This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft File: aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft (raw, json) Hash identifier: 6hRs4A3m84aab980Y7CNi87aiXszLeTMNlZJ2o8pRR0= Subject key identifier: 4D:3C:DB:04:F9:F1:04:0A:C7:E6:34:3C:58:34:88:FE:AA:C3:DF:66 Authority key identifier: 68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D Certificate issuer: /CN=A913B243/serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft Manifest number: 11 Signing time: Fri 05 Dec 2025 05:45:38 +0000 Manifest this update: Fri 05 Dec 2025 05:45:37 +0000 Manifest next update: Fri 12 Dec 2025 05:45:37 +0000 Files and hashes: 1: aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl (hash: /m6bvRCCgA1KL6t9yimD65ANj9uWINKoD91rp3GMhWU=) 2: F800618EBBA511F0B0EA597FC4F9AE02.roa (hash: Yw6c7WUM5QYHlwQT+zvf4O1cT4XiBTAyty4UdU8rvsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B243, serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D Validity Not Before: Dec 5 05:45:37 2025 GMT Not After : Dec 12 05:45:37 2025 GMT Subject: CN=69327181-f1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d7:be:ef:a6:94:5a:d2:7e:42:ab:aa:60:66: 9d:a1:86:84:a4:0a:85:4c:90:62:c3:3d:17:38:45: 3b:d2:43:0b:82:b0:82:c8:46:70:57:c4:44:c8:18: a8:c7:56:b6:4b:c5:6b:84:8e:a3:ca:a4:76:01:7b: f1:af:dc:c6:5f:a5:63:f3:82:bc:84:5b:8f:47:bd: 9c:26:6d:49:71:48:24:55:fc:b1:a8:0e:08:b4:12: 23:10:97:d6:eb:e9:97:b2:76:d6:de:36:b6:d4:51: c4:dd:79:0d:fd:85:50:7f:6e:b1:2f:db:28:80:62: 3f:2f:37:b7:93:43:db:03:d6:50:a5:f6:6e:c4:4c: 36:e6:59:a5:6d:f9:af:72:33:fc:82:8a:3c:1d:d9: d4:e0:3a:2f:f2:60:20:f7:7c:03:98:af:3b:1e:2b: 26:5d:c8:1d:7d:6c:aa:56:71:18:c2:32:30:15:83: 73:c5:ec:3d:fe:83:59:30:84:81:6d:13:74:ad:aa: e7:ef:4c:fd:be:c4:af:89:62:3e:59:da:f8:5b:d3: 7f:ea:c0:55:da:60:7e:65:92:b5:d7:fe:9b:74:db: c4:44:73:a9:b4:f2:f4:57:e0:5a:89:4a:df:e9:f9: f2:b5:b9:39:2d:d3:be:c1:98:b1:1b:3c:c8:90:ee: d9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3C:DB:04:F9:F1:04:0A:C7:E6:34:3C:58:34:88:FE:AA:C3:DF:66 X509v3 Authority Key Identifier: keyid:68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:fe:9d:e0:d5:96:03:50:3a:f0:73:15:3b:f6:df:a3:74:48: 28:76:db:ff:2a:15:fd:e3:2d:35:5e:d7:5e:f4:93:6c:85:b4: be:da:6d:d6:9e:28:6c:f8:61:0c:6e:c3:4f:5a:87:a5:a8:41: 28:b0:b3:0f:fa:10:41:13:8d:04:12:b2:e3:87:fd:81:71:c2: 61:7a:e2:c8:dd:d0:1c:00:84:d2:17:95:5f:9b:b9:26:16:be: 31:78:40:1f:a4:88:bc:a1:60:2b:2c:72:d2:0e:fb:1a:ee:fb: c7:bc:13:85:27:aa:8c:f7:19:9e:ee:fc:02:7c:b0:df:16:ab: 1b:8f:06:16:45:1b:97:c1:5c:fb:fc:77:3a:22:cc:1e:ba:85: fe:fe:81:a2:be:f3:f1:f5:8e:2e:d7:d2:9c:ec:b7:3e:bf:83: 4e:a0:16:4c:ea:ec:4a:a0:68:56:ca:4e:52:e0:35:83:1c:bd: c7:f9:5c:4a:8a:c4:71:7c:1f:6a:40:5f:c7:41:c8:0f:4a:b4: 17:eb:a9:cd:ef:49:8f:15:e5:85:11:ac:17:66:63:5a:61:32: 49:f1:f7:a2:a3:e2:27:b4:41:39:c0:7d:c4:e1:7b:fa:67:66: 1b:64:58:58:13:84:78:78:5e:e6:60:0a:47:f2:85:c2:47:5c: 21:c9:27:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjI0MzExMC8GA1UEBRMoNjg3RkJBMjBFMkY3ODkxN0UwRkIwM0I5MTJCOEM4NTYz N0M1MzczRDAeFw0yNTEyMDUwNTQ1MzdaFw0yNTEyMTIwNTQ1MzdaMBgxFjAUBgNV BAMTDTY5MzI3MTgxLWYxZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc177vppRa0n5Cq6pgZp2hhoSkCoVMkGLDPRc4RTvSQwuCsILIRnBXxETIGKjH VrZLxWuEjqPKpHYBe/Gv3MZfpWPzgryEW49HvZwmbUlxSCRV/LGoDgi0EiMQl9br 6ZeydtbeNrbUUcTdeQ39hVB/brEv2yiAYj8vN7eTQ9sD1lCl9m7ETDbmWaVt+a9y M/yCijwd2dTgOi/yYCD3fAOYrzseKyZdyB19bKpWcRjCMjAVg3PF7D3+g1kwhIFt E3StqufvTP2+xK+JYj5Z2vhb03/qwFXaYH5lkrXX/pt028REc6m08vRX4FqJSt/p +fK1uTkt077BmLEbPMiQ7tkRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTTzbBPnx BArH5jQ8WDSI/qrD32YwHwYDVR0jBBgwFoAUaH+6IOL3iRfg+wO5ErjIVjfFNz0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMjQzL0E5QTc1M0EwQkI5 OTExRjBCNUZCNjk2QUM0RjlBRTAyL2FILTZJT0wzaVJmZy13TzVFcmpJVmpmRk56 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUgtNklPTDNpUmZnLXdPNUVyaklWamZGTnowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC MjQzL0E5QTc1M0EwQkI5OTExRjBCNUZCNjk2QUM0RjlBRTAyL2FILTZJT0wzaVJm Zy13TzVFcmpJVmpmRk56MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFL+neDVlgNQOvBzFTv236N0SCh22/8qFf3jLTVe1170k2yFtL7abdae KGz4YQxuw09ah6WoQSiwsw/6EEETjQQSsuOH/YFxwmF64sjd0BwAhNIXlV+buSYW vjF4QB+kiLyhYCssctIO+xru+8e8E4Unqoz3GZ7u/AJ8sN8WqxuPBhZFG5fBXPv8 dzoizB66hf7+gaK+8/H1ji7X0pzstz6/g06gFkzq7EqgaFbKTlLgNYMcvcf5XEqK xHF8H2pAX8dByA9KtBfrqc3vSY8V5YURrBdmY1phMknx96Kj4ie0QTnAfcThe/pn ZhtkWFgThHh4XuZgCkfyhcJHXCHJJ10= -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:14 2025 by rpki-client