This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft File: axGMFY4LjZuYTs3ceLJEgC5HBUc.mft (raw, json) Hash identifier: 4FO5CsL5gwEbfmQcg8EUaCC2Ggwnyq3Xd1RUVHKlvXA= Subject key identifier: A7:7C:5F:14:AB:A9:0E:87:AF:EE:3F:F7:E8:75:89:2E:E7:F2:3D:FB Authority key identifier: 6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47 Certificate issuer: /CN=A91F1F2A/serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft Manifest number: 22 Signing time: Fri 05 Dec 2025 05:34:55 +0000 Manifest this update: Fri 05 Dec 2025 05:34:55 +0000 Manifest next update: Fri 12 Dec 2025 05:34:55 +0000 Files and hashes: 1: axGMFY4LjZuYTs3ceLJEgC5HBUc.crl (hash: MncmYM5X7K54LcBTPLjpLQTmyHk/GD5gda6RgLT3Fz8=) 2: DE6BD6189F8F11F08976857BC4F9AE02.roa (hash: z3P+QwqIAVJ2kDpSoqWTAoJ/rezdLH3YQLa5NxQBxaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1F2A, serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547 Validity Not Before: Dec 5 05:34:55 2025 GMT Not After : Dec 12 05:34:55 2025 GMT Subject: CN=69326eff-8a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:6a:9e:80:b6:ea:dd:8f:18:28:a8:04:f6: 67:4f:28:44:5f:d0:60:6c:b7:87:c0:81:bc:42:2b: 82:c7:02:32:df:40:0c:ff:24:e7:9e:3b:fc:01:2c: 06:2d:5f:46:1b:e0:7f:b6:a3:db:4f:e7:c9:0c:08: e4:a3:76:b2:a0:c2:e3:d7:f2:91:b1:a3:a2:e4:3c: b5:b8:04:8c:1e:81:1b:73:40:67:43:49:ed:05:03: f5:b5:83:f9:22:7a:e7:25:0f:9a:ae:6c:bd:c5:62: 81:46:8f:c3:0c:ba:a1:56:b4:a3:ba:12:92:9d:52: 53:49:0c:b7:03:32:fa:d7:85:dc:a7:20:ae:d4:10: 42:30:45:9d:1f:90:2d:f7:e8:f1:bb:e3:fe:d3:4f: 76:35:ad:34:21:e4:a7:f4:a9:a8:bb:e6:e6:e3:42: 0a:b1:a1:03:7a:a7:f1:71:05:cc:06:3e:c5:59:50: b1:3e:3f:89:75:11:0b:a8:9b:fb:a7:eb:26:9e:b7: d6:cb:02:1b:ea:e6:fc:61:c2:87:1e:b8:0f:7d:d0: ba:d1:4f:3a:8a:15:5b:da:35:e4:48:c8:ff:24:c8: 67:e8:08:a5:13:5e:9d:5d:50:eb:ec:b6:7c:b0:72: c9:37:df:6c:da:f7:2c:14:05:72:5e:9a:56:09:02: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7C:5F:14:AB:A9:0E:87:AF:EE:3F:F7:E8:75:89:2E:E7:F2:3D:FB X509v3 Authority Key Identifier: keyid:6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ea:ba:03:f3:d5:1b:f5:70:7a:eb:89:84:ea:c1:ac:97:29: 73:8f:36:45:b7:f9:3d:c7:b3:21:c3:31:e5:90:a4:82:db:f4: e6:ba:ee:fd:68:09:59:49:58:2a:31:f7:8e:ad:73:f5:ce:05: 81:24:56:b5:4e:aa:4e:ec:29:be:19:42:23:6c:74:ef:d9:0c: ed:b2:e2:ed:d1:b8:68:34:12:f8:1c:05:70:b9:db:e3:58:f2: 83:0e:4d:2d:b1:f9:76:4c:ea:64:f3:3c:26:7f:d4:96:df:05: ad:3a:1d:a6:26:a4:57:66:51:0b:8f:bf:ab:18:f2:65:e2:c2: 26:bb:17:b4:47:e4:5a:41:3f:af:11:b9:44:e6:52:30:ee:7f: 60:d6:3a:ca:31:3d:b7:62:5c:ba:10:a0:61:c1:97:24:63:cc: 02:58:33:8f:4b:38:c3:be:41:eb:36:0c:f4:62:75:5b:60:7f: 93:a4:5b:22:58:ff:67:75:97:38:2b:9d:fc:fa:e4:66:14:45: 52:d5:51:18:89:cc:9c:3c:dc:85:2b:9f:43:e0:63:35:bb:b7: b3:a1:fe:30:37:cf:6d:4e:58:d8:85:78:03:9c:36:33:cd:11: f4:f1:c2:29:34:79:f4:73:83:f4:e7:6f:ce:15:fd:18:1c:39: 17:a5:49:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUYyQTExMC8GA1UEBRMoNkIxMThDMTU4RTBCOEQ5Qjk4NEVDRERDNzhCMjQ0ODAy RTQ3MDU0NzAeFw0yNTEyMDUwNTM0NTVaFw0yNTEyMTIwNTM0NTVaMBgxFjAUBgNV BAMTDTY5MzI2ZWZmLThhNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC86WqegLbq3Y8YKKgE9mdPKERf0GBst4fAgbxCK4LHAjLfQAz/JOeeO/wBLAYt X0Yb4H+2o9tP58kMCOSjdrKgwuPX8pGxo6LkPLW4BIwegRtzQGdDSe0FA/W1g/ki euclD5qubL3FYoFGj8MMuqFWtKO6EpKdUlNJDLcDMvrXhdynIK7UEEIwRZ0fkC33 6PG74/7TT3Y1rTQh5Kf0qai75ubjQgqxoQN6p/FxBcwGPsVZULE+P4l1EQuom/un 6yaet9bLAhvq5vxhwoceuA990LrRTzqKFVvaNeRIyP8kyGfoCKUTXp1dUOvstnyw csk332za9ywUBXJemlYJAtO5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp3xfFKup Doev7j/36HWJLufyPfswHwYDVR0jBBgwFoAUaxGMFY4LjZuYTs3ceLJEgC5HBUcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRjJBLzkzMkY4NUJFOUY4 RjExRjBCQjk3NEIyREM0RjlBRTAyL2F4R01GWTRMalp1WVRzM2NlTEpFZ0M1SEJV Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXhHTUZZNExqWnVZVHMzY2VMSkVnQzVIQlVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RjJBLzkzMkY4NUJFOUY4RjExRjBCQjk3NEIyREM0RjlBRTAyL2F4R01GWTRMalp1 WVRzM2NlTEpFZ0M1SEJVYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbqugPz1Rv1cHrriYTqwayXKXOPNkW3+T3HsyHDMeWQpILb9Oa67v1o CVlJWCox946tc/XOBYEkVrVOqk7sKb4ZQiNsdO/ZDO2y4u3RuGg0EvgcBXC52+NY 8oMOTS2x+XZM6mTzPCZ/1JbfBa06HaYmpFdmUQuPv6sY8mXiwia7F7RH5FpBP68R uUTmUjDuf2DWOsoxPbdiXLoQoGHBlyRjzAJYM49LOMO+Qes2DPRidVtgf5OkWyJY /2d1lzgrnfz65GYURVLVURiJzJw83IUrn0PgYzW7t7Oh/jA3z21OWNiFeAOcNjPN EfTxwik0efRzg/Tnb84V/RgcORelSaw= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:57 2025 by rpki-client