This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: wnH6QlqBRhPGdiYysmBEC9EfQv9KC8PISjtMEGQlGA0= Subject key identifier: 6D:9C:43:EA:D8:8C:F3:9D:5C:17:36:3D:B7:FA:C4:5E:A8:60:88:60 Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 1635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 1627 Signing time: Mon 22 Dec 2025 16:28:43 +0000 Manifest this update: Mon 22 Dec 2025 16:28:43 +0000 Manifest next update: Mon 29 Dec 2025 16:28:43 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: Xj1kg22Xank8OIabSrnf00aKTKpB4bFIXMMomstd+PA=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: jy3Wft/F/5UxXAXx08sOlZkwBarb1srk+Xi5m/F+Ac0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5685 (0x1635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: Dec 22 16:28:43 2025 GMT Not After : Dec 29 16:28:43 2025 GMT Subject: CN=694971bb-1278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:f5:16:b0:3e:e5:83:16:33:e5:39:72:f2: f7:94:b4:9a:26:b5:7d:66:03:87:a2:7c:19:9c:a1: 22:a8:fc:f4:d9:d5:57:35:95:80:23:7c:d8:0d:d5: 8f:8d:51:b0:61:64:51:43:0a:97:78:4a:68:46:b2: 37:4a:71:f4:c4:7b:68:75:ae:c9:fa:2e:7a:dd:0b: 40:2c:16:6a:9e:25:ab:13:ed:0c:d5:96:15:5b:d3: 77:77:11:e6:41:a0:b8:f2:4d:23:c8:22:b8:81:13: c1:4b:63:b2:68:12:24:c3:9b:49:7b:78:75:9c:86: ac:30:8f:4d:cb:1b:ec:e5:cc:7e:c4:5e:d5:5b:02: 71:39:a4:06:e9:0f:18:15:94:a3:83:f3:a2:02:5b: c1:11:a0:3d:b6:a0:94:51:01:14:34:e7:77:6a:73: 07:d1:28:13:49:45:99:e3:b1:52:6b:d0:79:31:fa: be:51:76:05:a3:00:2d:05:50:fe:33:cf:06:00:13: 25:bc:69:5f:a0:16:34:ce:46:36:e3:90:68:23:8c: df:68:20:29:70:57:41:bb:86:71:65:8d:52:39:50: fb:2a:22:fb:dd:07:3f:6a:2e:4c:e9:e0:fb:ca:7a: fd:14:6a:aa:4c:26:d6:cb:cc:0c:cb:b9:56:c6:d1: 1b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9C:43:EA:D8:8C:F3:9D:5C:17:36:3D:B7:FA:C4:5E:A8:60:88:60 X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:25:7a:50:d7:8a:79:69:e9:53:54:3d:a4:72:5a:6b:4f:6e: cf:e7:25:7a:c9:a6:c4:9d:e8:12:21:01:70:72:50:77:45:28: b1:79:86:79:9c:52:80:25:ca:0c:1f:c5:84:34:ce:0f:43:50: dd:60:bc:62:9d:0c:cd:a9:7b:a2:36:a6:90:7e:19:7a:8a:fa: c6:0c:1c:22:1c:1c:f1:bc:cb:10:c8:9a:1e:a7:7a:a2:84:67: 56:3b:8f:b0:e0:bb:cf:3c:0e:3c:72:eb:01:6f:3f:6a:fb:30: 82:35:02:d0:99:1f:aa:22:6a:0c:b3:09:f0:9d:e5:fa:11:43: aa:cf:4b:57:93:93:07:37:4c:75:f5:94:dc:3f:db:8f:e5:04: 08:87:4c:5f:0e:94:2e:45:1a:8f:ad:d2:30:13:6b:64:89:58: 38:b1:d1:03:d6:ab:f1:25:5a:8d:c0:be:73:b1:01:2a:e9:3b: ee:7d:e9:dc:6b:0b:23:87:00:75:ff:a2:dd:51:7d:0b:38:60: 72:18:62:d7:e6:8a:6d:66:4a:b7:db:1e:f5:9b:e7:8e:ac:aa: d1:65:fe:d9:87:8f:0a:e2:b7:26:6f:80:a1:47:af:c2:dd:d0: d3:e9:c7:74:7b:1f:87:0e:74:4f:50:28:28:58:b4:4e:08:ae: be:1e:8b:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjUxMjIyMTYyODQzWhcNMjUxMjI5MTYyODQzWjAYMRYwFAYD VQQDDA02OTQ5NzFiYi0xMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvn1FrA+5YMWM+U5cvL3lLSaJrV9ZgOHonwZnKEiqPz02dVXNZWAI3zYDdWP jVGwYWRRQwqXeEpoRrI3SnH0xHtoda7J+i563QtALBZqniWrE+0M1ZYVW9N3dxHm QaC48k0jyCK4gRPBS2OyaBIkw5tJe3h1nIasMI9Nyxvs5cx+xF7VWwJxOaQG6Q8Y FZSjg/OiAlvBEaA9tqCUUQEUNOd3anMH0SgTSUWZ47FSa9B5Mfq+UXYFowAtBVD+ M88GABMlvGlfoBY0zkY245BoI4zfaCApcFdBu4ZxZY1SOVD7KiL73Qc/ai5M6eD7 ynr9FGqqTCbWy8wMy7lWxtEblwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2cQ+rY jPOdXBc2Pbf6xF6oYIhgMB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcJXpQ14p5aelTVD2kclprT27P5yV6yabEnegSIQFwclB3RSixeYZ5 nFKAJcoMH8WENM4PQ1DdYLxinQzNqXuiNqaQfhl6ivrGDBwiHBzxvMsQyJoep3qi hGdWO4+w4LvPPA48cusBbz9q+zCCNQLQmR+qImoMswnwneX6EUOqz0tXk5MHN0x1 9ZTcP9uP5QQIh0xfDpQuRRqPrdIwE2tkiVg4sdED1qvxJVqNwL5zsQEq6Tvufenc awsjhwB1/6LdUX0LOGByGGLX5optZkq32x71m+eOrKrRZf7Zh48K4rcmb4ChR6/C 3dDT6cd0ex+HDnRPUCgoWLROCK6+Hovg -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:58 2025 by rpki-client