This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json) Hash identifier: iHa6JmpC9p53h/icwzyUGsGjTiwv7lIdidXbhBFfMqc= Subject key identifier: 9D:0D:7F:BD:98:D3:F7:C4:5F:1F:5C:1E:DB:9C:0F:A3:FD:8C:F4:05 Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft Manifest number: 027E Signing time: Tue 23 Dec 2025 00:34:42 +0000 Manifest this update: Tue 23 Dec 2025 00:34:41 +0000 Manifest next update: Tue 30 Dec 2025 00:34:41 +0000 Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: EN35zoczfs6ykhiWItuqBZy8c6IGWlodfOFsgEZS2oE=) 2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: XLhgRmis7uOQ8aJ9/uFiC1tdxAcEfjqgmzA7lC0wW9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Validity Not Before: Dec 23 00:34:41 2025 GMT Not After : Dec 30 00:34:41 2025 GMT Subject: CN=6949e3a2-b349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:b9:24:9c:af:d4:14:90:53:67:8d:a7:80: 6c:bd:c3:1f:64:2b:17:d1:45:b5:4d:84:db:28:3c: 29:d6:ec:57:51:1a:15:31:28:03:f6:1a:62:b4:bf: b9:6f:1d:a6:00:67:14:b0:81:4a:c0:3a:f8:47:fb: 90:ce:ff:b5:e4:00:f1:73:5b:c7:a7:e5:ae:0c:e4: 05:47:0d:a4:5b:c7:fc:45:74:78:0c:97:9f:59:3e: de:e9:73:9d:1f:79:a5:86:52:28:33:3b:b3:4d:77: 0c:ec:8f:5f:ac:c2:79:29:04:96:d7:e6:c1:82:e9: f8:b4:ec:39:d0:ae:41:f8:3a:17:d2:64:a9:d0:48: 1c:98:05:ad:cb:a7:a3:6e:4b:15:2c:ce:88:07:31: 44:1a:03:50:ba:fc:b0:b6:58:c5:e5:55:ae:ba:f5: 5d:a2:ed:6d:a8:42:10:af:07:b8:4b:f1:33:9c:86: 60:89:3f:75:6d:d6:32:4d:cd:d8:a7:b3:7b:89:e2: d3:0b:21:1a:57:6f:47:c3:c8:6e:43:c5:0e:6e:63: 4e:76:a2:19:a8:39:59:a3:fe:07:36:d2:d2:eb:8c: 2b:ad:bd:2d:92:40:fd:12:aa:54:cc:26:7c:45:4c: 42:15:23:bb:93:45:48:94:8a:42:d0:72:c8:a6:0d: 1d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0D:7F:BD:98:D3:F7:C4:5F:1F:5C:1E:DB:9C:0F:A3:FD:8C:F4:05 X509v3 Authority Key Identifier: keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7a:66:b4:3a:67:d6:09:8b:90:66:10:ea:1e:21:10:a6:03: f8:7d:b0:d2:ee:40:17:8e:8d:98:f5:59:f5:91:6f:af:ac:1e: d9:69:fd:31:86:02:87:b8:3b:5c:c5:e4:ad:5b:af:b8:15:de: db:e0:b4:78:4f:ad:dd:a4:1a:15:7e:bb:7c:fa:d5:66:01:2d: 46:78:02:6e:70:82:71:98:b3:aa:87:08:dc:36:fa:8a:f9:20: 4c:a0:30:ad:8a:44:40:d5:6c:96:d5:c8:c7:9c:39:ea:89:a3: 8b:5e:55:e2:4a:6a:90:fc:93:cd:3d:46:e9:35:2b:ce:fe:4d: d8:5b:ac:91:e1:be:7f:6b:90:5d:b9:8f:90:ca:34:cf:3c:85: 99:6f:fe:95:2e:23:33:c8:3b:91:8f:e5:46:ee:c3:f3:de:0d: a5:fe:63:95:51:1f:5e:f7:a0:67:d5:91:cc:e8:b9:ff:65:07: 11:90:c7:81:99:2b:10:11:8d:b5:0e:16:c6:2f:63:4a:49:78: c6:55:47:bf:3f:a6:d3:31:83:4b:bb:00:03:be:73:09:e6:60: f1:40:4a:55:fc:64:96:9a:00:82:68:a9:f0:ce:39:57:a8:d7: d1:fb:3b:95:78:eb:2c:af:b8:9b:a0:24:fc:b6:ee:ef:80:a1: 3f:40:86:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFENjMxMTAvBgNVBAUTKDc3ODNCRERDRUMyREY5QjlGQ0ZCOEYxMDlCNzNENEY3 OTRBMTczODYwHhcNMjUxMjIzMDAzNDQxWhcNMjUxMjMwMDAzNDQxWjAYMRYwFAYD VQQDDA02OTQ5ZTNhMi1iMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAK5JJyv1BSQU2eNp4BsvcMfZCsX0UW1TYTbKDwp1uxXURoVMSgD9hpitL+5 bx2mAGcUsIFKwDr4R/uQzv+15ADxc1vHp+WuDOQFRw2kW8f8RXR4DJefWT7e6XOd H3mlhlIoMzuzTXcM7I9frMJ5KQSW1+bBgun4tOw50K5B+DoX0mSp0EgcmAWty6ej bksVLM6IBzFEGgNQuvywtljF5VWuuvVdou1tqEIQrwe4S/EznIZgiT91bdYyTc3Y p7N7ieLTCyEaV29Hw8huQ8UObmNOdqIZqDlZo/4HNtLS64wrrb0tkkD9EqpUzCZ8 RUxCFSO7k0VIlIpC0HLIpg0dEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0Nf72Y 0/fEXx9cHtucD6P9jPQFMB8GA1UdIwQYMBaAFHeDvdzsLfm5/PuPEJtz1PeUoXOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ2My9ERDM2NDExODM0 NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1ibjgtNDhRbTNQVTk1U2hj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0TzkzT3d0LWJuOC00OFFtM1BVOTVTaGM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUQ2My9ERDM2NDExODM0NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1i bjgtNDhRbTNQVTk1U2hjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGema0OmfWCYuQZhDqHiEQpgP4fbDS7kAXjo2Y9Vn1kW+vrB7Zaf0x hgKHuDtcxeStW6+4Fd7b4LR4T63dpBoVfrt8+tVmAS1GeAJucIJxmLOqhwjcNvqK +SBMoDCtikRA1WyW1cjHnDnqiaOLXlXiSmqQ/JPNPUbpNSvO/k3YW6yR4b5/a5Bd uY+QyjTPPIWZb/6VLiMzyDuRj+VG7sPz3g2l/mOVUR9e96Bn1ZHM6Ln/ZQcRkMeB mSsQEY21DhbGL2NKSXjGVUe/P6bTMYNLuwADvnMJ5mDxQEpV/GSWmgCCaKnwzjlX qNfR+zuVeOssr7iboCT8tu7vgKE/QIbu -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:33 2025 by rpki-client