This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft File: MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json) Hash identifier: d7dfDBOVMUvCHtCxG0DF0SFlBb4jfvJbYb/qRvGDxgg= Subject key identifier: 96:00:07:94:CF:53:CB:92:73:AD:8A:89:B4:2A:8C:F9:7E:58:43:2B Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D Certificate issuer: /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft Manifest number: 0156 Signing time: Tue 23 Dec 2025 03:07:45 +0000 Manifest this update: Tue 23 Dec 2025 03:07:45 +0000 Manifest next update: Tue 30 Dec 2025 03:07:45 +0000 Files and hashes: 1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: ohuxqpekxtLiFNdIwaYOb1DPtEsSEk3YPTFEgBMGv4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Validity Not Before: Dec 23 03:07:45 2025 GMT Not After : Dec 30 03:07:45 2025 GMT Subject: CN=694a0781-6991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:93:ef:0f:9a:07:1b:3d:67:9b:f8:7c:54: 7f:7e:d1:af:af:ed:c5:ff:34:f1:62:62:f9:da:6b: ce:4f:42:86:f5:83:54:c6:41:d5:2d:55:d5:17:37: 86:47:c7:f6:a2:bf:ca:71:10:d6:76:8c:a2:fe:9b: 6f:c6:b9:c8:40:fc:4a:03:7f:81:8b:26:81:b1:98: 64:51:05:bc:f1:6c:75:c5:05:02:8c:da:1a:6f:ec: 8f:97:3b:b6:db:11:a4:9d:9c:cb:0d:4d:ae:93:4a: 9b:b7:8e:e6:72:1b:a1:6f:6d:4c:86:cf:c5:b1:c0: 99:20:9b:ed:56:1f:72:3b:da:92:71:21:01:80:77: 67:4b:ef:21:f8:34:9b:32:7a:14:ad:16:a7:77:9c: 86:f1:4d:fb:4a:8f:da:ee:de:fc:8c:7b:89:7e:a2: e8:cb:d0:66:0f:49:76:5a:38:7d:3f:6f:14:ad:d6: c0:73:c8:b8:3a:ee:16:ba:fb:c1:c5:05:8a:ed:26: e5:fb:15:12:78:db:44:e4:25:4f:7a:1e:47:04:e9: 66:4f:63:b5:01:51:1d:be:42:2e:65:b0:46:87:07: 09:31:f5:0a:ff:df:4b:3e:90:49:35:11:bf:e7:b5: 8c:ab:54:a7:59:56:73:e6:e5:30:13:54:f7:15:40: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:00:07:94:CF:53:CB:92:73:AD:8A:89:B4:2A:8C:F9:7E:58:43:2B X509v3 Authority Key Identifier: keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:87:9d:f5:98:9a:6a:1c:fd:bc:1f:21:37:fb:e1:6f:4f:2d: 48:ca:83:c1:f1:d9:41:af:7d:11:bb:0b:74:4c:d5:f9:7f:2d: b4:2a:ae:1a:84:96:80:b2:28:6a:35:5e:88:77:2e:9d:fc:a0: e0:34:90:45:97:a4:66:c6:4f:35:ee:35:74:af:ba:48:85:05: 4e:78:5b:81:26:1f:95:09:e3:d8:ab:0b:cd:32:a6:b6:bf:99: b4:1e:87:f1:a8:ed:20:04:af:62:07:4a:ad:d9:a6:e1:03:35: 6c:b4:f1:b5:26:54:47:93:4a:be:00:f1:45:47:20:66:81:4f: 2a:82:fa:d9:8e:a6:74:57:9c:47:f4:3f:3a:ac:0f:45:a8:74: 32:a6:15:3f:44:d7:45:53:e1:34:8f:83:36:23:37:8c:ec:18: a3:34:db:ae:42:b3:2f:69:66:ab:16:a7:04:75:95:fa:6c:64: 0c:2e:30:19:a6:36:72:e9:45:73:0c:37:a8:01:41:c6:b6:c9: 10:14:63:5c:c9:5d:46:54:4c:ff:9f:9c:7c:71:dd:6c:bb:dc: b5:43:3c:f0:d7:59:80:5c:a5:a8:16:9b:45:a7:13:30:a1:5c: 1f:80:22:b9:83:9c:7f:ca:48:c4:cf:42:96:2d:82:8e:e6:df: 16:8f:d2:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDMwRTg5NkU3ODlENDQzNjAzNDZFQTRDQkI0RUQ0NTkx NEVBRDAyN0QwHhcNMjUxMjIzMDMwNzQ1WhcNMjUxMjMwMDMwNzQ1WjAYMRYwFAYD VQQDDA02OTRhMDc4MS02OTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOuT7w+aBxs9Z5v4fFR/ftGvr+3F/zTxYmL52mvOT0KG9YNUxkHVLVXVFzeG R8f2or/KcRDWdoyi/ptvxrnIQPxKA3+BiyaBsZhkUQW88Wx1xQUCjNoab+yPlzu2 2xGknZzLDU2uk0qbt47mchuhb21Mhs/FscCZIJvtVh9yO9qScSEBgHdnS+8h+DSb MnoUrRand5yG8U37So/a7t78jHuJfqLoy9BmD0l2Wjh9P28UrdbAc8i4Ou4WuvvB xQWK7Sbl+xUSeNtE5CVPeh5HBOlmT2O1AVEdvkIuZbBGhwcJMfUK/99LPpBJNRG/ 57WMq1SnWVZz5uUwE1T3FUCBUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYAB5TP U8uSc62KibQqjPl+WEMrMB8GA1UdIwQYMBaAFDDolueJ1ENgNG6ky7TtRZFOrQJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9EMjcyMzBERUNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEyQTBicVRMdE8xRmtVNnRB bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PaVc1NG5VUTJBMGJxVEx0TzFGa1U2dEFuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczRC9EMjcyMzBERUNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEy QTBicVRMdE8xRmtVNnRBbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqh531mJpqHP28HyE3++FvTy1IyoPB8dlBr30Ruwt0TNX5fy20Kq4a hJaAsihqNV6Idy6d/KDgNJBFl6Rmxk817jV0r7pIhQVOeFuBJh+VCePYqwvNMqa2 v5m0HofxqO0gBK9iB0qt2abhAzVstPG1JlRHk0q+APFFRyBmgU8qgvrZjqZ0V5xH 9D86rA9FqHQyphU/RNdFU+E0j4M2IzeM7BijNNuuQrMvaWarFqcEdZX6bGQMLjAZ pjZy6UVzDDeoAUHGtskQFGNcyV1GVEz/n5x8cd1su9y1Qzzw11mAXKWoFptFpxMw oVwfgCK5g5x/ykjEz0KWLYKO5t8Wj9KE -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:19 2025 by rpki-client