This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json) Hash identifier: E01PqzC3Lxp9hhxPBqzB6xw7vfEBx23MSHr89iyGUow= Subject key identifier: A2:49:51:A8:98:16:56:7E:A8:D0:60:9A:C3:59:C5:63:B9:C0:0C:8D Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft Manifest number: 17 Signing time: Thu 18 Dec 2025 14:43:41 +0000 Manifest this update: Thu 18 Dec 2025 14:43:41 +0000 Manifest next update: Thu 25 Dec 2025 14:43:41 +0000 Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: fTAR1kUFBrPvJft5HtFqnPfxu7SVt+yKerTw1ye/hLc=) 2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: ZnOlNoLSibfq3/qIsrDbM5RZVyIuk7cWs+48nm4czSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Dec 18 14:43:41 2025 GMT Not After : Dec 25 14:43:41 2025 GMT Subject: CN=6944131d-1785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c5:c3:35:da:70:d7:fa:c3:b7:99:a4:54:ad: e8:7d:91:e1:58:03:be:de:3a:ad:1f:15:4c:53:1d: 94:df:9c:af:6e:ed:bb:7c:40:a7:cd:e3:06:76:c8: 7e:10:ff:da:59:21:60:72:f9:da:a4:44:e6:9f:54: b3:00:d1:eb:f5:06:34:85:1b:e1:42:ed:fc:2f:4b: ff:62:51:d5:65:1f:58:fe:05:6a:d0:9f:7c:b1:65: 5a:7b:44:1c:8f:3b:10:3a:5b:92:7b:2b:22:4b:23: 2f:33:eb:03:c7:ed:e1:39:c4:50:58:5a:22:0a:4e: ce:a2:aa:9d:cd:16:09:fe:e5:0c:c1:14:9b:70:a0: 11:17:c2:55:43:49:85:50:40:70:7e:a8:83:ac:42: 06:89:96:83:40:53:52:b0:42:60:0f:fe:c9:24:f2: 16:d1:df:d3:b6:1b:ef:ca:21:77:e9:30:16:af:99: e0:2e:af:1d:50:23:fa:91:f2:ed:d3:36:ba:8a:85: 20:53:9d:ae:01:f0:dc:48:df:a8:f4:48:59:2f:43: ad:35:63:0f:5c:44:27:c2:6f:8a:62:87:72:64:72: 07:b2:11:b3:b3:54:4f:24:00:ab:14:6c:09:e3:8c: 6c:ed:f3:27:29:21:55:40:d3:01:2b:10:63:c7:85: dd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:49:51:A8:98:16:56:7E:A8:D0:60:9A:C3:59:C5:63:B9:C0:0C:8D X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cf:31:55:45:2f:df:e5:b1:62:44:04:30:0c:33:80:82:c7: c0:7c:3a:f4:49:9a:87:b8:56:c4:6f:0b:c0:1c:5c:ea:19:4e: 1c:12:c4:2d:0a:df:7e:5a:a7:0f:53:11:2a:99:19:99:a8:37: d7:f3:38:3e:85:00:7a:6f:93:f5:4f:74:9e:88:6c:be:51:ff: 41:b4:78:1a:89:7c:3a:24:33:3e:7e:ba:48:a0:cd:6c:7f:da: 72:6a:9b:7e:06:36:e8:74:f4:46:ab:7d:c5:44:15:2c:32:65: 28:cb:e6:d7:9a:45:16:fb:9d:75:ba:42:0b:ee:3d:11:e6:46: 18:d4:c6:7e:55:71:e9:95:80:e0:32:3a:90:47:95:4d:78:99: 35:f6:e6:79:02:d0:9e:1b:a3:d4:48:33:4d:50:96:3a:bb:10: b9:27:ae:94:cb:d8:36:68:3f:aa:9c:97:36:a7:8e:cf:cb:c0: b4:e9:a8:82:8d:b1:65:78:3c:64:bd:e2:dc:77:78:f4:87:04: 3c:a7:d1:cd:78:6c:5a:4d:c5:6e:7c:01:d2:8f:63:a1:ef:56: 31:ad:1f:de:4d:92:58:2d:8f:c5:cc:6e:85:e2:de:d6:03:3d: cb:91:1c:12:dc:ce:81:ee:4c:ad:a2:f0:ec:74:15:22:c9:31: 97:18:d2:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0FFODExMC8GA1UEBRMoNjg0NTk3RTk5OEEzQTBDNjk4NzM2MUI3QzU3MjA0M0E4 MTZDMUM1MjAeFw0yNTEyMTgxNDQzNDFaFw0yNTEyMjUxNDQzNDFaMBgxFjAUBgNV BAMMDTY5NDQxMzFkLTE3ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5xcM12nDX+sO3maRUreh9keFYA77eOq0fFUxTHZTfnK9u7bt8QKfN4wZ2yH4Q /9pZIWBy+dqkROafVLMA0ev1BjSFG+FC7fwvS/9iUdVlH1j+BWrQn3yxZVp7RByP OxA6W5J7KyJLIy8z6wPH7eE5xFBYWiIKTs6iqp3NFgn+5QzBFJtwoBEXwlVDSYVQ QHB+qIOsQgaJloNAU1KwQmAP/skk8hbR39O2G+/KIXfpMBavmeAurx1QI/qR8u3T NrqKhSBTna4B8NxI36j0SFkvQ601Yw9cRCfCb4pih3JkcgeyEbOzVE8kAKsUbAnj jGzt8ycpIVVA0wErEGPHhd1jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoklRqJgW Vn6o0GCaw1nFY7nADI0wHwYDVR0jBBgwFoAUaEWX6ZijoMaYc2G3xXIEOoFsHFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQUU4LzNGN0UyNTc0QkUw NzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVXWDZaaWpvTWFZYzJHM3hYSUVPb0ZzSEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QUU4LzNGN0UyNTc0QkUwNzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01h WWMyRzN4WElFT29Gc0hGSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGrPMVVFL9/lsWJEBDAMM4CCx8B8OvRJmoe4VsRvC8AcXOoZThwSxC0K 335apw9TESqZGZmoN9fzOD6FAHpvk/VPdJ6IbL5R/0G0eBqJfDokMz5+ukigzWx/ 2nJqm34GNuh09EarfcVEFSwyZSjL5teaRRb7nXW6QgvuPRHmRhjUxn5VcemVgOAy OpBHlU14mTX25nkC0J4bo9RIM01Qljq7ELknrpTL2DZoP6qclzanjs/LwLTpqIKN sWV4PGS94tx3ePSHBDyn0c14bFpNxW58AdKPY6HvVjGtH95Nklgtj8XMboXi3tYD PcuRHBLczoHuTK2i8Ox0FSLJMZcY0gk= -----END CERTIFICATE-----Generated at Sat Dec 20 00:34:44 2025 by rpki-client