This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft File: oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json) Hash identifier: XBl21ZytLSQgOGMswJAF9aD82VgWcS3PN5tpQ4/xP8E= Subject key identifier: BD:9B:20:51:C2:01:AE:69:F2:06:E2:A5:59:FA:26:31:9D:8A:BB:3C Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF Certificate issuer: /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Certificate serial: 09A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft Manifest number: 211F Signing time: Wed 24 Dec 2025 16:22:42 +0000 Manifest this update: Wed 24 Dec 2025 16:22:41 +0000 Manifest next update: Wed 31 Dec 2025 16:22:41 +0000 Files and hashes: 1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: Jkg8UBCcWhg61V6VsktOJoX26RdWw87oCYaELP/jzoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2470 (0x9a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398E5, serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Validity Not Before: Dec 24 16:22:41 2025 GMT Not After : Dec 31 16:22:41 2025 GMT Subject: CN=694c1352-af55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:9c:d8:b4:4b:3a:57:bc:37:74:80:ea:b6: 33:d0:e2:db:58:5d:4f:c5:58:59:b8:f7:6a:ab:9a: 07:bb:89:26:db:68:81:2d:7b:e6:e5:ec:09:14:09: 0e:98:54:f9:2f:71:bb:21:3b:90:58:a5:cd:72:f1: 00:67:cf:f6:ab:69:6d:73:f5:e7:fc:6c:81:7a:08: ac:04:8b:53:ed:3d:9e:5c:80:5d:ee:2d:d9:7a:a3: df:6c:23:72:48:b5:76:ab:07:21:20:9c:9c:90:4f: ff:1f:8b:ab:86:ad:da:1b:ee:ad:0f:a2:16:69:d6: b7:45:da:da:59:ea:d6:f0:9c:88:78:c9:33:d0:1b: 68:ce:95:ed:4b:e3:b3:c0:b4:43:ac:a4:4e:78:88: 17:e8:1b:10:ee:3d:01:cd:95:35:9e:af:9d:8a:a9: 05:8f:83:86:6b:59:4f:d5:fc:2f:50:89:a6:6f:f3: 8c:15:6f:6a:e0:2a:5a:b9:3d:a3:77:e0:11:a2:91: a7:e9:7b:32:4b:56:25:db:f5:eb:a8:50:c6:ce:1b: bf:40:b5:1c:2f:0e:4b:e9:cb:63:2f:da:82:41:85: ba:19:5d:1d:8b:4b:52:05:8d:82:3d:d7:99:df:43: cb:34:0f:2c:ee:00:a8:fa:3f:18:08:f6:bb:bb:04: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9B:20:51:C2:01:AE:69:F2:06:E2:A5:59:FA:26:31:9D:8A:BB:3C X509v3 Authority Key Identifier: keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:92:52:0c:65:92:e8:e5:38:20:e3:18:dc:af:33:3c:e2:03: cc:80:70:8b:e5:3d:b2:73:1a:68:72:7b:17:f5:e8:bc:7b:27: 2c:b1:92:aa:03:c4:a1:f4:7d:22:32:c2:3e:db:78:a9:2f:69: ae:8b:c3:12:22:e2:02:48:a3:24:4d:4c:cd:ee:35:74:36:eb: 94:60:52:ff:1a:26:20:01:14:c9:e3:db:11:6f:d5:70:7e:09: fe:7f:67:f8:76:a9:92:f4:85:00:1e:73:b0:49:55:14:e8:1e: 72:d3:71:59:b5:09:b2:51:9d:59:a9:92:04:97:1c:f4:33:bc: e2:98:a6:9b:60:ef:a5:9b:c0:20:69:1b:ef:f4:22:7c:f5:9b: 4d:f3:95:ec:1e:76:b7:69:9a:16:5e:c8:cd:6a:4b:b8:01:3d: 3b:73:b2:d9:5c:b6:f6:a5:be:05:72:fc:9e:59:f5:8a:b1:ef: 9d:9c:99:f3:f7:51:31:48:64:ea:c0:7e:2b:45:1a:e5:55:2a: fc:52:ce:d4:74:69:1f:14:f5:cb:20:7d:3b:55:55:4f:ea:97: 67:74:77:5c:cc:a1:dc:00:58:17:a9:35:33:8f:c6:98:93:1a: ff:0f:28:6c:2f:69:6f:c3:2c:f0:53:58:b3:74:5b:5d:97:75: 34:92:eb:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4RTUxMTAvBgNVBAUTKEEwMkVGNzdDMDVDQTEzMEMyMjI5ODVDRDc0QUU5MzhE QTc5QTRGQkYwHhcNMjUxMjI0MTYyMjQxWhcNMjUxMjMxMTYyMjQxWjAYMRYwFAYD VQQDDA02OTRjMTM1Mi1hZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iuc2LRLOle8N3SA6rYz0OLbWF1PxVhZuPdqq5oHu4km22iBLXvm5ewJFAkO mFT5L3G7ITuQWKXNcvEAZ8/2q2ltc/Xn/GyBegisBItT7T2eXIBd7i3ZeqPfbCNy SLV2qwchIJyckE//H4urhq3aG+6tD6IWada3RdraWerW8JyIeMkz0BtozpXtS+Oz wLRDrKROeIgX6BsQ7j0BzZU1nq+diqkFj4OGa1lP1fwvUImmb/OMFW9q4CpauT2j d+ARopGn6XsyS1Yl2/XrqFDGzhu/QLUcLw5L6ctjL9qCQYW6GV0di0tSBY2CPdeZ 30PLNA8s7gCo+j8YCPa7uwT1bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2bIFHC Aa5p8gbipVn6JjGdirs8MB8GA1UdIwQYMBaAFKAu93wFyhMMIimFzXSuk42nmk+/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThFNS83ODQwRDk1RUU0 OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3d2lLWVhOZEs2VGphZWFU NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29DNzNmQVhLRXd3aUtZWE5kSzZUamFlYVQ3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThFNS83ODQwRDk1RUU0OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3 d2lLWVhOZEs2VGphZWFUNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+klIMZZLo5Tgg4xjcrzM84gPMgHCL5T2ycxpocnsX9ei8eycssZKq A8Sh9H0iMsI+23ipL2mui8MSIuICSKMkTUzN7jV0NuuUYFL/GiYgARTJ49sRb9Vw fgn+f2f4dqmS9IUAHnOwSVUU6B5y03FZtQmyUZ1ZqZIElxz0M7zimKabYO+lm8Ag aRvv9CJ89ZtN85XsHna3aZoWXsjNaku4AT07c7LZXLb2pb4FcvyeWfWKse+dnJnz 91ExSGTqwH4rRRrlVSr8Us7UdGkfFPXLIH07VVVP6pdndHdczKHcAFgXqTUzj8aY kxr/DyhsL2lvwyzwU1izdFtdl3U0kuua -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:13 2025 by rpki-client