This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft File: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft (raw, json) Hash identifier: h5npN+IOI4MiUuo2BSqPzclanu0xK1rcIofzodpcm54= Subject key identifier: FE:20:7D:97:48:B6:A4:39:DF:63:FA:89:CB:C1:3B:B9:85:68:E3:D5 Authority key identifier: 69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C Certificate issuer: /CN=A9131CF4/serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft Manifest number: 1D Signing time: Tue 23 Dec 2025 06:38:50 +0000 Manifest this update: Tue 23 Dec 2025 06:38:50 +0000 Manifest next update: Tue 30 Dec 2025 06:38:50 +0000 Files and hashes: 1: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl (hash: l4samRgOC8/DRYLERRrVaOKrr+IaSuDx6TQjm0Ax+XY=) 2: F11E4CE6B71811F0B6A0AF50C4F9AE02.roa (hash: aSB5R0pvuuGdI7d439VW6wudQzDHEJHApfR7PJGS060=) 3: 4B2379BEB71911F0AAA11D51C4F9AE02.roa (hash: OoO6vzm9QTl7W0T8BGLxXokhNtIDZhUlXaWvn3KwZew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131CF4, serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C Validity Not Before: Dec 23 06:38:50 2025 GMT Not After : Dec 30 06:38:50 2025 GMT Subject: CN=694a38fa-8565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:8e:b9:7d:ba:d0:a9:70:88:7e:17:22:7f: f0:45:89:e0:10:68:a8:17:af:db:bc:3f:c0:8a:00: 0b:3c:a5:8c:ef:da:12:87:31:1a:5b:51:8e:6a:c8: f9:7b:a3:a6:0e:04:d8:da:b3:18:6e:e2:e2:6e:5e: 7f:76:9d:3a:0c:48:3a:a5:7c:22:82:e6:8d:bc:aa: 31:0a:81:9a:79:20:50:48:f5:8b:ab:23:66:4b:9d: 65:c9:95:0f:a8:9b:1c:9a:2c:fe:50:0d:6d:e0:1d: 64:9a:68:e0:4c:76:ed:5f:00:1d:20:a8:34:38:06: 97:f8:e5:0c:36:b0:30:36:82:4c:9c:01:76:fe:df: c9:02:ce:a7:13:51:cf:72:0e:64:9f:7d:ad:3f:2f: 8c:a3:c2:b8:23:77:82:45:9b:e9:0b:cd:54:3d:8d: 8f:d6:09:68:85:e0:51:03:07:d5:dd:5e:a8:5c:90: 17:09:4e:ab:c3:2e:e9:6e:e4:66:31:7a:c8:37:b5: 03:75:ae:8e:4f:cc:60:d4:8b:f3:8f:58:96:b6:2a: 62:9d:e0:56:73:fa:f9:f1:4c:3b:7b:f3:14:64:c8: 53:b7:2f:97:32:0c:ab:6f:d4:de:e5:d0:5c:f3:de: c9:cc:13:a0:e9:7d:34:da:5a:0c:3c:49:46:b6:ae: 6a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:20:7D:97:48:B6:A4:39:DF:63:FA:89:CB:C1:3B:B9:85:68:E3:D5 X509v3 Authority Key Identifier: keyid:69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:af:17:68:6d:7d:76:53:ec:8e:07:02:65:81:b8:5a:df:d9: 99:f9:b1:44:d3:11:6d:0e:4d:64:96:a0:12:fe:c7:f6:fc:fc: 81:fa:de:6c:c4:d5:eb:b0:9d:b1:fb:88:57:3f:0e:a3:2b:9e: 46:11:55:de:4d:f4:f4:bd:9d:2e:e7:6e:6a:f3:7a:e7:ee:19: 9d:b4:d9:51:06:87:08:31:2c:56:42:d0:81:9b:04:26:1e:5e: 14:8f:d3:6f:1a:14:aa:1b:f0:5a:d0:bb:9f:e9:26:7b:af:0b: af:c0:30:a5:e1:2e:f1:cb:d3:95:f8:23:2a:36:94:44:c6:0e: dd:53:a0:32:f4:c7:d6:24:31:23:f1:16:38:ba:2e:15:4b:f7: 33:5c:86:2c:b9:3f:7a:95:88:96:7c:90:49:82:a4:76:bf:f8: ae:e3:ef:e1:c8:9c:fc:1b:79:6b:c9:f3:bd:b3:84:da:9a:48: e8:e4:17:97:5d:2f:48:0d:c6:04:8f:35:4a:de:fa:ad:35:d6: c4:aa:9f:3d:39:87:ec:c1:91:07:3e:25:a4:ea:6c:bc:0c:78: 22:41:9d:40:c2:2b:6f:03:ff:db:b1:23:cf:15:a5:21:54:5f: 3f:e3:4b:13:ea:e6:b2:12:d9:d4:42:40:c6:2d:73:25:77:4c: 8a:f8:ee:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUNGNDExMC8GA1UEBRMoNjlFQ0YwRTJBMUVEOEYwNUNDMjc4QjNFMTNGNjYyRUQw QjM1NDg4QzAeFw0yNTEyMjMwNjM4NTBaFw0yNTEyMzAwNjM4NTBaMBgxFjAUBgNV BAMMDTY5NGEzOGZhLTg1NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe+o65fbrQqXCIfhcif/BFieAQaKgXr9u8P8CKAAs8pYzv2hKHMRpbUY5qyPl7 o6YOBNjasxhu4uJuXn92nToMSDqlfCKC5o28qjEKgZp5IFBI9YurI2ZLnWXJlQ+o mxyaLP5QDW3gHWSaaOBMdu1fAB0gqDQ4Bpf45Qw2sDA2gkycAXb+38kCzqcTUc9y DmSffa0/L4yjwrgjd4JFm+kLzVQ9jY/WCWiF4FEDB9XdXqhckBcJTqvDLulu5GYx esg3tQN1ro5PzGDUi/OPWJa2KmKd4FZz+vnxTDt78xRkyFO3L5cyDKtv1N7l0Fzz 3snME6DpfTTaWgw8SUa2rmphAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/iB9l0i2 pDnfY/qJy8E7uYVo49UwHwYDVR0jBBgwFoAUaezw4qHtjwXMJ4s+E/Zi7Qs1SIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQ0Y0LzNFQTYzOEM4Qjcx MTExRjBBNUMyODA3M0M0RjlBRTAyL2Flenc0cUh0andYTUo0cy1FX1ppN1FzMVNJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYWV6dzRxSHRqd1hNSjRzLUVfWmk3UXMxU0l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx Q0Y0LzNFQTYzOEM4QjcxMTExRjBBNUMyODA3M0M0RjlBRTAyL2Flenc0cUh0andY TUo0cy1FX1ppN1FzMVNJdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEivF2htfXZT7I4HAmWBuFrf2Zn5sUTTEW0OTWSWoBL+x/b8/IH63mzE 1euwnbH7iFc/DqMrnkYRVd5N9PS9nS7nbmrzeufuGZ202VEGhwgxLFZC0IGbBCYe XhSP028aFKob8FrQu5/pJnuvC6/AMKXhLvHL05X4Iyo2lETGDt1ToDL0x9YkMSPx Fji6LhVL9zNchiy5P3qViJZ8kEmCpHa/+K7j7+HInPwbeWvJ872zhNqaSOjkF5dd L0gNxgSPNUre+q011sSqnz05h+zBkQc+JaTqbLwMeCJBnUDCK28D/9uxI88VpSFU Xz/jSxPq5rIS2dRCQMYtcyV3TIr47v0= -----END CERTIFICATE-----Generated at Thu Dec 25 00:38:27 2025 by rpki-client