This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json) Hash identifier: l04ryzjrUJ2s9jv9ddUUUm/xrJLIoNTVQLCoZoxmC7w= Subject key identifier: 95:44:42:CB:10:D8:B4:3D:A6:20:B9:32:F7:61:BF:46:BA:51:08:8F Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 07A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft Manifest number: 0785 Signing time: Sat 06 Dec 2025 20:36:38 +0000 Manifest this update: Sat 06 Dec 2025 20:36:37 +0000 Manifest next update: Sat 13 Dec 2025 20:36:37 +0000 Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: rlrWwd+0rPMtQ/e34btxF+gBgytfKQziEfYXextd5Do=) 2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: FJap+RLgDx27hEKqAVGCvWdt4Kg4isquEKtc3jOhGvk=) 3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: rLm77yyO5DoBFV+guuBfejob2y9icJNI0289dxVOxYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: Dec 6 20:36:37 2025 GMT Not After : Dec 13 20:36:37 2025 GMT Subject: CN=693493d5-3938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:ef:3f:b7:f9:2c:55:d5:4c:be:9e:60:fa: 40:b2:2e:98:35:c7:e2:85:2b:fd:a4:fe:46:39:5e: 55:0c:03:63:a1:df:ce:05:6e:6b:88:c3:d9:cf:eb: 79:61:67:e2:3f:45:d1:04:18:f9:16:44:0b:42:28: 29:59:43:30:33:ea:7e:95:04:a7:06:ec:92:16:df: 4f:ed:eb:67:98:21:08:f7:fa:e7:0d:60:cb:5b:7a: 5b:5c:22:a3:b9:cf:e8:3d:86:3e:33:b9:3a:04:1d: 9f:97:58:4f:1e:7d:ac:88:56:b0:08:99:7b:81:73: 9d:b7:a6:10:80:34:72:64:bb:ff:1c:14:17:46:b3: 59:64:68:a1:a8:07:56:1f:b5:ad:00:b0:16:4c:17: 72:32:80:b1:f6:19:9d:f6:da:47:88:31:5d:32:d0: 8c:4b:d0:86:97:b2:56:87:5c:c0:b1:45:2e:b6:2f: 57:24:b5:c7:f1:6d:f6:68:b7:02:6d:df:54:84:36: 60:59:bb:8c:3e:a0:2e:cd:cf:73:81:84:ea:e8:79: 48:e5:92:74:33:2b:79:4c:4f:70:0b:b6:b4:c3:95: c5:1e:54:df:cc:d1:70:51:ed:25:51:36:91:74:30: e7:ca:43:f9:91:2d:3b:37:b6:05:53:ae:67:62:7d: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:44:42:CB:10:D8:B4:3D:A6:20:B9:32:F7:61:BF:46:BA:51:08:8F X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:86:62:6a:e0:ee:9c:30:05:9a:d9:a8:55:a9:05:6a:69:dc: 84:ad:0b:2f:25:7b:a9:d2:f8:56:e8:f4:1f:ed:e6:11:c6:98: b9:4b:0b:1a:79:cf:d1:67:bb:63:1e:bf:35:95:2e:eb:7e:d3: bc:0a:e3:6e:cb:80:32:d8:1a:ab:c1:b7:90:15:1f:99:ba:74: f8:01:60:97:52:28:a4:ec:4d:a9:ec:7e:20:1f:28:ce:e0:af: aa:9e:5d:1d:35:61:69:97:ea:00:2b:f7:fb:2f:f5:54:9e:40: b8:b1:a5:6c:05:49:1f:a0:2a:24:05:62:90:b8:32:d6:87:46: 5b:16:87:07:23:2b:64:d3:9d:8d:df:6b:13:8e:27:79:ea:3c: a1:8f:de:12:f2:57:e8:e9:4a:d8:2a:d7:e8:11:5c:42:39:87: 5b:47:e0:54:31:d7:60:14:5a:66:90:f8:c9:51:ec:2f:d2:b3: b4:dc:fa:23:24:83:92:98:5c:b9:8b:f4:a6:ff:0d:e9:b8:f3: 35:64:78:9f:bb:15:b2:5d:59:28:6b:72:20:62:9c:e6:2e:91: c1:22:d4:77:7d:90:e0:7a:cd:e7:26:00:93:d8:25:f2:d8:2c: 11:98:40:26:60:3b:de:37:52:d4:e8:7e:ba:57:67:c7:cb:51: d2:22:98:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjUxMjA2MjAzNjM3WhcNMjUxMjEzMjAzNjM3WjAYMRYwFAYD VQQDEw02OTM0OTNkNS0zOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QHvP7f5LFXVTL6eYPpAsi6YNcfihSv9pP5GOV5VDANjod/OBW5riMPZz+t5 YWfiP0XRBBj5FkQLQigpWUMwM+p+lQSnBuySFt9P7etnmCEI9/rnDWDLW3pbXCKj uc/oPYY+M7k6BB2fl1hPHn2siFawCJl7gXOdt6YQgDRyZLv/HBQXRrNZZGihqAdW H7WtALAWTBdyMoCx9hmd9tpHiDFdMtCMS9CGl7JWh1zAsUUuti9XJLXH8W32aLcC bd9UhDZgWbuMPqAuzc9zgYTq6HlI5ZJ0Myt5TE9wC7a0w5XFHlTfzNFwUe0lUTaR dDDnykP5kS07N7YFU65nYn2NIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVEQssQ 2LQ9piC5Mvdhv0a6UQiPMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK ajNuVnlUQTM2XzhybFd6OWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOhmJq4O6cMAWa2ahVqQVqadyErQsvJXup0vhW6PQf7eYRxpi5Swsa ec/RZ7tjHr81lS7rftO8CuNuy4Ay2BqrwbeQFR+ZunT4AWCXUiik7E2p7H4gHyjO 4K+qnl0dNWFpl+oAK/f7L/VUnkC4saVsBUkfoCokBWKQuDLWh0ZbFocHIytk052N 32sTjid56jyhj94S8lfo6UrYKtfoEVxCOYdbR+BUMddgFFpmkPjJUewv0rO03Poj JIOSmFy5i/Sm/w3puPM1ZHifuxWyXVkoa3IgYpzmLpHBItR3fZDges3nJgCT2CXy 2CwRmEAmYDveN1LU6H66V2fHy1HSIph/ -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:46 2025 by rpki-client