This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: 0LU6kofSyw+lBz54nWMt9CEwmsT6Dm4xwOFG1KqKECU= Subject key identifier: 7D:FB:CA:29:94:D9:AA:6A:FF:97:29:BB:C7:C0:A7:DB:41:5C:48:BA Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 0830 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 0825 Signing time: Mon 22 Dec 2025 20:14:11 +0000 Manifest this update: Mon 22 Dec 2025 20:14:11 +0000 Manifest next update: Mon 29 Dec 2025 20:14:11 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: Eyq5iwzXolYUwZ8W+3cmKe9vT3YskTUo/Hj8GVQEmko=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: qFL74VsWk0alCoqYasNXx5dBtFR40fQNiPpQ09RmOwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2096 (0x830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Dec 22 20:14:11 2025 GMT Not After : Dec 29 20:14:11 2025 GMT Subject: CN=6949a693-248e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ca:88:f0:f5:54:a4:d1:c9:99:b7:6f:f9:c0: b3:aa:7b:a0:60:0a:b9:0e:d2:d7:7d:c1:24:1e:a7: 7e:1b:9e:5b:4d:66:57:f4:d8:b0:d7:f8:9a:84:e6: f1:80:76:7c:1a:cd:ab:51:2b:f1:c4:d3:a8:03:f1: 64:63:c5:d5:43:08:7d:e5:e3:d0:2a:8b:1b:93:0f: 61:91:f6:59:48:ff:cc:5f:1e:28:a8:0b:f2:17:be: 03:7f:df:d7:a7:d1:12:13:72:e7:18:f2:1d:84:5b: 98:0d:3f:ca:f8:66:78:cd:ef:26:c4:d2:52:7c:69: 1c:9b:06:57:22:5f:51:ac:f2:04:36:c3:68:e5:63: 04:af:80:6e:d4:ab:71:e3:4e:1b:b6:01:95:f3:16: 31:a1:9a:cf:e6:41:d0:73:53:d8:aa:b9:e5:92:c4: ee:09:0a:bc:25:a5:11:f9:cb:23:19:9e:ce:99:af: 55:82:64:36:f0:32:18:52:43:33:4e:84:9a:aa:01: ac:38:07:5c:80:6f:ac:bc:d7:67:d9:72:2e:18:ae: 94:e7:cc:3c:38:99:30:cd:58:da:f5:b9:51:a5:d8: 42:86:f9:c0:1a:6b:5a:b1:5a:c5:e2:e1:c7:22:ac: 0a:0e:86:0e:fa:d9:af:e4:01:8d:37:04:fa:69:b7: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FB:CA:29:94:D9:AA:6A:FF:97:29:BB:C7:C0:A7:DB:41:5C:48:BA X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:17:26:5e:37:c3:d8:8f:71:bf:7c:3f:fb:5b:51:59:6a:5a: da:3c:eb:54:f1:14:50:5b:58:4c:3a:3b:6c:18:42:1c:3a:f8: 67:2f:05:46:30:5a:b6:e0:80:1d:e5:5d:08:75:26:fb:9d:95: 84:3d:43:98:5d:bc:31:38:e4:ea:f9:cf:07:32:fe:75:1c:db: e6:bc:76:9e:0f:79:bb:2c:1d:1a:3b:27:ea:1c:95:30:1b:24: 35:e1:8f:0e:c5:bb:a8:1c:05:c7:be:2e:e6:aa:72:be:45:0a: 17:d9:72:b1:8f:7b:a8:34:61:1b:0f:5a:64:12:5d:25:4d:e8: 1c:e4:98:33:3c:4f:cb:dd:0d:3d:cb:18:14:6a:eb:ec:2e:c0: 44:ff:56:58:56:30:ec:46:17:d8:ba:7e:bb:b2:c4:60:9f:6a: 26:59:38:42:29:10:78:b1:1b:19:15:dc:00:e0:cc:6a:ae:80: ad:e0:57:20:29:0c:ea:f9:75:da:83:a0:1f:27:16:ce:f8:44: 19:f3:af:c0:73:20:dd:cd:96:0b:cc:67:75:04:9d:74:54:5d: 6a:41:9e:97:d0:d4:05:16:ba:43:f0:59:07:6c:da:c8:96:0c: 66:76:48:3b:80:24:9d:b3:e5:68:98:d4:9e:72:07:3c:56:8a: 3b:9f:b6:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjUxMjIyMjAxNDExWhcNMjUxMjI5MjAxNDExWjAYMRYwFAYD VQQDDA02OTQ5YTY5My0yNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38qI8PVUpNHJmbdv+cCzqnugYAq5DtLXfcEkHqd+G55bTWZX9Niw1/iahObx gHZ8Gs2rUSvxxNOoA/FkY8XVQwh95ePQKosbkw9hkfZZSP/MXx4oqAvyF74Df9/X p9ESE3LnGPIdhFuYDT/K+GZ4ze8mxNJSfGkcmwZXIl9RrPIENsNo5WMEr4Bu1Ktx 404btgGV8xYxoZrP5kHQc1PYqrnlksTuCQq8JaUR+csjGZ7Oma9VgmQ28DIYUkMz ToSaqgGsOAdcgG+svNdn2XIuGK6U58w8OJkwzVja9blRpdhChvnAGmtasVrF4uHH IqwKDoYO+tmv5AGNNwT6abex5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH37yimU 2apq/5cpu8fAp9tBXEi6MB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjFyZeN8PYj3G/fD/7W1FZalraPOtU8RRQW1hMOjtsGEIcOvhnLwVG MFq24IAd5V0IdSb7nZWEPUOYXbwxOOTq+c8HMv51HNvmvHaeD3m7LB0aOyfqHJUw GyQ14Y8OxbuoHAXHvi7mqnK+RQoX2XKxj3uoNGEbD1pkEl0lTegc5JgzPE/L3Q09 yxgUauvsLsBE/1ZYVjDsRhfYun67ssRgn2omWThCKRB4sRsZFdwA4MxqroCt4Fcg KQzq+XXag6AfJxbO+EQZ86/AcyDdzZYLzGd1BJ10VF1qQZ6X0NQFFrpD8FkHbNrI lgxmdkg7gCSds+VomNSecgc8Voo7n7ak -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:10 2025 by rpki-client