This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json) Hash identifier: rEeaQk627P5u42Vusp3EMCe5qANLnGBAzHL0N+C9m8I= Subject key identifier: 6C:41:71:1E:79:D0:AC:8E:0C:3E:89:05:18:04:95:E0:5A:AA:17:3C Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Certificate serial: 1513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft Manifest number: 1509 Signing time: Sat 20 Dec 2025 16:35:35 +0000 Manifest this update: Sat 20 Dec 2025 16:35:35 +0000 Manifest next update: Sat 27 Dec 2025 16:35:35 +0000 Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: sFs6rwcCtXCyS1nugao0hyZ56CB90EL62pWbHtLaFBw=) 2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: oH35QJywcYwQK9w172Dp8G4g95WEClMxQ6f9cBdl364=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5395 (0x1513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91499BB, serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Validity Not Before: Dec 20 16:35:35 2025 GMT Not After : Dec 27 16:35:35 2025 GMT Subject: CN=6946d057-14f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:6a:46:9d:dd:55:55:83:c1:25:92:af:21: 68:b6:ec:8c:9f:f3:91:72:df:b3:4d:6a:d2:97:f1: c3:be:5e:22:c0:80:8b:8a:a7:13:81:b9:05:96:b7: 9a:8d:db:55:9c:be:59:db:97:b7:4e:20:03:61:c0: 3c:59:3d:89:18:06:56:49:9f:93:de:75:a2:80:ce: 9d:bd:05:2e:6d:8f:d7:b5:1c:80:d8:e0:32:53:f9: 4a:90:02:19:fd:83:7b:d7:29:1f:5f:e2:ce:e9:42: 4c:7a:7b:9f:4c:03:32:1e:ce:ee:5b:cb:85:25:c2: 45:a4:de:f1:f2:ab:16:0b:81:24:b2:33:bd:2d:b1: 3f:b5:99:6f:b8:d6:80:3a:d0:14:f5:1c:d3:c6:99: 4f:82:65:65:89:4c:74:8f:b1:f6:a6:2d:62:32:ed: 7d:cc:1c:04:b4:8f:95:5a:89:80:ad:18:da:56:5a: f1:28:17:06:22:e6:c4:7c:06:6e:de:32:e7:85:e2: 3e:b0:66:b1:87:53:bc:55:c9:5a:d7:61:9a:ac:26: 99:71:03:7d:4e:0e:bf:b4:8a:b5:67:a3:ab:01:fa: b1:3b:ac:1d:e6:b7:6f:31:01:9b:6d:24:36:a3:fa: 5c:8a:e3:36:b2:57:c8:b8:1a:f5:7d:05:8c:e1:ec: a5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:41:71:1E:79:D0:AC:8E:0C:3E:89:05:18:04:95:E0:5A:AA:17:3C X509v3 Authority Key Identifier: keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:6e:50:fa:ac:05:9f:03:a3:29:62:38:9a:dd:37:16:50:51: 71:4a:61:da:77:42:6c:76:22:3b:b6:cd:00:89:e4:a2:94:90: 5a:4d:29:58:cd:35:ab:a9:d2:15:05:95:52:1e:a6:ad:30:59: b4:17:a7:77:89:63:a7:88:d1:6b:c5:01:61:c6:7d:41:5f:05: 46:c3:6e:c7:30:40:db:c6:aa:3c:dc:bf:c1:ea:25:e8:cc:55: a2:44:80:7c:bc:5c:9f:bc:ab:0b:b9:c1:84:8c:9c:28:72:4b: 33:43:65:22:af:fd:65:a9:d0:17:a0:6d:53:ce:68:5a:c7:5d: da:a8:a0:2b:6b:a1:11:e0:89:6c:8c:02:97:bb:2f:a3:58:2c: 5f:f8:6c:df:e1:20:a2:f4:5b:41:4b:18:93:8e:9a:75:04:ce: 81:46:c9:0c:7b:bc:e8:4f:f0:8c:ec:e3:9a:9f:d9:14:e5:04: b5:a7:eb:18:5d:89:62:21:64:a7:df:91:b1:b3:5b:8c:94:0d: f6:40:6b:77:33:90:30:06:e8:6b:b5:19:9a:69:87:84:7b:06: 05:ee:63:bf:d0:c6:39:12:ba:71:a4:39:7c:f3:ee:b9:a9:29: 6b:29:c4:d7:21:45:8e:e2:c5:c3:4a:38:8e:19:38:20:79:60: 7d:d7:b4:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1QUNGQjdCNEFE QzU1RjM0NTgwHhcNMjUxMjIwMTYzNTM1WhcNMjUxMjI3MTYzNTM1WjAYMRYwFAYD VQQDDA02OTQ2ZDA1Ny0xNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxJqRp3dVVWDwSWSryFotuyMn/ORct+zTWrSl/HDvl4iwICLiqcTgbkFlrea jdtVnL5Z25e3TiADYcA8WT2JGAZWSZ+T3nWigM6dvQUubY/XtRyA2OAyU/lKkAIZ /YN71ykfX+LO6UJMenufTAMyHs7uW8uFJcJFpN7x8qsWC4EksjO9LbE/tZlvuNaA OtAU9RzTxplPgmVliUx0j7H2pi1iMu19zBwEtI+VWomArRjaVlrxKBcGIubEfAZu 3jLnheI+sGaxh1O8Vcla12GarCaZcQN9Tg6/tIq1Z6OrAfqxO6wd5rdvMQGbbSQ2 o/pciuM2slfIuBr1fQWM4eylvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxBcR55 0KyODD6JBRgEleBaqhc8MB8GA1UdIwQYMBaAFPDrPRHw7K5oc2ldWs+3tK3FXzRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTlCQi9BQjFDQUM4NjYw OTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3JtaHphVjFhejdlMHJjVmZO RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPczlFZkRzcm1oemFWMWF6N2UwcmNWZk5GZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTlCQi9BQjFDQUM4NjYwOTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3Jt aHphVjFhejdlMHJjVmZORmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjblD6rAWfA6MpYjia3TcWUFFxSmHad0JsdiI7ts0AieSilJBaTSlY zTWrqdIVBZVSHqatMFm0F6d3iWOniNFrxQFhxn1BXwVGw27HMEDbxqo83L/B6iXo zFWiRIB8vFyfvKsLucGEjJwockszQ2Uir/1lqdAXoG1Tzmhax13aqKAra6ER4Ils jAKXuy+jWCxf+Gzf4SCi9FtBSxiTjpp1BM6BRskMe7zoT/CM7OOan9kU5QS1p+sY XYliIWSn35Gxs1uMlA32QGt3M5AwBuhrtRmaaYeEewYF7mO/0MY5ErpxpDl88+65 qSlrKcTXIUWO4sXDSjiOGTggeWB917S7 -----END CERTIFICATE-----Generated at Sun Dec 21 13:06:51 2025 by rpki-client