This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json) Hash identifier: 8CW5yhjfGZLfdhZW9BFQzahVQEQu2SMw08LApVZydzQ= Subject key identifier: 9C:83:EA:B5:64:45:7E:F3:02:4F:5F:55:31:9C:44:EA:A3:51:36:06 Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft Manifest number: 0219 Signing time: Tue 23 Dec 2025 01:14:47 +0000 Manifest this update: Tue 23 Dec 2025 01:14:46 +0000 Manifest next update: Tue 30 Dec 2025 01:14:46 +0000 Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: siRZwFZxastTnEvavPTRcaMkcyR547VU3DcRl/bJYuw=) 2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: 9uR9cVnp9mE1i5KXBSkkfpXEwSfx3/BMoE6xrI/LuMM=) 3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: Dec 23 01:14:46 2025 GMT Not After : Dec 30 01:14:46 2025 GMT Subject: CN=6949ed06-c850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:ee:12:c0:dd:ac:2d:ad:66:4b:65:74:fa: fa:a3:79:80:29:75:69:29:3c:ae:48:75:2f:11:e7: 22:4e:13:ce:5e:0f:5c:ad:46:80:73:52:50:3d:96: 30:c8:e4:2d:f5:c6:f7:84:8f:61:10:fe:92:46:25: 76:03:6e:20:64:eb:8a:09:61:67:aa:38:9b:ff:18: fd:65:67:6f:50:85:8f:70:f3:d2:c6:b9:b9:46:41: 1f:0f:7a:8a:24:01:4d:88:0f:79:b7:c1:78:2c:45: a9:9e:a1:18:01:de:c8:6f:0b:fb:58:98:6b:88:59: d7:95:7d:f4:9e:b3:e5:97:bd:2c:33:a5:04:6a:68: 5f:e6:dd:f3:e0:7c:ef:80:76:72:07:09:74:a3:03: 44:97:fc:44:90:1b:20:11:60:01:82:54:af:03:13: 70:45:aa:ae:9c:9d:dd:f4:33:ef:9a:7c:4b:37:a0: f0:d6:04:f7:08:d4:7c:8d:95:a1:7b:ac:10:41:64: da:fa:9f:c1:83:a4:d6:84:e0:b0:8b:25:dd:68:08: 39:24:d8:b1:8c:3c:91:c0:f5:1e:f3:9d:0f:84:7d: bc:af:34:57:fd:24:cd:bb:15:77:e5:4a:8d:90:f2: 68:2b:90:9c:1c:e5:0a:f3:be:fc:35:15:3f:4f:c4: 8a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:83:EA:B5:64:45:7E:F3:02:4F:5F:55:31:9C:44:EA:A3:51:36:06 X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b6:5a:ad:36:12:d0:f6:01:3e:65:0d:b2:7d:c0:ea:3c:30: e4:06:e3:ad:c5:f0:f1:95:64:31:6b:7e:35:13:8d:0c:9b:79: 52:4e:ff:9f:18:5e:0e:cc:34:22:bf:7f:d3:f5:0b:ca:3f:03: 9c:29:92:25:72:54:4e:2c:1b:6a:5f:47:25:b8:a2:26:40:60: a2:46:b1:79:26:4f:35:02:22:9c:08:b6:da:0b:d2:c8:d8:b4: fb:e7:14:0e:6e:ff:7a:31:4f:1c:aa:05:31:c6:c4:b0:66:89: c6:80:10:4f:1f:5a:f0:7a:4b:27:8f:c8:db:b8:f7:ea:a4:e2: c9:57:51:2e:0a:e8:38:e2:0d:5d:b0:25:3a:36:ed:a8:77:93: 7d:53:0f:ca:51:07:25:5a:f9:62:7a:0c:be:26:d0:b3:8d:64: 1a:51:23:77:8d:fe:1b:4a:c9:c8:d8:d2:9c:78:dc:04:ef:f2: fb:d1:6a:54:35:51:24:62:d4:1f:b5:dd:16:37:44:e4:9a:d4: a0:b7:57:cf:e7:da:64:ef:d8:f7:e8:eb:dd:d3:84:91:45:87: 84:a7:05:cb:db:d7:b8:8a:e9:e0:46:59:7b:ff:da:9e:7c:66: bc:e8:48:d6:c9:97:10:04:a8:4c:79:06:26:25:76:59:26:b4: 96:5a:50:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjUxMjIzMDExNDQ2WhcNMjUxMjMwMDExNDQ2WjAYMRYwFAYD VQQDDA02OTQ5ZWQwNi1jODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWzuEsDdrC2tZktldPr6o3mAKXVpKTyuSHUvEeciThPOXg9crUaAc1JQPZYw yOQt9cb3hI9hEP6SRiV2A24gZOuKCWFnqjib/xj9ZWdvUIWPcPPSxrm5RkEfD3qK JAFNiA95t8F4LEWpnqEYAd7Ibwv7WJhriFnXlX30nrPll70sM6UEamhf5t3z4Hzv gHZyBwl0owNEl/xEkBsgEWABglSvAxNwRaqunJ3d9DPvmnxLN6Dw1gT3CNR8jZWh e6wQQWTa+p/Bg6TWhOCwiyXdaAg5JNixjDyRwPUe850PhH28rzRX/STNuxV35UqN kPJoK5CcHOUK8778NRU/T8SKAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyD6rVk RX7zAk9fVTGcROqjUTYGMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS STBXZDRCdTBBUFRYcURLZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBtlqtNhLQ9gE+ZQ2yfcDqPDDkBuOtxfDxlWQxa341E40Mm3lSTv+f GF4OzDQiv3/T9QvKPwOcKZIlclROLBtqX0cluKImQGCiRrF5Jk81AiKcCLbaC9LI 2LT75xQObv96MU8cqgUxxsSwZonGgBBPH1rweksnj8jbuPfqpOLJV1EuCug44g1d sCU6Nu2od5N9Uw/KUQclWvliegy+JtCzjWQaUSN3jf4bSsnI2NKceNwE7/L70WpU NVEkYtQftd0WN0TkmtSgt1fP59pk79j36Ovd04SRRYeEpwXL29e4iungRll7/9qe fGa86EjWyZcQBKhMeQYmJXZZJrSWWlAn -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:42 2025 by rpki-client