This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json) Hash identifier: OvvWPv8FBlmauWo61mo/tUpdUL5493f3QtvdRifpbqE= Subject key identifier: F4:C5:29:91:A0:08:3D:09:6F:D0:0A:EF:E7:B4:98:F2:90:21:B1:55 Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft Manifest number: 0A95 Signing time: Mon 22 Dec 2025 19:00:35 +0000 Manifest this update: Mon 22 Dec 2025 19:00:35 +0000 Manifest next update: Mon 29 Dec 2025 19:00:35 +0000 Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: M9VqVMewXcnpGS+NGEP6okIbkIzBJSGfEU3V5gPId/M=) 2: 57C25DB2E42811EA881AB667C4F9AE02.roa (hash: E9181+VVT+rwNNkc7uINFuNWW6wPgms9gTqr7A850dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: Dec 22 19:00:35 2025 GMT Not After : Dec 29 19:00:35 2025 GMT Subject: CN=69499553-bbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:43:6e:27:62:36:b6:b0:9d:6f:3b:9b:f7: 37:51:8c:52:b2:8f:68:e0:5d:1a:a0:17:d0:a8:ee: f7:f6:e1:87:21:6e:09:07:e5:a8:5b:29:ad:7c:ca: 0f:ce:13:e4:e8:e0:28:d9:4f:bf:79:b7:9b:7a:23: 97:7e:c2:31:2a:69:15:e6:2b:c2:07:c7:f2:49:70: 8b:42:ce:b5:1c:1a:5d:6f:6a:76:74:4e:25:c7:0d: 59:d3:5f:e3:40:4e:85:04:20:f1:02:5a:ce:69:f0: d1:33:30:30:c4:94:79:b5:1c:e1:c3:e4:de:9a:c2: 08:9d:d8:59:d5:4d:8f:38:54:06:66:09:bd:7c:55: 8e:9c:3f:05:85:70:e9:13:6c:2b:39:bc:18:b1:a0: df:d8:77:8c:ff:4a:be:bc:70:dd:60:ca:17:df:3d: 6f:ec:76:24:0f:e5:73:dd:99:94:69:b1:64:42:c0: 2d:0d:e8:f6:d3:3e:17:07:b1:8f:2a:3f:1c:ab:2c: 5b:fe:15:0e:76:41:9e:da:ff:ae:88:c1:56:c3:db: de:b5:a0:49:ec:dc:76:0c:d0:46:9e:f8:01:62:c9: e9:d5:bd:49:a9:05:45:93:90:dc:f1:a1:65:9f:6a: a2:0d:d6:0a:cb:d0:0c:ef:22:5b:99:9d:27:12:22: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C5:29:91:A0:08:3D:09:6F:D0:0A:EF:E7:B4:98:F2:90:21:B1:55 X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b3:e8:00:b3:1d:72:1b:67:5d:1a:6b:77:52:3c:da:4f:b6: 7c:ae:f3:7a:d3:3e:b7:a5:e5:5e:be:ae:7b:f3:39:7d:cc:85: 8b:17:d9:c2:87:51:74:8a:75:e0:1f:ed:b3:ed:e0:0b:bc:24: 82:c3:38:24:79:8b:d9:5a:3e:87:0f:f7:21:53:dd:06:66:ae: f2:22:d0:ab:36:5b:1d:c0:d9:e6:6e:48:3c:0b:2b:d2:44:4c: e0:06:06:fb:52:2d:64:b8:b3:42:1c:8e:7a:49:8e:91:6c:7e: 68:ab:ce:60:aa:27:fe:d8:8e:6f:c8:ac:2f:3c:c9:43:6c:c9: 63:58:58:3e:b7:35:64:19:7e:7c:ed:3f:a6:98:69:98:d6:1c: 5e:60:ac:43:08:42:dd:50:94:81:58:ae:c8:18:e5:25:8e:bc: bb:15:ff:c4:b3:d8:37:ab:a2:e8:ec:56:82:40:9f:3d:46:92: 1b:43:97:e9:e9:9e:99:3b:ab:05:f9:8c:47:29:1a:c5:2b:17: 1c:bb:90:40:bd:f7:f0:d9:c5:04:27:05:3c:02:b4:71:b2:8b: cc:d0:ad:f5:40:12:fc:92:85:cd:c7:ad:d4:04:8b:11:4f:18: 5f:1f:54:08:3b:c6:c0:02:11:f1:6c:0b:79:48:1d:77:e2:72: 5a:72:c2:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjUxMjIyMTkwMDM1WhcNMjUxMjI5MTkwMDM1WjAYMRYwFAYD VQQDDA02OTQ5OTU1My1iYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY1DbidiNrawnW87m/c3UYxSso9o4F0aoBfQqO739uGHIW4JB+WoWymtfMoP zhPk6OAo2U+/ebebeiOXfsIxKmkV5ivCB8fySXCLQs61HBpdb2p2dE4lxw1Z01/j QE6FBCDxAlrOafDRMzAwxJR5tRzhw+TemsIIndhZ1U2POFQGZgm9fFWOnD8FhXDp E2wrObwYsaDf2HeM/0q+vHDdYMoX3z1v7HYkD+Vz3ZmUabFkQsAtDej20z4XB7GP Kj8cqyxb/hUOdkGe2v+uiMFWw9vetaBJ7Nx2DNBGnvgBYsnp1b1JqQVFk5Dc8aFl n2qiDdYKy9AM7yJbmZ0nEiLc3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTFKZGg CD0Jb9AK7+e0mPKQIbFVMB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8s+gAsx1yG2ddGmt3UjzaT7Z8rvN60z63peVevq578zl9zIWLF9nC h1F0inXgH+2z7eALvCSCwzgkeYvZWj6HD/chU90GZq7yItCrNlsdwNnmbkg8CyvS REzgBgb7Ui1kuLNCHI56SY6RbH5oq85gqif+2I5vyKwvPMlDbMljWFg+tzVkGX58 7T+mmGmY1hxeYKxDCELdUJSBWK7IGOUljry7Ff/Es9g3q6Lo7FaCQJ89RpIbQ5fp 6Z6ZO6sF+YxHKRrFKxccu5BAvffw2cUEJwU8ArRxsovM0K31QBL8koXNx63UBIsR TxhfH1QIO8bAAhHxbAt5SB134nJacsLv -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:15 2025 by rpki-client