This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft File: aMK1iNFoWlh0LYouGIhl2zEQPPc.mft (raw, json) Hash identifier: z3j8K2SWnSR9nQaTdph3RTO6HTTFVl/Hliyr+O0Ec28= Subject key identifier: 92:01:86:6A:7B:9D:CC:BE:AB:E9:8D:A5:9C:7D:A7:B2:4A:57:6A:E1 Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7 Certificate issuer: /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft Manifest number: D8 Signing time: Fri 05 Dec 2025 03:40:20 +0000 Manifest this update: Fri 05 Dec 2025 03:40:20 +0000 Manifest next update: Fri 12 Dec 2025 03:40:20 +0000 Files and hashes: 1: aMK1iNFoWlh0LYouGIhl2zEQPPc.crl (hash: Ft5ww06ooBsGqLtFogPjfTWZ3RZgg+3yjX0MT7vYKUc=) 2: B2D0D768766011F08F4AF05AC4F9AE02.roa (hash: 9nhYmTgkqcOjR0NO2+wz26tomnd/zZ4DybayX4g1JJs=) 3: 01BA52A28CF411EFAE6F7F10C4F9AE02.roa (hash: Z/zZPYkWKXvraJfJSL/aeXz0Ni43Av6pEICr2Ba1ixA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7 Validity Not Before: Dec 5 03:40:20 2025 GMT Not After : Dec 12 03:40:20 2025 GMT Subject: CN=69325424-02ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:d3:68:a6:f7:ca:c0:17:b7:3d:a1:bb:64: 9e:c8:8c:cd:17:98:9a:0e:54:43:d5:17:b5:5b:ed: 28:d8:29:d3:53:3d:95:66:94:75:c7:e0:cb:54:1f: 12:00:35:06:e5:20:bd:81:a4:7c:7e:b5:9f:d9:72: 59:87:89:9b:04:07:5a:9d:9d:5f:40:91:d7:3c:20: 37:ae:b5:d2:73:11:9e:07:65:0a:11:47:90:85:3d: bb:5c:c1:17:47:1f:6a:c3:f8:bc:20:58:7e:35:25: 80:d7:98:62:f1:1b:70:0e:d9:f5:71:70:51:6f:7e: 24:f1:ab:df:7f:a0:18:42:ef:6b:53:82:2a:f1:b1: 1a:e2:f4:08:ba:e0:98:19:2f:4f:ae:1e:8d:a3:a9: 08:2c:c0:ad:d2:af:7d:a2:ba:0a:26:79:57:0d:3b: 30:62:5e:a1:0e:4e:90:1e:d9:1c:a5:e0:7a:e5:0f: ec:0d:ba:76:91:10:3a:7d:98:63:f9:30:31:2d:24: cf:3b:85:aa:bc:3e:ea:af:30:84:54:2e:a2:99:b9: ed:07:78:64:0a:68:97:7d:25:bd:9b:2b:45:54:5a: 9d:7b:86:ab:2f:e6:08:92:bc:7d:88:7c:24:90:b6: d1:d0:90:aa:82:0c:1c:6d:38:17:e6:b6:93:46:3e: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:01:86:6A:7B:9D:CC:BE:AB:E9:8D:A5:9C:7D:A7:B2:4A:57:6A:E1 X509v3 Authority Key Identifier: keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9c:44:fa:3b:b2:16:6a:82:58:59:88:95:2f:91:f4:34:20: 45:0e:c0:1a:ed:fc:85:81:78:f7:13:9b:c0:b0:c3:71:1e:1d: 48:33:4c:3a:3b:44:04:24:d4:5c:2a:fb:40:d9:07:5a:6f:09: 48:89:bf:7c:05:0b:36:d1:f7:b4:40:f4:09:e5:4f:2d:3c:cb: 28:29:a6:ac:60:d1:8f:91:e0:ec:21:3c:84:ce:70:69:35:83: 9e:8a:8e:e3:be:df:80:88:24:d4:f3:49:3d:fc:4d:3a:5b:98: 48:02:5c:d3:48:fc:c8:d9:60:bd:71:cc:36:95:8a:b8:8b:11: be:80:6e:02:c7:b7:d6:89:bf:b1:e4:7f:92:c0:ac:ed:de:cf: 75:74:e9:bf:7c:24:eb:00:42:b7:b0:be:f3:1d:77:28:39:6a: 2c:2c:ee:d6:d9:b1:5f:e1:43:3b:96:81:30:7b:d7:a8:35:00: ba:7e:9b:cf:76:79:03:85:d7:c5:b1:66:2d:64:94:c3:c9:ae: 61:be:a4:cc:e8:37:75:5b:bf:fc:91:fd:d9:bb:5b:89:3c:81: 80:65:97:85:79:68:8b:50:15:ba:b3:d8:a5:b1:bc:bc:19:a0: 63:8e:2c:c9:94:24:1a:30:4b:5a:00:bb:2a:a6:b5:3b:65:87: e8:20:13:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFEQUYxMTAvBgNVBAUTKDY4QzJCNTg4RDE2ODVBNTg3NDJEOEEyRTE4ODg2NURC MzExMDNDRjcwHhcNMjUxMjA1MDM0MDIwWhcNMjUxMjEyMDM0MDIwWjAYMRYwFAYD VQQDEw02OTMyNTQyNC0wMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5nTaKb3ysAXtz2hu2SeyIzNF5iaDlRD1Re1W+0o2CnTUz2VZpR1x+DLVB8S ADUG5SC9gaR8frWf2XJZh4mbBAdanZ1fQJHXPCA3rrXScxGeB2UKEUeQhT27XMEX Rx9qw/i8IFh+NSWA15hi8RtwDtn1cXBRb34k8avff6AYQu9rU4Iq8bEa4vQIuuCY GS9Prh6No6kILMCt0q99oroKJnlXDTswYl6hDk6QHtkcpeB65Q/sDbp2kRA6fZhj +TAxLSTPO4WqvD7qrzCEVC6imbntB3hkCmiXfSW9mytFVFqde4arL+YIkrx9iHwk kLbR0JCqggwcbTgX5raTRj51rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIBhmp7 ncy+q+mNpZx9p7JKV2rhMB8GA1UdIwQYMBaAFGjCtYjRaFpYdC2KLhiIZdsxEDz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQURBRi84NzE1OUM5NjhD RjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1dsaDBMWW91R0lobDJ6RVFQ UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNSzFpTkZvV2xoMExZb3VHSWhsMnpFUVBQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QURBRi84NzE1OUM5NjhDRjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1ds aDBMWW91R0lobDJ6RVFQUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9nET6O7IWaoJYWYiVL5H0NCBFDsAa7fyFgXj3E5vAsMNxHh1IM0w6 O0QEJNRcKvtA2QdabwlIib98BQs20fe0QPQJ5U8tPMsoKaasYNGPkeDsITyEznBp NYOeio7jvt+AiCTU80k9/E06W5hIAlzTSPzI2WC9ccw2lYq4ixG+gG4Cx7fWib+x 5H+SwKzt3s91dOm/fCTrAEK3sL7zHXcoOWosLO7W2bFf4UM7loEwe9eoNQC6fpvP dnkDhdfFsWYtZJTDya5hvqTM6Dd1W7/8kf3Zu1uJPIGAZZeFeWiLUBW6s9ilsby8 GaBjjizJlCQaMEtaALsqprU7ZYfoIBN/ -----END CERTIFICATE-----Generated at Sat Dec 6 19:31:30 2025 by rpki-client