This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: 5nA7wLVWdIeZMrzbl32eNOdP9gtQwjwLRihFfJFvwW4= Subject key identifier: 01:E2:E8:D2:6A:9E:FD:B4:A7:A8:B6:2F:3F:A8:BE:73:EE:54:E0:BF Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 01A2 Signing time: Fri 05 Dec 2025 01:35:45 +0000 Manifest this update: Fri 05 Dec 2025 01:35:45 +0000 Manifest next update: Fri 12 Dec 2025 01:35:45 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: /Q820yfTrE9nKseV4ZMGuYywG06OSy62GjckQmilNfk=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: L51Q68tVx2XVC4mIdbJx6yL7uZTn+EZdlLwf/zTugIc=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 4Ob8OZ5S2H/WLKjYmff77WuX2DfNbq1F3IyX9D66TLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Dec 5 01:35:45 2025 GMT Not After : Dec 12 01:35:45 2025 GMT Subject: CN=693236f1-d147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:03:59:46:66:32:06:63:69:8c:10:29:c1: 34:c8:27:de:27:d2:c1:f7:30:cd:68:b9:ae:96:7d: 63:3f:94:11:6f:9b:c4:5d:d6:82:d9:b3:16:90:62: 89:14:a4:1c:b7:d5:2a:9a:10:7c:e0:de:17:64:f3: 65:fa:40:e2:c0:1f:6d:1e:47:ee:7d:73:34:8b:a5: ae:9e:1d:92:d1:79:7d:9d:da:85:61:f8:b9:ca:48: c1:55:a0:f3:cf:d1:a3:14:39:8b:ea:8a:db:c0:78: 87:3c:76:58:63:1d:67:df:f9:13:22:f2:34:34:b2: 5e:19:8d:cb:7b:2e:13:8f:85:48:a2:85:30:a8:b3: 67:b4:9c:f5:fb:28:cf:d3:ea:18:e1:f1:d3:b4:15: d1:b6:86:d5:29:ab:b4:1d:34:13:4e:c5:fc:2a:cd: 85:a6:fb:ff:f9:f8:9a:02:88:ed:7e:ef:5c:58:ee: 7a:d2:ed:48:9c:66:4b:a4:49:4f:38:2e:d9:5c:42: 2c:44:b1:4f:ba:a9:af:46:55:b9:3e:90:8a:61:44: 08:a0:bf:c6:49:82:8a:37:fe:34:5c:c4:18:a8:0e: 3b:8e:98:7e:7d:57:d8:ac:45:88:80:3b:78:54:61: 5c:56:ff:43:41:8f:a9:ef:52:dd:0b:80:6b:39:51: 6f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E2:E8:D2:6A:9E:FD:B4:A7:A8:B6:2F:3F:A8:BE:73:EE:54:E0:BF X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e8:96:2a:7e:8a:3e:29:3a:10:93:d4:28:03:6c:0c:4c:cb: fd:62:bd:c4:4e:cf:ea:0e:70:70:6c:8d:a7:1e:3f:38:10:27: ec:a6:04:25:fe:08:d8:28:be:f0:36:fa:8b:e7:05:de:8e:11: f5:e0:7a:63:25:bf:2d:fe:98:b7:db:ba:2a:bc:be:54:44:6d: 8e:f7:5a:d7:d2:23:d4:b7:56:a5:f5:80:7b:6a:11:b1:03:46: 30:bd:de:56:c5:ed:12:5c:4e:70:25:29:7a:d6:ca:8d:7e:1c: e8:8c:15:e7:b3:7a:41:af:f8:0a:cc:15:0f:92:c5:bc:67:25: 35:15:58:a5:1a:f7:58:65:4a:9d:b3:cc:d9:5a:ce:66:8f:ca: c4:34:d3:3a:a7:7d:e3:a0:9c:45:2e:18:87:8a:9b:92:19:81: cb:0d:00:f5:e9:57:4f:60:a6:40:d4:b5:65:07:fe:b9:5c:e3: c0:16:68:ed:a7:35:e0:d0:f0:29:ef:9a:ac:97:65:b0:b8:27: 2f:ff:d6:8c:dc:fe:c2:7f:3d:3e:74:51:ec:bc:82:d0:c3:e3: 1a:b5:02:79:ed:04:a1:32:87:0c:36:6e:89:62:2b:9e:05:fc: 9f:9b:88:52:60:e2:64:77:0f:ab:b5:65:51:2e:15:1b:bb:37: 5a:56:e4:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjUxMjA1MDEzNTQ1WhcNMjUxMjEyMDEzNTQ1WjAYMRYwFAYD VQQDEw02OTMyMzZmMS1kMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE8DWUZmMgZjaYwQKcE0yCfeJ9LB9zDNaLmuln1jP5QRb5vEXdaC2bMWkGKJ FKQct9UqmhB84N4XZPNl+kDiwB9tHkfufXM0i6Wunh2S0Xl9ndqFYfi5ykjBVaDz z9GjFDmL6orbwHiHPHZYYx1n3/kTIvI0NLJeGY3Ley4Tj4VIooUwqLNntJz1+yjP 0+oY4fHTtBXRtobVKau0HTQTTsX8Ks2Fpvv/+fiaAojtfu9cWO560u1InGZLpElP OC7ZXEIsRLFPuqmvRlW5PpCKYUQIoL/GSYKKN/40XMQYqA47jph+fVfYrEWIgDt4 VGFcVv9DQY+p71LdC4BrOVFv4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHi6NJq nv20p6i2Lz+ovnPuVOC/MB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc6JYqfoo+KToQk9QoA2wMTMv9Yr3ETs/qDnBwbI2nHj84ECfspgQl /gjYKL7wNvqL5wXejhH14HpjJb8t/pi327oqvL5URG2O91rX0iPUt1al9YB7ahGx A0Ywvd5Wxe0SXE5wJSl61sqNfhzojBXns3pBr/gKzBUPksW8ZyU1FVilGvdYZUqd s8zZWs5mj8rENNM6p33joJxFLhiHipuSGYHLDQD16VdPYKZA1LVlB/65XOPAFmjt pzXg0PAp75qsl2WwuCcv/9aM3P7Cfz0+dFHsvILQw+MatQJ57QShMocMNm6JYiue Bfyfm4hSYOJkdw+rtWVRLhUbuzdaVuT0 -----END CERTIFICATE-----Generated at Sat Dec 6 22:18:47 2025 by rpki-client