This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json) Hash identifier: vUxjJueJNNQ2Y65t5RgXUR3UvQwzjnfo5x/blvdSKH8= Subject key identifier: 6E:4C:0B:78:3A:20:B5:FA:FB:4D:69:86:6A:2F:CD:3F:D0:86:0F:4F Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft Manifest number: 61 Signing time: Wed 03 Dec 2025 05:24:59 +0000 Manifest this update: Wed 03 Dec 2025 05:24:59 +0000 Manifest next update: Wed 10 Dec 2025 05:24:59 +0000 Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: rzBm/H0yFzgW+s0lakjXhNZ9s2MeftehHfwT7TeNDxI=) 2: E641780E535211F0A795A950C4F9AE02.roa (hash: /6fZjzm6zMKlJavcLCHUvZwJwnYnVUAiwPFKfA2za2E=) 3: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: JnKzQUCZZIkzk+PTJ2yOthp2jewtbhpdupguptGlDRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Validity Not Before: Dec 3 05:24:59 2025 GMT Not After : Dec 10 05:24:59 2025 GMT Subject: CN=692fc9ab-6207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:20:c5:b3:d4:43:45:41:4d:72:6c:ec:e5: f6:75:f1:1e:97:d9:30:66:f5:c5:18:62:43:5f:12: b9:19:91:49:f3:31:0c:61:0f:81:ff:8d:2e:8c:72: 36:3f:ad:1d:e6:c1:c8:74:96:61:9b:74:19:ab:4a: eb:11:b3:3c:7d:3f:01:d2:e0:e8:ef:11:44:b9:a6: 1f:b3:e9:0e:70:3f:25:8a:22:63:b9:9c:a5:ed:56: 95:6c:61:f0:df:2c:cc:83:f1:9f:79:9a:72:4f:9c: a8:82:e6:75:36:88:bc:1d:92:5a:96:21:61:6b:c8: 5e:b8:8e:60:9f:37:7e:c2:4d:29:af:e6:01:ed:de: 2a:ba:08:ce:6c:cc:6d:d3:09:5c:ce:4f:1e:f7:6a: 90:40:c4:e0:65:f9:55:69:8e:7e:74:10:4a:ec:e8: b0:82:e6:11:e4:d0:b1:5f:86:67:a8:8d:95:57:c6: 00:81:94:8b:11:21:33:45:e6:7b:42:a5:bb:7e:0c: 65:0e:81:2f:1f:d6:0f:82:73:f9:af:c1:a7:89:64: fd:6f:dd:5e:94:79:73:a8:2a:ca:f7:24:28:49:b7: 0f:8a:1b:35:9d:54:24:01:1a:db:7a:49:53:fb:4a: 16:c0:7f:53:e5:2a:cd:43:29:90:0b:d7:75:d7:f0: d1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4C:0B:78:3A:20:B5:FA:FB:4D:69:86:6A:2F:CD:3F:D0:86:0F:4F X509v3 Authority Key Identifier: keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:09:1f:27:80:d9:b6:7e:09:23:b7:99:98:75:a7:5b:d7:ad: 4f:dd:c3:63:b5:cf:b0:d3:6f:e7:2c:f3:54:b8:5c:c1:0c:29: b4:00:18:33:fe:1e:ba:3c:ee:2a:de:e3:51:8d:d3:c8:65:ae: 5b:f2:c4:d4:79:cf:00:37:bb:cd:7c:b0:9f:2e:95:59:b4:b4: 7a:9b:7c:b1:4c:93:0d:92:86:63:b0:92:98:f3:c2:9d:62:f3: ca:4e:ab:8e:d4:72:af:f4:66:b1:9f:0c:6d:c1:5d:98:a0:9a: d9:8a:b8:aa:c7:ba:41:05:04:40:b3:ca:16:4f:9a:27:10:50: 75:0d:f7:d2:27:63:0e:ed:47:a1:4b:c8:a9:f2:be:e2:cf:2c: cb:5f:cf:f8:f1:63:0a:a5:5b:91:9f:62:b3:1a:56:82:ba:8b: 04:75:c9:b0:8d:96:49:2a:a4:ac:89:af:3b:95:12:62:20:8c: 80:f4:65:22:b3:bd:39:75:f4:46:ad:72:03:cf:20:62:6e:01: a7:36:13:ff:5b:14:0c:9b:7d:3b:ef:7a:e5:fc:43:88:a2:d7: 80:b5:c5:13:6b:6c:20:13:cc:20:13:50:e2:9a:95:43:45:7e: 10:49:41:8d:5c:ba:cb:9e:db:a5:a0:b3:7a:93:3a:77:08:39: 21:0b:0c:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUJBQzExMC8GA1UEBRMoQjQwMzhBQjY0MDM5RjMxNDU2MjJBMjBGRjcwRUQ3QkUx RDRFN0Y5MTAeFw0yNTEyMDMwNTI0NTlaFw0yNTEyMTAwNTI0NTlaMBgxFjAUBgNV BAMTDTY5MmZjOWFiLTYyMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUaCDFs9RDRUFNcmzs5fZ18R6X2TBm9cUYYkNfErkZkUnzMQxhD4H/jS6McjY/ rR3mwch0lmGbdBmrSusRszx9PwHS4OjvEUS5ph+z6Q5wPyWKImO5nKXtVpVsYfDf LMyD8Z95mnJPnKiC5nU2iLwdklqWIWFryF64jmCfN37CTSmv5gHt3iq6CM5szG3T CVzOTx73apBAxOBl+VVpjn50EErs6LCC5hHk0LFfhmeojZVXxgCBlIsRITNF5ntC pbt+DGUOgS8f1g+Cc/mvwaeJZP1v3V6UeXOoKsr3JChJtw+KGzWdVCQBGtt6SVP7 ShbAf1PlKs1DKZAL13XX8NFdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbkwLeDog tfr7TWmGai/NP9CGD08wHwYDVR0jBBgwFoAUtAOKtkA58xRWIqIP9w7Xvh1Of5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQkFDLzY0OUJDM0IyNTBD OTExRjBCNDczMDI0NkM0RjlBRTAyL3RBT0t0a0E1OHhSV0lxSVA5dzdYdmgxT2Y1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEFPS3RrQTU4eFJXSXFJUDl3N1h2aDFPZjVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QkFDLzY0OUJDM0IyNTBDOTExRjBCNDczMDI0NkM0RjlBRTAyL3RBT0t0a0E1OHhS V0lxSVA5dzdYdmgxT2Y1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAsJHyeA2bZ+CSO3mZh1p1vXrU/dw2O1z7DTb+cs81S4XMEMKbQAGDP+ Hro87ire41GN08hlrlvyxNR5zwA3u818sJ8ulVm0tHqbfLFMkw2ShmOwkpjzwp1i 88pOq47Ucq/0ZrGfDG3BXZigmtmKuKrHukEFBECzyhZPmicQUHUN99InYw7tR6FL yKnyvuLPLMtfz/jxYwqlW5GfYrMaVoK6iwR1ybCNlkkqpKyJrzuVEmIgjID0ZSKz vTl19EatcgPPIGJuAac2E/9bFAybfTvveuX8Q4ii14C1xRNrbCATzCATUOKalUNF fhBJQY1cusue26Wgs3qTOncIOSELDOU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:43 2025 by rpki-client