This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft File: MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json) Hash identifier: mP2qUfPP0YODzzznPGJxdPx/7VgVvj3eWvy+YzljQc4= Subject key identifier: 98:3E:C5:9D:28:59:7C:72:74:FD:F0:D8:34:2F:4B:34:CC:59:49:FE Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E Certificate issuer: /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft Manifest number: 0271 Signing time: Tue 23 Dec 2025 00:36:52 +0000 Manifest this update: Tue 23 Dec 2025 00:36:51 +0000 Manifest next update: Tue 30 Dec 2025 00:36:51 +0000 Files and hashes: 1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: OgupoA2TUsFz/YadowlFy+5IthwIisMk3xTNZL4IpyA=) 2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: HtTuvv99koTFb3WsqnSUTEDCOM9sGsmqR5TB4gPZy4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5D9F, serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Validity Not Before: Dec 23 00:36:51 2025 GMT Not After : Dec 30 00:36:51 2025 GMT Subject: CN=6949e424-2626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:18:ac:4d:d6:c5:5d:f7:1b:18:39:97:87: 26:1c:f1:2a:51:50:cb:71:07:7a:10:8b:e1:7e:01: 86:79:90:d0:48:64:66:99:66:18:a3:a5:c1:8c:9b: 99:97:9d:22:0c:3e:a6:ea:9e:42:03:dd:b9:62:57: 50:20:11:3f:33:d7:9e:ad:89:be:b2:b9:36:59:7b: 52:86:ed:ae:db:4b:17:bc:6a:48:1c:29:df:fe:6f: 74:ef:4e:de:2a:f3:84:ea:18:35:80:90:93:40:d7: f3:0a:c3:af:8c:4b:be:59:6a:55:d1:41:11:22:6a: 85:f8:43:ff:1d:9c:cd:3a:a1:51:e4:e9:34:91:3a: 31:74:9e:f0:7c:fe:9d:77:7c:4b:e4:31:be:e2:f3: a7:65:e7:96:09:24:a4:e3:61:23:b9:07:f4:c6:99: e3:e1:80:c5:88:10:ba:a8:9f:76:47:66:f5:ca:4f: 51:31:bb:dc:69:a1:7e:61:94:42:72:84:ce:35:e6: 32:e2:87:ec:c4:db:50:01:34:5e:b1:91:0c:42:13: 5c:e7:86:bc:54:56:46:a3:c9:6a:0a:97:de:8d:bb: 9c:da:c4:65:10:f1:ac:dd:c4:58:a6:f0:32:c2:b0: 4c:05:0a:6d:cf:0e:0c:b1:45:5b:8d:39:85:65:ac: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3E:C5:9D:28:59:7C:72:74:FD:F0:D8:34:2F:4B:34:CC:59:49:FE X509v3 Authority Key Identifier: keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a4:9e:fc:4a:ab:e6:51:7b:ba:7a:02:ff:7c:a2:ea:05:87: 8c:db:36:26:60:eb:c8:85:73:c6:7c:74:d5:7d:55:ff:74:c4: f2:38:fe:a6:b7:b6:72:66:45:a4:4d:bd:1c:47:18:0c:69:22: 10:b0:5d:e6:58:45:f2:8d:5a:ea:e5:58:58:c1:b2:f9:ff:be: 68:40:bd:cc:69:26:49:f6:1e:df:64:82:f7:06:dd:bc:4c:d4: 4b:15:06:57:07:7c:e2:72:29:8a:ff:63:4d:19:67:e0:70:96: c6:47:36:43:40:3a:fb:f9:a2:5f:59:ae:15:ae:40:b0:85:ad: 65:96:13:57:9b:4a:a6:82:d4:09:20:50:63:20:0a:a0:d3:69: 6a:88:f2:e9:ad:21:4a:d6:66:58:b0:09:1e:76:e2:bf:07:7a: b9:f5:49:4f:0e:c4:bc:68:4c:bd:c5:35:8d:75:ab:70:c4:b0: ca:07:20:ca:0f:f6:d9:e0:b2:22:b7:0d:0a:9b:b1:fc:54:1c: 44:d7:9e:b2:75:a2:28:00:e9:73:e0:4b:06:ab:3a:e1:50:ea: 32:81:70:40:bd:81:bf:18:99:ac:c1:87:17:a0:92:24:58:21: 18:55:38:a7:af:75:1a:de:a2:8a:00:40:ee:1b:58:e9:84:f4: 38:11:c6:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEOUYxMTAvBgNVBAUTKDMwRUVGM0U4MTlFOTlCMDAwRDY2NUY2QkQ1OTRBRkE0 QzYyMjZBMkUwHhcNMjUxMjIzMDAzNjUxWhcNMjUxMjMwMDAzNjUxWjAYMRYwFAYD VQQDDA02OTQ5ZTQyNC0yNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC4YrE3WxV33Gxg5l4cmHPEqUVDLcQd6EIvhfgGGeZDQSGRmmWYYo6XBjJuZ l50iDD6m6p5CA925YldQIBE/M9eerYm+srk2WXtShu2u20sXvGpIHCnf/m90707e KvOE6hg1gJCTQNfzCsOvjEu+WWpV0UERImqF+EP/HZzNOqFR5Ok0kToxdJ7wfP6d d3xL5DG+4vOnZeeWCSSk42EjuQf0xpnj4YDFiBC6qJ92R2b1yk9RMbvcaaF+YZRC coTONeYy4ofsxNtQATResZEMQhNc54a8VFZGo8lqCpfejbuc2sRlEPGs3cRYpvAy wrBMBQptzw4MsUVbjTmFZawthwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg+xZ0o WXxydP3w2DQvSzTMWUn+MB8GA1UdIwQYMBaAFDDu8+gZ6ZsADWZfa9WUr6TGImou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUQ5Ri85MjZGMzMzRTNB NEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13QU5abDlyMVpTdnBNWWlh aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PN3o2Qm5wbXdBTlpsOXIxWlN2cE1ZaWFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUQ5Ri85MjZGMzMzRTNBNEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13 QU5abDlyMVpTdnBNWWlhaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkpJ78SqvmUXu6egL/fKLqBYeM2zYmYOvIhXPGfHTVfVX/dMTyOP6m t7ZyZkWkTb0cRxgMaSIQsF3mWEXyjVrq5VhYwbL5/75oQL3MaSZJ9h7fZIL3Bt28 TNRLFQZXB3zicimK/2NNGWfgcJbGRzZDQDr7+aJfWa4VrkCwha1llhNXm0qmgtQJ IFBjIAqg02lqiPLprSFK1mZYsAkeduK/B3q59UlPDsS8aEy9xTWNdatwxLDKByDK D/bZ4LIitw0Km7H8VBxE156ydaIoAOlz4EsGqzrhUOoygXBAvYG/GJmswYcXoJIk WCEYVTinr3Ua3qKKAEDuG1jphPQ4Ecb1 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:31 2025 by rpki-client