This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json) Hash identifier: 4bsQB2j9LJkEr7nVItzZxf/kd54z0ceEzAtAkWjvMGA= Subject key identifier: CF:1D:17:99:1D:28:26:19:87:16:90:05:F2:02:0F:4E:2C:9D:FA:11 Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft Manifest number: 10 Signing time: Tue 23 Dec 2025 06:48:40 +0000 Manifest this update: Tue 23 Dec 2025 06:48:39 +0000 Manifest next update: Tue 30 Dec 2025 06:48:39 +0000 Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: dyYFATOXYugnE/JbOOJHc+MsGVAycn5vfAarmGxJEeU=) 2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: iu8Dyk5Qv95gSvhMYx99k6dn0qCT8hNUapTROLABhvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Validity Not Before: Dec 23 06:48:39 2025 GMT Not After : Dec 30 06:48:39 2025 GMT Subject: CN=694a3b48-9b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:28:d9:05:f2:a1:2c:21:2a:0f:90:90:42:43: 26:89:a1:a2:c4:92:65:a4:56:92:30:22:18:63:34: 89:16:8f:8c:03:77:88:19:1e:88:f4:89:1a:79:4a: 1e:62:8a:2e:64:43:71:23:44:ea:9d:0f:cd:dc:cd: 94:f4:db:a6:23:3d:8a:3b:b6:c1:12:94:d2:c9:7a: 0f:80:59:f6:4f:d5:78:3e:39:26:d9:1c:8f:98:d4: 39:05:ed:52:38:f2:de:60:c0:40:f8:a2:30:11:e9: 54:fe:3c:c6:3a:14:3e:b2:89:1e:b2:4e:a3:a3:28: 93:b8:88:4d:b5:ba:65:62:a6:ef:f4:12:ef:7f:17: fa:3f:c2:d5:1b:3a:e4:f8:99:9f:af:e5:13:c9:eb: 3f:26:86:f2:66:d8:fa:5c:b3:75:fb:4f:21:5c:e7: cb:73:25:ff:b7:1f:e0:c6:d1:42:b8:d3:cc:d4:a8: 5b:60:ba:5c:52:88:87:94:78:6f:cb:55:fa:3d:ac: 0e:50:bc:27:99:fa:71:8e:51:ac:d8:86:16:9d:03: d9:b9:d5:eb:28:51:94:d5:f2:0b:8b:b9:b1:bc:d0: 4b:ad:35:be:50:cf:67:5d:65:0b:f5:25:4d:c3:41: 99:8f:15:fe:e3:14:5d:19:22:2b:a2:6f:24:7a:1a: 69:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1D:17:99:1D:28:26:19:87:16:90:05:F2:02:0F:4E:2C:9D:FA:11 X509v3 Authority Key Identifier: keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b2:8a:b2:a4:27:82:48:50:ec:a4:f2:9a:d8:86:0c:63:39: bf:b4:b9:29:2d:33:ef:b1:0e:76:7d:93:42:e2:6a:63:ce:0e: ca:d2:82:b0:8e:11:25:ca:46:8a:49:6b:8a:87:89:92:7c:b1: f8:fb:1e:93:6c:b0:9d:2a:ba:d9:51:9f:11:ec:a5:77:52:9b: 37:41:99:f8:61:39:4a:6c:e9:06:65:ec:ba:a5:a7:7a:6c:f8: 0b:52:c3:9a:66:57:9c:4e:0b:62:8b:a9:5f:de:4e:8f:46:3d: 41:e0:56:b1:da:94:96:2d:a4:07:72:08:2e:d9:12:82:51:41: bb:54:b4:ce:a6:2a:b3:07:48:1a:1a:56:48:0f:d8:fe:0c:ab: 23:c9:1b:20:9c:92:01:70:52:ed:a6:70:83:c6:50:d4:ca:3e: fb:ca:45:ed:31:3a:22:11:34:86:61:a8:65:e3:49:aa:fd:8b: 0b:b6:17:b0:52:5a:ca:00:33:d0:00:94:ee:04:66:cf:be:1b: e6:c3:6d:b2:e4:e8:42:29:31:16:f6:e2:4f:b3:30:79:99:19: af:c5:5b:01:d3:ce:5a:c9:c1:bd:20:c5:f5:e3:01:c5:f7:79: 94:8c:ea:70:f9:22:08:71:5c:0a:fd:3b:09:ce:23:66:e7:62: f7:c6:2e:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDJEODExMC8GA1UEBRMoQTJEMEU3REY4OEFCNjlEQjZFMDU5QTMwNjRFNEREQzFF NkZDOUQxOTAeFw0yNTEyMjMwNjQ4MzlaFw0yNTEyMzAwNjQ4MzlaMBgxFjAUBgNV BAMMDTY5NGEzYjQ4LTliMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZKNkF8qEsISoPkJBCQyaJoaLEkmWkVpIwIhhjNIkWj4wDd4gZHoj0iRp5Sh5i ii5kQ3EjROqdD83czZT026YjPYo7tsESlNLJeg+AWfZP1Xg+OSbZHI+Y1DkF7VI4 8t5gwED4ojAR6VT+PMY6FD6yiR6yTqOjKJO4iE21umVipu/0Eu9/F/o/wtUbOuT4 mZ+v5RPJ6z8mhvJm2Ppcs3X7TyFc58tzJf+3H+DG0UK408zUqFtgulxSiIeUeG/L Vfo9rA5QvCeZ+nGOUazYhhadA9m51esoUZTV8guLubG80EutNb5Qz2ddZQv1JU3D QZmPFf7jFF0ZIiuibyR6GmmBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzx0XmR0o JhmHFpAF8gIPTiyd+hEwHwYDVR0jBBgwFoAUotDn34iradtuBZowZOTdweb8nRkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMkQ4Lzk0OTZENzRFQzkx MTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0dUJab3daT1Rkd2ViOG5S ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3REbjM0aXJhZHR1Qlpvd1pPVGR3ZWI4blJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MkQ4Lzk0OTZENzRFQzkxMTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0 dUJab3daT1Rkd2ViOG5Say5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABKyirKkJ4JIUOyk8prYhgxjOb+0uSktM++xDnZ9k0LiamPODsrSgrCO ESXKRopJa4qHiZJ8sfj7HpNssJ0qutlRnxHspXdSmzdBmfhhOUps6QZl7Lqlp3ps +AtSw5pmV5xOC2KLqV/eTo9GPUHgVrHalJYtpAdyCC7ZEoJRQbtUtM6mKrMHSBoa VkgP2P4MqyPJGyCckgFwUu2mcIPGUNTKPvvKRe0xOiIRNIZhqGXjSar9iwu2F7BS WsoAM9AAlO4EZs++G+bDbbLk6EIpMRb24k+zMHmZGa/FWwHTzlrJwb0gxfXjAcX3 eZSM6nD5IghxXAr9OwnOI2bnYvfGLo0= -----END CERTIFICATE-----Generated at Tue Dec 23 13:32:12 2025 by rpki-client