This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: tEQFUVjkLTKKIQX1Xa/YyB8LfWx5oL1WTB8GhPGeqJo= Subject key identifier: C1:33:9E:D4:1C:54:9A:9C:F1:BB:33:3C:60:5A:4E:07:0C:67:B0:FE Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 0918 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 0917 Signing time: Mon 22 Dec 2025 19:38:31 +0000 Manifest this update: Mon 22 Dec 2025 19:38:30 +0000 Manifest next update: Mon 29 Dec 2025 19:38:30 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: Zrbd0KlngrwxYyagK91Zd86HL+E4+u4qpUOVDn761bY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2328 (0x918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Dec 22 19:38:30 2025 GMT Not After : Dec 29 19:38:30 2025 GMT Subject: CN=69499e37-08ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:e9:1c:bc:f5:47:11:e1:c5:c4:cf:65:54: 03:36:48:2c:55:5a:36:b3:9b:85:89:97:68:64:de: 9a:27:0c:58:27:d6:34:68:3c:e4:63:de:2e:33:e8: a8:25:e8:9f:21:5e:84:2b:7e:ff:c1:48:a6:97:e0: 80:d5:b1:2e:6b:88:56:37:02:d3:b8:17:73:e0:af: 3d:66:63:b4:85:06:5e:c8:5b:07:33:b9:0a:a1:ed: fc:29:a3:b1:58:47:59:0d:09:76:f2:51:81:94:35: bf:5a:d7:19:01:d2:a5:f3:3e:4a:c5:16:c5:19:5c: 3d:cc:15:c9:0b:f0:93:97:2a:5f:a7:6f:e3:6a:cd: b4:14:ae:10:fc:5e:ff:79:67:c3:59:8e:c0:75:b3: a4:81:c5:cf:b0:cf:2d:60:7a:31:ff:5e:46:d5:a9: f6:29:f5:ec:bb:fb:22:15:ab:5f:a3:fb:ce:5d:71: 90:f9:cb:49:a8:28:f7:b2:68:6f:14:3e:44:5b:09: ac:aa:1d:5c:11:a1:18:5c:d0:da:33:58:11:04:5d: 39:18:eb:cb:d1:d8:12:41:2a:31:69:7e:68:f7:b6: 84:66:0f:bc:05:ca:6e:bc:d4:de:04:e0:77:c0:9d: 14:73:f6:0e:0e:9a:6f:5f:9e:c9:d4:69:01:33:8e: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:33:9E:D4:1C:54:9A:9C:F1:BB:33:3C:60:5A:4E:07:0C:67:B0:FE X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f9:8e:c7:a3:96:13:0a:df:78:bd:71:5b:7d:b9:bb:78:5c: f3:34:ef:a4:1e:89:8f:6f:c1:01:6a:30:d6:9c:53:05:14:26: be:f7:28:c3:80:b1:ae:a3:b4:22:f7:2d:ed:ba:9f:ff:54:69: 1d:71:a1:67:c8:49:b1:ed:b2:b2:e2:c7:64:1b:c3:d2:04:d6: 4d:fa:f9:f4:31:11:8f:f3:9f:f7:19:02:44:5a:0b:4d:05:8e: 63:c5:7a:5d:37:19:05:b6:3a:57:aa:84:2b:4a:d7:fd:7d:33: 13:43:70:60:90:1a:f0:a6:bc:01:0a:69:b8:d1:c5:c5:40:7e: 81:61:ef:46:5d:cd:7c:eb:29:ba:38:38:8e:bf:4f:96:a9:57: 56:19:46:b7:c3:4f:37:ac:c6:ae:7c:41:72:5f:96:17:07:40: b1:00:b7:93:25:f8:8b:8b:0e:90:8d:1a:dc:d0:9a:3d:ca:e5: 65:0c:91:83:22:fa:8a:64:e9:df:aa:91:61:51:e9:a4:8c:75: 23:66:4a:34:63:ca:83:8c:0f:9c:c2:a8:24:49:7b:89:1a:bd: ba:21:f1:c0:84:26:25:bd:70:56:4f:a6:71:5a:1a:29:c2:6f: 69:a2:9f:03:80:7b:19:9f:17:57:f1:af:1e:4d:3e:39:8e:b6: cd:8e:c5:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUxMjIyMTkzODMwWhcNMjUxMjI5MTkzODMwWjAYMRYwFAYD VQQDDA02OTQ5OWUzNy0wOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt53pHLz1RxHhxcTPZVQDNkgsVVo2s5uFiZdoZN6aJwxYJ9Y0aDzkY94uM+io JeifIV6EK37/wUiml+CA1bEua4hWNwLTuBdz4K89ZmO0hQZeyFsHM7kKoe38KaOx WEdZDQl28lGBlDW/WtcZAdKl8z5KxRbFGVw9zBXJC/CTlypfp2/jas20FK4Q/F7/ eWfDWY7AdbOkgcXPsM8tYHox/15G1an2KfXsu/siFatfo/vOXXGQ+ctJqCj3smhv FD5EWwmsqh1cEaEYXNDaM1gRBF05GOvL0dgSQSoxaX5o97aEZg+8BcpuvNTeBOB3 wJ0Uc/YODppvX57J1GkBM46pEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEzntQc VJqc8bszPGBaTgcMZ7D+MB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO+Y7Ho5YTCt94vXFbfbm7eFzzNO+kHomPb8EBajDWnFMFFCa+9yjD gLGuo7Qi9y3tup//VGkdcaFnyEmx7bKy4sdkG8PSBNZN+vn0MRGP85/3GQJEWgtN BY5jxXpdNxkFtjpXqoQrStf9fTMTQ3BgkBrwprwBCmm40cXFQH6BYe9GXc186ym6 ODiOv0+WqVdWGUa3w083rMaufEFyX5YXB0CxALeTJfiLiw6QjRrc0Jo9yuVlDJGD IvqKZOnfqpFhUemkjHUjZko0Y8qDjA+cwqgkSXuJGr26IfHAhCYlvXBWT6ZxWhop wm9pop8DgHsZnxdX8a8eTT45jrbNjsW9 -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:14 2025 by rpki-client