This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: sJ5VWzmv+GBAFaKy3oeAc2j5+x9ioxekjKltF+v2bkA= Subject key identifier: 5D:7D:6D:F9:3D:3F:AC:EF:3A:79:87:6F:6C:99:E0:2D:CF:5A:29:2B Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0D12 Signing time: Tue 16 Dec 2025 17:55:54 +0000 Manifest this update: Tue 16 Dec 2025 17:55:54 +0000 Manifest next update: Tue 23 Dec 2025 17:55:54 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: 4NDzxObPDC4kW/hoNestHth0OFTbd7Xx1tH5oUGOgIU=) 2: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: I0QziAIo3oazYojvFNhbt9C/zSWf1Md92KB9f4lH27c=) 3: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: CTDwhtj/lvv2X5UcpQAPIBaNmpDgoQygeS9l2k6Fjz0=) 4: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: iAcBe9JsIgejkunApnFizR8kcd9hvKFDEaA+fu50sDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Dec 16 17:55:54 2025 GMT Not After : Dec 23 17:55:54 2025 GMT Subject: CN=69419d2a-dfd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:24:68:19:76:db:59:f7:93:da:a8:8c:94: 72:c2:3a:b6:07:5a:32:90:3c:0d:11:b9:2e:6d:06: 61:85:14:16:f7:08:b6:00:93:c7:42:88:2b:02:1d: 48:14:f3:82:b3:d2:cf:65:31:d2:9d:de:51:82:7b: e9:8d:41:15:0a:09:e1:fa:3e:57:f2:b7:86:f8:c1: 17:7b:3d:83:35:33:66:d1:00:65:67:03:c8:f7:5c: e5:1b:b9:ab:9e:28:db:e9:5a:80:ca:0d:43:7e:fd: 15:1a:cc:6b:fd:60:ac:37:e8:40:19:c9:c9:cb:45: 70:cc:6a:b8:44:af:db:7f:a7:be:d8:7f:ae:a7:9b: 79:0e:b8:30:e9:a7:fb:5e:18:d1:e5:90:41:bd:2c: 59:48:16:d1:89:fb:23:dc:08:0c:3e:d6:6e:ab:8d: f4:c3:66:03:63:62:f8:7b:13:b8:b2:90:73:c6:69: d3:1f:7d:dd:fc:22:c3:52:54:e2:39:34:19:d6:75: 6f:88:69:f7:03:19:4f:73:29:2f:ba:ed:82:28:b7: 2d:27:9d:9e:7d:e1:a9:a0:91:82:ad:28:de:c7:93: f3:ff:c9:2c:19:bf:1e:41:ea:b1:62:cd:d2:9b:ad: f2:03:87:fc:4d:c8:de:25:7b:eb:64:6e:3e:74:56: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:6D:F9:3D:3F:AC:EF:3A:79:87:6F:6C:99:E0:2D:CF:5A:29:2B X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:26:34:dd:ee:8f:d9:32:6e:cc:cd:95:9f:77:6e:42:11:c9: 34:62:5f:3f:73:fe:cd:a8:eb:3d:2d:31:77:f9:13:8c:82:30: 0f:ec:17:99:57:8f:fb:76:83:0a:e5:0c:7e:a5:b0:18:10:c7: 27:d4:0b:ef:85:38:5f:d9:be:64:41:99:77:e4:a5:03:4c:1c: 41:59:e7:53:12:84:b3:4e:f5:56:fc:8b:26:c8:32:af:21:17: 0b:04:de:c3:68:1f:59:32:33:3c:05:17:e5:cb:86:6a:c9:b4: 7f:ed:88:4f:4b:f1:c3:a9:30:ce:23:de:aa:69:4e:ee:c5:7f: a9:61:59:3b:23:95:0c:c9:d4:ac:e3:da:86:63:e9:2a:31:07: b6:07:90:55:be:1a:6b:e9:d4:da:76:2f:d8:db:b2:5e:c3:74: 26:7d:f2:e9:fb:e1:5e:05:69:94:66:55:5f:98:ca:66:0a:f7: 1b:81:45:b0:34:44:4c:92:20:f7:af:72:2e:d5:d1:c0:01:43: fc:79:8a:38:47:fc:cf:94:bc:ee:c3:8e:4a:85:d6:d0:fb:4b: 1e:3f:fb:28:d6:48:e7:a3:59:83:f2:0f:30:c6:3c:92:bd:e5: 2c:7b:19:3c:fb:13:63:09:5a:b4:1b:60:ef:89:3f:cd:aa:7a: 0d:ee:8b:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjUxMjE2MTc1NTU0WhcNMjUxMjIzMTc1NTU0WjAYMRYwFAYD VQQDDA02OTQxOWQyYS1kZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunwkaBl221n3k9qojJRywjq2B1oykDwNEbkubQZhhRQW9wi2AJPHQogrAh1I FPOCs9LPZTHSnd5RgnvpjUEVCgnh+j5X8reG+MEXez2DNTNm0QBlZwPI91zlG7mr nijb6VqAyg1Dfv0VGsxr/WCsN+hAGcnJy0VwzGq4RK/bf6e+2H+up5t5Drgw6af7 XhjR5ZBBvSxZSBbRifsj3AgMPtZuq430w2YDY2L4exO4spBzxmnTH33d/CLDUlTi OTQZ1nVviGn3AxlPcykvuu2CKLctJ52efeGpoJGCrSjex5Pz/8ksGb8eQeqxYs3S m63yA4f8TcjeJXvrZG4+dFaTGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF19bfk9 P6zvOnmHb2yZ4C3PWikrMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoJjTd7o/ZMm7MzZWfd25CEck0Yl8/c/7NqOs9LTF3+ROMgjAP7BeZ V4/7doMK5Qx+pbAYEMcn1AvvhThf2b5kQZl35KUDTBxBWedTEoSzTvVW/IsmyDKv IRcLBN7DaB9ZMjM8BRfly4ZqybR/7YhPS/HDqTDOI96qaU7uxX+pYVk7I5UMydSs 49qGY+kqMQe2B5BVvhpr6dTadi/Y27Jew3QmffLp++FeBWmUZlVfmMpmCvcbgUWw NERMkiD3r3Iu1dHAAUP8eYo4R/zPlLzuw45KhdbQ+0seP/so1kjno1mD8g8wxjyS veUsexk8+xNjCVq0G2DviT/NqnoN7ouw -----END CERTIFICATE-----Generated at Wed Dec 17 00:31:31 2025 by rpki-client