This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: 7nqMyX+pCBH0Y1dj0L8AqzrvpdPKrVExLv7DB9El5Bo= Subject key identifier: 9E:70:F0:B4:95:2D:EE:7A:F1:78:71:E7:62:D7:B7:08:09:61:AF:F1 Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 03CE Signing time: Mon 22 Dec 2025 23:41:33 +0000 Manifest this update: Mon 22 Dec 2025 23:41:32 +0000 Manifest next update: Mon 29 Dec 2025 23:41:32 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: r2MU7UsDmP0v9eQT7yD9vkBhZYH0uIieXPMN02US3V0=) 2: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: Qo8S4vnL8vk6lsjFg8E5pxu1jHSHJhkqcg0rzkOHusw=) 3: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: 2CusgDeod/GNoY/LuvI1PPosNLPCfcqPbyc433D/0Uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Dec 22 23:41:32 2025 GMT Not After : Dec 29 23:41:32 2025 GMT Subject: CN=6949d72d-13aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:39:24:8d:44:2f:92:f0:1e:cc:0d:9d:7b: 70:07:ea:83:27:06:e5:9a:00:bc:c8:38:d2:73:18: 33:70:55:be:08:d1:1d:cd:db:ec:c6:1c:d0:2a:cb: e3:7b:fb:ec:f6:bf:84:67:7d:64:77:52:f1:7b:39: 65:e4:7b:52:4e:77:6b:3a:59:55:a9:ad:b8:35:f6: dc:4d:0d:02:ce:19:5d:0f:0b:8a:fc:01:e3:af:0d: 46:73:dd:ff:a7:fb:94:16:39:38:28:f7:ed:21:3e: 19:50:91:83:4d:04:cd:3c:95:82:54:78:2e:0d:e5: 40:cd:db:0a:da:d1:76:a5:ad:da:04:84:ce:0b:77: 61:6c:8a:be:81:79:1e:90:eb:18:31:64:fd:f7:8e: 86:63:c5:f3:dc:a0:0d:78:fc:09:00:7f:e8:8f:0c: db:b9:78:a6:ff:a2:03:d5:9b:39:69:69:fa:c8:5f: c7:e1:dd:99:da:12:a3:34:74:aa:56:bf:c5:5e:8e: a6:42:56:56:08:0e:8d:cf:ee:52:22:8d:69:83:37: 60:e4:96:37:53:f0:97:de:0f:69:91:b8:74:f7:c1: 0d:d9:b4:d1:53:74:be:4d:37:b6:04:8a:2c:df:3a: a3:81:27:0a:ef:e2:be:b1:2e:36:95:4d:bc:56:7a: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:70:F0:B4:95:2D:EE:7A:F1:78:71:E7:62:D7:B7:08:09:61:AF:F1 X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cd:64:04:15:15:14:02:f6:b9:92:d1:1c:05:0a:26:03:ee: fd:27:67:9f:d7:ed:29:29:be:90:6d:98:0e:9c:de:87:b3:fa: f7:05:a6:d3:9c:1b:0c:59:80:bc:2a:cd:22:23:cf:65:10:f8: ac:0f:97:b4:d5:16:a8:5f:db:11:9e:58:29:f1:16:fc:4d:f9: 53:b5:aa:a9:37:df:34:ce:58:32:d1:09:95:35:03:94:71:b7: 96:18:9e:fa:d8:57:aa:26:b6:18:76:37:3b:57:1b:d3:6d:b6: a5:37:71:a3:a9:83:93:ff:bb:3d:c3:f3:f4:4b:d1:de:8d:e4: 96:92:75:7c:90:d5:1c:58:1d:c8:f8:45:de:9c:3e:49:61:8a: a5:89:f1:0c:2b:9b:2a:2e:67:25:a1:a0:1e:93:df:27:23:19: dd:f1:38:e0:36:5d:30:18:ef:c3:02:d9:8f:10:64:b9:ba:67: 0d:0d:df:9f:51:c0:1b:b7:a6:b8:b6:cb:92:fb:e0:fe:4e:6d: e0:ff:3f:50:b4:aa:01:04:d5:db:79:f9:c8:4f:34:89:cc:16: 85:ed:59:58:3d:4f:db:43:8c:0c:90:36:09:01:1d:d8:bc:1a: 0b:94:b2:75:d8:1c:a2:ac:cd:a2:ee:0a:ab:20:4b:b5:77:1b: 94:27:70:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjUxMjIyMjM0MTMyWhcNMjUxMjI5MjM0MTMyWjAYMRYwFAYD VQQDDA02OTQ5ZDcyZC0xM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS05JI1EL5LwHswNnXtwB+qDJwblmgC8yDjScxgzcFW+CNEdzdvsxhzQKsvj e/vs9r+EZ31kd1Lxezll5HtSTndrOllVqa24NfbcTQ0CzhldDwuK/AHjrw1Gc93/ p/uUFjk4KPftIT4ZUJGDTQTNPJWCVHguDeVAzdsK2tF2pa3aBITOC3dhbIq+gXke kOsYMWT9946GY8Xz3KANePwJAH/ojwzbuXim/6ID1Zs5aWn6yF/H4d2Z2hKjNHSq Vr/FXo6mQlZWCA6Nz+5SIo1pgzdg5JY3U/CX3g9pkbh098EN2bTRU3S+TTe2BIos 3zqjgScK7+K+sS42lU28VnrjyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5w8LSV Le568Xhx52LXtwgJYa/xMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBezWQEFRUUAva5ktEcBQomA+79J2ef1+0pKb6QbZgOnN6Hs/r3BabT nBsMWYC8Ks0iI89lEPisD5e01RaoX9sRnlgp8Rb8TflTtaqpN980zlgy0QmVNQOU cbeWGJ762FeqJrYYdjc7VxvTbbalN3GjqYOT/7s9w/P0S9HejeSWknV8kNUcWB3I +EXenD5JYYqlifEMK5sqLmcloaAek98nIxnd8TjgNl0wGO/DAtmPEGS5umcNDd+f UcAbt6a4tsuS++D+Tm3g/z9QtKoBBNXbefnITzSJzBaF7VlYPU/bQ4wMkDYJAR3Y vBoLlLJ12ByirM2i7gqrIEu1dxuUJ3Cw -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:08 2025 by rpki-client