This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: 7Kvv//IyAWvO0LgjsTJ+vFXNz8/Z0XV6NQEqkNKIU78= Subject key identifier: 17:FC:08:5B:05:9A:22:F2:0B:6B:14:8E:B1:5E:14:C1:09:2E:D7:E8 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 014F Signing time: Tue 09 Dec 2025 02:26:30 +0000 Manifest this update: Tue 09 Dec 2025 02:26:30 +0000 Manifest next update: Tue 16 Dec 2025 02:26:30 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: jObNcmNuHZQUPV59FoQtnFZMSSkFTPNO0+6UHu2cv+I=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: gfkWuMfDUYAqyRnTePZPV70xVbbxGR6RawYGUjcJFec=) 3: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: kFrgJirbvirh1kV38XDRtsJ3nsQNa4+OvKJO0YsvLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 02:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Dec 9 02:26:30 2025 GMT Not After : Dec 16 02:26:30 2025 GMT Subject: CN=693788d6-acb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:90:45:43:fd:4e:d1:ab:bd:e0:95:e0:d1: f0:ce:90:bb:3d:3d:34:cd:db:cd:2c:8c:7c:da:64: 87:fa:b9:0a:72:c5:9f:ae:5d:5a:99:5c:a1:28:37: 2e:68:64:b3:84:3f:ad:1c:b1:96:ad:f5:74:5f:e3: 77:7b:01:68:5e:8f:33:bd:34:ce:95:a2:c7:6c:6b: cb:2d:b5:62:8f:5b:4d:70:4b:54:93:ac:54:4d:d9: 5a:fa:54:8c:ed:2c:0d:ca:3c:cb:b4:38:bb:62:38: d8:6b:ba:80:3c:5a:60:57:6d:4c:c9:46:5d:eb:03: 8a:a7:11:2e:1d:70:8b:88:90:8b:cd:26:29:61:30: 84:ce:3d:e0:53:50:41:2a:36:a6:01:de:05:18:d6: 02:d8:7e:4f:fc:a3:e0:38:6c:6a:c6:2f:0a:1f:08: bb:62:b0:74:86:8c:69:99:6c:8c:86:0d:ad:92:ec: dd:05:44:e8:d0:59:90:af:32:cf:b8:e4:fc:b4:d2: 1a:4a:c2:87:4f:e3:f6:b0:ac:cd:1e:7d:e7:45:48: 64:88:cd:a7:5a:d8:72:14:7a:21:55:f5:2b:f9:09: 3b:7b:ed:be:77:aa:ca:5d:2f:7f:79:7b:d4:c1:98: 67:32:cc:f9:cd:3c:90:18:6d:cc:a0:05:19:4a:fb: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FC:08:5B:05:9A:22:F2:0B:6B:14:8E:B1:5E:14:C1:09:2E:D7:E8 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:6d:e1:e1:92:bc:26:af:8e:44:9d:56:bb:39:57:4e:e3:fa: f3:0e:09:f1:ef:c4:df:eb:60:c0:4a:c3:9b:97:8f:fe:53:8b: b8:c8:ae:44:c3:80:17:c7:81:aa:f3:1e:e3:e6:20:82:f1:cf: 9b:9a:1a:2f:33:08:d2:5c:65:0f:58:9b:da:f3:99:d4:4f:d0: de:bb:dd:45:7c:db:31:fb:07:35:28:a4:79:21:c0:09:ea:56: 2f:17:d3:df:d9:7e:f3:53:db:98:6d:e0:eb:c0:0f:2e:22:54: ec:0e:81:b4:ab:ff:3e:52:bb:e9:e2:c1:b3:f5:6b:2b:47:78: 67:22:25:e9:b4:c7:98:90:86:62:7d:b8:b3:7a:62:a8:2c:78: c7:1e:56:dd:fc:db:d7:39:ed:4f:f2:b3:04:53:f1:ff:d8:76: 0e:2d:45:a8:fa:cc:da:b1:73:03:f3:7b:61:dd:78:50:38:3f: 08:83:45:e1:ad:3a:88:4e:0d:f2:aa:e3:90:7e:59:1b:08:d5: c5:d2:fc:86:1f:6d:41:4f:3f:cf:04:0f:fd:13:50:ff:9f:0d: 18:92:c6:09:65:6d:8e:11:a6:2c:79:e3:df:98:f4:7a:fd:34: e6:05:d7:b7:d8:d9:9b:14:96:0b:4b:23:15:fb:8c:d1:44:b2: d5:6f:80:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUxMjA5MDIyNjMwWhcNMjUxMjE2MDIyNjMwWjAYMRYwFAYD VQQDEw02OTM3ODhkNi1hY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjyQRUP9TtGrveCV4NHwzpC7PT00zdvNLIx82mSH+rkKcsWfrl1amVyhKDcu aGSzhD+tHLGWrfV0X+N3ewFoXo8zvTTOlaLHbGvLLbVij1tNcEtUk6xUTdla+lSM 7SwNyjzLtDi7YjjYa7qAPFpgV21MyUZd6wOKpxEuHXCLiJCLzSYpYTCEzj3gU1BB KjamAd4FGNYC2H5P/KPgOGxqxi8KHwi7YrB0hoxpmWyMhg2tkuzdBUTo0FmQrzLP uOT8tNIaSsKHT+P2sKzNHn3nRUhkiM2nWthyFHohVfUr+Qk7e+2+d6rKXS9/eXvU wZhnMsz5zTyQGG3MoAUZSvvNuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf8CFsF miLyC2sUjrFeFMEJLtfoMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1beHhkrwmr45EnVa7OVdO4/rzDgnx78Tf62DASsObl4/+U4u4yK5E w4AXx4Gq8x7j5iCC8c+bmhovMwjSXGUPWJva85nUT9Deu91FfNsx+wc1KKR5IcAJ 6lYvF9Pf2X7zU9uYbeDrwA8uIlTsDoG0q/8+Urvp4sGz9WsrR3hnIiXptMeYkIZi fbizemKoLHjHHlbd/NvXOe1P8rMEU/H/2HYOLUWo+szasXMD83th3XhQOD8Ig0Xh rTqITg3yquOQflkbCNXF0vyGH21BTz/PBA/9E1D/nw0YksYJZW2OEaYseePfmPR6 /TTmBde32NmbFJYLSyMV+4zRRLLVb4Ca -----END CERTIFICATE-----Generated at Thu Dec 11 23:01:19 2025 by rpki-client