This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json) Hash identifier: lh0QrvlRrxxa6yeU6q3vpt0Yo6Ja1H+YUPGlqST6B2Q= Subject key identifier: CD:1F:49:9A:8D:04:E4:D9:2B:9E:2D:EE:0D:CD:FD:6C:46:E3:1E:56 Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft Manifest number: 09AF Signing time: Thu 04 Dec 2025 19:14:44 +0000 Manifest this update: Thu 04 Dec 2025 19:14:44 +0000 Manifest next update: Thu 11 Dec 2025 19:14:44 +0000 Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: jZRAZuNHczEEWr4ggqb8I7Mb2b8oCq7OZqOCFpRz4mQ=) 2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: DaSUtI7cCFZVDFGMxaMRlNVdC4PaCp9TfzAzL8z3Ug0=) 3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: bvQWUn/Y7cckd5n8bfNYd/nHmrLV3J+fhc4s5WO5wQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: Dec 4 19:14:44 2025 GMT Not After : Dec 11 19:14:44 2025 GMT Subject: CN=6931dda4-6771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:73:00:fa:47:6d:37:f1:f8:83:0c:79:e2:f8: c5:cd:a9:0f:ee:03:88:a2:94:7e:a9:23:e6:d2:96: 4a:87:64:4c:4c:2b:d6:06:4d:67:99:9d:da:87:66: b4:91:25:35:f2:d6:d4:71:d2:79:f6:0c:4b:a0:6c: f3:c2:c8:cb:f0:d9:b6:0a:e9:7d:63:00:59:28:ba: a9:c5:11:9b:17:f7:b2:0b:6b:cb:09:17:dd:8c:62: 55:06:4f:bd:43:fb:54:df:cc:0a:c7:17:70:e1:f7: 5f:7b:f1:0b:12:99:26:b7:60:c9:7e:8a:f1:84:d2: 8b:51:da:d3:7c:69:62:71:5d:35:25:72:38:aa:3d: d7:b5:df:7f:8a:3a:c0:db:46:58:a5:22:ca:ec:17: 6c:54:6f:bf:d4:34:d6:a6:13:f9:de:48:c6:9d:64: a4:cc:57:0d:9d:e2:56:58:a2:fc:ca:36:24:14:6c: d9:cc:d8:d2:d3:25:3c:e2:a2:c1:02:d5:49:46:61: 5f:ed:db:87:c0:ee:35:99:dd:de:4a:07:e8:83:86: 45:91:5d:b7:f6:84:c1:20:fa:68:7b:2a:96:e1:f8: 76:21:d6:a6:9b:8f:73:eb:06:ca:66:b7:66:75:ec: d4:2e:e6:51:7d:c7:77:c0:d3:9f:c1:92:73:ea:1d: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1F:49:9A:8D:04:E4:D9:2B:9E:2D:EE:0D:CD:FD:6C:46:E3:1E:56 X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fd:fe:31:c5:85:8a:44:c2:59:bd:2b:34:67:3a:f2:4f:9d: de:f6:51:80:c4:9b:12:8d:7d:87:73:4e:cd:3b:e6:79:29:9a: 86:fd:f2:e1:1a:33:2d:d1:72:03:57:e7:36:08:9d:61:e7:8c: 0c:93:7c:23:9a:56:99:b5:44:d9:4f:53:7c:c5:57:6a:57:4c: 97:1d:e2:7b:5e:57:8b:0c:ea:8b:aa:3e:63:1a:61:f2:af:8c: d7:77:8b:14:bc:f8:f0:f2:cc:f6:75:68:58:b1:e2:33:95:41: 5c:a5:5b:4a:fc:ae:ed:ef:b9:b3:32:53:60:dc:e0:79:d4:e0: 42:4c:16:b4:c5:77:4f:6f:87:7a:31:61:79:67:cd:82:a1:59: b0:1a:29:4c:86:1b:b1:52:21:e2:a5:3d:48:14:8a:6f:2c:9e: 47:35:65:4d:d8:02:78:c7:cf:a3:6b:f0:0d:79:61:f8:3f:d2: 25:6b:5f:c9:3c:08:fb:5b:e8:7a:87:06:63:18:01:64:34:53: 4c:2e:62:d0:08:94:72:78:ba:af:66:f6:61:52:5a:2b:33:3c: 35:70:4f:84:d6:61:dd:27:e8:4e:54:0d:5f:5c:04:a8:9e:04: dc:50:84:3e:67:1b:ee:a6:8f:70:d7:1d:5b:95:df:c6:20:e4: a4:a5:f2:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjUxMjA0MTkxNDQ0WhcNMjUxMjExMTkxNDQ0WjAYMRYwFAYD VQQDEw02OTMxZGRhNC02NzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HMA+kdtN/H4gwx54vjFzakP7gOIopR+qSPm0pZKh2RMTCvWBk1nmZ3ah2a0 kSU18tbUcdJ59gxLoGzzwsjL8Nm2Cul9YwBZKLqpxRGbF/eyC2vLCRfdjGJVBk+9 Q/tU38wKxxdw4fdfe/ELEpkmt2DJforxhNKLUdrTfGlicV01JXI4qj3Xtd9/ijrA 20ZYpSLK7BdsVG+/1DTWphP53kjGnWSkzFcNneJWWKL8yjYkFGzZzNjS0yU84qLB AtVJRmFf7duHwO41md3eSgfog4ZFkV239oTBIPpoeyqW4fh2Idamm49z6wbKZrdm dezULuZRfcd3wNOfwZJz6h23PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0fSZqN BOTZK54t7g3N/WxG4x5WMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDdFRi84QTI5MTA0Njk5MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNI SWRmNFQzVE5Cd3QxWTVBQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7/f4xxYWKRMJZvSs0ZzryT53e9lGAxJsSjX2Hc07NO+Z5KZqG/fLh GjMt0XIDV+c2CJ1h54wMk3wjmlaZtUTZT1N8xVdqV0yXHeJ7XleLDOqLqj5jGmHy r4zXd4sUvPjw8sz2dWhYseIzlUFcpVtK/K7t77mzMlNg3OB51OBCTBa0xXdPb4d6 MWF5Z82CoVmwGilMhhuxUiHipT1IFIpvLJ5HNWVN2AJ4x8+ja/ANeWH4P9Ila1/J PAj7W+h6hwZjGAFkNFNMLmLQCJRyeLqvZvZhUlorMzw1cE+E1mHdJ+hOVA1fXASo ngTcUIQ+Zxvupo9w1x1bld/GIOSkpfKV -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:52 2025 by rpki-client