This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json) Hash identifier: DH+lOyMbMpZCTz2w/OgFH7GcfK+hn7wJ+y6W5r+RRQo= Subject key identifier: 89:B9:5F:50:34:3B:A1:99:EE:CB:D5:CA:FA:9F:B1:44:C3:A2:1F:97 Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 09C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft Manifest number: 09B8 Signing time: Mon 22 Dec 2025 19:23:04 +0000 Manifest this update: Mon 22 Dec 2025 19:23:03 +0000 Manifest next update: Mon 29 Dec 2025 19:23:03 +0000 Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: hm4fKanXBBckY7bmTWXvLSR9zAE6JQA5rdi4RiW3LJg=) 2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: DaSUtI7cCFZVDFGMxaMRlNVdC4PaCp9TfzAzL8z3Ug0=) 3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: bvQWUn/Y7cckd5n8bfNYd/nHmrLV3J+fhc4s5WO5wQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: Dec 22 19:23:03 2025 GMT Not After : Dec 29 19:23:03 2025 GMT Subject: CN=69499a98-aac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:fd:21:1c:18:19:e7:9b:7a:51:74:8c:77: e2:c7:0e:d7:df:d5:e1:8c:04:1b:11:f8:c0:60:0d: ba:58:53:20:7e:c2:74:93:1e:b3:66:4f:ad:91:89: be:dc:4b:32:0f:37:7f:7a:3f:72:a0:0b:7c:7e:16: 6a:c5:b3:12:a0:a4:5c:36:74:c9:9f:9e:31:97:ff: 96:49:3e:73:c5:42:ec:23:3d:9d:ad:df:fb:c1:41: c6:89:93:60:ac:2f:8d:56:3f:05:58:9a:32:68:7e: 79:8f:0f:30:35:4e:6a:63:fc:96:89:a7:07:90:63: cd:c6:07:1b:0b:30:93:79:cb:53:19:e4:06:27:50: a3:b9:63:7c:60:53:87:29:33:49:a9:0e:cb:f1:39: d0:41:6f:36:70:ab:af:49:5f:39:d9:60:f7:e7:cc: 8d:d5:1a:1c:0e:1e:6b:8f:eb:c4:ba:81:be:67:c2: 0a:0f:25:1b:67:45:a7:b9:68:7f:0f:da:e5:b3:00: 8a:b5:c9:db:80:24:9e:6f:45:0c:38:3e:a5:48:60: ec:fd:27:95:1e:a9:68:63:8b:5d:27:cd:ae:c9:26: 03:dc:89:d9:1f:2e:24:cc:c8:8d:67:51:fd:56:af: 72:4f:38:75:53:0c:89:9c:64:c5:09:ee:75:72:8e: af:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:5F:50:34:3B:A1:99:EE:CB:D5:CA:FA:9F:B1:44:C3:A2:1F:97 X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:af:6d:29:99:22:61:8e:ae:f5:19:1d:90:ba:5f:bb:f6:b3: 1d:85:55:7a:1c:44:5d:b2:7d:7b:c4:dc:d5:78:80:ff:90:96: 3c:1c:9a:a8:6b:94:41:33:e0:ed:83:9d:bc:ab:86:ab:0e:b9: 9a:41:c2:a4:f8:64:05:aa:e1:f2:c8:f1:e6:68:85:90:04:95: 1b:d8:9a:43:68:0b:b8:9a:e9:1c:85:0e:95:3f:64:c7:fc:d2: f5:ea:98:e9:9e:85:74:7c:89:08:f3:8d:65:ef:e1:08:a4:12: c9:a7:f5:ed:0a:eb:49:a8:da:fe:d1:2c:a3:d9:7d:24:e7:a5: 8e:94:13:b5:9c:59:0c:dd:e0:c3:03:d0:eb:f0:e7:e9:47:34: af:6a:e3:fc:02:2d:c1:f3:c5:94:82:1c:2f:b2:66:fc:ec:0b: 9a:74:d1:e8:2e:35:90:a8:19:0a:65:6a:29:68:e3:89:ec:57: 59:d2:3c:a2:94:a4:fd:31:3a:66:d2:53:a5:58:57:21:be:1b: 56:cc:b8:01:ac:ee:5a:36:9e:df:dc:e3:b1:2e:8d:a1:a6:66: 42:59:be:94:65:ef:40:ab:42:9a:9e:16:b1:e1:49:b6:18:72: c7:7a:a8:fd:45:e3:86:e3:3f:ec:72:97:23:17:9f:b0:1f:58: c5:a6:56:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjUxMjIyMTkyMzAzWhcNMjUxMjI5MTkyMzAzWjAYMRYwFAYD VQQDDA02OTQ5OWE5OC1hYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5P9IRwYGeebelF0jHfixw7X39XhjAQbEfjAYA26WFMgfsJ0kx6zZk+tkYm+ 3EsyDzd/ej9yoAt8fhZqxbMSoKRcNnTJn54xl/+WST5zxULsIz2drd/7wUHGiZNg rC+NVj8FWJoyaH55jw8wNU5qY/yWiacHkGPNxgcbCzCTectTGeQGJ1CjuWN8YFOH KTNJqQ7L8TnQQW82cKuvSV852WD358yN1RocDh5rj+vEuoG+Z8IKDyUbZ0WnuWh/ D9rlswCKtcnbgCSeb0UMOD6lSGDs/SeVHqloY4tdJ82uySYD3InZHy4kzMiNZ1H9 Vq9yTzh1UwyJnGTFCe51co6vSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIm5X1A0 O6GZ7svVyvqfsUTDoh+XMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDdFRi84QTI5MTA0Njk5MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNI SWRmNFQzVE5Cd3QxWTVBQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByr20pmSJhjq71GR2Qul+79rMdhVV6HERdsn17xNzVeID/kJY8HJqo a5RBM+Dtg528q4arDrmaQcKk+GQFquHyyPHmaIWQBJUb2JpDaAu4mukchQ6VP2TH /NL16pjpnoV0fIkI841l7+EIpBLJp/XtCutJqNr+0Syj2X0k56WOlBO1nFkM3eDD A9Dr8OfpRzSvauP8Ai3B88WUghwvsmb87AuadNHoLjWQqBkKZWopaOOJ7FdZ0jyi lKT9MTpm0lOlWFchvhtWzLgBrO5aNp7f3OOxLo2hpmZCWb6UZe9Aq0Kanhax4Um2 GHLHeqj9ReOG4z/scpcjF5+wH1jFplae -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:15 2025 by rpki-client