This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: J+0Gqa80mD8v0/lirKvvaZ+ACdz/t2s4O9IxakVbTjA= Subject key identifier: FF:8F:E2:14:90:A9:F6:24:BE:42:A9:D3:9F:F5:81:86:10:52:88:4D Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 162D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 161F Signing time: Sat 06 Dec 2025 16:19:20 +0000 Manifest this update: Sat 06 Dec 2025 16:19:20 +0000 Manifest next update: Sat 13 Dec 2025 16:19:20 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: zRqzfjIvNLUA/gEuU/xvTf9MXO9BwmmvV99NzRfpzLo=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: jy3Wft/F/5UxXAXx08sOlZkwBarb1srk+Xi5m/F+Ac0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5677 (0x162d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: Dec 6 16:19:20 2025 GMT Not After : Dec 13 16:19:20 2025 GMT Subject: CN=69345788-ef11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:b3:28:1c:3f:ce:f7:11:ff:e7:c0:8a:78: 78:70:8a:22:62:1b:c0:36:68:66:f9:2f:2f:ff:b2: d3:6f:8e:dc:2a:bc:8c:cb:51:2b:a4:fa:c5:5f:af: 40:ee:90:68:dc:f3:e3:e3:99:c4:ca:a1:c9:ef:50: c4:36:74:a8:59:4e:86:96:43:a3:4a:61:5a:7e:cf: a5:92:43:e9:5b:2d:05:0e:c5:36:f1:14:42:7b:90: 2f:2f:65:02:55:90:a3:75:ec:4e:fb:c1:1f:94:d1: 4e:80:6d:e8:cf:03:c9:2e:f5:04:52:74:e9:6d:2f: 37:f7:6a:f3:42:95:20:1e:e9:c9:d2:54:54:48:26: f7:b8:f5:ee:fa:cb:ce:68:de:ba:5d:d1:da:ca:82: e3:41:73:b4:08:29:5d:9f:ab:a8:34:7c:ff:7e:a3: aa:31:11:5b:69:f4:a7:2d:46:f3:45:39:2b:ba:8d: c1:cb:2f:c0:3d:4f:14:8c:6d:03:37:f9:5f:38:4f: 51:21:02:6b:ba:dd:8b:da:4a:12:c1:d6:bc:0e:b4: 03:de:da:4a:ae:7e:2d:dd:17:57:fd:c6:83:63:74: 3a:3a:81:d1:d3:4f:28:f8:b5:bb:5c:cd:b7:f2:1b: 8b:b1:bc:5a:d1:f8:04:09:98:f8:63:a1:5d:d0:72: 99:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8F:E2:14:90:A9:F6:24:BE:42:A9:D3:9F:F5:81:86:10:52:88:4D X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:17:70:df:c3:91:dd:1b:0a:03:4d:e3:0d:d2:b6:f2:8b:2f: 6b:9b:36:96:94:78:d7:50:e2:64:e8:61:e3:2b:4d:0e:7e:8d: 0f:7e:83:ac:b5:cd:e0:87:e6:93:b2:6b:55:26:6d:3e:0a:85: c5:c9:1b:c2:ce:89:ed:92:cd:18:bf:e6:d2:a1:f9:6d:58:75: 70:3b:83:cb:e2:92:5d:06:d7:5b:1d:9d:0c:82:e7:0d:c1:b7: 0e:28:d8:b3:24:f3:96:58:dd:3c:27:9a:92:86:ea:c1:bc:ba: b0:6b:6b:05:99:70:0c:58:58:94:e8:c4:cb:33:cb:ef:0e:9c: 71:a2:67:51:f3:36:2f:82:f9:1c:c6:00:91:a1:f9:6a:15:d6: ef:b5:ce:75:11:d9:89:db:16:1f:76:76:b3:38:5d:5c:a0:7a: 7a:2b:67:65:54:02:9e:65:b5:8b:05:33:25:0d:8c:c0:a0:a7: 1f:55:9e:12:18:0c:42:b7:87:d8:ca:b2:61:15:54:31:32:59: a5:cc:df:9a:b0:c7:5b:e2:5c:a8:86:c6:df:b1:08:b4:88:f8: d4:d7:ac:cb:96:e0:41:31:98:6c:bf:66:e1:bb:3a:16:39:3c: 74:f3:1a:8a:21:45:4d:4b:bb:71:62:a0:6f:0c:5c:ad:35:da: ee:83:14:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjUxMjA2MTYxOTIwWhcNMjUxMjEzMTYxOTIwWjAYMRYwFAYD VQQDEw02OTM0NTc4OC1lZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0+zKBw/zvcR/+fAinh4cIoiYhvANmhm+S8v/7LTb47cKryMy1ErpPrFX69A 7pBo3PPj45nEyqHJ71DENnSoWU6GlkOjSmFafs+lkkPpWy0FDsU28RRCe5AvL2UC VZCjdexO+8EflNFOgG3ozwPJLvUEUnTpbS8392rzQpUgHunJ0lRUSCb3uPXu+svO aN66XdHayoLjQXO0CCldn6uoNHz/fqOqMRFbafSnLUbzRTkruo3Byy/APU8UjG0D N/lfOE9RIQJrut2L2koSwda8DrQD3tpKrn4t3RdX/caDY3Q6OoHR008o+LW7XM23 8huLsbxa0fgECZj4Y6Fd0HKZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+P4hSQ qfYkvkKp05/1gYYQUohNMB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRF3Dfw5HdGwoDTeMN0rbyiy9rmzaWlHjXUOJk6GHjK00Ofo0PfoOs tc3gh+aTsmtVJm0+CoXFyRvCzontks0Yv+bSofltWHVwO4PL4pJdBtdbHZ0MgucN wbcOKNizJPOWWN08J5qShurBvLqwa2sFmXAMWFiU6MTLM8vvDpxxomdR8zYvgvkc xgCRoflqFdbvtc51EdmJ2xYfdnazOF1coHp6K2dlVAKeZbWLBTMlDYzAoKcfVZ4S GAxCt4fYyrJhFVQxMlmlzN+asMdb4lyohsbfsQi0iPjU16zLluBBMZhsv2bhuzoW OTx08xqKIUVNS7txYqBvDFytNdrugxSV -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:46 2025 by rpki-client