This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: SCSu0v/F0X04+KoCijg/dqHbJFwTButaetVOaCKQWfg= Subject key identifier: 11:51:68:0A:2A:96:76:F2:30:3D:B2:0D:B6:FE:3E:41:58:16:70:A9 Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 0315 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 0311 Signing time: Sat 06 Dec 2025 23:42:19 +0000 Manifest this update: Sat 06 Dec 2025 23:42:18 +0000 Manifest next update: Sat 13 Dec 2025 23:42:18 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: EfXUOflD4MmqES4T19H4c4ajT3mNVhLloG7NhZDshRc=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: t6gPHMURjmA0yTxJeNB9SOwe/egrKymREeoN93WnBuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: Dec 6 23:42:18 2025 GMT Not After : Dec 13 23:42:18 2025 GMT Subject: CN=6934bf5a-e5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:5b:8b:57:d8:74:71:e3:8c:9a:66:45:fe: 97:56:d8:b5:74:83:6c:4f:db:06:2d:00:66:55:d3: 73:52:af:52:89:2d:b4:4c:81:d7:47:25:3d:03:9c: ee:d3:ad:41:08:4a:b8:eb:37:2c:6c:2c:01:4f:3c: b6:65:ac:14:6c:dc:85:13:b3:96:7e:87:3c:c7:05: a8:a9:95:19:0c:46:aa:50:8c:87:a7:4c:35:6f:51: 05:d0:60:3e:74:1b:b5:a1:3d:bb:be:d8:dc:de:a1: 5b:ea:88:ad:a2:b2:b9:40:ab:70:04:4b:82:69:23: f7:28:2d:91:6c:ca:4b:ec:9b:97:07:71:22:b7:a2: bf:e1:1a:a4:eb:d8:5f:0b:0b:0a:37:29:3f:8f:eb: 1d:8b:60:eb:c8:1d:25:91:2a:42:68:69:73:b2:be: 42:a1:b0:2c:bd:0f:ce:63:76:fe:bd:29:7a:fe:ca: 0d:8e:ad:2b:8f:c7:e3:a7:6a:e8:6e:00:e3:7e:34: 3c:a5:2a:d0:46:88:a8:72:2a:27:da:c0:e8:fc:93: 22:b2:c7:be:cb:b7:76:cd:79:14:8d:01:e5:6d:24: 9f:37:b3:aa:2d:40:a5:9a:72:f0:d0:14:31:c7:4f: 9d:23:63:10:b7:23:2a:e6:3f:c4:fc:32:1a:fb:c5: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:51:68:0A:2A:96:76:F2:30:3D:B2:0D:B6:FE:3E:41:58:16:70:A9 X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:dd:44:61:52:b6:d1:fa:39:ce:d3:a9:ff:69:fd:b2:71:e4: 57:9d:35:63:33:75:e8:0d:a5:9d:01:8c:a8:24:e8:06:3e:15: 28:f8:cf:a9:a6:c8:0a:a1:34:24:97:bb:07:63:f5:18:7e:d7: 7e:69:47:ee:ab:89:08:ba:68:75:7e:cb:ab:c8:b7:ce:d6:e4: 5c:6f:26:c1:08:9c:77:fd:30:45:f1:ff:20:c8:1f:85:8c:7b: f1:a5:56:0c:19:c7:6f:91:60:d0:26:40:c8:0c:98:57:c6:99: 1b:b4:1a:0d:a8:79:53:df:eb:35:e7:96:b0:47:44:f1:81:10: 78:5b:bb:0c:9e:35:08:f5:3b:47:a1:1b:f5:04:36:2d:3d:0d: 22:7b:4d:e1:76:03:6d:19:d1:60:b5:25:68:e4:52:2a:e2:fa: 5d:08:fc:20:9d:bb:70:c3:98:b6:7f:ae:a6:53:25:bb:03:63: 33:e5:34:46:94:60:a3:b0:1c:4a:96:d3:ce:5b:89:30:76:ff: 24:3b:4c:f0:32:c8:e1:33:36:d1:9a:b6:5c:e7:88:42:62:dc: e0:26:35:13:22:83:a5:66:bf:f4:e6:fb:ae:f7:fb:56:e4:61: b0:91:78:cf:21:7e:3b:a9:40:75:21:9a:65:27:ec:9c:1d:20: 2c:4d:ad:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjUxMjA2MjM0MjE4WhcNMjUxMjEzMjM0MjE4WjAYMRYwFAYD VQQDEw02OTM0YmY1YS1lNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxBbi1fYdHHjjJpmRf6XVti1dINsT9sGLQBmVdNzUq9SiS20TIHXRyU9A5zu 061BCEq46zcsbCwBTzy2ZawUbNyFE7OWfoc8xwWoqZUZDEaqUIyHp0w1b1EF0GA+ dBu1oT27vtjc3qFb6oitorK5QKtwBEuCaSP3KC2RbMpL7JuXB3Eit6K/4Rqk69hf CwsKNyk/j+sdi2DryB0lkSpCaGlzsr5CobAsvQ/OY3b+vSl6/soNjq0rj8fjp2ro bgDjfjQ8pSrQRoiocion2sDo/JMisse+y7d2zXkUjQHlbSSfN7OqLUClmnLw0BQx x0+dI2MQtyMq5j/E/DIa+8UEkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFRaAoq lnbyMD2yDbb+PkFYFnCpMB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp3URhUrbR+jnO06n/af2yceRXnTVjM3XoDaWdAYyoJOgGPhUo+M+p psgKoTQkl7sHY/UYftd+aUfuq4kIumh1fsuryLfO1uRcbybBCJx3/TBF8f8gyB+F jHvxpVYMGcdvkWDQJkDIDJhXxpkbtBoNqHlT3+s155awR0TxgRB4W7sMnjUI9TtH oRv1BDYtPQ0ie03hdgNtGdFgtSVo5FIq4vpdCPwgnbtww5i2f66mUyW7A2Mz5TRG lGCjsBxKltPOW4kwdv8kO0zwMsjhMzbRmrZc54hCYtzgJjUTIoOlZr/05vuu9/tW 5GGwkXjPIX47qUB1IZplJ+ycHSAsTa3H -----END CERTIFICATE-----Generated at Sun Dec 7 02:04:16 2025 by rpki-client