This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: 24uymD0ZIeyN0MgJRKyZCTH/0kX4Eiuhi9xqM4y5VkI= Subject key identifier: 9B:6C:5E:5B:AE:CF:B5:5B:BD:80:68:F9:17:3F:0F:C8:DF:A7:00:26 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 023D Signing time: Tue 23 Dec 2025 01:04:27 +0000 Manifest this update: Tue 23 Dec 2025 01:04:27 +0000 Manifest next update: Tue 30 Dec 2025 01:04:27 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: 8c38UZx/NEFtsYQ9kL+/YFeTzbQx5lur+eIZ2kN1BuM=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: qmc/H0ByapLSZ1bg3nVk+PyVwmov94i2JIkcZK53qgY=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: MPJcPtDS4/T3UppAe6encPh5IY9tUXaMAMvIPt7HvEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Dec 23 01:04:27 2025 GMT Not After : Dec 30 01:04:27 2025 GMT Subject: CN=6949ea9b-cd57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:ee:03:f0:90:ff:9b:df:13:25:b9:23:7f: f1:08:39:f7:75:28:55:a3:65:42:22:70:df:fa:61: 78:f8:36:b4:9b:d1:f1:61:0f:1d:1a:f8:67:8e:24: bf:d7:6c:d8:52:20:35:a7:5c:b0:e7:98:ee:fd:92: 64:c4:9f:74:6c:8a:5a:83:3b:3a:71:13:e0:9f:e2: 89:99:57:ba:d2:34:4d:fb:6f:1b:3a:66:a2:6d:dd: 0c:31:98:47:58:b3:33:f1:16:3b:53:72:18:32:e6: 18:92:d5:6e:47:7c:ad:e9:07:bd:ec:57:df:26:4e: 08:d3:65:34:f5:a5:77:87:d7:4a:1d:a2:8b:a1:b5: 4f:0e:fc:8d:1e:d3:f8:99:29:5c:9a:80:86:8f:93: 1c:4f:96:41:6c:d6:ac:cd:b6:3e:f1:fd:f0:10:36: c0:69:ba:18:fd:60:b3:9d:29:2c:63:86:54:3b:df: 70:9b:b5:75:48:1f:1d:c8:33:3a:cb:e3:f5:c2:cf: a0:7f:ce:44:f2:44:85:e2:c3:87:7e:28:17:0a:2e: 65:fb:96:6c:89:9f:f2:02:6e:27:a1:bf:53:c0:6e: 7e:83:70:e8:d2:c8:43:2e:83:f9:6f:f8:f2:13:5f: 31:fc:f9:73:71:b1:0c:b6:dc:7a:86:b1:4c:63:0f: 0a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6C:5E:5B:AE:CF:B5:5B:BD:80:68:F9:17:3F:0F:C8:DF:A7:00:26 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:29:98:53:85:8a:39:4b:5b:70:f2:86:ea:aa:08:25:35:7d: cb:e0:5b:86:ca:5e:c4:6c:2e:09:5d:a2:3d:f1:bf:fb:a6:45: 7d:5d:88:ff:04:be:08:06:4c:90:a8:13:2c:c9:f7:dd:d2:14: 4c:3c:5b:24:51:e6:44:5f:8e:b6:e4:50:78:27:33:28:a0:25: 2b:cf:34:07:9d:7d:18:76:40:d1:34:87:12:95:43:a3:23:29: 5f:6c:d3:a5:10:c7:d6:6f:68:c7:fb:58:e7:20:4f:5d:51:4f: 57:ed:c7:57:59:53:5c:e6:2b:31:35:8c:66:d2:1a:90:fa:bf: c7:d2:15:27:4d:95:b4:cb:1b:cb:26:e8:61:56:d1:f5:3c:ff: 0f:25:1e:08:1f:30:33:ad:d6:17:f7:89:87:aa:83:41:b8:9f: 40:93:8c:43:82:13:a7:b3:32:b1:77:bc:bd:1c:b8:fe:b0:08: 67:e4:7c:14:97:fd:9e:31:f6:32:02:89:78:12:83:d2:ac:6f: d7:5d:ba:f6:63:27:9d:8d:53:01:d9:46:d8:22:7a:d7:ee:47: 35:c4:e4:1a:66:15:3a:44:26:d0:b0:e2:0a:a0:7b:27:ec:55: c8:ae:70:fc:91:cd:8d:95:09:f0:a1:54:d4:f0:61:fd:1c:66: 88:e8:dd:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUxMjIzMDEwNDI3WhcNMjUxMjMwMDEwNDI3WjAYMRYwFAYD VQQDDA02OTQ5ZWE5Yi1jZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BvuA/CQ/5vfEyW5I3/xCDn3dShVo2VCInDf+mF4+Da0m9HxYQ8dGvhnjiS/ 12zYUiA1p1yw55ju/ZJkxJ90bIpagzs6cRPgn+KJmVe60jRN+28bOmaibd0MMZhH WLMz8RY7U3IYMuYYktVuR3yt6Qe97FffJk4I02U09aV3h9dKHaKLobVPDvyNHtP4 mSlcmoCGj5McT5ZBbNaszbY+8f3wEDbAaboY/WCznSksY4ZUO99wm7V1SB8dyDM6 y+P1ws+gf85E8kSF4sOHfigXCi5l+5ZsiZ/yAm4nob9TwG5+g3Do0shDLoP5b/jy E18x/PlzcbEMttx6hrFMYw8KpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtsXluu z7VbvYBo+Rc/D8jfpwAmMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYKZhThYo5S1tw8obqqgglNX3L4FuGyl7EbC4JXaI98b/7pkV9XYj/ BL4IBkyQqBMsyffd0hRMPFskUeZEX4625FB4JzMooCUrzzQHnX0YdkDRNIcSlUOj IylfbNOlEMfWb2jH+1jnIE9dUU9X7cdXWVNc5isxNYxm0hqQ+r/H0hUnTZW0yxvL JuhhVtH1PP8PJR4IHzAzrdYX94mHqoNBuJ9Ak4xDghOnszKxd7y9HLj+sAhn5HwU l/2eMfYyAol4EoPSrG/XXbr2YyedjVMB2UbYInrX7kc1xOQaZhU6RCbQsOIKoHsn 7FXIrnD8kc2NlQnwoVTU8GH9HGaI6N1a -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:06 2025 by rpki-client