZsCU7Hz2txO5hxqXKszW+Z6Yhr0WAdWayAQ2Y4dCawYpesQMS/ebzsMwBlhNR4 kmHAVEqU+e7y/R75wvvRtSDyv09FlQDC -----END CERTIFICATE-----Generated at Mon Dec 29 01:54:11 2025 by rpki-client