This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json) Hash identifier: Bnc2Ewk0YU2/lAxXYwCA1+P2nn4Klv9k8qtBx9ErNSs= Subject key identifier: F9:8B:B4:AF:90:A2:DF:67:D0:98:93:33:7B:BC:7B:B9:14:DE:73:E4 Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft Manifest number: 069D Signing time: Mon 08 Dec 2025 21:12:03 +0000 Manifest this update: Mon 08 Dec 2025 21:12:03 +0000 Manifest next update: Mon 15 Dec 2025 21:12:03 +0000 Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: ArocSdFe6E9jsosNJlwDy+ItywMrAuGfWJUmIL1B3cM=) 2: 91F7C78A7F1711F089227832C4F9AE02.roa (hash: FY5Gy5Y1iXEZUxEVUrYPbqyjzId5K+fC2igE4uNXrvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 21:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Validity Not Before: Dec 8 21:12:03 2025 GMT Not After : Dec 15 21:12:03 2025 GMT Subject: CN=69373f23-b5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:98:1a:53:8c:45:c8:d4:53:1b:f3:ad:86: ca:2d:76:3d:37:4a:5f:96:48:ec:7c:b2:cd:ee:cf: 3a:7c:29:d5:34:c9:04:c5:d2:4e:46:ec:d2:23:56: 18:cc:16:c0:15:84:25:7d:e0:e2:90:c6:fa:c4:8a: 42:37:7b:77:16:6f:4c:e3:f5:32:42:5b:d9:85:73: d7:6f:9d:a8:00:52:7a:d7:35:cc:56:b2:b6:15:3f: 4a:6e:ec:fe:21:45:51:54:45:53:8d:bd:96:9f:e9: c6:06:bd:ba:8d:15:c3:7f:9d:85:99:2c:1b:9a:77: aa:5d:b9:41:da:9f:49:17:4a:c7:cd:44:b4:9a:c9: c5:f5:7f:d4:dd:b0:f9:b8:7b:0f:cb:ee:0f:b8:04: b2:ad:62:06:4c:01:3d:9b:d6:b3:09:21:27:95:1a: 44:1f:ae:0e:0f:0c:ff:70:2d:4a:9d:76:2b:bd:a6: 84:9a:2d:2f:87:1c:ff:a7:2a:c6:d6:f2:16:22:1f: 7d:49:11:b9:e0:5e:f4:fd:c0:69:79:3e:aa:b7:39: 80:9f:0f:4f:ba:d3:5c:b9:a8:de:fb:3e:47:25:68: f3:ef:7f:bf:f2:9c:dc:cf:49:7e:65:f4:d4:63:1e: 36:db:d1:3c:2c:17:38:e2:9f:85:a1:be:09:1d:0e: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8B:B4:AF:90:A2:DF:67:D0:98:93:33:7B:BC:7B:B9:14:DE:73:E4 X509v3 Authority Key Identifier: keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:31:7d:fe:d9:92:65:05:55:68:e7:95:99:dd:90:81:cc:50: 1b:85:8e:83:1a:58:6b:26:c2:43:25:26:dd:99:66:92:cf:dd: 74:ba:4e:9f:08:70:14:e0:db:0d:16:6e:1a:5f:12:ed:d2:a0: a6:58:ba:9d:36:8e:4f:d9:9c:b6:1e:be:21:35:81:2e:ea:e2: 3b:9c:1c:32:6b:8c:d0:90:f8:d4:65:f9:61:50:45:68:c5:1c: 64:fa:2f:25:e2:98:e7:d6:96:c5:ed:0a:af:fe:f3:70:f6:e0: 93:92:a6:d2:34:7e:bd:7b:a8:60:5d:55:61:de:82:da:58:aa: 19:f0:06:9d:26:c2:50:a4:1c:6b:cd:c6:e2:7c:ae:8e:12:a4: 0d:49:65:f6:20:9d:2c:35:8f:e9:09:d7:88:ab:95:ac:34:b2: 58:6a:10:fa:da:e4:99:8b:36:bf:6f:21:18:f8:61:c8:07:4d: 11:19:3f:32:1a:a4:d4:87:02:8a:1e:c4:99:ef:ea:f3:03:6c: 86:c7:75:34:6e:71:a9:9e:c2:48:42:7d:82:19:d7:4b:6c:d0: e2:2c:db:94:cf:13:11:72:15:ab:be:11:fa:87:4e:1a:21:7b: 34:12:35:cc:a8:d9:62:a0:74:b6:bd:af:c8:14:2c:de:9c:f3: cc:e9:d7:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5 NEU5RjUwOTUwHhcNMjUxMjA4MjExMjAzWhcNMjUxMjE1MjExMjAzWjAYMRYwFAYD VQQDEw02OTM3M2YyMy1iNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIOYGlOMRcjUUxvzrYbKLXY9N0pflkjsfLLN7s86fCnVNMkExdJORuzSI1YY zBbAFYQlfeDikMb6xIpCN3t3Fm9M4/UyQlvZhXPXb52oAFJ61zXMVrK2FT9Kbuz+ IUVRVEVTjb2Wn+nGBr26jRXDf52FmSwbmneqXblB2p9JF0rHzUS0msnF9X/U3bD5 uHsPy+4PuASyrWIGTAE9m9azCSEnlRpEH64ODwz/cC1KnXYrvaaEmi0vhxz/pyrG 1vIWIh99SRG54F70/cBpeT6qtzmAnw9PutNcuaje+z5HJWjz73+/8pzcz0l+ZfTU Yx4229E8LBc44p+Fob4JHQ7OFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmLtK+Q ot9n0JiTM3u8e7kU3nPkMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1 QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4 VHhTUzBHTGJEWkdVNmZVSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKMX3+2ZJlBVVo55WZ3ZCBzFAbhY6DGlhrJsJDJSbdmWaSz910uk6f CHAU4NsNFm4aXxLt0qCmWLqdNo5P2Zy2Hr4hNYEu6uI7nBwya4zQkPjUZflhUEVo xRxk+i8l4pjn1pbF7Qqv/vNw9uCTkqbSNH69e6hgXVVh3oLaWKoZ8AadJsJQpBxr zcbifK6OEqQNSWX2IJ0sNY/pCdeIq5WsNLJYahD62uSZiza/byEY+GHIB00RGT8y GqTUhwKKHsSZ7+rzA2yGx3U0bnGpnsJIQn2CGddLbNDiLNuUzxMRchWrvhH6h04a IXs0EjXMqNlioHS2va/IFCzenPPM6dcn -----END CERTIFICATE-----Generated at Wed Dec 10 05:33:14 2025 by rpki-client