This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: Gydnx057I/LdWGZ/m0mpvZVF6Mbe+OJ9x66hAdafJEM= Subject key identifier: 2D:B0:2E:32:33:BA:EA:C7:BE:8E:DD:34:CE:4B:6F:28:C5:E4:3B:FF Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 21DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 21D4 Signing time: Mon 22 Dec 2025 15:43:03 +0000 Manifest this update: Mon 22 Dec 2025 15:43:03 +0000 Manifest next update: Mon 29 Dec 2025 15:43:03 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: v01bcrEOIRgwHhzauC013T2VFMuVNCauwQDlxkqyenI=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: PxUOEDED+JHKJelWKhOvajOHx5KTZi4sFxCqv9/Wuds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8670 (0x21de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Dec 22 15:43:03 2025 GMT Not After : Dec 29 15:43:03 2025 GMT Subject: CN=69496707-0cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:1c:2d:83:52:e9:5e:25:19:06:8b:59:67: d7:00:ed:28:d0:76:22:c3:4c:94:ba:1c:ce:46:05: 91:7b:bc:59:b2:af:bb:a2:27:ef:1a:c0:b3:ab:77: fe:c5:77:11:39:36:f9:aa:a1:78:db:ca:a0:5b:c4: 6b:0b:93:21:c4:b4:ca:8a:f8:8d:32:6b:51:6a:57: 79:16:da:ba:98:77:dc:fb:3d:95:04:74:81:90:96: 77:a2:1f:47:6d:7a:45:f0:51:76:07:3c:09:3c:d1: ae:c6:a4:3f:77:60:1b:00:43:4f:29:ac:d2:ef:a0: ac:b3:d3:87:51:8f:54:89:0d:9c:46:76:b3:ec:57: 25:19:84:1c:20:b5:1f:d7:f1:f1:84:00:bb:a3:3e: 8b:30:0c:64:bc:90:23:4a:06:10:0e:55:6b:b2:0d: fb:2b:64:57:71:e3:da:b1:7a:5c:b8:01:a1:b1:c6: 5f:84:b9:4d:14:4b:7e:e9:b0:64:e3:24:95:1a:c9: 85:53:4f:78:b5:bd:69:7e:c4:70:65:d8:55:12:fd: e9:d5:65:f4:b2:00:db:b6:e2:8f:aa:35:19:48:1b: a9:ed:92:d6:b8:66:b6:1c:16:e4:c9:d9:c1:90:ee: 17:c8:25:9f:fe:0a:7f:9d:3d:9a:c2:cc:3d:ff:8f: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B0:2E:32:33:BA:EA:C7:BE:8E:DD:34:CE:4B:6F:28:C5:E4:3B:FF X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:29:bb:14:23:85:22:1c:70:5b:1a:62:2c:bc:88:40:3c:5f: 83:b6:c6:d1:0a:e7:93:e6:62:e5:bd:db:6e:09:8d:c4:a5:c7: 78:fe:d2:72:64:2d:58:0f:99:b8:f8:e4:75:31:6c:41:67:10: 00:cd:34:8d:52:61:ed:ed:14:20:b1:6e:ef:52:55:89:99:b8: e9:a2:f4:16:65:11:ed:ee:e0:ab:b1:6c:29:03:68:af:c1:7b: 76:45:bf:1d:9e:c8:08:23:f3:7c:b5:e0:c3:b5:0b:45:09:63: 75:3c:c5:98:a5:19:17:ae:08:1b:a3:fa:ea:33:ef:be:9f:e0: c2:3f:2d:32:75:6b:0e:50:5a:45:12:9b:55:a9:93:43:ff:09: 93:d5:28:04:0d:da:0e:f0:0e:fa:95:a2:41:3f:dd:96:48:f4: b0:a5:e9:87:70:9a:ed:09:a2:5f:14:a1:77:a7:ab:e4:95:6d: 04:04:9a:8b:ab:a4:1c:c9:c0:4a:27:39:6b:17:8e:69:e2:7b: 3e:7e:41:3e:93:9d:23:07:9d:b0:55:3f:86:3c:e5:81:bd:be: ae:48:54:ce:42:8b:5a:9e:b7:3f:47:86:52:b0:56:77:aa:83: 82:20:c2:7d:90:ae:4d:e8:85:6e:07:0d:54:fb:1c:c3:ce:db: 98:43:ed:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICId4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUxMjIyMTU0MzAzWhcNMjUxMjI5MTU0MzAzWjAYMRYwFAYD VQQDDA02OTQ5NjcwNy0wY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSgcLYNS6V4lGQaLWWfXAO0o0HYiw0yUuhzORgWRe7xZsq+7oifvGsCzq3f+ xXcROTb5qqF428qgW8RrC5MhxLTKiviNMmtRald5Ftq6mHfc+z2VBHSBkJZ3oh9H bXpF8FF2BzwJPNGuxqQ/d2AbAENPKazS76Css9OHUY9UiQ2cRnaz7FclGYQcILUf 1/HxhAC7oz6LMAxkvJAjSgYQDlVrsg37K2RXcePasXpcuAGhscZfhLlNFEt+6bBk 4ySVGsmFU094tb1pfsRwZdhVEv3p1WX0sgDbtuKPqjUZSBup7ZLWuGa2HBbkydnB kO4XyCWf/gp/nT2awsw9/48w5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2wLjIz uurHvo7dNM5LbyjF5Dv/MB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFKbsUI4UiHHBbGmIsvIhAPF+DtsbRCueT5mLlvdtuCY3Epcd4/tJy ZC1YD5m4+OR1MWxBZxAAzTSNUmHt7RQgsW7vUlWJmbjpovQWZRHt7uCrsWwpA2iv wXt2Rb8dnsgII/N8teDDtQtFCWN1PMWYpRkXrggbo/rqM+++n+DCPy0ydWsOUFpF EptVqZND/wmT1SgEDdoO8A76laJBP92WSPSwpemHcJrtCaJfFKF3p6vklW0EBJqL q6QcycBKJzlrF45p4ns+fkE+k50jB52wVT+GPOWBvb6uSFTOQotanrc/R4ZSsFZ3 qoOCIMJ9kK5N6IVuBw1U+xzDztuYQ+0O -----END CERTIFICATE-----Generated at Wed Dec 24 04:03:56 2025 by rpki-client