This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft File: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft (raw, json) Hash identifier: 4wFs+7jmbapvk+Wb/LvT1pnlczgpRahsQEge4otatZs= Subject key identifier: 47:90:A4:20:1E:E3:6D:06:22:B9:37:09:46:3B:6A:BF:BB:C9:84:BB Authority key identifier: D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4 Certificate issuer: /CN=A91EB820/serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft Manifest number: 4F Signing time: Tue 23 Dec 2025 06:10:14 +0000 Manifest this update: Tue 23 Dec 2025 06:10:13 +0000 Manifest next update: Tue 30 Dec 2025 06:10:13 +0000 Files and hashes: 1: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl (hash: 3srpG4xfnsVytgh7AzkIWc3m0jY8RfSonHAe0q6G0eU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4 Validity Not Before: Dec 23 06:10:13 2025 GMT Not After : Dec 30 06:10:13 2025 GMT Subject: CN=694a3246-269e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:99:b5:9b:4b:f9:8c:bb:7b:fd:0f:c7:9c: c0:07:cc:5d:68:98:13:b4:14:8f:84:7b:27:c0:e0: e5:29:6d:33:54:b6:f6:be:31:2d:a5:71:28:73:9d: 44:a5:a2:1a:83:48:e9:df:62:1e:6d:76:f4:7d:3a: e8:c3:ca:6f:5f:91:4d:33:91:0b:6e:ea:b7:1f:2d: 16:9e:3e:f4:67:01:0e:fa:f3:2d:07:f5:0a:34:d0: 9b:6a:9d:b4:cb:91:d4:32:0a:b9:a7:09:82:ac:ba: 98:6f:07:bb:60:48:f5:ea:3c:d7:2d:37:a4:5c:36: 70:f5:ea:3c:10:2c:87:55:fd:58:98:6b:75:ee:44: 42:68:d7:93:66:20:48:0f:7a:5b:02:97:67:00:9b: 19:47:5d:d7:64:cd:b3:40:6b:94:f2:fb:2d:03:63: 36:7d:39:43:8d:9a:91:df:94:e6:37:8e:41:e7:a5: 0a:23:6a:32:90:a0:80:1c:d1:87:a3:92:45:4b:92: 70:67:85:06:cd:63:9e:a6:37:f4:40:97:ec:de:6a: 57:f2:8f:80:62:c6:f1:c7:a3:5c:9e:a7:36:f3:85: 4b:28:c3:b4:43:43:1c:f7:29:fb:71:9c:c8:5d:49: 17:26:88:e4:89:6f:02:9a:ec:9a:b2:43:13:9c:0f: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:90:A4:20:1E:E3:6D:06:22:B9:37:09:46:3B:6A:BF:BB:C9:84:BB X509v3 Authority Key Identifier: keyid:D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d3:3d:7e:bc:c3:d8:27:ab:6a:b9:5b:9e:75:a7:46:47:b7: f9:6d:fe:be:f4:4f:55:83:96:79:45:b6:b4:79:c8:18:b1:d1: 18:81:64:27:55:85:7c:f1:6c:42:08:bb:0e:2b:d4:d5:8a:a7: cf:58:9f:2a:7e:fc:84:ba:e2:bd:83:7f:2e:0f:e0:79:22:06: 14:5d:56:4a:46:b4:c4:3e:7f:6b:99:85:77:e7:55:52:87:73: 71:94:24:4c:80:2a:d1:42:4c:89:52:59:8c:28:ef:29:7f:6b: 4b:c7:fa:bc:22:bc:63:6f:2b:a5:ec:0d:63:50:53:b9:e8:b2: 95:7b:1b:4a:6f:5f:83:be:12:ce:09:d4:5f:f4:82:eb:4b:41: 8e:72:57:ed:7a:a7:55:5a:99:1b:0f:51:ec:39:1f:c5:46:51: 68:06:08:5a:56:b5:76:f2:7b:1d:71:13:db:00:a9:ea:97:5e: 61:b6:6d:f7:d0:e5:d2:6e:df:99:92:2f:fb:63:23:f5:1c:52: a1:a3:be:31:49:25:e5:7d:86:4e:0a:af:70:51:1a:61:2a:87: 0b:9f:df:9c:15:b2:38:94:de:e2:17:70:e2:4c:bf:c6:91:28: 62:33:fb:72:7a:0a:f9:14:0b:7b:7c:e8:ea:d5:2c:47:62:65: 32:1d:ca:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjgyMDExMC8GA1UEBRMoRDBFMDNBQzA5N0RDMDAxMjlEMDMyNTNGMUM5REQ3NkQy QTcxRDhGNDAeFw0yNTEyMjMwNjEwMTNaFw0yNTEyMzAwNjEwMTNaMBgxFjAUBgNV BAMMDTY5NGEzMjQ2LTI2OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHqZm1m0v5jLt7/Q/HnMAHzF1omBO0FI+EeyfA4OUpbTNUtva+MS2lcShznUSl ohqDSOnfYh5tdvR9OujDym9fkU0zkQtu6rcfLRaePvRnAQ768y0H9Qo00JtqnbTL kdQyCrmnCYKsuphvB7tgSPXqPNctN6RcNnD16jwQLIdV/ViYa3XuREJo15NmIEgP elsCl2cAmxlHXddkzbNAa5Ty+y0DYzZ9OUONmpHflOY3jkHnpQojajKQoIAc0Yej kkVLknBnhQbNY56mN/RAl+zealfyj4BixvHHo1yepzbzhUsow7RDQxz3KftxnMhd SRcmiOSJbwKa7JqyQxOcDx75AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR5CkIB7j bQYiuTcJRjtqv7vJhLswHwYDVR0jBBgwFoAU0OA6wJfcABKdAyU/HJ3XbSpx2PQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCODIwLzlBMjJERUM0Njg0 MDExRjBBOTQwNDc2QkM0RjlBRTAyLzBPQTZ3SmZjQUJLZEF5VV9ISjNYYlNweDJQ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvME9BNndKZmNBQktkQXlVX0hKM1hiU3B4MlBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC ODIwLzlBMjJERUM0Njg0MDExRjBBOTQwNDc2QkM0RjlBRTAyLzBPQTZ3SmZjQUJL ZEF5VV9ISjNYYlNweDJQUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKXTPX68w9gnq2q5W551p0ZHt/lt/r70T1WDlnlFtrR5yBix0RiBZCdV hXzxbEIIuw4r1NWKp89Ynyp+/IS64r2Dfy4P4HkiBhRdVkpGtMQ+f2uZhXfnVVKH c3GUJEyAKtFCTIlSWYwo7yl/a0vH+rwivGNvK6XsDWNQU7nospV7G0pvX4O+Es4J 1F/0gutLQY5yV+16p1VamRsPUew5H8VGUWgGCFpWtXbyex1xE9sAqeqXXmG2bffQ 5dJu35mSL/tjI/UcUqGjvjFJJeV9hk4Kr3BRGmEqhwuf35wVsjiU3uIXcOJMv8aR KGIz+3J6CvkUC3t86OrVLEdiZTIdyv8= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:13 2025 by rpki-client