This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: DiWmEgGT2P58kcrtem/+Cns2FKu7zHgEOr9GHD0rZ6g= Subject key identifier: AF:9A:82:31:80:5A:03:4E:BB:3B:14:F8:D7:55:9B:39:EF:B8:2A:9D Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 014D Signing time: Fri 05 Dec 2025 02:28:28 +0000 Manifest this update: Fri 05 Dec 2025 02:28:27 +0000 Manifest next update: Fri 12 Dec 2025 02:28:27 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: Vk6qlu/mvRkvv01uYGF6r7aNv2zlPIxUBIDrOwV0FHI=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: gfkWuMfDUYAqyRnTePZPV70xVbbxGR6RawYGUjcJFec=) 3: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: kFrgJirbvirh1kV38XDRtsJ3nsQNa4+OvKJO0YsvLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Dec 5 02:28:27 2025 GMT Not After : Dec 12 02:28:27 2025 GMT Subject: CN=6932434c-354a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:00:d4:20:d4:73:f7:b6:3f:73:cb:ab:e1: 00:fc:9c:97:28:98:61:21:15:e7:2a:cb:71:ff:37: 2f:9e:3c:69:24:90:16:dc:07:15:e1:ca:57:75:f0: cb:5b:bb:04:f5:b8:9f:02:84:e6:f3:d8:08:fe:70: 91:2a:1d:a4:58:59:73:82:54:4d:1c:72:0a:97:8a: 3d:29:87:ee:87:d0:55:10:af:41:e3:b8:cc:97:42: 97:d2:ba:50:cb:3f:c6:c9:ce:2a:dc:c3:92:85:4a: 90:10:d6:6c:c3:2f:9d:42:88:c4:0c:89:14:f7:eb: db:6b:f2:21:06:5f:2e:26:27:55:3a:8a:e9:81:d0: 0b:06:7f:88:e9:70:66:0f:69:4f:4e:10:ab:48:bc: c5:4b:4f:79:05:46:b4:10:87:02:c8:71:e5:c8:e0: 6c:57:08:49:52:7d:21:46:fb:a1:51:be:85:e2:ce: 0a:72:c2:f9:ad:6c:f9:7d:e4:48:0c:d3:b9:d0:86: 40:15:01:9a:96:01:2e:31:59:c7:4e:79:04:c0:48: f0:ff:e7:6f:57:30:ff:e0:b9:6c:a7:64:a1:e8:ad: 8c:1c:3b:51:f9:45:89:1f:cb:98:cd:7f:71:38:7e: bd:ea:2e:ee:36:de:82:9e:65:30:0c:82:46:99:0a: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9A:82:31:80:5A:03:4E:BB:3B:14:F8:D7:55:9B:39:EF:B8:2A:9D X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b5:0c:1c:5c:2b:39:94:43:0f:eb:cb:f1:a2:9a:f6:53:a5: e3:49:e1:d7:c7:5b:4e:28:9f:90:d7:f2:33:61:86:45:cf:5c: 5b:ed:18:d0:8a:91:37:20:71:4d:b8:af:a7:b8:3f:12:64:af: 08:d5:bc:99:16:3e:0f:21:b0:7e:07:c7:ce:15:89:ac:e6:58: f1:48:b4:02:14:5a:44:f8:88:df:58:f4:2e:5c:51:49:4c:91: bb:00:e0:b7:5d:7e:de:90:95:c2:62:85:50:5e:b0:17:02:0f: e7:17:88:60:f5:15:f6:64:a2:4b:19:68:bf:ea:30:05:a2:bb: 18:99:d3:7c:98:5e:c3:09:8d:23:5a:0d:45:17:fa:60:66:84: 9a:a9:2e:8a:37:28:1d:a1:bf:82:50:92:e9:e9:e8:84:96:d3: b2:13:61:4e:de:ee:86:17:36:6b:0b:06:17:80:bd:fa:d8:ca: ec:fe:ad:24:05:5a:59:b9:a2:81:cf:da:29:fd:0c:5a:93:42: 18:3f:09:00:b2:d9:54:17:11:5c:f4:68:a9:c6:16:31:aa:0c: f3:e9:26:2c:8d:7a:1c:2b:40:75:85:97:fc:ce:c5:3f:aa:e7: 2b:95:d5:4a:a0:f5:ce:c9:72:b5:34:a7:ec:40:6b:16:98:8d: 39:da:5d:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUxMjA1MDIyODI3WhcNMjUxMjEyMDIyODI3WjAYMRYwFAYD VQQDEw02OTMyNDM0Yy0zNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/wA1CDUc/e2P3PLq+EA/JyXKJhhIRXnKstx/zcvnjxpJJAW3AcV4cpXdfDL W7sE9bifAoTm89gI/nCRKh2kWFlzglRNHHIKl4o9KYfuh9BVEK9B47jMl0KX0rpQ yz/Gyc4q3MOShUqQENZswy+dQojEDIkU9+vba/IhBl8uJidVOorpgdALBn+I6XBm D2lPThCrSLzFS095BUa0EIcCyHHlyOBsVwhJUn0hRvuhUb6F4s4KcsL5rWz5feRI DNO50IZAFQGalgEuMVnHTnkEwEjw/+dvVzD/4Llsp2Sh6K2MHDtR+UWJH8uYzX9x OH696i7uNt6CnmUwDIJGmQpk1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+agjGA WgNOuzsU+NdVmznvuCqdMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9tQwcXCs5lEMP68vxopr2U6XjSeHXx1tOKJ+Q1/IzYYZFz1xb7RjQ ipE3IHFNuK+nuD8SZK8I1byZFj4PIbB+B8fOFYms5ljxSLQCFFpE+IjfWPQuXFFJ TJG7AOC3XX7ekJXCYoVQXrAXAg/nF4hg9RX2ZKJLGWi/6jAForsYmdN8mF7DCY0j Wg1FF/pgZoSaqS6KNygdob+CUJLp6eiEltOyE2FO3u6GFzZrCwYXgL362Mrs/q0k BVpZuaKBz9op/Qxak0IYPwkAstlUFxFc9GipxhYxqgzz6SYsjXocK0B1hZf8zsU/ qucrldVKoPXOyXK1NKfsQGsWmI052l0X -----END CERTIFICATE-----Generated at Sat Dec 6 23:06:29 2025 by rpki-client