This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: e7fIO3w6NYHGq+BdCsC0Hyc6cuLCrR6DCISQPAhbhF0= Subject key identifier: 8A:FD:C8:39:58:F3:C1:00:4E:18:C4:4C:7E:CB:00:4A:BD:EA:AB:D9 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 1048 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 103B Signing time: Mon 22 Dec 2025 17:06:17 +0000 Manifest this update: Mon 22 Dec 2025 17:06:16 +0000 Manifest next update: Mon 29 Dec 2025 17:06:16 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: qpt4t1t5lTC52sMNO3u5J6JORDPjXarG/kNVd83L3J8=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: RkelPLg7E6uL52G5WbWQ45BxHbDDvE+59Nsvn5kHeGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4168 (0x1048) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Dec 22 17:06:16 2025 GMT Not After : Dec 29 17:06:16 2025 GMT Subject: CN=69497a89-677b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:26:7a:07:8b:b3:5e:78:5f:0e:21:e8:fa: 5c:ca:80:80:43:f9:da:f2:6b:dc:4e:63:98:5e:ea: b0:40:51:6a:cd:f0:05:a7:c7:f2:22:ae:92:d4:ea: e7:ef:d4:fc:34:9d:07:2c:58:cd:46:99:0b:95:48: f9:56:2a:61:e5:9a:d9:83:2d:5d:ee:53:29:c2:71: 1e:77:90:a4:9b:dd:12:36:65:78:ca:a3:89:c0:77: 1c:25:d2:2a:11:b1:48:f0:48:5b:ce:d9:9d:8f:0a: 58:12:fd:5b:98:5a:cf:0c:c5:24:17:69:e7:e6:2d: 70:30:af:3f:d3:f2:c3:77:11:fd:21:e2:f3:49:43: 59:6d:0d:26:34:c2:42:c5:2e:bc:2c:83:95:23:79: a9:05:81:bf:4e:c3:a3:c2:8b:eb:c7:e9:50:db:16: e0:29:70:98:92:e5:bf:a3:35:a9:eb:70:62:90:84: 08:07:ed:82:8f:8b:aa:8d:46:64:ea:1b:1e:a0:13: 78:6d:55:bd:84:97:a9:ad:a4:c3:7f:f8:17:a4:f3: 7e:7b:fb:e5:6a:07:df:76:4b:99:51:8d:0c:06:6c: 08:5a:d6:c1:25:5c:24:1e:b0:34:73:77:e7:c2:93: 57:1f:03:3e:ef:b2:49:3c:27:85:e5:b5:94:4b:89: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FD:C8:39:58:F3:C1:00:4E:18:C4:4C:7E:CB:00:4A:BD:EA:AB:D9 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:25:0d:d6:31:7a:6c:fa:63:f8:f9:e0:ff:42:de:9a:e0:a1: ea:9d:da:d6:93:02:b3:f7:05:5b:0a:bb:4d:09:b4:26:0a:28: d6:0d:94:3a:27:e4:5c:62:8d:84:e6:1e:c4:74:19:77:25:b3: 0e:f7:0c:2f:2b:65:0c:be:82:7d:eb:ee:10:75:a6:ea:9a:5b: e0:10:55:bf:97:dc:5d:ad:61:b1:38:2e:c1:1b:b3:b5:79:e8: 9a:1f:31:48:67:00:c3:47:7d:3c:19:dc:2a:61:9e:c6:81:8e: 0e:07:24:04:03:59:c4:b6:08:22:98:5f:00:1a:04:68:bf:8f: 02:35:30:0f:70:00:b2:6f:6a:a6:9b:e9:5a:b0:a5:6b:f1:e2: 1f:32:a2:88:bf:47:4b:2f:32:6d:34:93:4b:98:8a:f5:fa:d8: 14:02:76:1a:7e:72:d6:89:75:f0:d2:1f:8e:52:72:76:5c:f9: be:62:4e:13:54:a0:f0:27:ae:7a:18:93:f4:3f:ad:6b:e8:3a: 91:f9:4f:3e:30:98:a0:84:ad:e0:7f:fe:6a:91:ac:0e:0e:55: 00:24:07:ca:86:ca:dc:49:48:b2:36:11:d8:66:25:90:ef:27: f5:f7:6d:74:5e:b8:bf:03:51:93:4a:d9:1c:49:0d:c5:24:25: 49:e7:a4:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUxMjIyMTcwNjE2WhcNMjUxMjI5MTcwNjE2WjAYMRYwFAYD VQQDDA02OTQ5N2E4OS02NzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7EmegeLs154Xw4h6PpcyoCAQ/na8mvcTmOYXuqwQFFqzfAFp8fyIq6S1Orn 79T8NJ0HLFjNRpkLlUj5Viph5ZrZgy1d7lMpwnEed5Ckm90SNmV4yqOJwHccJdIq EbFI8EhbztmdjwpYEv1bmFrPDMUkF2nn5i1wMK8/0/LDdxH9IeLzSUNZbQ0mNMJC xS68LIOVI3mpBYG/TsOjwovrx+lQ2xbgKXCYkuW/ozWp63BikIQIB+2Cj4uqjUZk 6hseoBN4bVW9hJepraTDf/gXpPN+e/vlagffdkuZUY0MBmwIWtbBJVwkHrA0c3fn wpNXHwM+77JJPCeF5bWUS4m/VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr9yDlY 88EAThjETH7LAEq96qvZMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3JQ3WMXps+mP4+eD/Qt6a4KHqndrWkwKz9wVbCrtNCbQmCijWDZQ6 J+RcYo2E5h7EdBl3JbMO9wwvK2UMvoJ96+4QdabqmlvgEFW/l9xdrWGxOC7BG7O1 eeiaHzFIZwDDR308GdwqYZ7GgY4OByQEA1nEtggimF8AGgRov48CNTAPcACyb2qm m+lasKVr8eIfMqKIv0dLLzJtNJNLmIr1+tgUAnYafnLWiXXw0h+OUnJ2XPm+Yk4T VKDwJ656GJP0P61r6DqR+U8+MJighK3gf/5qkawODlUAJAfKhsrcSUiyNhHYZiWQ 7yf19210Xri/A1GTStkcSQ3FJCVJ56QN -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:22 2025 by rpki-client