This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: JMSsCtr7BiL4SVbuXEPKtwjMb/hdv11efQEzxuFq52w= Subject key identifier: DD:AA:10:77:D4:D7:66:9F:56:97:DB:64:2D:B1:F3:B9:89:46:AD:44 Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 020A Signing time: Fri 05 Dec 2025 01:09:14 +0000 Manifest this update: Fri 05 Dec 2025 01:09:14 +0000 Manifest next update: Fri 12 Dec 2025 01:09:14 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: S6G3tTTs9drCJQMB0xK7AqeY8C3pxEzyOfXdpoXqsmY=) 2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: 8RemKyfJQtXvAOB/Ei52MDI9KMaFn3vaXMJC+OL2BTo=) 3: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: /H0+uJjrBUM5k1a0PlilTjkv6OXrTMlJFAf/4vjgSHc=) 4: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=) 5: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: 6GO7eV9ptg4bEhjgmfPj3OiDNEEWB+tcYPU19G/hzs4=) 6: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: 1iYx6AnDG5k3WAo1cEbcn3Zch3QKy9Aj+tVhGhOpm2M=) 7: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: xJf9OjyZ9tl22O94Y+hCu+z+3Ka7jvHkbMt39lHsOuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Dec 5 01:09:14 2025 GMT Not After : Dec 12 01:09:14 2025 GMT Subject: CN=693230ba-b0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:c5:a3:3e:96:bb:9e:58:e0:e6:d4:8e:b6: 2c:f6:2c:2b:4e:ae:c2:62:d1:73:ce:b5:ef:ad:f4: f9:3d:0a:60:fa:42:0b:b2:e5:c0:c9:35:ce:94:30: 15:38:25:bc:90:10:2a:13:aa:93:94:fa:91:42:cc: 9a:d2:d6:2e:cc:a6:0b:b2:ee:6a:27:42:5a:8f:d7: a2:4b:43:5e:f2:f4:32:50:37:b1:91:77:95:e4:23: 95:4e:54:e0:f7:4a:01:79:39:d6:a5:1e:80:95:42: f2:ba:d2:d4:cc:2f:1a:6e:72:ef:3c:8e:f9:c7:11: 41:d1:d9:c9:09:61:23:37:8b:45:0f:2c:64:cc:00: 51:73:01:65:ef:58:42:74:b1:dc:53:3f:e7:0a:08: 8e:5a:48:ab:a0:dc:45:6d:46:e8:a6:60:09:f5:c8: 48:4e:8e:1f:ac:93:5c:9a:5b:87:8c:22:e9:69:21: 03:41:eb:b2:eb:9d:33:65:82:32:4a:7c:9c:24:52: c2:12:dc:06:81:84:a3:1f:c0:da:79:80:50:81:23: 84:03:c3:29:e6:d7:5b:ba:c4:26:73:50:dc:4f:d0: 0e:ac:3c:bd:64:85:8e:10:26:ab:10:2b:09:2c:ae: 5f:cc:b8:10:51:4f:ef:66:5f:b4:42:27:46:11:2a: 7f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AA:10:77:D4:D7:66:9F:56:97:DB:64:2D:B1:F3:B9:89:46:AD:44 X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5e:99:c5:4a:25:3f:fe:26:a4:e6:17:d3:a8:d6:b9:3d:15: ac:8b:82:1f:d9:cf:07:69:25:de:88:46:92:23:6f:b0:11:e6: 97:7f:5c:1d:6f:91:c9:b2:ec:c8:d8:aa:26:d9:9c:d3:a7:70: 46:49:4f:2d:01:19:45:c4:8d:e6:47:7b:97:e2:9d:99:a1:1e: a0:81:ed:fb:63:ca:2f:1e:b5:6f:11:a1:f5:5e:47:21:f9:98: 83:6d:51:39:fd:12:fa:31:6e:d8:46:cf:a5:32:11:ff:21:95: a5:6f:90:a0:f0:a5:c7:68:16:98:1e:b4:7f:16:49:c0:48:c9: 67:f3:24:98:27:25:80:d6:b4:62:73:08:b8:78:a7:a8:77:7e: d2:ed:ae:e1:a3:b7:dc:93:10:8d:b9:a7:00:c3:b9:f0:62:94: fb:58:24:7b:a2:98:97:8b:f5:c0:6d:ce:47:b2:84:c6:53:3e: cd:7c:76:76:e6:a0:e1:ba:26:54:1f:39:ab:4b:d9:98:09:93: 3c:c0:72:51:f6:0c:2b:b8:73:56:c3:e7:c9:3e:04:57:bc:60: 0e:90:d2:a6:8a:a2:ec:18:af:50:db:da:30:b7:27:36:48:e9: d6:e7:aa:eb:ab:c0:45:c4:46:f1:07:2b:be:4d:b4:20:e6:f0: 94:b4:88:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjUxMjA1MDEwOTE0WhcNMjUxMjEyMDEwOTE0WjAYMRYwFAYD VQQDEw02OTMyMzBiYS1iMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyfFoz6Wu55Y4ObUjrYs9iwrTq7CYtFzzrXvrfT5PQpg+kILsuXAyTXOlDAV OCW8kBAqE6qTlPqRQsya0tYuzKYLsu5qJ0Jaj9eiS0Ne8vQyUDexkXeV5COVTlTg 90oBeTnWpR6AlULyutLUzC8abnLvPI75xxFB0dnJCWEjN4tFDyxkzABRcwFl71hC dLHcUz/nCgiOWkiroNxFbUbopmAJ9chITo4frJNcmluHjCLpaSEDQeuy650zZYIy SnycJFLCEtwGgYSjH8DaeYBQgSOEA8Mp5tdbusQmc1DcT9AOrDy9ZIWOECarECsJ LK5fzLgQUU/vZl+0QidGESp/owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2qEHfU 12afVpfbZC2x87mJRq1EMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOXpnFSiU//iak5hfTqNa5PRWsi4If2c8HaSXeiEaSI2+wEeaXf1wd b5HJsuzI2Kom2ZzTp3BGSU8tARlFxI3mR3uX4p2ZoR6gge37Y8ovHrVvEaH1Xkch +ZiDbVE5/RL6MW7YRs+lMhH/IZWlb5Cg8KXHaBaYHrR/FknASMln8ySYJyWA1rRi cwi4eKeod37S7a7ho7fckxCNuacAw7nwYpT7WCR7opiXi/XAbc5HsoTGUz7NfHZ2 5qDhuiZUHzmrS9mYCZM8wHJR9gwruHNWw+fJPgRXvGAOkNKmiqLsGK9Q29owtyc2 SOnW56rrq8BFxEbxByu+TbQg5vCUtIhZ -----END CERTIFICATE-----Generated at Sun Dec 7 01:08:56 2025 by rpki-client