This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: H9Ybg0RdVQ+rDvH/2DGSZG22guPbeR5/9gBRhtMGCHw= Subject key identifier: F8:35:E4:0B:6D:1C:24:E6:50:98:98:DC:E6:3E:F3:67:70:54:26:17 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 029C Signing time: Tue 23 Dec 2025 00:31:21 +0000 Manifest this update: Tue 23 Dec 2025 00:31:20 +0000 Manifest next update: Tue 30 Dec 2025 00:31:20 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: Vk97aBGAmUUzdK3Qs4FtirUcwBUGD+NJJwp2sQIUDG8=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: Hlir8kdh5R9yAKCOaYnCPJ/+dfwSE3UvINdXqQSP2fI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: Dec 23 00:31:20 2025 GMT Not After : Dec 30 00:31:20 2025 GMT Subject: CN=6949e2d8-31fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:47:ae:23:d7:f6:99:ed:2f:e4:30:42:c1:4e: ba:bc:28:a7:be:35:fc:28:fe:bf:bb:d0:b5:1a:22: 41:b6:bd:e3:5b:eb:e4:9b:18:71:0d:38:c5:68:bc: bc:eb:da:41:da:68:45:41:ee:ac:0c:a4:9e:cb:b0: 61:01:35:80:2d:86:7a:6a:96:33:8d:c3:63:d8:a3: 49:b4:dd:96:6c:c3:2a:6a:b6:46:23:5d:ec:cd:74: 29:ba:bf:0f:81:5e:d5:66:ac:39:3c:f3:4c:b8:0d: 44:c8:2c:72:4c:0c:fc:1f:90:29:4b:59:95:6c:a6: d2:1c:26:83:51:80:cd:a0:cc:46:d2:85:48:aa:e0: a8:4b:3e:de:1e:d6:f6:5e:7a:88:ab:9e:b5:bf:f2: 42:ac:e9:f3:d3:08:cf:22:fe:a2:6c:b9:ba:10:ac: 04:01:c2:47:e0:6b:29:dd:7d:a3:6e:37:ed:69:00: a6:37:39:2e:af:e3:a0:a5:0c:1d:92:fb:ca:eb:e7: 02:f9:c4:d8:be:6f:98:9c:f2:76:34:29:8c:43:62: ae:62:1d:cd:7c:f9:79:b4:ee:17:b4:69:e0:bf:f4: f8:b0:0e:16:37:8e:45:1f:db:06:fb:33:9f:e5:c9: c2:c7:98:62:45:e4:fd:70:df:d3:dd:b8:53:61:c4: 6f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:35:E4:0B:6D:1C:24:E6:50:98:98:DC:E6:3E:F3:67:70:54:26:17 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:12:b8:9a:79:db:bb:7e:6b:01:fb:5e:16:f2:af:3b:aa:18: 62:83:ea:d4:a4:d8:df:bb:c8:ef:c1:06:41:d1:a9:e2:0f:59: 61:50:a1:a6:01:c8:b3:15:1c:f4:84:e1:5a:c9:23:14:a4:18: 9f:e9:ff:fa:f8:66:a2:d5:cd:ca:e3:fe:20:2b:70:df:c8:07: db:d9:26:96:e7:da:fb:99:6c:7f:a8:1e:86:ff:66:31:21:4e: 32:e8:29:90:cc:9d:08:8a:92:24:9f:c1:d9:3d:f6:ca:3d:b0: aa:15:a8:66:af:e7:31:b2:b4:6e:a6:75:e2:3d:23:ec:da:e5: 72:17:95:46:6a:8f:56:6f:e0:ff:74:57:b0:b0:8e:ef:74:8c: 48:51:1d:a0:9a:cd:d2:58:ee:9b:74:82:47:f2:e2:3d:c0:47: 8b:01:bb:ed:d2:33:cd:d7:0e:e7:cd:04:94:15:e6:3c:c7:d1: 3f:d7:74:11:f4:f0:3b:d6:33:09:51:9a:19:8f:76:00:f9:28: f2:0f:88:c3:e6:fb:dc:cf:48:36:51:37:b4:99:aa:7a:64:74: 1b:06:69:c7:66:7b:a3:24:87:83:cd:87:40:c0:b0:21:17:48: 1c:62:cd:cf:69:8d:02:70:6f:b0:d2:16:53:c3:61:36:31:e6: 29:72:f9:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUxMjIzMDAzMTIwWhcNMjUxMjMwMDAzMTIwWjAYMRYwFAYD VQQDDA02OTQ5ZTJkOC0zMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UeuI9f2me0v5DBCwU66vCinvjX8KP6/u9C1GiJBtr3jW+vkmxhxDTjFaLy8 69pB2mhFQe6sDKSey7BhATWALYZ6apYzjcNj2KNJtN2WbMMqarZGI13szXQpur8P gV7VZqw5PPNMuA1EyCxyTAz8H5ApS1mVbKbSHCaDUYDNoMxG0oVIquCoSz7eHtb2 XnqIq561v/JCrOnz0wjPIv6ibLm6EKwEAcJH4Gsp3X2jbjftaQCmNzkur+OgpQwd kvvK6+cC+cTYvm+YnPJ2NCmMQ2KuYh3NfPl5tO4XtGngv/T4sA4WN45FH9sG+zOf 5cnCx5hiReT9cN/T3bhTYcRvYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg15Att HCTmUJiY3OY+82dwVCYXMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Eriaedu7fmsB+14W8q87qhhig+rUpNjfu8jvwQZB0aniD1lhUKGm AcizFRz0hOFaySMUpBif6f/6+Gai1c3K4/4gK3DfyAfb2SaW59r7mWx/qB6G/2Yx IU4y6CmQzJ0IipIkn8HZPfbKPbCqFahmr+cxsrRupnXiPSPs2uVyF5VGao9Wb+D/ dFewsI7vdIxIUR2gms3SWO6bdIJH8uI9wEeLAbvt0jPN1w7nzQSUFeY8x9E/13QR 9PA71jMJUZoZj3YA+SjyD4jD5vvcz0g2UTe0map6ZHQbBmnHZnujJIeDzYdAwLAh F0gcYs3PaY0CcG+w0hZTw2E2MeYpcvn0 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:32 2025 by rpki-client