This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft File: o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json) Hash identifier: ImyWMm+cJS/z/G8i+Qvl1/jXj7t8UyB9W7JYzIXU54Y= Subject key identifier: 78:BD:E0:2F:25:C0:9A:95:3C:DC:25:8C:92:9C:99:60:6F:46:A8:84 Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7 Certificate issuer: /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft Manifest number: 22 Signing time: Fri 19 Dec 2025 06:38:55 +0000 Manifest this update: Fri 19 Dec 2025 06:38:55 +0000 Manifest next update: Fri 26 Dec 2025 06:38:55 +0000 Files and hashes: 1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: 2wmSqP5dL6cMHdYemUCxfriCosHuzarIv688TPiSTb4=) 2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: tb9Z/1utdPuZydG4QyPURJ2Dph5uJmmV+jlmkscDXF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7 Validity Not Before: Dec 19 06:38:55 2025 GMT Not After : Dec 26 06:38:55 2025 GMT Subject: CN=6944f2ff-c6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:57:3c:ac:8d:1b:67:80:5b:a3:1d:72:23:7f: 7f:60:f6:50:19:87:d8:af:95:70:26:95:5e:29:ef: 61:8c:6a:2e:f3:5e:64:dd:ff:61:81:80:3d:15:00: c1:31:36:8f:08:e2:64:90:8f:7a:24:b4:bc:a5:61: 52:59:07:5b:ca:51:b5:a9:c0:48:23:fb:5d:ea:24: 57:40:40:cf:77:d3:85:62:9b:91:71:26:88:d5:7a: 58:af:7b:bb:50:67:ce:51:3c:65:18:bc:6d:37:da: 14:96:e2:b9:bd:71:1c:00:41:6b:28:69:1a:e5:e0: 90:25:5c:67:55:64:bc:bc:96:d6:f4:7a:9b:01:96: 6f:ec:09:fa:a0:34:dd:d6:1f:48:29:e5:23:7d:2b: 0e:6a:3e:8f:12:8b:aa:38:61:e0:f9:45:68:29:07: 71:65:55:71:18:a1:32:a4:ee:8b:19:0b:a0:0a:6f: 3a:0d:33:68:5c:da:29:3b:58:8f:a6:1d:7a:e0:3b: eb:6b:e7:fa:4a:36:a3:de:81:a7:c4:1f:6c:26:a1: 05:25:e6:be:b3:4d:ef:78:65:87:ca:17:84:aa:b6: 04:a5:07:9f:20:8a:31:b2:74:5d:fe:2f:eb:ec:d7: ac:2c:2c:49:b3:90:26:1f:03:88:ed:6c:3f:2f:85: da:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BD:E0:2F:25:C0:9A:95:3C:DC:25:8C:92:9C:99:60:6F:46:A8:84 X509v3 Authority Key Identifier: keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7d:86:81:95:d5:c4:b1:5e:85:d4:2a:8b:3a:ff:4d:8c:c1: 99:75:a9:ce:48:c0:ec:db:2f:0f:39:cd:ba:05:64:61:6c:6c: 15:01:4a:2a:c9:c6:21:b8:00:96:00:d3:0b:25:a9:3a:a9:0a: 26:31:f0:87:96:b2:b1:6c:98:f1:4a:f8:98:b9:6e:eb:d2:df: 4c:8b:25:b2:64:41:d0:64:db:bd:dd:0e:6c:54:2c:81:c6:a3: 3f:e6:05:f6:71:56:ac:35:1a:61:00:e5:5a:78:8a:81:e7:5d: aa:88:71:7c:6e:2d:42:27:7f:fd:83:06:80:72:f5:17:06:32: 93:12:97:96:37:60:31:fe:aa:be:64:2b:6f:46:53:8f:b6:d1: 76:5e:82:1e:bb:50:1c:df:3f:54:3f:15:58:a8:67:3c:5d:e8: 48:ef:64:3b:b8:b1:3a:f7:7f:a3:ee:ba:f4:b7:54:e7:05:9d: 2c:5f:cd:32:bf:56:05:e2:91:ee:88:5a:b0:ef:c8:3e:9d:ec: 77:a9:ed:52:37:a6:9f:60:a8:9d:41:a3:d6:96:d7:3a:e8:20: 49:d3:0d:2e:93:37:08:99:cf:2a:84:e0:a2:55:27:83:a8:98: fc:ca:ce:20:73:74:e6:7c:3b:9b:28:b5:44:6e:ed:b0:31:d9: c9:9b:84:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDQwMTExMC8GA1UEBRMoQTM5OUExMkM0OEMwMEU0MjYxRDI4RTBDNTdGRDRFM0U0 NzBEMkVCNzAeFw0yNTEyMTkwNjM4NTVaFw0yNTEyMjYwNjM4NTVaMBgxFjAUBgNV BAMMDTY5NDRmMmZmLWM2YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdVzysjRtngFujHXIjf39g9lAZh9ivlXAmlV4p72GMai7zXmTd/2GBgD0VAMEx No8I4mSQj3oktLylYVJZB1vKUbWpwEgj+13qJFdAQM9304Vim5FxJojVelive7tQ Z85RPGUYvG032hSW4rm9cRwAQWsoaRrl4JAlXGdVZLy8ltb0epsBlm/sCfqgNN3W H0gp5SN9Kw5qPo8Si6o4YeD5RWgpB3FlVXEYoTKk7osZC6AKbzoNM2hc2ik7WI+m HXrgO+tr5/pKNqPegafEH2wmoQUl5r6zTe94ZYfKF4SqtgSlB58gijGydF3+L+vs 16wsLEmzkCYfA4jtbD8vhdoNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeL3gLyXA mpU83CWMkpyZYG9GqIQwHwYDVR0jBBgwFoAUo5mhLEjADkJh0o4MV/1OPkcNLrcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0NDAxLzFCODgyMTYwQUE3 MDExRjBCNDI4RTY2M0M0RjlBRTAyL281bWhMRWpBRGtKaDBvNE1WXzFPUGtjTkxy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzVtaExFakFEa0poMG80TVZfMU9Qa2NOTHJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 NDAxLzFCODgyMTYwQUE3MDExRjBCNDI4RTY2M0M0RjlBRTAyL281bWhMRWpBRGtK aDBvNE1WXzFPUGtjTkxyYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZ9hoGV1cSxXoXUKos6/02MwZl1qc5IwOzbLw85zboFZGFsbBUBSirJ xiG4AJYA0wslqTqpCiYx8IeWsrFsmPFK+Ji5buvS30yLJbJkQdBk273dDmxULIHG oz/mBfZxVqw1GmEA5Vp4ioHnXaqIcXxuLUInf/2DBoBy9RcGMpMSl5Y3YDH+qr5k K29GU4+20XZegh67UBzfP1Q/FVioZzxd6EjvZDu4sTr3f6PuuvS3VOcFnSxfzTK/ VgXike6IWrDvyD6d7Hep7VI3pp9gqJ1Bo9aW1zroIEnTDS6TNwiZzyqE4KJVJ4Oo mPzKziBzdOZ8O5sotURu7bAx2cmbhHw= -----END CERTIFICATE-----Generated at Sat Dec 20 05:34:47 2025 by rpki-client