This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: czVyO+KjPKrpEtjOfJtMb2i6D3iBcSVCOdu5nhysMhU= Subject key identifier: A2:CD:39:3E:5F:37:A7:22:E9:66:1C:F8:1F:6D:A1:EF:76:70:DC:45 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 024A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 0234 Signing time: Fri 05 Dec 2025 00:26:11 +0000 Manifest this update: Fri 05 Dec 2025 00:26:10 +0000 Manifest next update: Fri 12 Dec 2025 00:26:10 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: 4gW0i237dE48/apPtankDW/jqIkMd7bVaoko9DN8ZLg=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: qmc/H0ByapLSZ1bg3nVk+PyVwmov94i2JIkcZK53qgY=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: MPJcPtDS4/T3UppAe6encPh5IY9tUXaMAMvIPt7HvEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Dec 5 00:26:10 2025 GMT Not After : Dec 12 00:26:10 2025 GMT Subject: CN=693226a2-891b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:c0:5d:29:9a:f5:8b:03:65:2e:95:fa:a2: 13:cd:d7:29:8e:c3:f6:01:fa:4c:81:a9:87:82:87: 7a:30:01:7d:81:45:5c:7e:2a:3f:83:37:31:a9:30: 8e:08:f1:5c:87:7c:31:fe:cf:4e:33:f8:d9:ad:73: 94:a5:e3:96:3d:3b:c0:95:24:90:80:6d:fe:91:fc: ea:78:6f:a2:fd:20:b5:4a:cd:bb:73:44:95:33:67: 41:91:43:c7:a1:50:91:27:16:1f:63:1d:52:9a:0e: 7b:5a:f5:94:88:af:45:33:3b:22:56:01:de:cd:3b: 0c:a9:d1:28:7c:d8:ef:ba:e9:62:36:86:55:43:ca: 46:a1:30:87:b1:97:79:97:3a:df:95:ad:c2:5e:31: 3a:86:ef:75:00:04:02:69:dc:c3:3f:08:6d:c4:4a: bd:a0:1e:a7:e9:ee:56:81:39:bc:0f:82:41:d2:2b: fb:5a:57:f5:e8:ea:2f:84:a4:b2:03:1c:c3:ca:c2: d2:b9:fb:d7:7c:a6:2b:c3:f7:c3:34:d9:73:db:2c: 10:2e:d6:12:d7:0d:ee:0b:77:8e:98:92:9c:96:8d: 2b:48:b1:8f:e1:ff:c4:cc:2c:1a:68:eb:16:23:3e: cd:05:a2:68:e2:3d:12:f2:07:e1:90:fb:cb:96:f2: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CD:39:3E:5F:37:A7:22:E9:66:1C:F8:1F:6D:A1:EF:76:70:DC:45 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:01:49:d7:91:42:ee:0a:00:2f:50:a8:6d:8d:3f:fa:81:ea: af:b4:be:bd:06:db:c3:ac:c7:21:a0:86:ae:25:03:f0:e2:b0: 5a:b0:f2:dd:21:b3:57:2f:1f:46:3d:07:e9:f8:dd:71:ea:14: 1e:73:e6:82:53:be:58:b3:79:7c:c7:1b:7f:70:a0:92:7f:b9: 5d:7b:7d:83:43:37:5f:cd:34:ef:ba:dc:e5:76:e2:a9:24:4d: ae:5e:d8:20:4b:1d:34:ac:7a:2f:6a:80:ab:79:1a:8c:f5:82: 47:6b:b8:09:25:3f:61:f9:a7:1f:f3:91:1b:1a:0c:34:31:ea: 4c:44:7f:88:a4:ca:30:2e:43:fc:12:da:bf:24:1a:8c:03:c6: 2c:fb:ce:52:20:1b:9f:da:e5:47:2e:95:c1:b7:da:66:26:e8: 8a:e3:24:ee:2f:3a:83:0a:1f:e6:a4:e1:22:b1:10:91:b7:70: b5:7e:8c:68:87:20:33:bc:1f:6b:14:ab:c9:9d:de:dd:40:64: 42:e3:80:3b:dd:c6:aa:23:34:93:0a:bf:1b:3c:18:8c:39:3c: 75:01:7c:75:43:6a:38:7c:ac:58:b0:5b:9d:b7:42:77:79:34: ea:06:f0:29:04:8e:3f:bf:b6:6e:7c:b5:f6:35:15:a8:11:b0: 55:39:b7:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUxMjA1MDAyNjEwWhcNMjUxMjEyMDAyNjEwWjAYMRYwFAYD VQQDEw02OTMyMjZhMi04OTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1obAXSma9YsDZS6V+qITzdcpjsP2AfpMgamHgod6MAF9gUVcfio/gzcxqTCO CPFch3wx/s9OM/jZrXOUpeOWPTvAlSSQgG3+kfzqeG+i/SC1Ss27c0SVM2dBkUPH oVCRJxYfYx1Smg57WvWUiK9FMzsiVgHezTsMqdEofNjvuuliNoZVQ8pGoTCHsZd5 lzrfla3CXjE6hu91AAQCadzDPwhtxEq9oB6n6e5WgTm8D4JB0iv7Wlf16OovhKSy AxzDysLSufvXfKYrw/fDNNlz2ywQLtYS1w3uC3eOmJKclo0rSLGP4f/EzCwaaOsW Iz7NBaJo4j0S8gfhkPvLlvIvAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLNOT5f N6ci6WYc+B9toe92cNxFMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALAUnXkULuCgAvUKhtjT/6geqvtL69BtvDrMchoIauJQPw4rBasPLd IbNXLx9GPQfp+N1x6hQec+aCU75Ys3l8xxt/cKCSf7lde32DQzdfzTTvutzlduKp JE2uXtggSx00rHovaoCreRqM9YJHa7gJJT9h+acf85EbGgw0MepMRH+IpMowLkP8 Etq/JBqMA8Ys+85SIBuf2uVHLpXBt9pmJuiK4yTuLzqDCh/mpOEisRCRt3C1foxo hyAzvB9rFKvJnd7dQGRC44A73caqIzSTCr8bPBiMOTx1AXx1Q2o4fKxYsFudt0J3 eTTqBvApBI4/v7ZufLX2NRWoEbBVObd+ -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:11 2025 by rpki-client