This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json) Hash identifier: It4IhWJlizlyngoQSELnbAXbQkAw6fTNwbXiYBIEnyA= Subject key identifier: 12:93:A6:1B:79:69:78:68:DF:29:C0:44:9F:83:E5:44:93:4B:E4:49 Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft Manifest number: 27 Signing time: Wed 03 Dec 2025 05:57:26 +0000 Manifest this update: Wed 03 Dec 2025 05:57:26 +0000 Manifest next update: Wed 10 Dec 2025 05:57:26 +0000 Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: pPbP1mMmELcrGvdSsh0CvqWDrQT1QFENGh5p/Catnm8=) 2: 9F57DB96B42211F09BF7B44BC4F9AE02.roa (hash: GSocOIU4gJGXAsCNtlbHDTRRIj+08JXL+H5AQwRagYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Validity Not Before: Dec 3 05:57:26 2025 GMT Not After : Dec 10 05:57:26 2025 GMT Subject: CN=692fd146-9c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:f3:c5:0b:a4:99:a6:1e:ce:a0:02:f4:8b: 73:58:4c:ef:e7:5e:f5:86:a3:c7:ad:fc:db:bd:f6: 37:68:b5:47:d3:8d:77:02:f3:b3:10:b7:4c:8e:30: f6:f6:72:4e:a9:17:1e:65:99:0c:e6:19:b7:37:1e: e9:ba:3b:46:77:48:82:b0:3a:40:a5:b5:e3:59:1f: 16:fc:1d:3b:cf:2b:8d:38:09:13:f5:1d:97:a1:d1: cb:9b:1f:33:ad:18:8a:1d:22:c0:1f:cf:c8:a2:4b: ea:7e:c1:7e:e7:68:8f:eb:84:fa:e5:f3:7c:85:6c: e5:0a:b5:3b:33:2d:d9:8f:39:2a:1c:ef:e9:d7:21: 3a:94:24:31:6b:46:98:de:4f:e5:20:90:ff:0a:87: fa:23:e0:39:48:37:1f:b2:44:d3:a3:c6:35:52:77: 7d:af:40:24:b9:68:d9:30:3e:1f:37:3f:f2:fd:d9: 61:28:d5:4d:85:24:6b:7b:fd:9b:21:a1:90:b1:fc: 52:3a:70:0c:81:a3:53:56:64:55:1c:14:88:15:9c: 83:19:59:be:64:c7:88:74:31:0c:ca:e2:02:e8:84: 4e:23:fb:be:1d:7f:f5:d1:24:67:32:02:97:da:ec: 5c:22:14:23:b9:a8:62:d1:8c:54:15:e4:4e:62:08: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:93:A6:1B:79:69:78:68:DF:29:C0:44:9F:83:E5:44:93:4B:E4:49 X509v3 Authority Key Identifier: keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:1b:ee:0e:d2:a9:f1:08:ea:8d:17:1d:3d:d1:0e:a4:ec:33: 16:65:19:89:b1:44:be:d5:8b:90:50:04:0e:18:c4:43:53:f4: 31:fd:1d:15:8c:30:97:c3:dc:75:7a:d2:4f:4d:34:b5:4f:38: d3:5a:1d:47:3b:cf:2b:ba:5c:81:56:99:f0:a9:9c:ac:73:d2: 8b:37:f0:57:17:da:b1:07:c5:a2:14:51:a3:54:35:b3:01:0a: 24:e5:03:57:cf:59:c2:b2:44:84:c4:45:41:d0:d0:6f:91:2b: 85:c7:a0:af:2e:6b:a9:e1:b0:48:05:5c:fe:cc:1c:b5:c6:07: b7:45:f6:a7:44:ab:e8:aa:9e:b6:2b:b1:61:23:6e:7a:5e:bd: 81:37:88:0f:8e:64:0f:a0:e1:56:2c:be:c4:dd:67:c4:bf:4b: 10:a1:87:a5:94:2b:3f:aa:05:28:e7:0e:7b:1f:52:0f:64:9e: 99:6e:ed:00:6f:c8:e2:43:6e:e0:88:ff:ff:8f:3d:a6:f6:0e: 9a:ad:45:f6:9f:94:bb:fa:8c:a6:52:59:af:2d:01:fd:5e:c1: 07:84:c6:fe:44:11:17:77:f1:53:c7:21:1c:fb:4c:80:ed:80: 0f:8b:82:77:3c:dd:e1:48:fc:59:c1:5c:e1:6b:1e:50:a5:ab: 72:28:6f:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoMDA4NEY0N0E0MzcyQzhGOEE3RDUxMTgzRDUwMzZDNTkz RDE5RTFDMzAeFw0yNTEyMDMwNTU3MjZaFw0yNTEyMTAwNTU3MjZaMBgxFjAUBgNV BAMTDTY5MmZkMTQ2LTljODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDETfPFC6SZph7OoAL0i3NYTO/nXvWGo8et/Nu99jdotUfTjXcC87MQt0yOMPb2 ck6pFx5lmQzmGbc3Hum6O0Z3SIKwOkClteNZHxb8HTvPK404CRP1HZeh0cubHzOt GIodIsAfz8iiS+p+wX7naI/rhPrl83yFbOUKtTszLdmPOSoc7+nXITqUJDFrRpje T+UgkP8Kh/oj4DlINx+yRNOjxjVSd32vQCS5aNkwPh83P/L92WEo1U2FJGt7/Zsh oZCx/FI6cAyBo1NWZFUcFIgVnIMZWb5kx4h0MQzK4gLohE4j+74df/XRJGcyApfa 7FwiFCO5qGLRjFQV5E5iCOGvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEpOmG3lp eGjfKcBEn4PlRJNL5EkwHwYDVR0jBBgwFoAUAIT0ekNyyPin1RGD1QNsWT0Z4cMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzQ0Q0U0RUQyQTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUlUMGVrTnl5UGluMVJHRDFRTnNXVDBaNGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzQ0Q0U0RUQyQTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBp bjFSR0QxUU5zV1QwWjRjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKMb7g7SqfEI6o0XHT3RDqTsMxZlGYmxRL7Vi5BQBA4YxENT9DH9HRWM MJfD3HV60k9NNLVPONNaHUc7zyu6XIFWmfCpnKxz0os38FcX2rEHxaIUUaNUNbMB CiTlA1fPWcKyRITERUHQ0G+RK4XHoK8ua6nhsEgFXP7MHLXGB7dF9qdEq+iqnrYr sWEjbnpevYE3iA+OZA+g4VYsvsTdZ8S/SxChh6WUKz+qBSjnDnsfUg9knplu7QBv yOJDbuCI//+PPab2DpqtRfaflLv6jKZSWa8tAf1ewQeExv5EERd38VPHIRz7TIDt gA+Lgnc83eFI/FnBXOFrHlClq3Iob8M= -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:37 2025 by rpki-client