This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: qQALTsGvFqdXOoeNSklqfqbLt6iKkgT8dDoqD8FOZZE= Subject key identifier: D3:33:F5:68:A4:66:D2:00:D2:0A:E5:2A:41:EC:43:9F:B3:74:61:3A Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 07F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 07E7 Signing time: Mon 22 Dec 2025 20:29:59 +0000 Manifest this update: Mon 22 Dec 2025 20:29:59 +0000 Manifest next update: Mon 29 Dec 2025 20:29:59 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: l6oGjRVv5m+9pDi/Yj9Fbq8y/2pDL5RYm7npzkh9xbM=) 2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: 88Jh5coMAVPJSUCnQAmSwbUiu0xU/3P6Y2QChRKwELo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: Dec 22 20:29:59 2025 GMT Not After : Dec 29 20:29:59 2025 GMT Subject: CN=6949aa47-9860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cd:c0:72:0a:27:6f:89:1a:1c:5c:1e:4e:0d: 35:a0:92:11:44:36:36:4b:34:05:bd:ad:c7:00:f7: e5:7e:74:8e:ce:7a:da:57:2f:d6:a9:70:2a:43:e9: eb:72:50:55:56:b4:5e:fc:83:06:3c:6b:3e:c5:b6: bb:2d:0f:01:82:61:f9:fb:14:b5:bd:97:99:f0:25: e0:4a:0e:78:eb:cd:68:d8:74:08:36:88:d4:79:87: 99:fc:81:e5:8f:76:98:a7:a7:3b:29:e3:ef:a5:3c: 93:2c:a4:a8:71:b4:de:5a:fb:b7:3f:d0:eb:e3:3c: 83:a6:63:6e:08:a9:c8:e6:ce:29:67:35:07:4e:bc: bf:23:ae:cb:43:4a:eb:9b:7a:1a:b0:e2:18:86:41: aa:b5:c8:c1:73:5c:2b:5e:fe:a1:a3:ae:09:f0:7d: b9:00:51:4d:be:45:c1:89:3f:a8:64:53:10:fd:dd: a6:82:6b:01:fc:bb:d1:1e:3e:84:99:fe:51:16:2a: 28:ac:5c:6b:d0:00:1b:8d:c6:2c:ae:03:74:0b:27: 20:e9:2c:39:82:56:8b:49:ee:3e:9d:5d:85:6a:6c: 33:16:13:0c:2c:25:df:f7:fb:50:90:d9:2d:31:7d: 3a:ef:f7:5b:ab:76:87:02:76:b5:71:13:b4:c2:83: 75:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:33:F5:68:A4:66:D2:00:D2:0A:E5:2A:41:EC:43:9F:B3:74:61:3A X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:76:1c:c8:01:14:34:1d:13:22:31:c0:3c:4a:fd:64:43:09: 25:45:9c:78:29:ab:32:96:e6:e2:d2:6c:fd:d9:27:23:cd:83: 1b:f6:23:aa:83:60:4f:5e:89:af:17:ee:00:32:c5:c7:f9:e5: 07:6d:7b:2d:a7:ba:fe:57:dd:bc:3a:ae:c8:d9:fc:c3:a0:53: 2d:e4:75:3d:b2:56:e7:64:b7:3c:49:72:5b:c2:29:39:93:d3: 9f:03:75:87:dd:2d:4b:8c:ea:a6:04:1d:a3:94:f0:19:90:2b: c0:d5:52:c6:36:db:d9:3a:4f:9d:10:58:d3:44:07:d2:96:53: 62:19:a6:56:54:be:36:80:a0:1c:4e:a2:70:3d:48:32:61:50: fb:e5:b5:fe:34:e9:fb:29:c1:79:d6:cb:14:e1:58:79:f3:07: 44:93:e5:44:6e:1e:2d:a3:ac:7d:f3:2a:d0:ba:d3:4d:bb:9c: 70:2f:f6:bb:7c:f0:9a:53:3f:d6:7d:53:64:54:1f:2b:28:a6: fa:da:9a:82:57:9b:1f:48:ae:c0:bc:6e:f7:d0:a9:e3:2a:f3: 6a:50:be:d6:84:6e:fb:b7:68:c6:b7:60:ee:6a:7d:c8:c2:10: 34:a8:5f:4b:ab:4d:c8:4d:ab:77:8c:27:12:8d:8e:ae:9a:d6: cf:ac:14:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjUxMjIyMjAyOTU5WhcNMjUxMjI5MjAyOTU5WjAYMRYwFAYD VQQDDA02OTQ5YWE0Ny05ODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh83Acgonb4kaHFweTg01oJIRRDY2SzQFva3HAPflfnSOznraVy/WqXAqQ+nr clBVVrRe/IMGPGs+xba7LQ8BgmH5+xS1vZeZ8CXgSg54681o2HQINojUeYeZ/IHl j3aYp6c7KePvpTyTLKSocbTeWvu3P9Dr4zyDpmNuCKnI5s4pZzUHTry/I67LQ0rr m3oasOIYhkGqtcjBc1wrXv6ho64J8H25AFFNvkXBiT+oZFMQ/d2mgmsB/LvRHj6E mf5RFioorFxr0AAbjcYsrgN0Cycg6Sw5glaLSe4+nV2FamwzFhMMLCXf9/tQkNkt MX067/dbq3aHAna1cRO0woN1xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMz9Wik ZtIA0grlKkHsQ5+zdGE6MB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBadhzIARQ0HRMiMcA8Sv1kQwklRZx4Kasylubi0mz92ScjzYMb9iOq g2BPXomvF+4AMsXH+eUHbXstp7r+V928Oq7I2fzDoFMt5HU9slbnZLc8SXJbwik5 k9OfA3WH3S1LjOqmBB2jlPAZkCvA1VLGNtvZOk+dEFjTRAfSllNiGaZWVL42gKAc TqJwPUgyYVD75bX+NOn7KcF51ssU4Vh58wdEk+VEbh4to6x98yrQutNNu5xwL/a7 fPCaUz/WfVNkVB8rKKb62pqCV5sfSK7AvG730KnjKvNqUL7WhG77t2jGt2Duan3I whA0qF9Lq03ITat3jCcSjY6umtbPrBTi -----END CERTIFICATE-----Generated at Wed Dec 24 14:06:31 2025 by rpki-client