This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft File: aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json) Hash identifier: X7z/CXHiXcSKio79uvu2CKC8sEP6hfkzpJRaPHm64MI= Subject key identifier: 45:26:C0:C2:16:A7:C0:A7:62:A2:90:98:0A:D1:65:A5:EE:7B:3B:8D Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft Manifest number: 0147 Signing time: Fri 05 Dec 2025 02:29:10 +0000 Manifest this update: Fri 05 Dec 2025 02:29:10 +0000 Manifest next update: Fri 12 Dec 2025 02:29:10 +0000 Files and hashes: 1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: bvi8NvhivKMFB4oLJJ1y02EFFTKOWLJZxjqpopBE+8Q=) 2: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (hash: WBqt8bWcN7f1UBdrAmgdhcX9VMn7anvz2CtIGPkbbz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Validity Not Before: Dec 5 02:29:10 2025 GMT Not After : Dec 12 02:29:10 2025 GMT Subject: CN=69324376-f121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:11:e8:a0:2d:07:a0:f3:18:6c:35:1d:72: 74:65:a3:89:a2:c4:c9:e5:34:f8:d5:7a:7a:eb:58: 0d:b1:72:f7:87:86:ea:bc:54:9b:69:88:f9:2b:69: 70:4d:2b:1c:90:95:4e:e7:08:1b:c5:40:97:ec:2c: 96:f0:47:26:a1:38:4a:64:22:ac:8a:51:87:1c:95: a0:a7:c0:87:40:ab:b5:62:62:e0:76:93:53:3b:44: cc:68:53:87:c1:11:c6:f3:e1:0c:e4:db:a6:47:cc: ac:7c:84:82:8a:7d:5d:a1:88:5e:63:85:22:d5:c4: c4:3e:2a:8b:b5:52:31:3b:1a:01:69:61:22:a7:ac: 14:cd:ca:da:77:d7:92:00:40:10:dd:e7:62:b8:2a: 9d:37:b9:3f:56:2d:43:e7:f4:7c:dd:f3:48:ab:6d: 0a:1c:2d:4e:f7:a0:94:b7:30:a8:b9:cd:42:36:8e: c9:ac:c5:e3:7d:3b:e2:6c:bc:c8:c6:6a:40:e9:84: bd:35:59:b6:74:7b:db:e7:c5:72:8f:a8:4d:9c:a3: b4:9f:bb:d8:b4:72:a1:fd:8f:08:94:64:03:b8:54: c8:43:f5:f8:62:d6:eb:57:3d:0c:11:4b:0f:6e:3b: 9c:20:f8:6b:58:c0:d7:a9:88:bf:b5:25:b9:17:90: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:26:C0:C2:16:A7:C0:A7:62:A2:90:98:0A:D1:65:A5:EE:7B:3B:8D X509v3 Authority Key Identifier: keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4f:c5:de:9c:de:bb:2b:6a:06:8c:ac:b1:8f:eb:50:1d:fa: 0a:2a:0c:8d:01:b9:b8:fc:0e:5e:cf:1b:ca:d4:ba:44:8a:fa: 43:e0:43:5f:c7:21:2e:32:6d:d6:e7:73:a8:e3:ab:cf:cf:b5: f1:5a:e3:7a:72:9a:cf:4a:d0:6c:6b:b9:a2:b9:4b:a8:87:59: 5b:de:81:81:eb:5d:aa:18:c4:dd:61:58:f5:4e:15:5c:1a:5d: 16:f8:31:0a:81:ea:63:da:6d:d7:c9:ef:37:cc:98:2d:a8:f4: 23:02:33:04:3f:67:d9:b0:fb:6a:4d:bf:ca:eb:7c:60:17:f9: 0e:bf:ed:2c:de:35:e7:d9:eb:12:93:93:9f:6a:d5:96:4f:c6: 24:e5:35:05:a7:94:1a:73:33:dd:45:1b:ea:81:40:3c:19:79: c2:dc:7d:28:48:fe:f3:5d:59:db:77:bc:2b:6f:62:dd:9c:8d: 45:80:c5:c5:1f:53:43:ce:82:7b:7d:1b:27:6c:18:85:e3:e2: 5c:44:c4:68:bf:b2:3b:70:38:83:21:d0:c7:32:cd:8c:da:2a: 04:ca:aa:63:2c:ac:ef:ae:7e:0d:65:b3:9d:60:22:87:ee:f8: d2:2f:ca:0d:5d:7c:9b:bb:82:7b:c2:e0:52:21:bd:fd:a6:6a: 9a:29:01:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyM0YxMTAvBgNVBAUTKDY5QTk5M0ExODgyMTk4QUNBRDVGMUNFQTM1MDY2QkFG NDlFN0Q1RDAwHhcNMjUxMjA1MDIyOTEwWhcNMjUxMjEyMDIyOTEwWjAYMRYwFAYD VQQDEw02OTMyNDM3Ni1mMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhgR6KAtB6DzGGw1HXJ0ZaOJosTJ5TT41Xp661gNsXL3h4bqvFSbaYj5K2lw TSsckJVO5wgbxUCX7CyW8EcmoThKZCKsilGHHJWgp8CHQKu1YmLgdpNTO0TMaFOH wRHG8+EM5NumR8ysfISCin1doYheY4Ui1cTEPiqLtVIxOxoBaWEip6wUzcrad9eS AEAQ3ediuCqdN7k/Vi1D5/R83fNIq20KHC1O96CUtzCouc1CNo7JrMXjfTvibLzI xmpA6YS9NVm2dHvb58Vyj6hNnKO0n7vYtHKh/Y8IlGQDuFTIQ/X4YtbrVz0MEUsP bjucIPhrWMDXqYi/tSW5F5ChdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUmwMIW p8CnYqKQmArRZaXuezuNMB8GA1UdIwQYMBaAFGmpk6GIIZisrV8c6jUGa69J59XQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjIzRi82NzBDMkYyQ0Uy OUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1LeXRYeHpxTlFacnIwbm4x ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhbVRvWWdobUt5dFh4enFOUVpycjBubjFkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjIzRi82NzBDMkYyQ0UyOUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1L eXRYeHpxTlFacnIwbm4xZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6T8XenN67K2oGjKyxj+tQHfoKKgyNAbm4/A5ezxvK1LpEivpD4ENf xyEuMm3W53Oo46vPz7XxWuN6cprPStBsa7miuUuoh1lb3oGB612qGMTdYVj1ThVc Gl0W+DEKgepj2m3Xye83zJgtqPQjAjMEP2fZsPtqTb/K63xgF/kOv+0s3jXn2esS k5OfatWWT8Yk5TUFp5QaczPdRRvqgUA8GXnC3H0oSP7zXVnbd7wrb2LdnI1FgMXF H1NDzoJ7fRsnbBiF4+JcRMRov7I7cDiDIdDHMs2M2ioEyqpjLKzvrn4NZbOdYCKH 7vjSL8oNXXybu4J7wuBSIb39pmqaKQHI -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:37 2025 by rpki-client