This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft File: 0KCTtlEHkzVIStC6HXZhX1w2aIo.mft (raw, json) Hash identifier: PWaT7nLJFCS/gpQnVoFS6jcd0WmlKR7ak8nt/om5m+4= Subject key identifier: 72:DB:0D:D4:C8:74:59:95:0D:29:81:8F:45:C5:1C:71:DD:71:44:C4 Authority key identifier: D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A Certificate issuer: /CN=A91E275B/serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A Certificate serial: 3383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft Manifest number: 9B5F Signing time: Mon 22 Dec 2025 15:08:47 +0000 Manifest this update: Mon 22 Dec 2025 15:08:46 +0000 Manifest next update: Mon 29 Dec 2025 15:08:46 +0000 Files and hashes: 1: 0KCTtlEHkzVIStC6HXZhX1w2aIo.crl (hash: fK4mU7XVVFDzEHcWu+hgXbURxz+xaz7+576al9Sq2Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13187 (0x3383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A Validity Not Before: Dec 22 15:08:46 2025 GMT Not After : Dec 29 15:08:46 2025 GMT Subject: CN=69495eff-b5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:53:2e:61:67:e1:8e:14:d9:eb:28:ab:4c:e2: 4d:d1:a2:ec:20:ab:9e:e3:58:d5:57:59:c8:04:d0: 17:5b:f2:2b:fd:14:96:42:e6:c9:2b:23:d8:a9:53: bc:dc:06:73:0a:ef:0c:c3:67:44:19:c8:11:eb:39: 00:9c:3f:9b:63:ad:45:48:cf:11:2b:d1:1b:e4:8b: a5:07:49:33:85:3e:e7:c7:5c:54:2a:d7:11:e9:d2: 14:a6:05:26:03:a2:f0:e0:d1:5d:c2:6d:02:95:db: 32:7a:2a:1e:98:76:e1:e7:01:69:04:a5:4d:06:cb: 3b:72:02:99:ce:70:f0:57:a3:30:1f:10:fc:f5:49: 28:01:7a:01:0f:46:3e:0f:f4:50:8d:3d:ce:bd:51: 75:34:3e:4f:b0:07:e1:cb:75:4a:d5:df:8d:b5:77: 0a:de:16:79:ee:59:b5:5f:51:51:4e:db:45:83:6e: a7:93:a6:1d:42:86:90:57:ac:70:18:6c:c1:be:9e: 2d:f3:52:db:64:36:8e:69:dc:28:e5:3c:95:f1:8c: 9b:2c:da:eb:e5:25:ff:fc:85:6a:de:5b:a2:5f:a5: 8c:2b:f0:6f:ee:2a:17:05:28:f5:2d:fc:20:66:a4: 43:21:c5:9e:67:b8:2e:03:80:2d:e0:d4:d2:b5:db: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DB:0D:D4:C8:74:59:95:0D:29:81:8F:45:C5:1C:71:DD:71:44:C4 X509v3 Authority Key Identifier: keyid:D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f2:db:fa:aa:2e:08:2d:03:e2:03:84:ba:d1:32:10:b3:e4: 1f:c3:cd:16:20:66:bb:07:a1:2c:66:d9:ac:67:9f:ff:d9:1a: 93:71:b3:ed:c4:69:45:9b:dc:d0:e9:45:65:ad:08:42:9d:88: 61:f5:81:03:a2:e2:66:80:48:a5:77:f4:d6:0a:fa:0d:20:00: 3b:85:65:75:9e:0a:70:d8:fa:51:9f:53:0c:3e:2b:a8:2f:fd: 40:3b:9d:17:f0:28:4e:ef:24:c8:b0:7e:4a:03:00:f9:12:32: 2a:43:27:dc:fa:40:7a:7c:1e:db:85:9a:85:25:da:05:81:c6: 34:bf:a0:c7:76:46:6f:52:a5:af:3d:00:3a:8e:18:c6:1d:82: 5d:16:9e:ad:9f:b6:f2:99:cc:03:4f:38:62:37:32:63:3b:f9: 7d:b4:78:e2:12:b9:0d:98:dd:87:04:2d:7e:c8:59:65:7c:68: 0d:54:5c:f2:17:6e:ea:d1:0b:75:36:43:d1:dc:d5:b6:15:13: 9d:01:47:17:ea:c8:60:35:8d:2b:7a:4f:d6:84:79:37:ac:ea: 0a:5b:d9:02:4a:e0:ef:eb:0d:2a:b1:61:97:c1:dd:87:92:48: 7c:4d:08:14:93:87:64:7f:3d:be:34:3c:b5:50:6b:e9:5d:25: d3:47:f1:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKEQwQTA5M0I2NTEwNzkzMzU0ODRBRDBCQTFENzY2MTVG NUMzNjY4OEEwHhcNMjUxMjIyMTUwODQ2WhcNMjUxMjI5MTUwODQ2WjAYMRYwFAYD VQQDDA02OTQ5NWVmZi1iNWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lMuYWfhjhTZ6yirTOJN0aLsIKue41jVV1nIBNAXW/Ir/RSWQubJKyPYqVO8 3AZzCu8Mw2dEGcgR6zkAnD+bY61FSM8RK9Eb5IulB0kzhT7nx1xUKtcR6dIUpgUm A6Lw4NFdwm0CldsyeioemHbh5wFpBKVNBss7cgKZznDwV6MwHxD89UkoAXoBD0Y+ D/RQjT3OvVF1ND5PsAfhy3VK1d+NtXcK3hZ57lm1X1FRTttFg26nk6YdQoaQV6xw GGzBvp4t81LbZDaOadwo5TyV8YybLNrr5SX//IVq3luiX6WMK/Bv7ioXBSj1Lfwg ZqRDIcWeZ7guA4At4NTStduazQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLbDdTI dFmVDSmBj0XFHHHdcUTEMB8GA1UdIwQYMBaAFNCgk7ZRB5M1SErQuh12YV9cNmiK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi8wS0NUdGxFSGt6VklTdEM2SFhaaFgxdzJh SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBLQ1R0bEVIa3pWSVN0QzZIWFpoWDF3MmFJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi8wS0NUdGxFSGt6 VklTdEM2SFhaaFgxdzJhSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ8tv6qi4ILQPiA4S60TIQs+Qfw80WIGa7B6EsZtmsZ5//2RqTcbPt xGlFm9zQ6UVlrQhCnYhh9YEDouJmgEild/TWCvoNIAA7hWV1ngpw2PpRn1MMPiuo L/1AO50X8ChO7yTIsH5KAwD5EjIqQyfc+kB6fB7bhZqFJdoFgcY0v6DHdkZvUqWv PQA6jhjGHYJdFp6tn7bymcwDTzhiNzJjO/l9tHjiErkNmN2HBC1+yFllfGgNVFzy F27q0Qt1NkPR3NW2FROdAUcX6shgNY0rek/WhHk3rOoKW9kCSuDv6w0qsWGXwd2H kkh8TQgUk4dkfz2+NDy1UGvpXSXTR/HK -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:54 2025 by rpki-client