This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json) Hash identifier: sPIY57pm+Pfg9KdF1LDiUNfs5H2mBZDf7oYwMxqJZEs= Subject key identifier: 74:7F:3C:D5:73:5D:0E:24:9C:8D:98:75:69:64:A9:93:05:0F:4B:91 Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 09C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft Manifest number: 09B7 Signing time: Sat 20 Dec 2025 19:26:29 +0000 Manifest this update: Sat 20 Dec 2025 19:26:29 +0000 Manifest next update: Sat 27 Dec 2025 19:26:29 +0000 Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: 8nkQphl+xDCrLi13IetLJ8qKI76zgFtxqlI4FBjy4y8=) 2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: DaSUtI7cCFZVDFGMxaMRlNVdC4PaCp9TfzAzL8z3Ug0=) 3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: bvQWUn/Y7cckd5n8bfNYd/nHmrLV3J+fhc4s5WO5wQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2502 (0x9c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: Dec 20 19:26:29 2025 GMT Not After : Dec 27 19:26:29 2025 GMT Subject: CN=6946f865-6ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:ef:7a:10:1f:1c:3b:68:c3:52:d7:29:47: df:cd:de:8b:af:d4:a3:ba:e2:a7:a9:56:39:1b:4c: ad:d2:df:f0:37:a7:ec:d9:49:c7:d5:7a:2f:0e:ff: 2d:6f:83:03:37:16:fb:a0:1f:06:a8:e6:ca:c2:1a: 81:d2:8e:d3:31:40:5a:1b:6e:e6:cf:08:d8:fe:f9: e3:b8:da:96:62:e3:bf:b8:38:72:a1:df:42:ee:06: b6:2c:0f:8c:ef:c0:d5:14:16:b2:82:09:7b:76:05: 78:6f:35:bb:b6:f2:d3:4c:dd:7c:00:05:a9:ba:96: 9c:ea:9e:3e:e0:6c:62:63:93:b3:cf:5a:a2:77:e5: 87:2b:be:20:b4:32:f0:ae:5c:a7:3f:9f:5f:98:95: dc:aa:33:49:0f:45:18:6a:7c:5c:b4:e5:0b:07:5f: b1:ab:ca:f6:1a:d0:79:43:32:f7:98:0c:55:09:60: 25:2d:91:f3:33:0c:bf:e9:d8:59:62:ec:bb:25:9d: a0:e0:35:18:20:a4:0c:8b:91:77:47:b2:15:bb:c7: 1e:36:ab:e7:ad:bc:b4:24:03:9c:98:df:6b:b7:db: fc:b4:9c:f6:36:59:6d:cc:7c:77:4b:8f:0d:3e:6c: 36:da:c6:27:fb:30:77:bd:76:8f:9a:4e:0a:41:04: c0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7F:3C:D5:73:5D:0E:24:9C:8D:98:75:69:64:A9:93:05:0F:4B:91 X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5c:98:5b:05:c6:8c:28:de:d8:46:50:f4:51:92:6f:36:bb: 90:cf:b4:a9:40:5f:36:93:db:f2:5a:22:01:22:d0:41:61:32: 47:b8:c6:3b:ec:21:c4:a4:f5:20:fa:9a:a6:cc:41:a8:07:22: bd:62:7c:ff:af:b9:d3:5c:6f:68:47:14:73:b2:32:26:0d:8b: a2:9b:6d:51:df:44:af:21:1a:e5:e4:96:de:5f:37:a5:fb:69: 11:ba:3c:f0:42:c2:41:66:2d:50:a7:f5:c9:4e:6f:98:57:d7: 84:06:31:86:d9:bd:73:ff:59:5a:41:80:85:73:3b:4c:78:9b: 34:c5:ac:f5:5c:0e:0e:ee:75:d2:5e:86:23:8b:83:e0:fd:ed: 23:36:fb:96:5c:18:be:ac:a4:af:4f:3f:81:59:87:68:8f:5b: 74:fa:c9:02:9f:68:e9:ec:5d:94:d9:02:ad:43:a4:8e:62:e5: b8:ac:ef:0f:7a:ee:e2:b9:94:cb:4c:03:24:35:b1:23:4b:0f: de:e3:cd:c4:c0:25:6e:e3:b5:b8:e8:e2:4c:7c:fb:e9:bf:d1: 21:7f:6a:05:97:d6:15:0e:6d:1d:08:a4:e9:bd:01:63:a6:eb: 9c:60:b2:07:c3:f2:be:57:11:8c:0b:0d:06:10:85:99:3e:3e: b3:36:f8:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjUxMjIwMTkyNjI5WhcNMjUxMjI3MTkyNjI5WjAYMRYwFAYD VQQDDA02OTQ2Zjg2NS02ZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEjvehAfHDtow1LXKUffzd6Lr9SjuuKnqVY5G0yt0t/wN6fs2UnH1XovDv8t b4MDNxb7oB8GqObKwhqB0o7TMUBaG27mzwjY/vnjuNqWYuO/uDhyod9C7ga2LA+M 78DVFBayggl7dgV4bzW7tvLTTN18AAWpupac6p4+4GxiY5Ozz1qid+WHK74gtDLw rlynP59fmJXcqjNJD0UYanxctOULB1+xq8r2GtB5QzL3mAxVCWAlLZHzMwy/6dhZ Yuy7JZ2g4DUYIKQMi5F3R7IVu8ceNqvnrby0JAOcmN9rt9v8tJz2NlltzHx3S48N Pmw22sYn+zB3vXaPmk4KQQTAuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHR/PNVz XQ4knI2YdWlkqZMFD0uRMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDdFRi84QTI5MTA0Njk5MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNI SWRmNFQzVE5Cd3QxWTVBQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPXJhbBcaMKN7YRlD0UZJvNruQz7SpQF82k9vyWiIBItBBYTJHuMY7 7CHEpPUg+pqmzEGoByK9Ynz/r7nTXG9oRxRzsjImDYuim21R30SvIRrl5JbeXzel +2kRujzwQsJBZi1Qp/XJTm+YV9eEBjGG2b1z/1laQYCFcztMeJs0xaz1XA4O7nXS XoYji4Pg/e0jNvuWXBi+rKSvTz+BWYdoj1t0+skCn2jp7F2U2QKtQ6SOYuW4rO8P eu7iuZTLTAMkNbEjSw/e483EwCVu47W46OJMfPvpv9Ehf2oFl9YVDm0dCKTpvQFj puucYLIHw/K+VxGMCw0GEIWZPj6zNviQ -----END CERTIFICATE-----Generated at Mon Dec 22 00:15:40 2025 by rpki-client