This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json) Hash identifier: PnjdSXfOEi7gkpwFX724S4Zkljirut3krkJ0LHSAOJA= Subject key identifier: 67:6C:A2:D3:12:78:3D:5D:0A:3F:E6:01:33:47:5B:7E:05:28:92:E5 Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft Manifest number: 06D1 Signing time: Sat 06 Dec 2025 21:01:53 +0000 Manifest this update: Sat 06 Dec 2025 21:01:52 +0000 Manifest next update: Sat 13 Dec 2025 21:01:52 +0000 Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: eY4K2zt0wRInHKq+wonOU4fTWEmxv3TLRQvoJi6+OLw=) 2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: Tn4IiKC/ehOcHKqem3Io6ZVpsXPRVKGONn1yIt6QObo=) 3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: rBuNfeeoduUd1I0NoD4IRcILjNn1S7GUQ8XAggSqgBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Validity Not Before: Dec 6 21:01:52 2025 GMT Not After : Dec 13 21:01:52 2025 GMT Subject: CN=693499c1-942e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2e:16:d7:c3:e8:d1:2d:0c:62:ba:ed:99:de: 8c:4d:06:ca:44:c7:20:3f:f3:75:4b:c2:96:1b:46: c7:e8:33:03:84:2d:7d:ee:52:02:2b:ff:ba:64:00: ff:6e:5c:7a:3d:79:ba:2a:34:15:f6:cc:1c:1e:08: 49:4c:13:a7:b2:41:45:d9:67:90:a4:4d:f9:81:34: af:f0:74:fe:c4:de:bd:18:0a:6f:30:a5:6f:cb:73: 60:22:ed:e2:65:a3:2a:6a:9c:59:1b:3a:54:af:ae: a1:4d:ef:ad:06:1b:85:93:51:2c:27:d0:e0:11:6b: 22:ee:0f:b5:fe:a7:c4:f4:20:67:ab:61:12:04:23: 45:cd:e9:87:7b:e2:5f:f3:b2:00:c4:6b:38:0d:54: ca:46:d6:1f:ca:cb:85:3c:46:d3:d3:49:af:87:24: c3:6c:77:57:ff:89:78:5c:f7:ae:5b:e9:51:d7:36: 40:2d:44:12:7a:14:b4:1d:41:7a:7c:72:3f:c1:84: 31:26:1f:27:8d:fe:37:60:7c:73:b3:da:2a:90:c3: a7:eb:b0:52:6c:03:4c:22:e5:85:e2:60:17:c9:9a: c8:20:e4:89:f2:0e:e3:74:35:a3:62:39:e2:f0:32: 6d:8e:51:8e:95:e9:a3:90:c2:06:97:86:43:43:72: aa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6C:A2:D3:12:78:3D:5D:0A:3F:E6:01:33:47:5B:7E:05:28:92:E5 X509v3 Authority Key Identifier: keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9b:d0:e4:ee:e6:00:c9:e6:08:67:b7:ea:88:17:2d:49:b8: b9:2e:33:9e:00:0e:5f:d8:3d:c0:65:61:a8:e4:61:c5:21:9a: 74:72:a2:2d:da:a9:8f:48:88:73:b8:6f:55:12:80:fb:41:07: ef:36:32:7d:a8:af:35:21:6d:7b:44:52:16:09:48:6f:1c:4d: e5:f4:30:a6:07:b8:85:b3:fe:23:f3:90:2a:eb:50:24:4f:2f: d3:2b:8c:bc:c1:dc:6a:6a:bd:41:27:9c:18:1a:78:f3:4e:7a: be:0d:5f:7f:cb:a5:db:2d:3d:03:aa:46:b0:22:b2:45:65:a3: 08:d7:aa:c7:84:15:a4:da:be:1b:df:14:09:c0:f9:a1:96:e1: 9b:77:c5:ab:d9:20:54:88:c7:1b:d7:9b:66:83:47:cf:28:de: 44:09:96:3d:1d:f2:68:aa:42:9e:b1:54:00:a7:28:30:eb:e4: 90:c6:74:ff:c5:41:95:03:5b:b1:88:fb:9f:4c:d7:4d:9a:3b: 6b:1e:72:e9:5a:b5:78:6d:02:66:63:a6:03:14:22:5e:ce:96: ac:44:b0:ba:bc:46:5d:cd:9e:ac:64:07:24:12:19:04:7e:55: 4e:9f:40:00:92:0f:69:f8:82:6e:48:39:37:ee:3f:d5:5d:35: a5:48:92:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG Qzg3MkU1QzUwHhcNMjUxMjA2MjEwMTUyWhcNMjUxMjEzMjEwMTUyWjAYMRYwFAYD VQQDEw02OTM0OTljMS05NDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8y4W18Po0S0MYrrtmd6MTQbKRMcgP/N1S8KWG0bH6DMDhC197lICK/+6ZAD/ blx6PXm6KjQV9swcHghJTBOnskFF2WeQpE35gTSv8HT+xN69GApvMKVvy3NgIu3i ZaMqapxZGzpUr66hTe+tBhuFk1EsJ9DgEWsi7g+1/qfE9CBnq2ESBCNFzemHe+Jf 87IAxGs4DVTKRtYfysuFPEbT00mvhyTDbHdX/4l4XPeuW+lR1zZALUQSehS0HUF6 fHI/wYQxJh8njf43YHxzs9oqkMOn67BSbANMIuWF4mAXyZrIIOSJ8g7jdDWjYjni 8DJtjlGOlemjkMIGl4ZDQ3Kq2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdsotMS eD1dCj/mATNHW34FKJLlMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa V05pbmtSam83MWI4aHk1Y1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcm9Dk7uYAyeYIZ7fqiBctSbi5LjOeAA5f2D3AZWGo5GHFIZp0cqIt 2qmPSIhzuG9VEoD7QQfvNjJ9qK81IW17RFIWCUhvHE3l9DCmB7iFs/4j85Aq61Ak Ty/TK4y8wdxqar1BJ5wYGnjzTnq+DV9/y6XbLT0DqkawIrJFZaMI16rHhBWk2r4b 3xQJwPmhluGbd8Wr2SBUiMcb15tmg0fPKN5ECZY9HfJoqkKesVQApygw6+SQxnT/ xUGVA1uxiPufTNdNmjtrHnLpWrV4bQJmY6YDFCJezpasRLC6vEZdzZ6sZAckEhkE flVOn0AAkg9p+IJuSDk37j/VXTWlSJKU -----END CERTIFICATE-----Generated at Mon Dec 8 06:02:10 2025 by rpki-client