This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json) Hash identifier: HX25CMMNGqWXRHPvVH0t1Xzg6GzPC0Fry8G7wfHA9mo= Subject key identifier: 53:4B:92:DC:10:BE:90:E5:A5:6D:0A:9B:7F:2B:18:45:7E:24:1F:18 Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft Manifest number: 11 Signing time: Sat 06 Dec 2025 14:40:57 +0000 Manifest this update: Sat 06 Dec 2025 14:40:56 +0000 Manifest next update: Sat 13 Dec 2025 14:40:56 +0000 Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: 0++UoTOU0+SAbOuAwn97SGLdavwP9O1U5e0R+Nouu8c=) 2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: ZnOlNoLSibfq3/qIsrDbM5RZVyIuk7cWs+48nm4czSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Dec 6 14:40:56 2025 GMT Not After : Dec 13 14:40:56 2025 GMT Subject: CN=69344078-acca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:37:a9:f6:f5:fb:c6:72:79:c1:aa:9a:53:43: 2d:ec:66:55:9f:f9:09:88:27:51:4c:2d:9e:aa:f2: 2c:4f:5e:9b:07:4d:c8:9a:cb:88:fb:3b:b7:a3:f1: 79:b6:10:0b:a0:b1:fc:73:1e:32:22:2d:6d:c9:fa: 5b:26:89:a8:ab:e3:8c:aa:5d:1c:51:47:60:07:8a: c7:39:e3:66:3b:ad:7e:e7:78:4f:86:eb:32:e8:0c: 68:30:dd:f0:67:b4:9c:e9:1d:66:4f:1f:92:d9:33: 35:11:33:aa:22:52:40:11:79:13:3f:f7:28:14:da: 63:2d:16:78:d4:19:59:ba:e3:09:ad:bd:8c:ad:fc: 92:f1:f5:7a:6d:41:5e:82:39:eb:24:ac:36:6e:6a: 24:2e:f5:ca:ae:bf:8d:a3:a2:71:4d:52:9d:11:91: 65:f5:02:53:8e:0e:35:36:cf:7f:a0:69:ec:53:84: 76:1d:90:40:5d:9e:83:75:83:bf:73:57:63:90:dd: ff:cc:e3:84:06:9e:72:cb:25:f4:e8:a1:22:34:11: fd:d7:63:a7:fa:ae:bc:9c:77:4d:14:f6:37:f5:09: 22:05:16:cb:37:5f:98:d7:f8:5b:1d:38:79:11:d5: c2:19:f9:aa:71:95:13:17:59:98:6d:37:bc:ae:17: dd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4B:92:DC:10:BE:90:E5:A5:6D:0A:9B:7F:2B:18:45:7E:24:1F:18 X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f5:e1:b7:7e:a5:61:48:c1:af:c3:31:f3:01:78:30:38:8d: d3:ec:b0:0f:b2:db:a1:3c:fe:13:28:16:3e:64:a4:51:7a:c4: ca:da:c6:f6:57:d5:c8:68:07:c4:97:0b:cd:41:4c:fb:25:c7: 22:ec:06:f3:78:84:07:57:d3:b8:5f:c1:a9:13:3a:f1:d8:69: 1b:9a:76:d5:e7:5f:11:eb:55:24:c1:69:ab:83:69:e7:7c:5b: b1:9b:36:00:3c:76:f1:e5:9f:a7:e3:90:c7:2b:c7:80:39:08: 65:1d:df:a5:7e:68:4f:3f:4c:47:ff:0d:30:20:cc:95:f5:1c: 35:d7:bf:89:18:32:fa:e5:0f:22:4b:47:5f:62:33:e2:64:92: 82:23:f5:94:dc:7e:81:5e:f8:89:4b:53:14:6e:24:9b:5b:9e: 00:dd:12:eb:47:8c:78:2c:41:0d:6e:54:c4:a9:7e:a8:48:3c: 28:55:56:73:47:c7:7a:82:0f:28:b8:02:83:a4:60:a4:2b:ff: 58:a1:b3:16:53:18:17:eb:7b:74:6f:65:50:69:99:ff:b4:ef: e9:46:6a:26:5c:47:9e:73:78:5d:45:d0:d3:ef:08:b3:04:fc: cf:0e:c7:85:f2:53:ee:31:a3:e5:44:27:95:42:83:15:2f:02: 31:7f:a9:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0FFODExMC8GA1UEBRMoNjg0NTk3RTk5OEEzQTBDNjk4NzM2MUI3QzU3MjA0M0E4 MTZDMUM1MjAeFw0yNTEyMDYxNDQwNTZaFw0yNTEyMTMxNDQwNTZaMBgxFjAUBgNV BAMTDTY5MzQ0MDc4LWFjY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRN6n29fvGcnnBqppTQy3sZlWf+QmIJ1FMLZ6q8ixPXpsHTciay4j7O7ej8Xm2 EAugsfxzHjIiLW3J+lsmiair44yqXRxRR2AHisc542Y7rX7neE+G6zLoDGgw3fBn tJzpHWZPH5LZMzURM6oiUkAReRM/9ygU2mMtFnjUGVm64wmtvYyt/JLx9XptQV6C OeskrDZuaiQu9cquv42jonFNUp0RkWX1AlOODjU2z3+gaexThHYdkEBdnoN1g79z V2OQ3f/M44QGnnLLJfTooSI0Ef3XY6f6rrycd00U9jf1CSIFFss3X5jX+FsdOHkR 1cIZ+apxlRMXWZhtN7yuF92lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU0uS3BC+ kOWlbQqbfysYRX4kHxgwHwYDVR0jBBgwFoAUaEWX6ZijoMaYc2G3xXIEOoFsHFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQUU4LzNGN0UyNTc0QkUw NzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVXWDZaaWpvTWFZYzJHM3hYSUVPb0ZzSEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QUU4LzNGN0UyNTc0QkUwNzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01h WWMyRzN4WElFT29Gc0hGSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGb14bd+pWFIwa/DMfMBeDA4jdPssA+y26E8/hMoFj5kpFF6xMraxvZX 1choB8SXC81BTPslxyLsBvN4hAdX07hfwakTOvHYaRuadtXnXxHrVSTBaauDaed8 W7GbNgA8dvHln6fjkMcrx4A5CGUd36V+aE8/TEf/DTAgzJX1HDXXv4kYMvrlDyJL R19iM+JkkoIj9ZTcfoFe+IlLUxRuJJtbngDdEutHjHgsQQ1uVMSpfqhIPChVVnNH x3qCDyi4AoOkYKQr/1ihsxZTGBfre3RvZVBpmf+07+lGaiZcR55zeF1F0NPvCLME /M8Ox4XyU+4xo+VEJ5VCgxUvAjF/qSw= -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:05 2025 by rpki-client