This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json) Hash identifier: oqTs30HMT9ohpqTyWtA8/n3CUIUHI2DkO5aq8ZnoQmk= Subject key identifier: 40:A5:BB:AB:DA:6D:00:74:02:E1:37:D6:ED:19:3E:A4:11:94:7D:A9 Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Certificate serial: 10EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft Manifest number: 10E2 Signing time: Mon 22 Dec 2025 16:58:32 +0000 Manifest this update: Mon 22 Dec 2025 16:58:32 +0000 Manifest next update: Mon 29 Dec 2025 16:58:32 +0000 Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: yYosYZLnfChDVMcVcUAvOXxxYZU05zWnOrQSKsnXpYQ=) 2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: 0SVk2cOfikrAvRDDJgb5TANBAXNNynzVUWZgXY+3hcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4330 (0x10ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Validity Not Before: Dec 22 16:58:32 2025 GMT Not After : Dec 29 16:58:32 2025 GMT Subject: CN=694978b8-7598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:5e:4e:1f:a5:7a:97:22:5b:28:e0:68:61: 8b:24:6e:2a:c3:a6:8a:f4:03:9d:ff:44:fd:3b:84: 6a:12:e1:65:02:2a:1d:33:49:fb:7a:1e:1a:81:da: 2f:54:5d:dc:68:6f:dc:91:0d:7b:67:f4:cd:2b:68: 2f:c8:89:d5:e4:bf:a9:12:24:68:f6:ec:77:03:90: cf:71:64:a5:38:fd:ef:bd:e4:cb:a5:de:cf:3f:0e: a4:3d:0e:f5:7c:03:34:1d:d3:53:db:90:19:be:b9: b2:ab:28:44:a3:b8:c8:d2:44:3a:de:7b:d7:c5:2e: bd:5f:85:6f:58:7b:57:4d:12:14:2a:d0:94:78:37: 2f:fc:1b:65:b3:6f:c2:be:21:3a:9a:03:9b:f9:a7: a2:ee:e4:c6:af:19:fb:20:e7:98:68:d0:45:67:a0: ce:ac:2b:7e:5c:e9:d4:0b:e0:b1:71:b3:53:55:ec: 62:09:a0:d2:d9:41:78:ca:1c:40:12:d8:33:a1:4d: 57:56:de:5a:13:e1:b7:da:ae:24:cc:a5:2d:5a:fa: a6:43:70:c2:2d:e2:2c:ef:de:47:77:c4:63:4b:df: 7b:3f:e5:96:b3:e1:67:e6:bb:f6:90:98:c7:2e:67: 02:96:c7:2e:0b:3b:e1:34:4d:50:81:64:95:70:90: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A5:BB:AB:DA:6D:00:74:02:E1:37:D6:ED:19:3E:A4:11:94:7D:A9 X509v3 Authority Key Identifier: keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e3:57:a7:ff:54:63:48:c1:95:48:53:70:49:b0:ad:e2:93: 53:c4:48:2e:a7:a4:d9:81:ff:4f:b8:8a:4a:41:27:c8:10:fd: 4d:f4:96:4c:47:c6:84:a3:05:ec:30:fd:d9:61:87:4a:3f:3c: 11:d2:1e:9d:bf:11:e3:6e:e9:58:78:e6:71:72:a6:b4:2d:af: 9e:67:1c:5c:6b:5f:43:cc:31:e1:35:cd:c2:27:f5:de:fb:43: aa:10:0e:88:bd:a4:bc:81:a7:f9:2d:6a:9a:0d:49:e4:33:3b: ac:1b:e8:43:96:64:31:90:bc:a5:fc:db:a5:5d:fe:77:fe:02: fd:1d:09:c5:dc:83:e7:c8:77:5f:de:af:dc:64:9a:d6:36:01: 52:f0:49:21:3b:f4:fa:fc:0c:89:a5:9b:e0:eb:e2:30:69:93: 73:12:c3:e1:a6:09:9f:09:a0:11:d1:56:66:11:47:6b:d2:e8: 67:bb:77:72:13:cf:b7:25:55:c2:3f:a7:6a:d2:af:ed:a8:09: c4:3f:96:2e:4d:87:b1:82:d9:b4:c5:98:16:b2:08:39:25:f7: f7:15:b0:d3:08:cd:90:50:06:8e:83:26:36:ee:76:7e:65:cd: b6:60:3a:c1:b0:b1:f5:74:0d:04:57:8e:67:21:77:44:fd:87: c2:08:bf:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxNkExMTAvBgNVBAUTKDAwOTYxQjhGNjNBREU5RDE5RjNBQ0Y0MjgzM0FDNUQ5 QzlDNzI3OEYwHhcNMjUxMjIyMTY1ODMyWhcNMjUxMjI5MTY1ODMyWjAYMRYwFAYD VQQDDA02OTQ5NzhiOC03NTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+deTh+lepciWyjgaGGLJG4qw6aK9AOd/0T9O4RqEuFlAiodM0n7eh4agdov VF3caG/ckQ17Z/TNK2gvyInV5L+pEiRo9ux3A5DPcWSlOP3vveTLpd7PPw6kPQ71 fAM0HdNT25AZvrmyqyhEo7jI0kQ63nvXxS69X4VvWHtXTRIUKtCUeDcv/Btls2/C viE6mgOb+aei7uTGrxn7IOeYaNBFZ6DOrCt+XOnUC+CxcbNTVexiCaDS2UF4yhxA EtgzoU1XVt5aE+G32q4kzKUtWvqmQ3DCLeIs795Hd8RjS997P+WWs+Fn5rv2kJjH LmcClscuCzvhNE1QgWSVcJDZ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEClu6va bQB0AuE31u0ZPqQRlH2pMB8GA1UdIwQYMBaAFACWG49jrenRnzrPQoM6xdnJxyeP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjE2QS9GQzUxQzlFODMx MEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZkR2ZPczlDZ3pyRjJjbkhK NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKWWJqMk90NmRHZk9zOUNnenJGMmNuSEo0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjE2QS9GQzUxQzlFODMxMEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZk R2ZPczlDZ3pyRjJjbkhKNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa41en/1RjSMGVSFNwSbCt4pNTxEgup6TZgf9PuIpKQSfIEP1N9JZM R8aEowXsMP3ZYYdKPzwR0h6dvxHjbulYeOZxcqa0La+eZxxca19DzDHhNc3CJ/Xe +0OqEA6IvaS8gaf5LWqaDUnkMzusG+hDlmQxkLyl/NulXf53/gL9HQnF3IPnyHdf 3q/cZJrWNgFS8EkhO/T6/AyJpZvg6+IwaZNzEsPhpgmfCaAR0VZmEUdr0uhnu3dy E8+3JVXCP6dq0q/tqAnEP5YuTYexgtm0xZgWsgg5Jff3FbDTCM2QUAaOgyY27nZ+ Zc22YDrBsLH1dA0EV45nIXdE/YfCCL8l -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:02 2025 by rpki-client