This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json) Hash identifier: OBpfTYNGxAAeYhP1QgeA+nwSkPqp5mTri2s2BKx9lUc= Subject key identifier: 0A:F3:B1:6F:D9:00:67:35:5F:C7:D5:11:E0:B8:A1:D5:00:42:30:31 Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 08D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft Manifest number: 08BB Signing time: Mon 22 Dec 2025 19:51:29 +0000 Manifest this update: Mon 22 Dec 2025 19:51:29 +0000 Manifest next update: Mon 29 Dec 2025 19:51:29 +0000 Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: dCAtAStu/glK/k23MlAVZyPPsU/Sj7x9XrIklsyWyZU=) 2: D32DB3AE7FC111F0B3BEC06AC4F9AE02.roa (hash: /uldeOBBVv+zaXl5jNRHeGbB+ckh7FIYfUU0p3GU20E=) 3: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: kbQycqq6uhbmllHh50J5L3MKomIfAJJoAz4btbBqKyw=) 4: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: jS53WXHjCoys1e1t5l2xcO16jh1u3l1FTq8ZOUzIH88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2256 (0x8d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Dec 22 19:51:29 2025 GMT Not After : Dec 29 19:51:29 2025 GMT Subject: CN=6949a141-93a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:85:72:dd:fe:92:77:1c:d1:a7:d7:ac:03: cd:bf:84:3f:e4:e0:a3:c6:d9:a4:03:01:13:c4:93: 14:db:49:ef:67:de:e9:d5:34:88:86:eb:a3:bc:ad: b2:78:52:b8:0e:be:85:4d:68:1a:c5:78:ca:3b:09: 6a:9b:54:1b:a0:ef:89:d5:2e:57:0e:33:ee:d8:46: 84:33:8b:35:00:85:0e:af:d2:4d:52:cb:90:55:f8: 6f:78:46:8d:ec:71:b9:ee:c3:6d:c2:1b:01:1c:a7: 5c:21:c7:4f:4f:51:e8:2f:ae:dd:89:96:70:22:67: ab:bd:eb:f1:dd:ae:df:b3:2b:e4:e5:e8:2d:38:db: 24:38:f3:04:76:5e:5e:2f:4d:45:a1:1b:42:e5:55: 57:f7:21:31:11:d5:21:96:a5:ee:68:42:88:38:24: dc:05:65:be:5c:fa:6d:6c:de:dc:97:f7:d6:75:8c: 00:df:59:2b:88:b0:15:0a:2b:06:e1:f7:ac:f4:48: 3c:1d:fb:d8:e4:87:79:a3:dd:a4:15:4c:9c:8f:ee: da:80:30:d5:ef:e6:4e:e9:dd:f9:12:ef:44:ff:f9: 9c:53:d7:ac:5d:33:6a:56:1b:6f:57:e5:20:5d:80: 73:a2:cd:23:05:b8:c9:f0:50:9e:dd:93:b0:94:8b: cd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F3:B1:6F:D9:00:67:35:5F:C7:D5:11:E0:B8:A1:D5:00:42:30:31 X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:90:92:61:98:86:88:cd:e5:9e:7d:60:79:2a:5a:b5:40:0b: fe:21:b9:38:16:12:6d:29:25:d9:cf:2b:8b:1d:7b:27:d8:eb: 8e:43:a0:14:20:ba:23:1e:06:dd:20:b8:c3:61:6a:ee:15:db: 19:eb:78:39:c4:7b:17:04:03:b0:ac:80:9d:27:64:59:e9:7e: b6:fb:2f:f3:b2:74:de:b0:3a:f1:2c:68:87:49:9c:4c:06:ae: eb:bc:c1:70:04:69:69:f3:93:71:a6:3e:31:77:50:30:79:e0: 75:e4:22:ed:95:c0:0b:d2:63:df:e4:e1:52:42:ba:1c:0c:19: 73:3b:99:c9:d1:0e:0b:4b:b9:09:72:c0:6c:38:9c:80:f1:b2: cc:0b:e6:db:84:ce:7a:1c:75:ca:c8:d2:1d:cc:85:f5:3b:0c: 10:d8:0e:c4:f3:67:19:c0:a5:9d:a4:8e:d6:8a:d8:83:c4:e1: 7e:51:28:5c:3f:c5:b2:35:e7:71:7e:e3:36:20:b3:cf:52:e2: 45:9a:19:28:97:b3:f2:35:26:19:70:a3:26:92:e6:e5:8b:3f: 5a:eb:6c:33:f9:ef:6a:62:c7:5f:29:17:09:5d:ad:64:63:f4: 00:c3:77:3d:f9:74:6e:85:fe:42:c5:1e:fd:73:e6:7e:97:b2: e4:f7:de:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjUxMjIyMTk1MTI5WhcNMjUxMjI5MTk1MTI5WjAYMRYwFAYD VQQDDA02OTQ5YTE0MS05M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD6Fct3+kncc0afXrAPNv4Q/5OCjxtmkAwETxJMU20nvZ97p1TSIhuujvK2y eFK4Dr6FTWgaxXjKOwlqm1QboO+J1S5XDjPu2EaEM4s1AIUOr9JNUsuQVfhveEaN 7HG57sNtwhsBHKdcIcdPT1HoL67diZZwImervevx3a7fsyvk5egtONskOPMEdl5e L01FoRtC5VVX9yExEdUhlqXuaEKIOCTcBWW+XPptbN7cl/fWdYwA31kriLAVCisG 4fes9Eg8HfvY5Id5o92kFUycj+7agDDV7+ZO6d35Eu9E//mcU9esXTNqVhtvV+Ug XYBzos0jBbjJ8FCe3ZOwlIvNlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArzsW/Z AGc1X8fVEeC4odUAQjAxMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzNC81MUJFREZDNENDOEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4 anVHeW1XN3RTT0p3SU9FSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfkJJhmIaIzeWefWB5Klq1QAv+Ibk4FhJtKSXZzyuLHXsn2OuOQ6AU ILojHgbdILjDYWruFdsZ63g5xHsXBAOwrICdJ2RZ6X62+y/zsnTesDrxLGiHSZxM Bq7rvMFwBGlp85Nxpj4xd1AweeB15CLtlcAL0mPf5OFSQrocDBlzO5nJ0Q4LS7kJ csBsOJyA8bLMC+bbhM56HHXKyNIdzIX1OwwQ2A7E82cZwKWdpI7WitiDxOF+UShc P8WyNedxfuM2ILPPUuJFmhkol7PyNSYZcKMmkubliz9a62wz+e9qYsdfKRcJXa1k Y/QAw3c9+XRuhf5CxR79c+Z+l7Lk995t -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:33 2025 by rpki-client