This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json) Hash identifier: AWfB6VkfDi7SCq2XYYOUqIE3TmRKmi+YRSkVrStnORI= Subject key identifier: B5:35:81:68:71:72:23:AD:09:D6:71:E3:74:A4:49:2E:79:B7:3C:6B Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft Manifest number: 0121 Signing time: Tue 23 Dec 2025 03:42:02 +0000 Manifest this update: Tue 23 Dec 2025 03:42:01 +0000 Manifest next update: Tue 30 Dec 2025 03:42:01 +0000 Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: qax4TivO7fWHshkKxS1h/xVtc2YA7F6pwz+BYXhYOuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Validity Not Before: Dec 23 03:42:01 2025 GMT Not After : Dec 30 03:42:01 2025 GMT Subject: CN=694a0f89-7fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:78:d1:3f:7f:6b:6b:92:5b:66:fe:cd:a2: 36:78:8a:c9:9b:18:d4:32:30:03:04:f3:91:ee:ca: 6e:9f:bd:ec:0d:e5:ee:06:c7:37:07:f1:a9:5a:9d: 46:1a:9d:ef:4c:25:b7:76:92:22:55:10:1a:7c:0f: 40:c8:75:70:cf:5c:62:c2:6e:e1:12:ef:a5:ac:04: 6e:66:84:bf:a3:0c:fe:9c:20:cb:02:de:1b:38:e6: f1:1f:cc:cf:49:02:b8:b6:cd:00:11:67:db:1f:07: d5:c2:b3:f4:22:d3:fe:3e:b7:66:20:0c:cd:69:50: 5a:2f:9f:55:cd:51:8f:91:bb:28:4d:7c:90:5f:1e: 26:ac:13:3b:3c:e8:33:18:ee:56:cb:5a:37:63:fa: 64:27:07:b6:55:b0:ca:13:35:c5:5b:65:1c:80:38: 6d:7e:ac:01:e7:cf:07:d8:4b:bb:5a:64:be:b1:6a: 98:b9:3b:2d:34:35:97:13:64:a7:cb:a8:bd:e4:91: 5d:50:9e:c0:98:96:b4:69:b1:c2:f3:15:73:3f:13: 15:5f:04:09:d4:b4:80:6b:dd:c5:d6:5e:0d:72:02: 9b:fc:b4:f5:d5:b4:f1:a6:4c:d7:89:09:96:f5:0b: 19:da:6c:10:d6:06:6e:56:5f:c1:36:2f:cc:4c:60: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:35:81:68:71:72:23:AD:09:D6:71:E3:74:A4:49:2E:79:B7:3C:6B X509v3 Authority Key Identifier: keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:66:10:e7:6f:78:9f:f1:8b:7b:fb:25:6e:81:b9:62:f1:d3: 0a:6e:47:c5:d1:1e:95:82:2e:73:da:1d:cb:de:00:39:86:da: d7:a3:77:df:be:0d:30:23:49:9b:ab:88:a8:2c:d2:dd:0e:a6: 23:65:90:58:68:1d:da:5e:6b:90:fb:2f:1a:76:92:e4:c0:d1: 8c:8d:8f:56:bf:5e:33:0f:68:f3:91:27:af:ea:b0:c7:2c:78: 2c:c1:a1:24:a9:bd:2e:3c:78:dc:81:a2:71:5c:67:da:80:ec: 5a:d5:87:fd:ba:83:c2:7e:e0:a2:fd:ee:73:38:e7:18:f7:a4: 79:45:79:62:a3:38:93:0e:c8:ba:19:a3:4a:77:5d:fc:65:9f: e9:51:6a:8b:81:fd:3d:f1:ba:4a:67:48:fd:c9:bd:c3:ae:0e: f0:3e:41:8e:31:1f:69:98:8b:08:d7:6e:ec:f7:68:57:45:a4: 7b:5f:7a:8d:88:de:f6:40:ec:ad:56:af:5e:86:5a:8f:0c:7f: d1:70:a0:63:38:f8:5c:68:f8:8c:d8:2a:28:67:4d:d7:e5:c8: e1:2e:23:37:09:6b:8e:71:00:45:ad:f5:57:89:7f:c4:6c:9a: 24:4a:b7:c0:de:2d:70:90:08:7f:ca:f4:7a:54:11:1b:eb:fb: 4a:65:4e:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEJDRUUxMjgwNTM4OUI1NzhDMzVGRDhCNDI1NUE2MDgx RDI2ODNGN0MwHhcNMjUxMjIzMDM0MjAxWhcNMjUxMjMwMDM0MjAxWjAYMRYwFAYD VQQDDA02OTRhMGY4OS03ZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1T540T9/a2uSW2b+zaI2eIrJmxjUMjADBPOR7spun73sDeXuBsc3B/GpWp1G Gp3vTCW3dpIiVRAafA9AyHVwz1xiwm7hEu+lrARuZoS/owz+nCDLAt4bOObxH8zP SQK4ts0AEWfbHwfVwrP0ItP+PrdmIAzNaVBaL59VzVGPkbsoTXyQXx4mrBM7POgz GO5Wy1o3Y/pkJwe2VbDKEzXFW2UcgDhtfqwB588H2Eu7WmS+sWqYuTstNDWXE2Sn y6i95JFdUJ7AmJa0abHC8xVzPxMVXwQJ1LSAa93F1l4NcgKb/LT11bTxpkzXiQmW 9QsZ2mwQ1gZuVl/BNi/MTGB/twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLU1gWhx ciOtCdZx43SkSS55tzxrMB8GA1UdIwQYMBaAFLzuEoBTibV4w1/YtCVaYIHSaD98 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8yNDRGODQ5QTIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRYakRYOWkwSlZwZ2dkSm9Q M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Azdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8yNDRGODQ5QTIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRY akRYOWkwSlZwZ2dkSm9QM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQZhDnb3if8Yt7+yVugbli8dMKbkfF0R6Vgi5z2h3L3gA5htrXo3ff vg0wI0mbq4ioLNLdDqYjZZBYaB3aXmuQ+y8adpLkwNGMjY9Wv14zD2jzkSev6rDH LHgswaEkqb0uPHjcgaJxXGfagOxa1Yf9uoPCfuCi/e5zOOcY96R5RXlioziTDsi6 GaNKd138ZZ/pUWqLgf098bpKZ0j9yb3Drg7wPkGOMR9pmIsI127s92hXRaR7X3qN iN72QOytVq9ehlqPDH/RcKBjOPhcaPiM2CooZ03X5cjhLiM3CWuOcQBFrfVXiX/E bJokSrfA3i1wkAh/yvR6VBEb6/tKZU6n -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:42 2025 by rpki-client