This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: FwGiqmNWt5SqanECNUUr5ex816RzhPRBNAZgZwR95j4= Subject key identifier: D2:9F:1E:1E:0C:83:9E:3D:D1:E6:EE:44:47:D2:D4:70:C9:6E:DA:81 Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 03C5 Signing time: Thu 04 Dec 2025 23:07:19 +0000 Manifest this update: Thu 04 Dec 2025 23:07:18 +0000 Manifest next update: Thu 11 Dec 2025 23:07:18 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: C71BPc6Obq3huNgOIMzWbW83UPdSyF/oahe8hWQBRxs=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: 2CusgDeod/GNoY/LuvI1PPosNLPCfcqPbyc433D/0Uw=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: Qo8S4vnL8vk6lsjFg8E5pxu1jHSHJhkqcg0rzkOHusw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Dec 4 23:07:18 2025 GMT Not After : Dec 11 23:07:18 2025 GMT Subject: CN=69321427-372d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:ed:15:5f:37:56:f0:55:eb:0f:e4:ac:b2: a1:61:08:63:83:7b:40:8d:02:af:b7:73:d2:7d:21: 19:97:d3:e8:da:bd:42:be:73:d6:f5:d5:a5:51:60: b3:52:9e:63:c1:25:83:1b:b7:df:19:0b:39:36:f8: 95:0c:24:44:bb:86:02:40:b2:8e:dd:b9:b8:40:79: e4:c2:c1:be:9a:26:ba:59:c3:c3:01:f8:47:ae:d8: e5:f6:b2:7a:ee:fe:46:6f:7f:3c:46:ed:bd:b6:2a: 02:93:6f:b4:96:53:04:b4:8c:ea:69:5e:3b:36:ab: 4f:ef:cc:26:5f:a4:e8:c5:23:63:38:12:08:c7:c1: b7:c3:4e:6a:2e:33:af:02:fb:ea:24:51:ab:c1:e1: 0e:cc:5e:21:dc:ac:b9:82:82:14:22:7e:ee:cf:b5: 33:0a:6c:e5:e5:d1:7c:5d:6d:b1:6c:78:17:2a:4b: 5a:5e:fe:0b:51:3b:d5:7b:d6:53:43:0b:d1:b1:3c: a2:7b:ea:7f:01:3d:6a:e7:59:4e:03:ed:0f:be:08: 9f:91:a4:37:0e:09:92:51:03:3a:d2:46:51:8a:bc: 42:ea:23:d2:6e:dc:06:bb:16:44:92:df:4f:e7:24: 5f:00:97:0f:78:d7:bd:bf:73:27:3a:31:9d:fa:a8: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9F:1E:1E:0C:83:9E:3D:D1:E6:EE:44:47:D2:D4:70:C9:6E:DA:81 X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:de:e0:0a:0d:55:ca:67:d3:6f:08:16:9b:3f:51:bb:b7:4c: 68:bf:f5:5c:0c:31:d6:57:d9:e5:2f:a6:ca:5d:a3:a3:86:6c: b7:cc:5e:ea:b6:e2:ac:ca:43:11:14:4f:61:5a:3c:92:70:8a: 42:26:60:69:35:e9:9b:ea:e5:ad:ef:26:b1:34:25:d0:54:c4: 5b:f1:79:13:0c:2f:5f:15:0c:18:36:28:be:32:ea:d5:cd:bd: 5b:fa:1c:fd:cc:c2:1f:0a:a7:81:a5:e8:76:fe:a5:53:1b:f0: 75:30:6c:43:39:61:43:25:4f:ae:89:76:f6:7f:b0:ed:37:61: 6c:76:c9:48:3e:92:91:bb:7a:12:5b:74:69:87:b2:03:3a:2a: 3c:5d:d0:09:8b:2e:09:e5:1c:46:b4:02:be:c8:2a:7b:32:e8: e3:c2:f1:33:6e:fd:7c:2c:23:b1:40:69:3f:54:45:17:25:15: b7:e5:ed:47:b5:65:ce:f2:2a:c3:9e:a9:41:61:01:da:d0:bd: 18:3a:cb:e0:31:fa:22:2e:17:d7:3e:21:14:6b:0d:0f:49:d1: ca:0e:ae:bb:a3:c8:3b:36:47:2a:d0:bf:53:23:31:e2:4e:ec: 50:64:0b:de:ce:81:8c:0f:85:f8:b3:27:b9:09:98:f7:d9:87: 1a:22:f7:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjUxMjA0MjMwNzE4WhcNMjUxMjExMjMwNzE4WjAYMRYwFAYD VQQDEw02OTMyMTQyNy0zNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/ntFV83VvBV6w/krLKhYQhjg3tAjQKvt3PSfSEZl9Po2r1CvnPW9dWlUWCz Up5jwSWDG7ffGQs5NviVDCREu4YCQLKO3bm4QHnkwsG+mia6WcPDAfhHrtjl9rJ6 7v5Gb388Ru29tioCk2+0llMEtIzqaV47NqtP78wmX6ToxSNjOBIIx8G3w05qLjOv AvvqJFGrweEOzF4h3Ky5goIUIn7uz7UzCmzl5dF8XW2xbHgXKktaXv4LUTvVe9ZT QwvRsTyie+p/AT1q51lOA+0PvgifkaQ3DgmSUQM60kZRirxC6iPSbtwGuxZEkt9P 5yRfAJcPeNe9v3MnOjGd+qhhywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKfHh4M g5490ebuREfS1HDJbtqBMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM3uAKDVXKZ9NvCBabP1G7t0xov/VcDDHWV9nlL6bKXaOjhmy3zF7q tuKsykMRFE9hWjyScIpCJmBpNemb6uWt7yaxNCXQVMRb8XkTDC9fFQwYNii+MurV zb1b+hz9zMIfCqeBpeh2/qVTG/B1MGxDOWFDJU+uiXb2f7DtN2FsdslIPpKRu3oS W3Rph7IDOio8XdAJiy4J5RxGtAK+yCp7MujjwvEzbv18LCOxQGk/VEUXJRW35e1H tWXO8irDnqlBYQHa0L0YOsvgMfoiLhfXPiEUaw0PSdHKDq67o8g7Nkcq0L9TIzHi TuxQZAvezoGMD4X4sye5CZj32YcaIvcH -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:56 2025 by rpki-client