This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json) Hash identifier: pjptPauoq4XgNCVZ9lsaEZ1d6xXEdbOFeKhwtOpmCSQ= Subject key identifier: 5B:39:49:C1:33:79:14:F6:46:B3:FB:24:40:F1:EA:29:66:15:0B:1B Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Certificate serial: 2B71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft Manifest number: A0E8 Signing time: Wed 24 Dec 2025 14:29:08 +0000 Manifest this update: Wed 24 Dec 2025 14:29:07 +0000 Manifest next update: Wed 31 Dec 2025 14:29:07 +0000 Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: Tp0mMdu09CblCjEE2qocNVYMVCUaIqY/MVwgd+nfwCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11121 (0x2b71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Validity Not Before: Dec 24 14:29:07 2025 GMT Not After : Dec 31 14:29:07 2025 GMT Subject: CN=694bf8b4-ef2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:70:37:d1:b2:05:e3:83:b8:74:1c:ff:36: c1:64:95:41:be:b7:1a:c8:1e:b2:7c:12:9c:89:d8: 16:b7:c7:19:b7:4f:66:9c:67:99:05:27:88:a1:d3: 44:a9:c3:f6:0f:3c:ae:8c:a9:bd:0a:41:8c:7d:53: 88:ae:0f:88:64:17:51:5a:05:54:f1:af:b2:c0:71: 3c:c5:52:99:1b:ef:3b:77:03:9d:27:98:cd:dd:bf: 8a:77:68:eb:d5:26:ee:90:81:06:3b:7e:dc:07:53: cd:bf:0a:a7:24:8b:8a:fd:9f:2d:f1:ab:07:8b:5b: ef:46:99:2b:89:bb:c2:71:4a:59:45:0d:b6:08:e6: 9a:83:50:f9:ca:07:cb:93:34:99:12:3e:bb:e6:ab: 89:dc:3b:30:04:3a:b2:a6:58:55:7c:1f:35:1b:58: c4:f0:c3:90:24:20:a8:26:d1:c1:08:3c:8c:f2:e0: 22:80:fb:ba:93:32:57:70:1e:ec:07:8e:71:31:63: 2f:e9:61:71:03:b2:f5:8d:55:60:9f:86:c8:0c:6a: e3:a1:76:95:eb:5a:b0:46:89:76:d1:b0:30:13:a9: 19:47:8e:db:c0:20:9b:41:11:9c:34:d9:66:ae:2e: 44:4b:6f:91:ac:68:4b:5d:53:f1:10:84:98:1e:96: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:39:49:C1:33:79:14:F6:46:B3:FB:24:40:F1:EA:29:66:15:0B:1B X509v3 Authority Key Identifier: keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1e:78:1f:24:b8:e1:81:d3:7e:ea:ba:c1:5d:46:58:19:e5: c4:a3:6e:4a:5e:46:5f:8d:68:8c:4a:66:04:e2:87:b1:1a:e8: ae:64:1a:41:16:2e:a2:df:5e:7f:f7:56:d3:bd:ca:a8:06:90: 86:7c:ca:d9:c7:3a:93:b6:ee:03:f4:db:9e:cc:69:a8:8f:69: e3:77:74:e9:61:ff:5d:e3:73:b1:9c:ae:c5:99:a3:36:de:2b: 78:0f:76:59:32:19:4b:79:34:6f:6a:19:f0:e1:41:9b:79:d6: c5:fb:ba:4e:8b:d1:45:b0:94:07:bc:52:0c:90:f7:ca:7b:1d: 12:e2:60:ad:43:6b:ce:89:90:13:2a:11:a8:da:bd:d8:fe:a5: 73:e9:13:e2:af:54:45:22:15:a5:a8:20:29:75:b5:14:24:61: c5:7e:a3:1e:7f:27:d3:95:61:8d:6f:5c:de:80:09:09:2b:72: d6:e3:fa:89:f9:64:b6:72:17:11:26:74:5a:40:3f:38:db:95: db:ce:aa:0e:51:7e:e7:28:af:e0:8a:42:fe:a8:8d:f8:03:ed: 34:87:9b:1e:ff:4a:48:c2:80:71:b1:e6:7b:8d:d3:0f:e4:19: d3:dc:8d:2b:f1:9f:2b:47:52:63:ea:40:7e:86:9d:4c:70:b8: 35:81:27:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKEFFQzhBODMyODFGRThCMjc1QUVFMDQxQkUzM0NDREQ4 NDkzQkFDMDAwHhcNMjUxMjI0MTQyOTA3WhcNMjUxMjMxMTQyOTA3WjAYMRYwFAYD VQQDDA02OTRiZjhiNC1lZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojBwN9GyBeODuHQc/zbBZJVBvrcayB6yfBKcidgWt8cZt09mnGeZBSeIodNE qcP2DzyujKm9CkGMfVOIrg+IZBdRWgVU8a+ywHE8xVKZG+87dwOdJ5jN3b+Kd2jr 1SbukIEGO37cB1PNvwqnJIuK/Z8t8asHi1vvRpkribvCcUpZRQ22COaag1D5ygfL kzSZEj675quJ3DswBDqyplhVfB81G1jE8MOQJCCoJtHBCDyM8uAigPu6kzJXcB7s B45xMWMv6WFxA7L1jVVgn4bIDGrjoXaV61qwRol20bAwE6kZR47bwCCbQRGcNNlm ri5ES2+RrGhLXVPxEISYHpYswwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFs5ScEz eRT2RrP7JEDx6ilmFQsbMB8GA1UdIwQYMBaAFK7IqDKB/osnWu4EG+M8zdhJO6wA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5ZGE3Z1FiNHp6TjJFazdy QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzaW9Nb0gtaXlkYTdnUWI0enpOMkVrN3JBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5 ZGE3Z1FiNHp6TjJFazdyQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLHngfJLjhgdN+6rrBXUZYGeXEo25KXkZfjWiMSmYE4oexGuiuZBpB Fi6i315/91bTvcqoBpCGfMrZxzqTtu4D9NuezGmoj2njd3TpYf9d43OxnK7FmaM2 3it4D3ZZMhlLeTRvahnw4UGbedbF+7pOi9FFsJQHvFIMkPfKex0S4mCtQ2vOiZAT KhGo2r3Y/qVz6RPir1RFIhWlqCApdbUUJGHFfqMefyfTlWGNb1zegAkJK3LW4/qJ +WS2chcRJnRaQD8425XbzqoOUX7nKK/gikL+qI34A+00h5se/0pIwoBxseZ7jdMP 5BnT3I0r8Z8rR1Jj6kB+hp1McLg1gSd2 -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:37 2025 by rpki-client