This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft File: aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json) Hash identifier: o+UJZy8ZPFL+P40jEDX7FZqRRHIiJURxwajaxzJSRaI= Subject key identifier: 1F:CA:08:E1:B2:49:84:58:69:74:37:18:79:7A:0D:47:CF:BC:B2:0D Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft Manifest number: 0426 Signing time: Thu 04 Dec 2025 22:50:20 +0000 Manifest this update: Thu 04 Dec 2025 22:50:19 +0000 Manifest next update: Thu 11 Dec 2025 22:50:19 +0000 Files and hashes: 1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: /EUt6nvt3mt3xdAnR6xWr/HbLnNTgpciUdCWq6TSPmQ=) 2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: 3IMIlDIIJ2OW6DDbM2+fc2GlxtLv0j04UxGtHanf/68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Validity Not Before: Dec 4 22:50:19 2025 GMT Not After : Dec 11 22:50:19 2025 GMT Subject: CN=6932102c-5e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:73:ba:8c:3c:c9:05:bd:3f:ed:63:38:e9: 79:00:fa:9a:77:2d:33:99:55:c8:64:06:81:95:5a: 07:8a:70:4c:95:30:1c:8d:c2:65:0d:18:fa:56:14: eb:b9:dd:24:e9:c0:94:fa:b6:cf:4c:44:c6:e5:14: 66:cd:e0:36:28:e6:b2:e0:98:e1:14:84:bf:cf:43: ed:b7:8f:a4:94:bd:a1:7f:7b:c3:bf:ad:a0:d7:ac: 4c:2e:3f:ae:92:04:40:5f:60:df:8c:a7:25:6a:25: 5a:bc:d1:ce:2f:59:89:24:17:c5:ce:87:61:1b:fe: 13:1f:bb:37:11:69:75:01:03:29:01:a5:9a:65:c4: c9:cb:bf:2d:04:b7:76:db:d1:e7:f5:87:18:4f:ee: c9:c5:9d:d9:27:1c:2f:95:a7:ab:00:c5:69:e0:9a: db:9e:ab:85:b0:5c:12:e9:37:38:78:8b:aa:4b:51: 95:92:75:f3:14:53:17:ef:5d:9e:f7:de:af:17:58: 6e:84:f8:6d:56:ee:2d:44:8b:5e:db:6a:62:a7:c7: 88:f0:e5:54:ae:33:55:86:cc:28:12:b1:28:72:c5: e0:64:69:48:0c:d4:c9:e9:e2:d6:fd:5a:a7:4d:13: 61:cd:88:d4:70:ef:a4:de:e6:e9:91:b5:26:14:d2: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CA:08:E1:B2:49:84:58:69:74:37:18:79:7A:0D:47:CF:BC:B2:0D X509v3 Authority Key Identifier: keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:19:c2:bb:95:b5:ef:f9:ad:7c:00:c9:9d:62:a4:ff:b9:5a: ff:3e:71:e7:ac:d7:bc:5e:64:07:e6:18:af:64:3b:da:35:d0: 02:37:82:54:7b:cc:d3:0c:97:15:66:d4:75:6c:9c:67:95:1b: e5:4f:b1:10:da:4d:b6:3a:2d:53:6c:75:38:63:45:35:07:bf: 33:1e:a1:1a:71:c1:69:df:11:b6:d7:bc:e5:72:e5:3b:77:4a: 39:e8:71:9a:d2:61:38:de:7d:5c:39:76:dc:8f:91:00:2d:4e: fa:4d:3e:52:1b:19:f4:83:94:40:57:62:dd:bb:b8:ac:e3:92: 89:59:32:d7:20:a1:13:b6:d1:02:82:2e:97:6b:9a:3c:28:c0: 74:81:76:30:d3:b5:48:c3:d6:00:ff:8e:52:e3:aa:b2:58:6f: ae:a0:ea:14:90:91:31:20:5e:61:f6:df:a9:bf:d7:87:98:31: 53:34:ec:58:10:3f:32:c4:e1:4b:b1:9c:41:f6:5b:59:20:38: 98:1c:0a:0f:b6:4a:05:ff:db:f0:03:5a:9a:31:25:62:c5:0f: 37:c5:e5:ed:c6:30:57:f3:b8:21:56:9c:35:84:fc:0a:9a:37: ca:7c:93:bf:2e:84:e8:b8:d7:4d:9b:4d:cb:cf:7c:9d:29:06: 9c:a0:e6:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB MUE2RkVBM0EwHhcNMjUxMjA0MjI1MDE5WhcNMjUxMjExMjI1MDE5WjAYMRYwFAYD VQQDEw02OTMyMTAyYy01ZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwxzuow8yQW9P+1jOOl5APqady0zmVXIZAaBlVoHinBMlTAcjcJlDRj6VhTr ud0k6cCU+rbPTETG5RRmzeA2KOay4JjhFIS/z0Ptt4+klL2hf3vDv62g16xMLj+u kgRAX2DfjKclaiVavNHOL1mJJBfFzodhG/4TH7s3EWl1AQMpAaWaZcTJy78tBLd2 29Hn9YcYT+7JxZ3ZJxwvlaerAMVp4JrbnquFsFwS6Tc4eIuqS1GVknXzFFMX712e 996vF1huhPhtVu4tRIte22pip8eI8OVUrjNVhswoErEocsXgZGlIDNTJ6eLW/Vqn TRNhzYjUcO+k3ubpkbUmFNLcSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/KCOGy SYRYaXQ3GHl6DUfPvLINMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODlBMi9GQjUyRjY0RThFNjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFR b0RlQkJTcmQ0dXlocHY2am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgGcK7lbXv+a18AMmdYqT/uVr/PnHnrNe8XmQH5hivZDvaNdACN4JU e8zTDJcVZtR1bJxnlRvlT7EQ2k22Oi1TbHU4Y0U1B78zHqEaccFp3xG217zlcuU7 d0o56HGa0mE43n1cOXbcj5EALU76TT5SGxn0g5RAV2Ldu7is45KJWTLXIKETttEC gi6Xa5o8KMB0gXYw07VIw9YA/45S46qyWG+uoOoUkJExIF5h9t+pv9eHmDFTNOxY ED8yxOFLsZxB9ltZIDiYHAoPtkoF/9vwA1qaMSVixQ83xeXtxjBX87ghVpw1hPwK mjfKfJO/LoTouNdNm03Lz3ydKQacoObZ -----END CERTIFICATE-----Generated at Sat Dec 6 20:59:48 2025 by rpki-client