This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft File: odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json) Hash identifier: V8icISHND5921plIcbvYfpvMwYsujj+2PJhSEQ6Yyyk= Subject key identifier: 6B:BF:D1:F9:96:10:F7:B1:9A:D2:CA:E9:54:64:FB:D7:9F:BD:A7:B1 Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 Certificate issuer: /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft Manifest number: F3 Signing time: Tue 23 Dec 2025 04:15:25 +0000 Manifest this update: Tue 23 Dec 2025 04:15:25 +0000 Manifest next update: Tue 30 Dec 2025 04:15:25 +0000 Files and hashes: 1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: YqTy3pjzv0T2wxrbU+DUnM84dtOdF3Iw0j248O6Dtjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Validity Not Before: Dec 23 04:15:25 2025 GMT Not After : Dec 30 04:15:25 2025 GMT Subject: CN=694a175d-9eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:6b:b5:25:59:a9:48:6b:57:0f:34:ec:8d: 53:c0:21:17:ea:70:0f:d4:bc:0b:07:31:de:15:f8: 5f:21:54:7e:3c:1e:33:00:16:43:6d:cd:dd:f0:71: ba:a5:cb:8c:fc:bd:af:3d:16:62:ac:18:5b:a9:20: aa:73:f7:00:ce:d5:60:c5:7b:22:6f:7d:e4:d1:22: 19:ed:21:8e:51:6f:d0:77:4d:3c:fb:c2:e0:34:d3: 20:fe:d8:7e:fd:c1:66:62:1e:0b:3c:27:5a:c5:69: 0a:a1:3a:84:b0:0d:51:a1:7a:9f:43:2c:5c:e6:77: 44:35:e4:10:31:de:ff:82:be:3f:0e:70:65:b7:cd: 88:70:15:88:ef:e3:8e:0f:68:22:33:32:4d:e9:81: 7a:5b:e6:7b:d4:18:35:e8:f3:7c:a5:71:bd:8c:e0: fa:cd:9a:07:e3:36:80:2f:34:32:91:90:8f:55:31: 84:cd:fa:7e:57:e1:d1:8b:02:5b:b6:e7:87:4e:d6: d1:9c:84:7f:ee:9a:fb:3d:55:50:30:54:5e:26:43: 59:e8:24:8c:09:89:37:9e:2f:3c:cc:18:e0:81:15: b5:a2:a4:21:f3:4f:24:a5:b1:27:9f:fc:7f:2b:b6: 52:1f:f8:e1:c2:3d:82:41:6d:f4:88:2a:e2:a4:e8: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BF:D1:F9:96:10:F7:B1:9A:D2:CA:E9:54:64:FB:D7:9F:BD:A7:B1 X509v3 Authority Key Identifier: keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:05:3c:03:cd:cb:6c:23:59:b6:36:70:ad:28:4b:74:dd:90: 9b:bd:b6:d3:dd:ae:ef:4d:77:80:3c:15:c2:2d:ba:c5:14:b7: 3c:58:2e:82:15:d5:7c:7e:28:79:07:0f:98:28:69:5b:71:c7: e3:a1:07:98:04:84:94:07:fe:a8:97:5b:98:c8:a0:65:35:9c: 70:11:cb:08:71:64:bd:9a:e8:0f:f8:e2:2b:04:f4:d3:06:4c: de:9a:fd:8a:0c:e8:c3:a6:a5:a7:a7:8e:2c:77:a4:4f:e4:60: ff:19:fc:34:0e:4c:3f:bf:15:24:89:fc:8d:32:95:18:ac:55: c7:c4:86:0f:31:e6:94:b0:45:aa:a5:7a:34:6c:2b:f3:f5:2b: f0:5c:b3:7a:ed:8e:03:0f:f8:e4:0c:06:6a:1d:4c:e7:d8:d1: 95:8d:29:e1:3d:04:07:79:fa:22:b9:77:b6:41:6e:d5:3b:20: e1:f5:eb:28:b4:e7:91:4a:26:f4:4d:ec:c0:b1:9f:be:6d:cb: e8:05:41:7e:18:23:c0:33:95:e2:fd:56:d3:74:f7:7c:5a:8d: d4:be:0b:98:be:1b:c5:a4:40:3c:7d:33:2f:a3:55:38:2d:67: 7a:f6:95:75:e3:bb:9e:c2:a3:95:72:00:69:ef:fb:f7:7f:51: 86:17:ef:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBERTAxMTAvBgNVBAUTKEExRDI1REUzQTU1OUZEQUYzMDQ0OUQ5NDc3RDE3NkVB Mzc4OTcxRjgwHhcNMjUxMjIzMDQxNTI1WhcNMjUxMjMwMDQxNTI1WjAYMRYwFAYD VQQDDA02OTRhMTc1ZC05ZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnxrtSVZqUhrVw807I1TwCEX6nAP1LwLBzHeFfhfIVR+PB4zABZDbc3d8HG6 pcuM/L2vPRZirBhbqSCqc/cAztVgxXsib33k0SIZ7SGOUW/Qd008+8LgNNMg/th+ /cFmYh4LPCdaxWkKoTqEsA1RoXqfQyxc5ndENeQQMd7/gr4/DnBlt82IcBWI7+OO D2giMzJN6YF6W+Z71Bg16PN8pXG9jOD6zZoH4zaALzQykZCPVTGEzfp+V+HRiwJb tueHTtbRnIR/7pr7PVVQMFReJkNZ6CSMCYk3ni88zBjggRW1oqQh808kpbEnn/x/ K7ZSH/jhwj2CQW30iCripOgBPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGu/0fmW EPexmtLK6VRk+9efvaexMB8GA1UdIwQYMBaAFKHSXeOlWf2vMESdlHfRduo3iXH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMERFMC83QTY1RTkzQzZB ODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9vZEpkNDZWWl9hOHdSSjJVZDlGMjZqZUpj ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29kSmQ0NlZaX2E4d1JKMlVkOUYyNmplSmNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MERFMC83QTY1RTkzQzZBODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9vZEpkNDZWWl9h OHdSSjJVZDlGMjZqZUpjZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADBTwDzctsI1m2NnCtKEt03ZCbvbbT3a7vTXeAPBXCLbrFFLc8WC6C FdV8fih5Bw+YKGlbccfjoQeYBISUB/6ol1uYyKBlNZxwEcsIcWS9mugP+OIrBPTT Bkzemv2KDOjDpqWnp44sd6RP5GD/Gfw0Dkw/vxUkifyNMpUYrFXHxIYPMeaUsEWq pXo0bCvz9SvwXLN67Y4DD/jkDAZqHUzn2NGVjSnhPQQHefoiuXe2QW7VOyDh9eso tOeRSib0TezAsZ++bcvoBUF+GCPAM5Xi/VbTdPd8Wo3UvguYvhvFpEA8fTMvo1U4 LWd69pV147uewqOVcgBp7/v3f1GGF+99 -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:37 2025 by rpki-client