This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: 7Dd/ByNUc9nRlvNFix5KDrYF58ETNFiXjQqFDypMTHg= Subject key identifier: 4D:38:53:F6:00:BA:BE:E3:D6:3A:B3:CB:1F:65:1C:49:BB:79:13:C9 Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: E5 Signing time: Sun 21 Dec 2025 04:39:34 +0000 Manifest this update: Sun 21 Dec 2025 04:39:33 +0000 Manifest next update: Sun 28 Dec 2025 04:39:33 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: F4vZdOarroTfgjYCtzcvIVCkSZlnwalCEL/GXD7QgA0=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: O9nKEzsIg8iTnq15uYPpBmDYVXzOQZhOb1T4OSAGQ9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632 Validity Not Before: Dec 21 04:39:33 2025 GMT Not After : Dec 28 04:39:33 2025 GMT Subject: CN=69477a06-2aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:89:06:09:46:25:c0:d1:98:c5:87:c0:37:07: da:d0:0e:c9:ad:21:8c:f7:51:ff:67:64:b0:df:bd: d7:5c:32:86:0a:21:b1:2d:30:da:87:f1:77:f0:fc: 35:4d:10:6e:59:bc:a5:5a:e6:46:bb:5b:a1:01:a4: 99:70:a1:b0:1f:b4:a9:87:32:60:bd:d4:41:bd:f5: c4:d8:2b:02:26:56:f8:9e:47:c5:0c:79:9c:3c:0e: 6a:a0:04:40:cb:5d:1f:a3:ef:72:be:9c:4f:4e:dd: 5a:09:37:24:db:25:61:09:97:a4:14:51:7a:72:3c: 80:b7:b2:74:d9:28:3f:8a:5d:90:5e:77:40:56:fd: 33:e7:22:b8:08:0a:7b:e7:84:11:40:ff:67:2a:d8: 7b:68:a2:93:5f:c6:97:33:c0:34:0a:20:c4:a3:d5: cf:e7:d1:94:70:1f:b3:d9:a6:38:7e:ab:e8:dd:18: 70:7f:bf:52:23:3b:8c:c0:db:31:a2:d7:ca:f5:65: 64:58:1c:56:0f:b9:be:d8:a6:da:75:80:62:fc:c7: cc:8b:49:a9:c2:08:b0:e8:66:f7:c4:ee:24:cf:82: e9:54:a1:72:b6:0a:c0:1d:62:bb:68:20:68:8e:90: 91:ec:26:84:24:f5:5f:0b:86:5c:36:2f:83:77:24: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:38:53:F6:00:BA:BE:E3:D6:3A:B3:CB:1F:65:1C:49:BB:79:13:C9 X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:43:7a:56:13:40:d1:d1:8a:5e:4c:5f:32:a6:ce:63:1b:2e: c1:4f:b4:51:02:27:8e:fa:0a:65:8e:81:d3:a7:24:56:f9:27: ff:0b:10:ca:f8:12:fc:92:e4:95:fe:7e:6a:54:45:dc:a4:ba: ad:52:a1:6d:0e:e5:19:82:06:27:b5:ab:9d:d4:40:80:b9:5e: be:f4:1c:6f:5e:8d:6d:d5:cc:7e:c8:bb:ed:b1:8b:93:7b:d9: d2:74:a8:10:87:92:d9:ae:45:f0:b0:e3:69:9f:8b:24:89:30: 86:f8:65:e9:a6:bd:f6:db:c0:1c:a2:bd:6e:7a:33:53:0e:21: 2f:56:f4:e8:7f:dc:b8:24:01:38:90:9d:7c:13:50:a0:70:56: 72:d2:7b:1f:ee:e6:f0:4a:4c:e9:b1:40:91:b8:e2:1a:92:36: 4f:10:33:fb:66:75:34:61:27:30:d3:b5:c8:3a:48:03:1a:3c: 06:11:98:38:15:33:65:39:a1:23:24:b8:56:e3:5c:b7:84:b9: 0c:51:8e:fd:f9:1d:a6:8b:bf:f9:38:c6:14:f8:52:97:ae:3f: 03:74:9c:4b:70:4f:30:9d:27:66:7c:cc:cb:66:6f:21:be:2f: e6:7c:45:dd:68:38:a3:bf:b8:5b:dc:bc:36:83:4e:c7:eb:bb: 58:db:94:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0NBOTIxMTAvBgNVBAUTKDZBNDU4QUIwRkM1NjI4MjkzMzE4M0Q0NjgwNTFCRkM1 MDc5MTE2MzIwHhcNMjUxMjIxMDQzOTMzWhcNMjUxMjI4MDQzOTMzWjAYMRYwFAYD VQQDDA02OTQ3N2EwNi0yYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7IkGCUYlwNGYxYfANwfa0A7JrSGM91H/Z2Sw373XXDKGCiGxLTDah/F38Pw1 TRBuWbylWuZGu1uhAaSZcKGwH7SphzJgvdRBvfXE2CsCJlb4nkfFDHmcPA5qoARA y10fo+9yvpxPTt1aCTck2yVhCZekFFF6cjyAt7J02Sg/il2QXndAVv0z5yK4CAp7 54QRQP9nKth7aKKTX8aXM8A0CiDEo9XP59GUcB+z2aY4fqvo3Rhwf79SIzuMwNsx otfK9WVkWBxWD7m+2KbadYBi/MfMi0mpwgiw6Gb3xO4kz4LpVKFytgrAHWK7aCBo jpCR7CaEJPVfC4ZcNi+DdyQQpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE04U/YA ur7j1jqzyx9lHEm7eRPJMB8GA1UdIwQYMBaAFGpFirD8VigpMxg9RoBRv8UHkRYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0E5Mi85OTlFOEVBQzg3 QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tDa3pHRDFHZ0ZHX3hRZVJG akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0E5Mi85OTlFOEVBQzg3QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tD a3pHRDFHZ0ZHX3hRZVJGakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfQ3pWE0DR0YpeTF8yps5jGy7BT7RRAieO+gpljoHTpyRW+Sf/CxDK +BL8kuSV/n5qVEXcpLqtUqFtDuUZggYntaud1ECAuV6+9BxvXo1t1cx+yLvtsYuT e9nSdKgQh5LZrkXwsONpn4skiTCG+GXppr3228Acor1uejNTDiEvVvTof9y4JAE4 kJ18E1CgcFZy0nsf7ubwSkzpsUCRuOIakjZPEDP7ZnU0YScw07XIOkgDGjwGEZg4 FTNlOaEjJLhW41y3hLkMUY79+R2mi7/5OMYU+FKXrj8DdJxLcE8wnSdmfMzLZm8h vi/mfEXdaDijv7hb3Lw2g07H67tY25RN -----END CERTIFICATE-----Generated at Sun Dec 21 08:40:34 2025 by rpki-client