This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft File: ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json) Hash identifier: SdzhlgGEFXnlrRX74CPjbSS+QAiW/03ANyg+Pg4GXcg= Subject key identifier: 2F:3E:63:9A:3B:47:9A:6F:BD:ED:DB:7B:26:8E:D4:6C:2F:C7:8F:06 Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 Certificate issuer: /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft Manifest number: 49 Signing time: Tue 23 Dec 2025 06:14:20 +0000 Manifest this update: Tue 23 Dec 2025 06:14:19 +0000 Manifest next update: Tue 30 Dec 2025 06:14:19 +0000 Files and hashes: 1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: EBFn/rM+JFPg1mwQC4lJel64vzqpXkup+1W3S0UAjTQ=) 2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: y8FMpJ63sS6i2zvQWU1SmHtfzGgXpl9kmSxDwAQPAFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Validity Not Before: Dec 23 06:14:19 2025 GMT Not After : Dec 30 06:14:19 2025 GMT Subject: CN=694a333c-d3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0e:6c:c6:07:23:1f:49:9d:cf:8b:80:fa:36: d4:a9:7c:95:43:29:be:00:af:15:bf:fa:ae:1e:19: 32:70:b0:8e:d3:43:e7:c7:72:96:27:9a:78:4a:8d: b5:e6:1a:e2:09:cb:2a:f3:09:1b:64:51:3a:32:53: 4d:36:b2:e2:1a:e1:cf:b4:65:ca:4c:6b:28:ba:05: 0f:ac:fc:f6:b3:6e:fa:74:43:cd:d0:21:dd:8a:30: d8:a6:43:d7:42:42:81:f2:29:c9:d4:a7:62:c8:a0: 07:06:b5:73:49:8a:62:90:9b:2e:50:32:4e:1f:30: c4:c7:1a:25:52:1b:d4:e2:41:bc:12:56:bc:37:c1: e0:ff:00:f2:01:10:24:be:6f:ed:59:26:47:f6:4b: 08:34:cd:07:c6:cd:3b:c3:7d:2b:56:f2:f2:67:d6: a1:8d:93:63:09:7c:40:d1:18:98:e3:1b:dd:b1:9e: 3c:16:51:a0:d7:b9:61:b3:db:32:8d:c7:a0:28:54: ed:e2:a8:05:c7:1e:bb:a6:a1:0a:04:ab:d8:17:ab: 76:c3:5d:aa:56:e5:86:fa:ee:38:5c:fe:eb:11:5c: c0:ca:a6:8d:1d:c9:da:e2:5d:94:28:67:9e:09:98: a3:24:aa:84:11:26:b9:03:cd:00:10:c2:9a:5c:67: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3E:63:9A:3B:47:9A:6F:BD:ED:DB:7B:26:8E:D4:6C:2F:C7:8F:06 X509v3 Authority Key Identifier: keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:84:8f:b7:06:a0:4e:a0:5b:ed:ae:a4:4a:c4:36:44:a9:b1: ca:47:82:1b:cf:dd:78:64:16:62:70:df:14:18:c8:fd:ac:30: a2:dc:86:8b:4f:fe:29:af:4e:40:84:3f:69:6b:21:3d:b6:1c: ba:ca:ae:74:a2:24:22:68:b1:d8:da:63:85:d3:50:93:0f:9e: 01:29:ae:59:af:18:d6:86:93:95:4a:f2:bc:87:fa:52:d3:2f: bc:68:73:f3:39:42:ff:e7:e4:27:c9:ce:b4:5d:70:1d:e3:f8: a2:c2:95:cd:e2:27:34:8b:53:7e:1b:84:7e:6b:5a:75:f9:ad: 68:c0:03:da:1a:de:8d:dd:ef:99:c7:b0:b3:79:bd:5a:8f:5d: e2:0a:23:a1:d9:56:e6:9e:55:d3:6e:c0:d8:93:c8:3e:f8:d2: 97:3c:a4:98:78:dc:3c:8a:e7:78:04:b8:40:ee:01:3b:ef:59: a2:bf:d3:65:74:c5:04:f6:15:29:55:d8:ec:1d:42:21:6e:ce: 0a:b6:bd:ef:56:10:a6:99:03:92:53:86:f4:73:e9:5b:83:ee: 3f:f0:0c:d4:2c:ab:c5:71:2c:26:35:37:1b:05:13:c4:e7:b9: f5:b2:ed:eb:47:59:47:ac:34:3d:fe:60:a0:19:6c:19:87:59: 8d:57:59:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCRTExMC8GA1UEBRMoNkIyMkY5MDc5MTA1QTRERUJDQjA5Q0MxQjkwMDk2MDg1 QzY2MkQ0NDAeFw0yNTEyMjMwNjE0MTlaFw0yNTEyMzAwNjE0MTlaMBgxFjAUBgNV BAMMDTY5NGEzMzNjLWQzZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtDmzGByMfSZ3Pi4D6NtSpfJVDKb4ArxW/+q4eGTJwsI7TQ+fHcpYnmnhKjbXm GuIJyyrzCRtkUToyU002suIa4c+0ZcpMayi6BQ+s/Pazbvp0Q83QId2KMNimQ9dC QoHyKcnUp2LIoAcGtXNJimKQmy5QMk4fMMTHGiVSG9TiQbwSVrw3weD/APIBECS+ b+1ZJkf2Swg0zQfGzTvDfStW8vJn1qGNk2MJfEDRGJjjG92xnjwWUaDXuWGz2zKN x6AoVO3iqAXHHrumoQoEq9gXq3bDXapW5Yb67jhc/usRXMDKpo0dydriXZQoZ54J mKMkqoQRJrkDzQAQwppcZ+75AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULz5jmjtH mm+97dt7Jo7UbC/HjwYwHwYDVR0jBBgwFoAUayL5B5EFpN68sJzBuQCWCFxmLUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUJFLzE1RjVDMTBDNzQz RTExRjA5NEE3QkYwOUM0RjlBRTAyL2F5TDVCNUVGcE42OHNKekJ1UUNXQ0Z4bUxV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXlMNUI1RUZwTjY4c0p6QnVRQ1dDRnhtTFVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QUJFLzE1RjVDMTBDNzQzRTExRjA5NEE3QkYwOUM0RjlBRTAyL2F5TDVCNUVGcE42 OHNKekJ1UUNXQ0Z4bUxVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOEj7cGoE6gW+2upErENkSpscpHghvP3XhkFmJw3xQYyP2sMKLchotP /imvTkCEP2lrIT22HLrKrnSiJCJosdjaY4XTUJMPngEprlmvGNaGk5VK8ryH+lLT L7xoc/M5Qv/n5CfJzrRdcB3j+KLClc3iJzSLU34bhH5rWnX5rWjAA9oa3o3d75nH sLN5vVqPXeIKI6HZVuaeVdNuwNiTyD740pc8pJh43DyK53gEuEDuATvvWaK/02V0 xQT2FSlV2OwdQiFuzgq2ve9WEKaZA5JThvRz6VuD7j/wDNQsq8VxLCY1NxsFE8Tn ufWy7etHWUesND3+YKAZbBmHWY1XWYU= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:04 2025 by rpki-client