This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: iz/ml1F8h6Xc0V/vVumbgoXT1zIy6TvvKkFCSqi4EGI= Subject key identifier: AE:C7:51:56:6A:4C:FA:67:C7:4C:CD:89:68:9B:10:0B:FC:DD:6A:12 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 103F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 1032 Signing time: Thu 04 Dec 2025 17:00:31 +0000 Manifest this update: Thu 04 Dec 2025 17:00:30 +0000 Manifest next update: Thu 11 Dec 2025 17:00:30 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: MYDrR8yEiKhHlM+aqtmKi+UmI4TEfIPUsviFCTwaVgg=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: RkelPLg7E6uL52G5WbWQ45BxHbDDvE+59Nsvn5kHeGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4159 (0x103f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Dec 4 17:00:30 2025 GMT Not After : Dec 11 17:00:30 2025 GMT Subject: CN=6931be2f-c1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:cc:04:1c:59:c2:6a:57:69:bd:a8:08:64: 84:55:30:53:fd:d9:9c:04:d5:89:af:92:b4:75:36: a1:71:5e:7f:9e:ff:ec:aa:75:fd:e5:d6:19:e4:b2: 81:75:3e:de:18:3f:d6:d3:9e:ec:66:c5:e9:26:7c: ea:ab:7b:d2:c7:93:6b:ae:f9:5d:aa:34:3d:f9:9b: 33:d7:fc:a7:df:de:f5:21:97:9f:23:b1:92:a7:af: a8:94:f9:b2:8e:34:87:7b:88:c8:90:8f:00:79:2e: a4:08:0d:95:4b:32:e6:c8:23:f2:b3:df:3c:29:3d: 34:c7:68:fe:a2:3d:3c:b8:6e:2d:1f:5e:28:a1:34: 26:ec:ba:fe:ba:60:11:5c:d6:e9:93:56:48:74:b6: 64:72:6d:91:9e:3b:87:01:98:77:f1:7e:ac:c5:88: b9:bb:7b:b7:9c:0c:8b:72:0d:85:63:fc:85:81:24: 3d:81:40:bf:e9:a5:08:03:19:06:1c:7c:a0:5a:fc: c5:01:4b:28:07:f0:62:87:24:97:b2:f5:1e:14:34: b0:3b:62:5a:0b:f1:ef:ba:41:d6:2f:cd:47:71:14: b9:8c:87:09:01:dc:0c:56:87:da:e4:4a:dc:5b:dc: b7:25:13:ac:b1:cd:9f:cc:3d:dc:78:85:8e:9a:f4: 40:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C7:51:56:6A:4C:FA:67:C7:4C:CD:89:68:9B:10:0B:FC:DD:6A:12 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:ed:6d:98:dc:53:3c:7a:9d:43:8a:0f:4f:fc:60:b0:0f:a6: 3d:9b:04:bf:5c:9c:88:60:e8:9c:8e:8e:05:a3:46:36:12:c6: ab:e5:30:d2:07:b0:e5:f5:9c:88:23:28:df:88:b8:58:be:41: 35:05:09:3e:3a:7c:b3:c2:05:91:34:da:f1:2c:b2:dc:9f:5a: 33:a7:fe:21:1a:82:6f:be:bb:83:a5:85:b7:76:fa:9e:38:d4: ae:c5:cf:8b:a8:9c:34:a0:9a:03:57:dc:53:9b:07:54:72:10: 40:e3:1f:c3:00:91:bb:4b:d4:a5:b1:85:00:86:fd:a6:28:6e: 8d:82:33:31:e8:d4:25:8f:5b:b9:d5:db:8c:ca:9c:16:72:ae: ba:64:12:2c:a1:eb:60:f3:f4:6b:0b:ef:e3:dc:e6:c0:18:76: e2:83:5e:26:5d:cd:6a:dd:fe:89:2a:60:fb:54:3a:d8:f2:f4: 9d:19:98:35:f3:79:f8:90:ea:12:7f:43:f0:10:77:8d:33:8b: f1:c6:ab:ff:6e:96:2a:32:4e:fe:e3:fe:48:96:6d:81:24:64: ae:d7:05:ef:5c:86:c5:e7:07:4c:4a:fe:a4:51:28:32:e3:df: 13:c5:77:ca:41:01:0f:66:90:78:e5:fe:da:56:4f:88:58:8e: e2:81:33:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICED8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUxMjA0MTcwMDMwWhcNMjUxMjExMTcwMDMwWjAYMRYwFAYD VQQDEw02OTMxYmUyZi1jMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNvMBBxZwmpXab2oCGSEVTBT/dmcBNWJr5K0dTahcV5/nv/sqnX95dYZ5LKB dT7eGD/W057sZsXpJnzqq3vSx5NrrvldqjQ9+Zsz1/yn3971IZefI7GSp6+olPmy jjSHe4jIkI8AeS6kCA2VSzLmyCPys988KT00x2j+oj08uG4tH14ooTQm7Lr+umAR XNbpk1ZIdLZkcm2RnjuHAZh38X6sxYi5u3u3nAyLcg2FY/yFgSQ9gUC/6aUIAxkG HHygWvzFAUsoB/BihySXsvUeFDSwO2JaC/HvukHWL81HcRS5jIcJAdwMVofa5Erc W9y3JROssc2fzD3ceIWOmvRAqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7HUVZq TPpnx0zNiWibEAv83WoSMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC57W2Y3FM8ep1Dig9P/GCwD6Y9mwS/XJyIYOicjo4Fo0Y2Esar5TDS B7Dl9ZyIIyjfiLhYvkE1BQk+OnyzwgWRNNrxLLLcn1ozp/4hGoJvvruDpYW3dvqe ONSuxc+LqJw0oJoDV9xTmwdUchBA4x/DAJG7S9SlsYUAhv2mKG6NgjMx6NQlj1u5 1duMypwWcq66ZBIsoetg8/RrC+/j3ObAGHbig14mXc1q3f6JKmD7VDrY8vSdGZg1 83n4kOoSf0PwEHeNM4vxxqv/bpYqMk7+4/5Ilm2BJGSu1wXvXIbF5wdMSv6kUSgy 498TxXfKQQEPZpB45f7aVk+IWI7igTN+ -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:38 2025 by rpki-client