This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft File: aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json) Hash identifier: 0QMtPtWec1oMYHKsUX9jfvHNGiKWZ+B+6FPkoSfdjK8= Subject key identifier: 89:52:2B:66:DD:A7:90:47:B0:3C:71:57:43:2E:67:57:66:36:D5:D0 Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft Manifest number: 06B9 Signing time: Sat 06 Dec 2025 21:10:19 +0000 Manifest this update: Sat 06 Dec 2025 21:10:19 +0000 Manifest next update: Sat 13 Dec 2025 21:10:19 +0000 Files and hashes: 1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: oVNbljvoymWxEo2ELwXVDrPYfNFjvpFfomwInsgtqYQ=) 2: 9BC411EEA03F11F094CBF530C4F9AE02.roa (hash: WA/tDmga3l8gZvc4ZjpwlBlP3nDfqhnwsfFvTM1otOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Validity Not Before: Dec 6 21:10:19 2025 GMT Not After : Dec 13 21:10:19 2025 GMT Subject: CN=69349bbb-f981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:79:75:63:8c:ca:f6:d0:52:15:e2:26:66: 59:5d:3c:ac:52:d1:9c:d5:b7:7f:f7:bf:8a:7a:ad: 73:05:ee:44:25:7f:af:32:20:a3:db:2e:73:cb:b7: ff:84:83:79:29:14:19:50:ae:57:bd:98:8c:ef:d5: ad:c8:f8:8f:35:a8:2d:39:8e:a5:a2:4c:1d:82:69: b5:44:04:c3:f7:38:a4:2f:21:f3:20:cb:a6:fe:bc: b6:c3:ba:b5:e6:04:f4:5b:29:d6:ba:83:05:b5:02: bd:4f:42:12:7f:d3:08:8a:d4:5f:8a:bb:f7:82:0c: 58:7b:19:60:70:8d:dc:a0:a3:29:be:53:73:bc:69: 5f:cc:1e:ac:4b:75:55:eb:a8:f0:17:7c:5c:36:e7: 1e:14:00:ec:a3:0f:bc:b4:9c:4e:86:d7:fd:82:a1: 9d:5f:ce:e5:d1:76:84:69:ca:37:0a:9c:74:10:33: 39:ec:67:97:fe:56:7a:64:50:71:28:ee:90:99:0e: a6:df:a7:d0:64:38:20:57:d1:d4:e6:6e:8c:e4:a1: 13:cd:cc:5c:3c:76:4e:09:ea:4b:bf:bf:b9:d5:73: 5b:ca:31:e8:33:f2:d7:e0:71:f9:22:26:fa:02:e8: c9:00:f7:3c:d0:35:0e:8b:80:4d:61:fd:37:ce:34: a7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:2B:66:DD:A7:90:47:B0:3C:71:57:43:2E:67:57:66:36:D5:D0 X509v3 Authority Key Identifier: keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0e:a0:2d:0a:5d:73:ca:f4:e0:86:59:7b:23:4b:6f:dd:57: 2e:18:3c:1c:6c:f0:db:c8:aa:91:27:3a:53:59:f7:ff:e7:2f: c1:db:0c:38:e4:ba:23:3d:ff:3f:98:6d:48:9d:cd:90:d9:db: 48:ef:ab:06:8b:68:b8:f3:e0:a0:61:59:63:5b:37:fc:61:e7: 15:4c:39:f2:7d:f7:9f:a6:e6:d9:c9:35:17:f1:a5:af:54:26: 58:80:8f:84:a9:41:62:aa:23:3d:7b:ff:a1:2b:f6:b2:71:1c: 12:87:08:83:64:78:13:03:55:1d:5e:be:91:74:61:a0:85:b2: df:64:79:dc:46:e4:9e:3e:fa:27:3b:7b:3e:9c:0c:ac:27:8f: a1:c5:a7:01:53:a9:80:a1:9c:55:14:bf:cf:3f:b2:ea:fe:1f: df:5f:d5:00:8d:e9:ee:ec:61:16:f6:75:ac:e1:c7:13:86:1e: 69:cd:50:92:1b:bc:4f:12:c1:02:69:c4:ee:8d:ec:82:12:51: 82:71:d4:be:72:61:bb:3e:89:ee:de:eb:5c:63:84:d7:94:94: de:83:85:fb:4c:57:35:1b:86:2c:56:19:16:2b:cd:91:a6:21: 52:f5:d4:1f:2e:9f:40:61:5a:2c:07:34:c0:ac:65:6d:66:a1: f2:6e:88:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2MDUxMTAvBgNVBAUTKDY4MTg4NEMwQzc1NTdFNTI2RUYyQkM0RDFFNUFCQzMz NkFFMjdGOUUwHhcNMjUxMjA2MjExMDE5WhcNMjUxMjEzMjExMDE5WjAYMRYwFAYD VQQDEw02OTM0OWJiYi1mOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD95dWOMyvbQUhXiJmZZXTysUtGc1bd/97+Keq1zBe5EJX+vMiCj2y5zy7f/ hIN5KRQZUK5XvZiM79WtyPiPNagtOY6lokwdgmm1RATD9zikLyHzIMum/ry2w7q1 5gT0WynWuoMFtQK9T0ISf9MIitRfirv3ggxYexlgcI3coKMpvlNzvGlfzB6sS3VV 66jwF3xcNuceFADsow+8tJxOhtf9gqGdX87l0XaEaco3Cpx0EDM57GeX/lZ6ZFBx KO6QmQ6m36fQZDggV9HU5m6M5KETzcxcPHZOCepLv7+51XNbyjHoM/LX4HH5Iib6 AujJAPc80DUOi4BNYf03zjSnmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlSK2bd p5BHsDxxV0MuZ1dmNtXQMB8GA1UdIwQYMBaAFGgYhMDHVX5SbvK8TR5avDNq4n+e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTYwNS8zNjY2NkQ2RTg3 MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZsSnU4cnhOSGxxOE0ycmlm NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCaUV3TWRWZmxKdThyeE5IbHE4TTJyaWY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTYwNS8zNjY2NkQ2RTg3MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZs SnU4cnhOSGxxOE0ycmlmNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASDqAtCl1zyvTghll7I0tv3VcuGDwcbPDbyKqRJzpTWff/5y/B2ww4 5LojPf8/mG1Inc2Q2dtI76sGi2i48+CgYVljWzf8YecVTDnyffefpubZyTUX8aWv VCZYgI+EqUFiqiM9e/+hK/aycRwShwiDZHgTA1UdXr6RdGGghbLfZHncRuSePvon O3s+nAysJ4+hxacBU6mAoZxVFL/PP7Lq/h/fX9UAjenu7GEW9nWs4ccThh5pzVCS G7xPEsECacTujeyCElGCcdS+cmG7Ponu3utcY4TXlJTeg4X7TFc1G4YsVhkWK82R piFS9dQfLp9AYVosBzTArGVtZqHyboiD -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:43 2025 by rpki-client