This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft File: AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json) Hash identifier: 09btnJeb+/D75Q5PC9w8gRlQNsH2U5BiECnGCNB8NzI= Subject key identifier: 4D:4E:F0:D3:98:3C:30:9B:DE:8D:6C:10:CD:1D:57:CE:AF:A8:82:6C Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft Manifest number: 065B Signing time: Sat 06 Dec 2025 21:42:58 +0000 Manifest this update: Sat 06 Dec 2025 21:42:58 +0000 Manifest next update: Sat 13 Dec 2025 21:42:58 +0000 Files and hashes: 1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: PN896s7Za+nLSuI6Z6HLdJThbImHBo3qCCjYwN3sG2s=) 2: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: btGjIQwgSn7JJwZL2buYiqMnVUjDHCpTzcRyOHOVV9w=) 3: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: 57IRG/hk+CbShhSRohuNNMRM6NtPI2s9mEQB7EL1Rs8=) 4: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: ltl+DfDEYXJ+yRffLM013Libfn2gz+fEWau0tvSsxac=) 5: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: 4Gm7XiaugCNOeoZN6LJmkv/s+XyGBxUWo0FM4EVSPNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Validity Not Before: Dec 6 21:42:58 2025 GMT Not After : Dec 13 21:42:58 2025 GMT Subject: CN=6934a362-d7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:38:c8:0b:96:b0:49:c2:1b:0c:51:16:d7: 9f:f9:b6:54:ab:fc:0b:4f:37:98:c0:27:63:36:1f: 40:e8:5e:1f:2e:03:43:80:be:13:0d:bb:02:15:4f: 51:bb:0c:e5:41:27:eb:45:8b:4e:83:db:2f:aa:3b: ec:c8:9a:39:c7:90:ef:0e:c3:e5:2f:24:a6:f4:47: 8d:78:1a:5e:87:aa:a8:ad:3a:41:4a:ff:af:6f:fc: 00:0e:97:20:5e:af:72:1a:06:73:00:63:1c:35:74: 3c:3b:f8:98:44:ed:cd:d1:41:f8:ff:67:ae:51:73: 11:83:8c:3e:a2:cf:70:5c:6c:c4:bd:ad:15:e8:c2: 1d:df:4e:47:62:bf:61:93:71:a2:4a:6b:09:a5:2d: d5:d3:ce:ef:55:a2:1e:9c:a5:a2:07:80:3b:f0:8e: bb:9d:77:6a:9d:f5:f8:ff:a0:61:2d:b8:a9:53:31: f4:1d:22:2a:a7:b9:a9:df:ee:5c:65:cf:55:eb:04: ac:de:6b:be:93:f4:b6:66:db:83:04:34:8e:34:21: 5d:fb:78:5b:41:38:e6:05:f4:26:3f:a3:ea:61:27: 8c:9f:07:c6:11:fd:2c:a9:c2:f2:0e:06:9f:2e:a9: fa:6b:97:fd:98:1a:51:b1:92:cc:e9:89:f1:de:2c: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4E:F0:D3:98:3C:30:9B:DE:8D:6C:10:CD:1D:57:CE:AF:A8:82:6C X509v3 Authority Key Identifier: keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c5:28:a6:f2:1a:27:6f:9a:a9:ef:c6:4c:e1:5b:c8:21:e5: a6:94:08:42:37:68:12:bb:8b:c4:67:22:da:1e:55:43:04:85: 8e:3a:24:d4:1b:19:d1:82:02:62:58:ac:61:90:59:ad:5e:f9: 5e:3f:cd:be:60:1a:b7:53:80:19:68:f8:6f:9a:50:c1:98:bc: 15:e1:90:b2:c1:40:8b:d1:de:c5:61:5b:db:93:71:1e:8c:5f: 0d:86:55:dd:0a:dc:8f:83:ac:74:c6:10:89:92:b5:b9:21:bc: d4:f8:9a:37:1c:9a:1a:88:56:64:3d:90:d8:4d:7b:53:74:75: 9e:ce:73:30:d3:27:fb:ee:42:9d:18:a1:9f:1a:0d:bd:08:b5: f0:ef:05:3e:87:61:e2:86:0d:6d:af:ee:2d:38:fa:b3:32:6c: 90:d3:1d:65:75:ae:f5:1a:23:46:06:5c:bb:39:d3:14:5e:52: 57:06:64:37:e3:72:f2:97:42:b8:ea:73:33:7b:80:bb:97:d1: ba:86:d5:7c:40:76:39:eb:18:32:b4:8a:d4:72:e6:e5:30:b9: 7a:84:7d:ff:92:3c:b8:47:cf:87:40:d9:9e:38:2d:e3:b1:07: ee:68:7c:b5:cb:78:16:d2:33:e1:55:11:97:67:b0:dd:7f:54: f0:86:fd:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC NTc3MzQ1NkIwHhcNMjUxMjA2MjE0MjU4WhcNMjUxMjEzMjE0MjU4WjAYMRYwFAYD VQQDEw02OTM0YTM2Mi1kN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuh44yAuWsEnCGwxRFtef+bZUq/wLTzeYwCdjNh9A6F4fLgNDgL4TDbsCFU9R uwzlQSfrRYtOg9svqjvsyJo5x5DvDsPlLySm9EeNeBpeh6qorTpBSv+vb/wADpcg Xq9yGgZzAGMcNXQ8O/iYRO3N0UH4/2euUXMRg4w+os9wXGzEva0V6MId305HYr9h k3GiSmsJpS3V087vVaIenKWiB4A78I67nXdqnfX4/6BhLbipUzH0HSIqp7mp3+5c Zc9V6wSs3mu+k/S2ZtuDBDSONCFd+3hbQTjmBfQmP6PqYSeMnwfGEf0sqcLyDgaf Lqn6a5f9mBpRsZLM6Ynx3iwqAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1O8NOY PDCb3o1sEM0dV86vqIJsMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4 RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDhEOS81NDgzQkZCNkM4RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNi QWE4WW9Mc2Jsd3ExZHpSV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQxSim8honb5qp78ZM4VvIIeWmlAhCN2gSu4vEZyLaHlVDBIWOOiTU GxnRggJiWKxhkFmtXvleP82+YBq3U4AZaPhvmlDBmLwV4ZCywUCL0d7FYVvbk3Ee jF8NhlXdCtyPg6x0xhCJkrW5IbzU+Jo3HJoaiFZkPZDYTXtTdHWeznMw0yf77kKd GKGfGg29CLXw7wU+h2Hihg1tr+4tOPqzMmyQ0x1lda71GiNGBly7OdMUXlJXBmQ3 43Lyl0K46nMze4C7l9G6htV8QHY56xgytIrUcublMLl6hH3/kjy4R8+HQNmeOC3j sQfuaHy1y3gW0jPhVRGXZ7Ddf1Twhv18 -----END CERTIFICATE-----Generated at Mon Dec 8 05:58:39 2025 by rpki-client