This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: ngZ6FZzMYvn4J87SrBQfUbYXsDII6z/c4/qYultzyoE= Subject key identifier: BB:C0:9B:66:C0:06:6A:86:A0:0F:8F:3E:CC:CA:F2:11:4D:99:B2:25 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 01BE Signing time: Tue 23 Dec 2025 02:02:13 +0000 Manifest this update: Tue 23 Dec 2025 02:02:12 +0000 Manifest next update: Tue 30 Dec 2025 02:02:12 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: 2UNUOPd5s78yuIezn0N4OgXittfKTnXbfEItZ46J0bg=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: z9EaBOoQtdVuIHEm9IdKFd2T44FBt8oNShj0hBUX4to=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: mPLM8pUe2jYc/yGUmyUlykE/dN1LWPP09wTlH7B34ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Dec 23 02:02:12 2025 GMT Not After : Dec 30 02:02:12 2025 GMT Subject: CN=6949f825-dd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c3:5c:d7:44:25:b6:9f:67:30:dc:e0:7f:bf: 63:15:96:c1:e6:e9:3f:6b:e7:21:47:4a:56:a5:ee: 2a:e3:7c:a7:f8:da:e0:c5:4b:63:00:81:14:e6:dc: b5:6c:af:6c:7e:2d:25:a8:a9:7f:5c:8d:05:17:6d: ce:3f:47:e5:22:6f:cd:48:b9:90:b7:81:07:20:65: 74:7a:2c:ed:07:7e:7a:1a:1e:cf:39:e1:f2:3b:6a: 34:8f:e7:4e:66:60:26:3a:04:c8:04:73:9b:a6:69: bd:b2:32:5d:03:df:19:06:60:dc:d2:b6:06:a5:a8: e5:b9:37:f5:c9:57:8e:24:9a:51:57:d9:fc:00:db: cd:b0:a0:ec:69:8e:9b:54:52:e5:24:7b:aa:56:21: 65:44:60:00:58:f0:bf:b4:99:aa:3d:fc:86:29:1f: 1c:aa:9c:a4:fd:50:ce:af:36:f0:7c:ae:28:ab:8a: c1:18:00:2d:f2:9f:83:a6:ba:e6:36:83:76:24:e8: 70:17:c6:27:0f:ca:07:f7:15:a6:3e:5c:09:31:d9: 92:3b:fe:09:6b:95:53:8a:f8:84:91:43:c3:41:da: e8:eb:30:a9:13:79:91:43:2a:a5:b4:92:f9:e0:32: 5e:3a:fc:3e:55:7d:be:a1:43:59:cc:a8:37:13:45: ed:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C0:9B:66:C0:06:6A:86:A0:0F:8F:3E:CC:CA:F2:11:4D:99:B2:25 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6a:b5:81:7c:99:89:46:f9:f1:8e:26:e0:71:1c:5b:c8:58: b9:a6:3f:1f:b1:68:57:b6:d4:a7:99:3c:b6:13:1c:c3:f7:ae: a6:64:24:41:0f:e3:b3:fb:e1:d6:38:76:11:1c:4a:9c:cd:6b: ba:d2:9b:95:c9:e1:d2:d3:e1:22:43:be:a5:4d:ba:c0:c5:02: 5b:de:77:9f:5f:b2:ac:79:e1:58:af:8f:b1:5e:34:99:47:0c: ed:fb:ef:c2:0e:57:b2:a3:c2:9a:a4:bf:1d:be:3f:50:6c:28: 6a:a8:47:09:18:e4:54:39:1c:33:ea:87:92:23:e1:8e:b4:1f: f0:6e:cd:6a:3f:51:65:f1:73:a3:e3:4a:19:60:71:2c:8b:1c: b3:72:2c:d2:55:ca:ec:32:fd:05:b6:1d:e4:4c:8d:0f:e3:61: 54:15:18:19:96:1d:82:6f:3a:ad:26:38:6e:f9:65:48:91:6b: 68:a8:74:03:e4:a1:5c:08:2b:ee:c6:b3:e9:c1:7b:e7:9b:38: 03:95:0d:49:4d:09:e7:9c:2a:ca:e2:86:b5:f9:3d:1f:98:c7: 60:d2:0c:df:37:30:e0:c9:0b:97:9b:32:cd:6d:a0:44:ed:32: dc:90:8a:da:74:e2:fe:67:69:e5:c8:bc:b7:43:f6:4a:a5:6e: ce:92:ae:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjUxMjIzMDIwMjEyWhcNMjUxMjMwMDIwMjEyWjAYMRYwFAYD VQQDDA02OTQ5ZjgyNS1kZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhsNc10Qltp9nMNzgf79jFZbB5uk/a+chR0pWpe4q43yn+NrgxUtjAIEU5ty1 bK9sfi0lqKl/XI0FF23OP0flIm/NSLmQt4EHIGV0eiztB356Gh7POeHyO2o0j+dO ZmAmOgTIBHObpmm9sjJdA98ZBmDc0rYGpajluTf1yVeOJJpRV9n8ANvNsKDsaY6b VFLlJHuqViFlRGAAWPC/tJmqPfyGKR8cqpyk/VDOrzbwfK4oq4rBGAAt8p+Dprrm NoN2JOhwF8YnD8oH9xWmPlwJMdmSO/4Ja5VTiviEkUPDQdro6zCpE3mRQyqltJL5 4DJeOvw+VX2+oUNZzKg3E0XtfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvAm2bA BmqGoA+PPszK8hFNmbIlMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7arWBfJmJRvnxjibgcRxbyFi5pj8fsWhXttSnmTy2ExzD966mZCRB D+Oz++HWOHYRHEqczWu60puVyeHS0+EiQ76lTbrAxQJb3nefX7KseeFYr4+xXjSZ Rwzt++/CDleyo8KapL8dvj9QbChqqEcJGORUORwz6oeSI+GOtB/wbs1qP1Fl8XOj 40oZYHEsixyzcizSVcrsMv0Fth3kTI0P42FUFRgZlh2CbzqtJjhu+WVIkWtoqHQD 5KFcCCvuxrPpwXvnmzgDlQ1JTQnnnCrK4oa1+T0fmMdg0gzfNzDgyQuXmzLNbaBE 7TLckIradOL+Z2nlyLy3Q/ZKpW7Okq4G -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:27 2025 by rpki-client