This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft File: o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json) Hash identifier: Zbp5shi+CqKypJYpuuaeYP/NBLvGGyLeZ2S8Hm+e1BI= Subject key identifier: 68:35:8C:A6:6E:39:A8:74:9A:4C:50:FA:8D:CB:1B:95:90:72:34:D9 Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53 Certificate issuer: /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft Manifest number: 03 Signing time: Wed 03 Dec 2025 06:18:01 +0000 Manifest this update: Wed 03 Dec 2025 06:18:01 +0000 Manifest next update: Wed 10 Dec 2025 06:18:01 +0000 Files and hashes: 1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: 2/6DCA5tMAD2mg31LuFRqJNcCUoHv9BTQvAymdquzP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53 Validity Not Before: Dec 3 06:18:01 2025 GMT Not After : Dec 10 06:18:01 2025 GMT Subject: CN=692fd619-ef0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:1e:29:a5:b1:f5:9d:24:c8:d1:9d:f8:8b: 52:97:07:df:80:4f:56:dd:d5:c0:8d:33:89:a5:d3: 03:8a:76:4d:f7:4c:52:8f:2c:9b:e4:a9:1c:3a:c6: d2:b2:4c:d8:76:94:09:71:44:fa:e5:49:7b:53:24: 26:66:e6:96:08:64:af:42:91:ad:8e:fb:46:b9:72: d1:06:19:f4:e1:53:61:f7:15:55:39:0f:35:5a:44: 5c:c3:d1:73:1a:86:ed:c4:77:f8:60:17:de:92:27: b4:22:f5:03:29:94:bf:5e:1e:5c:3e:0c:fd:f1:0b: 77:8f:0d:71:87:e0:fe:04:2c:45:2c:aa:15:f2:4b: 91:b5:17:09:1c:5e:64:a1:d6:88:d1:66:14:96:04: 74:ef:95:a7:bf:11:a7:e8:93:d6:c1:5a:bd:c8:22: dd:42:5e:a7:ee:2a:c7:08:2f:f7:0c:ec:59:e9:fb: 32:55:69:d3:2c:ba:fe:a7:26:86:ad:27:51:df:f5: 57:06:aa:35:5d:8c:1a:66:ce:69:4c:42:32:64:b9: 8d:86:a1:ac:f7:d4:c7:72:87:fb:fa:6a:30:42:a2: 1c:9a:f3:f1:1c:1f:ba:d0:ed:5a:75:e0:3f:ed:22: 79:3f:b3:5f:d9:cb:e5:04:cd:9d:aa:13:61:b6:bf: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:35:8C:A6:6E:39:A8:74:9A:4C:50:FA:8D:CB:1B:95:90:72:34:D9 X509v3 Authority Key Identifier: keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:d2:23:4b:7c:79:11:c7:37:dc:0e:67:04:0c:43:51:bc:90: 1a:30:51:30:cd:69:6f:f7:00:7d:41:a3:9a:41:8d:ad:a6:28: 99:59:9e:f5:95:90:a9:c1:f0:2e:7a:d7:93:5a:83:e0:83:ed: 66:ce:89:b4:48:c9:51:c0:fb:57:02:20:d4:89:2b:e1:d6:63: 0b:6c:ad:63:42:e4:95:2a:87:6e:62:e5:0f:18:f8:ef:4f:73: 91:8b:5e:1b:90:38:45:e4:7a:6e:5f:e5:09:e2:1e:22:97:8f: 53:84:1e:04:64:64:46:30:9e:5c:8d:95:15:38:29:5a:21:97: e0:26:3a:8c:84:ca:c2:66:5f:ae:b0:ac:d7:bf:37:fd:c5:e3: 19:a4:ae:11:71:8c:45:27:a3:e7:26:b3:85:21:7e:49:1a:a3: 8a:43:f5:12:da:46:06:be:a4:16:2f:63:88:c1:1c:98:b2:7e: eb:0e:10:65:81:b1:58:e8:24:57:50:6a:79:8b:08:21:f3:9f: 73:bc:ea:22:2b:48:00:f4:49:46:09:03:a6:62:fb:23:ee:2b: ea:b2:ff:aa:6e:84:6f:67:35:f0:6b:c7:2e:30:d9:c7:c2:db: a4:d7:01:5d:82:84:b6:a6:aa:68:0d:06:b6:34:74:fa:13:76: bb:92:c8:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTNENzExMC8GA1UEBRMoQTM4NzAyMTgyQjA5QUE2MTc4RUJDQUFCQjJGQ0Y4REE1 NEFERUI1MzAeFw0yNTEyMDMwNjE4MDFaFw0yNTEyMTAwNjE4MDFaMBgxFjAUBgNV BAMTDTY5MmZkNjE5LWVmMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC41R4ppbH1nSTI0Z34i1KXB9+AT1bd1cCNM4ml0wOKdk33TFKPLJvkqRw6xtKy TNh2lAlxRPrlSXtTJCZm5pYIZK9Cka2O+0a5ctEGGfThU2H3FVU5DzVaRFzD0XMa hu3Ed/hgF96SJ7Qi9QMplL9eHlw+DP3xC3ePDXGH4P4ELEUsqhXyS5G1FwkcXmSh 1ojRZhSWBHTvlae/Eafok9bBWr3IIt1CXqfuKscIL/cM7Fnp+zJVadMsuv6nJoat J1Hf9VcGqjVdjBpmzmlMQjJkuY2Goaz31Mdyh/v6ajBCohya8/EcH7rQ7Vp14D/t Ink/s1/Zy+UEzZ2qE2G2vxjJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaDWMpm45 qHSaTFD6jcsblZByNNkwHwYDVR0jBBgwFoAUo4cCGCsJqmF468qrsvz42lSt61Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxM0Q3LzZGREMwMTZDQ0U4 QTExRjBCMkEyRDc2OUM0RjlBRTAyL280Y0NHQ3NKcW1GNDY4cXJzdno0MmxTdDYx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbzRjQ0dDc0pxbUY0NjhxcnN2ejQybFN0NjFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx M0Q3LzZGREMwMTZDQ0U4QTExRjBCMkEyRDc2OUM0RjlBRTAyL280Y0NHQ3NKcW1G NDY4cXJzdno0MmxTdDYxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALbSI0t8eRHHN9wOZwQMQ1G8kBowUTDNaW/3AH1Bo5pBja2mKJlZnvWV kKnB8C5615Nag+CD7WbOibRIyVHA+1cCINSJK+HWYwtsrWNC5JUqh25i5Q8Y+O9P c5GLXhuQOEXkem5f5QniHiKXj1OEHgRkZEYwnlyNlRU4KVohl+AmOoyEysJmX66w rNe/N/3F4xmkrhFxjEUno+cms4Uhfkkao4pD9RLaRga+pBYvY4jBHJiyfusOEGWB sVjoJFdQanmLCCHzn3O86iIrSAD0SUYJA6Zi+yPuK+qy/6puhG9nNfBrxy4w2cfC 26TXAV2ChLamqmgNBrY0dPoTdruSyDw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:09 2025 by rpki-client