This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft File: A8hWADTpF_SEBrQEaVALI_OVa10.mft (raw, json) Hash identifier: 9PJHdewnfMIXFvb9j/k2Mn+mt0WO1ZLZDv3R/R8TdTs= Subject key identifier: 05:55:9A:08:F5:AA:ED:14:25:03:4C:62:7C:50:C1:34:01:CD:46:E7 Authority key identifier: 03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D Certificate issuer: /CN=A91A98E5/serialNumber=03C8560034E917F48406B40469500B23F3956B5D Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft Manifest number: 01CB Signing time: Tue 23 Dec 2025 02:06:42 +0000 Manifest this update: Tue 23 Dec 2025 02:06:42 +0000 Manifest next update: Tue 30 Dec 2025 02:06:42 +0000 Files and hashes: 1: A8hWADTpF_SEBrQEaVALI_OVa10.crl (hash: Ec0QU2zcPPQZDHJUnWISjKUUKNsfIQdXcomvEva0PVo=) 2: CAD00992C9C611F09C9EF018C4F9AE02.roa (hash: ReD45q5RkEAZzOqO7G9hg/fTrgFRDlSbU1Y1kh6RTWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D Validity Not Before: Dec 23 02:06:42 2025 GMT Not After : Dec 30 02:06:42 2025 GMT Subject: CN=6949f932-e413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bd:2b:5e:20:c9:aa:d5:07:f8:fc:de:9f:ec: bb:20:89:99:49:cd:b4:2b:b4:2f:47:48:e0:c8:e0: e7:a2:05:6e:e2:1e:c0:bd:49:6a:03:38:c9:8e:d2: 87:74:fa:8a:24:ed:8b:95:ef:f6:a1:6e:2c:6a:ac: 6c:16:0c:7f:da:5b:fb:b1:07:4b:de:92:82:57:5e: 27:ca:3c:e6:70:3f:f2:89:2a:63:a1:73:75:70:ce: 4c:48:b0:40:10:15:63:29:4d:4e:9a:7a:a4:69:57: c9:c9:dd:22:fa:48:93:6e:2a:9b:ca:12:48:0c:2b: 86:bc:29:13:63:34:5b:de:87:fc:68:03:5a:33:10: 2d:ea:9d:8a:7c:b2:91:95:7e:a5:cc:ee:ed:24:17: e2:cb:79:e4:6f:7c:78:d0:0a:c9:65:15:ea:e6:2b: 90:b9:3a:b4:3b:96:fe:eb:30:54:c9:93:7a:99:7a: b6:7c:b5:f4:da:36:3e:2e:90:50:ed:b5:50:f0:a9: 62:8e:cf:67:55:5a:45:d9:1d:23:0a:42:02:7d:44: 49:97:ad:0f:cb:16:f6:f4:aa:54:fd:7a:2a:37:fc: 77:b3:98:a2:e8:d7:ae:62:73:af:93:37:3f:2a:a7: c2:35:d8:2f:ab:de:d6:ae:80:6f:90:f5:78:43:03: c5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:55:9A:08:F5:AA:ED:14:25:03:4C:62:7C:50:C1:34:01:CD:46:E7 X509v3 Authority Key Identifier: keyid:03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:fc:cf:ee:12:7b:01:ba:32:b8:7c:79:ff:e3:26:16:a2:31: 90:68:04:78:9f:e3:02:8b:e2:bd:55:cf:49:4a:c5:90:e3:a6: ad:42:54:9f:e3:93:1a:fb:4c:23:94:92:4c:5e:7c:86:d3:23: 05:25:ab:88:c4:85:e2:a0:f6:80:9d:c8:eb:3b:5d:ff:e2:3c: 68:79:08:ab:9e:f3:3a:52:48:cf:d6:55:59:52:23:09:b5:80: c5:8f:94:35:01:7c:93:94:f0:60:20:bf:6d:c3:ab:d9:c7:78: 63:b7:94:a6:57:80:ef:25:bf:b4:61:77:72:53:15:be:44:bf: 98:b7:ae:2d:fc:33:3b:8b:7e:8e:f4:fe:9e:9d:20:8e:a7:08: 25:01:6c:02:ad:06:10:03:0f:36:08:db:2d:53:dd:d8:44:52: 37:cf:a5:de:39:4c:5c:37:58:6a:be:a3:38:99:43:af:d7:8b: 0f:c6:cb:22:43:4f:17:76:65:b7:0b:b9:4d:d6:a2:2b:71:b6: 35:60:cd:21:bc:51:f8:03:f1:6c:0f:fc:25:33:bf:54:6c:d1: e5:37:c3:fc:4a:39:81:da:64:77:96:8f:41:68:3a:3e:f8:53: 02:7a:5b:ee:43:dd:a0:88:5e:46:c7:7f:48:9f:59:a3:30:d4: 66:db:fe:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OThFNTExMC8GA1UEBRMoMDNDODU2MDAzNEU5MTdGNDg0MDZCNDA0Njk1MDBCMjNG Mzk1NkI1RDAeFw0yNTEyMjMwMjA2NDJaFw0yNTEyMzAwMjA2NDJaMBgxFjAUBgNV BAMMDTY5NDlmOTMyLWU0MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRvSteIMmq1Qf4/N6f7LsgiZlJzbQrtC9HSODI4OeiBW7iHsC9SWoDOMmO0od0 +ook7YuV7/ahbixqrGwWDH/aW/uxB0vekoJXXifKPOZwP/KJKmOhc3VwzkxIsEAQ FWMpTU6aeqRpV8nJ3SL6SJNuKpvKEkgMK4a8KRNjNFveh/xoA1ozEC3qnYp8spGV fqXM7u0kF+LLeeRvfHjQCsllFermK5C5OrQ7lv7rMFTJk3qZerZ8tfTaNj4ukFDt tVDwqWKOz2dVWkXZHSMKQgJ9REmXrQ/LFvb0qlT9eio3/HezmKLo165ic6+TNz8q p8I12C+r3taugG+Q9XhDA8VVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBVWaCPWq 7RQlA0xifFDBNAHNRucwHwYDVR0jBBgwFoAUA8hWADTpF/SEBrQEaVALI/OVa10w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OEU1LzE2ODRDMDc4NDA0 NzExRUVBQkMwRTI0Q0M0RjlBRTAyL0E4aFdBRFRwRl9TRUJyUUVhVkFMSV9PVmEx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQThoV0FEVHBGX1NFQnJRRWFWQUxJX09WYTEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OEU1LzE2ODRDMDc4NDA0NzExRUVBQkMwRTI0Q0M0RjlBRTAyL0E4aFdBRFRwRl9T RUJyUUVhVkFMSV9PVmExMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMn8z+4SewG6Mrh8ef/jJhaiMZBoBHif4wKL4r1Vz0lKxZDjpq1CVJ/j kxr7TCOUkkxefIbTIwUlq4jEheKg9oCdyOs7Xf/iPGh5CKue8zpSSM/WVVlSIwm1 gMWPlDUBfJOU8GAgv23Dq9nHeGO3lKZXgO8lv7Rhd3JTFb5Ev5i3ri38MzuLfo70 /p6dII6nCCUBbAKtBhADDzYI2y1T3dhEUjfPpd45TFw3WGq+oziZQ6/Xiw/GyyJD Txd2ZbcLuU3WoitxtjVgzSG8UfgD8WwP/CUzv1Rs0eU3w/xKOYHaZHeWj0FoOj74 UwJ6W+5D3aCIXkbHf0ifWaMw1Gbb/vo= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:09 2025 by rpki-client