This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft File: axGMFY4LjZuYTs3ceLJEgC5HBUc.mft (raw, json) Hash identifier: HV9NqSoYMIXp542x/Aykm/aA6C8CwX8Xk4yosfUKaG0= Subject key identifier: 13:6C:65:1B:C9:92:A5:DA:16:E2:B0:E5:0C:89:BC:F0:9E:DC:07:93 Authority key identifier: 6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47 Certificate issuer: /CN=A91F1F2A/serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft Manifest number: 2B Signing time: Tue 23 Dec 2025 06:29:40 +0000 Manifest this update: Tue 23 Dec 2025 06:29:39 +0000 Manifest next update: Tue 30 Dec 2025 06:29:39 +0000 Files and hashes: 1: axGMFY4LjZuYTs3ceLJEgC5HBUc.crl (hash: jmpE+95RglnKP0kbJjDOt1JRBkvCFjZHHc/CB3bQU4o=) 2: DE6BD6189F8F11F08976857BC4F9AE02.roa (hash: z3P+QwqIAVJ2kDpSoqWTAoJ/rezdLH3YQLa5NxQBxaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1F2A, serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547 Validity Not Before: Dec 23 06:29:39 2025 GMT Not After : Dec 30 06:29:39 2025 GMT Subject: CN=694a36d4-1d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:14:4e:c1:ce:fa:7c:af:8e:23:01:bf:92:39: 05:53:87:92:dc:4e:40:00:bd:75:33:77:48:3a:b8: 16:d1:48:e3:64:56:49:9a:0b:a6:48:1e:0f:bf:c7: 20:14:36:fd:79:f6:c1:45:da:df:26:a0:51:1f:ef: 64:f1:00:61:bf:c8:7f:48:e9:bb:36:c7:50:2e:d6: 69:01:13:a2:74:e8:df:30:f4:22:e3:74:5f:89:d8: 60:5f:72:59:e9:1d:ab:59:e6:e7:11:25:03:7e:25: 2b:99:43:3e:9e:77:12:e1:ec:33:99:b5:f3:c1:e8: c1:7b:b0:0d:bd:07:b3:6e:d4:d2:f0:4a:9a:bc:71: f5:73:ec:36:89:71:bc:ba:fb:11:64:3c:ee:1f:20: e0:b7:e1:fb:42:da:e9:dc:c6:5a:80:e0:9a:4c:67: b8:2b:e7:f3:c4:fd:f6:f7:e3:c7:be:24:74:98:f9: 99:51:5a:26:fc:12:02:54:cf:76:7b:d2:1a:92:c1: 98:65:fb:b5:e3:a6:e5:c5:9d:fb:5e:d4:1c:9e:cb: 28:05:f2:9a:35:b4:1b:09:1a:c2:93:3c:ef:97:af: 9e:64:1a:71:cc:e4:e3:f7:6f:08:cd:6d:d6:60:2e: 1c:6d:ca:0b:fb:3d:62:cb:e4:27:21:5e:3b:01:f8: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6C:65:1B:C9:92:A5:DA:16:E2:B0:E5:0C:89:BC:F0:9E:DC:07:93 X509v3 Authority Key Identifier: keyid:6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c4:4b:98:1c:05:6c:45:a8:5d:74:f6:7a:7d:2a:28:c0:c2: b0:04:6b:a5:5f:9d:48:17:96:bf:57:f0:e1:e1:10:a7:bf:57: ef:6a:24:1a:e4:65:8f:8e:1a:77:b0:d5:dd:d1:46:ff:5d:79: fc:bc:27:0d:02:78:8f:1a:0b:5d:a4:0b:9e:16:56:c0:a0:7e: 0b:a1:41:a1:92:75:9d:d9:fa:24:00:03:d9:fb:ce:02:69:c8: cd:f2:22:83:c3:08:e8:cc:a1:a2:6f:76:66:c0:8c:8c:5b:08: 01:2c:22:d2:b7:9e:8e:ee:d1:0c:12:1e:8c:f9:0e:cc:20:70: b2:66:a1:ad:e2:08:13:9e:35:d6:87:65:b9:fc:6d:92:56:f9: 79:cc:f9:a7:06:87:f4:e1:01:3d:25:4f:d9:74:0b:9c:74:48: e7:1c:9f:bf:c5:0e:26:0d:9f:a2:c4:50:df:ee:61:d1:16:c8: 91:1b:58:25:ce:2b:bf:2e:17:50:f5:29:de:b5:3c:f6:27:65: a5:c4:a7:f8:91:35:2c:9a:41:69:95:b7:23:d2:16:1f:7f:96: 01:ec:d6:d7:a1:a5:4a:02:46:83:c3:40:c0:d9:fd:1f:ab:74: 88:fa:06:63:7b:3b:01:07:63:19:d9:9d:8c:dd:df:b7:bd:29: 0c:15:5e:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUYyQTExMC8GA1UEBRMoNkIxMThDMTU4RTBCOEQ5Qjk4NEVDRERDNzhCMjQ0ODAy RTQ3MDU0NzAeFw0yNTEyMjMwNjI5MzlaFw0yNTEyMzAwNjI5MzlaMBgxFjAUBgNV BAMMDTY5NGEzNmQ0LTFkMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmFE7Bzvp8r44jAb+SOQVTh5LcTkAAvXUzd0g6uBbRSONkVkmaC6ZIHg+/xyAU Nv159sFF2t8moFEf72TxAGG/yH9I6bs2x1Au1mkBE6J06N8w9CLjdF+J2GBfclnp HatZ5ucRJQN+JSuZQz6edxLh7DOZtfPB6MF7sA29B7Nu1NLwSpq8cfVz7DaJcby6 +xFkPO4fIOC34ftC2uncxlqA4JpMZ7gr5/PE/fb348e+JHSY+ZlRWib8EgJUz3Z7 0hqSwZhl+7XjpuXFnfte1ByeyygF8po1tBsJGsKTPO+Xr55kGnHM5OP3bwjNbdZg Lhxtygv7PWLL5CchXjsB+H2tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE2xlG8mS pdoW4rDlDIm88J7cB5MwHwYDVR0jBBgwFoAUaxGMFY4LjZuYTs3ceLJEgC5HBUcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRjJBLzkzMkY4NUJFOUY4 RjExRjBCQjk3NEIyREM0RjlBRTAyL2F4R01GWTRMalp1WVRzM2NlTEpFZ0M1SEJV Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXhHTUZZNExqWnVZVHMzY2VMSkVnQzVIQlVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RjJBLzkzMkY4NUJFOUY4RjExRjBCQjk3NEIyREM0RjlBRTAyL2F4R01GWTRMalp1 WVRzM2NlTEpFZ0M1SEJVYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABzES5gcBWxFqF109np9KijAwrAEa6VfnUgXlr9X8OHhEKe/V+9qJBrk ZY+OGnew1d3RRv9defy8Jw0CeI8aC12kC54WVsCgfguhQaGSdZ3Z+iQAA9n7zgJp yM3yIoPDCOjMoaJvdmbAjIxbCAEsItK3no7u0QwSHoz5DswgcLJmoa3iCBOeNdaH Zbn8bZJW+XnM+acGh/ThAT0lT9l0C5x0SOccn7/FDiYNn6LEUN/uYdEWyJEbWCXO K78uF1D1Kd61PPYnZaXEp/iRNSyaQWmVtyPSFh9/lgHs1tehpUoCRoPDQMDZ/R+r dIj6BmN7OwEHYxnZnYzd37e9KQwVXmY= -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:27 2025 by rpki-client