This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json) Hash identifier: S33a8KjL3gYjD93MDXz0JARoWnAsSvDwwSAoZnMuXc4= Subject key identifier: 78:4C:38:F8:27:02:22:D5:F2:7D:5D:B7:96:8D:42:2D:72:7E:6A:A5 Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Certificate serial: 06E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft Manifest number: 06D9 Signing time: Mon 22 Dec 2025 21:18:29 +0000 Manifest this update: Mon 22 Dec 2025 21:18:29 +0000 Manifest next update: Mon 29 Dec 2025 21:18:29 +0000 Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: I7TD9mPVeyUPu5XwshltQ9j1lFPmEehdsDLw2ZvlKvQ=) 2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: Tn4IiKC/ehOcHKqem3Io6ZVpsXPRVKGONn1yIt6QObo=) 3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: rBuNfeeoduUd1I0NoD4IRcILjNn1S7GUQ8XAggSqgBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1767 (0x6e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Validity Not Before: Dec 22 21:18:29 2025 GMT Not After : Dec 29 21:18:29 2025 GMT Subject: CN=6949b5a5-4a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:cb:4e:bd:41:60:5f:19:50:4a:95:3a:9c: a3:80:23:b0:bb:ca:3f:13:a7:a4:90:fb:9c:63:3b: d1:f1:9e:db:14:70:0b:43:7d:aa:45:20:08:3c:69: 8e:d7:80:fc:e3:f7:d8:94:b7:8d:5f:65:56:d1:e9: 69:22:ce:51:dc:ee:55:39:78:20:c8:4f:6e:38:95: 72:99:27:bc:44:55:d0:26:5d:29:ab:27:1c:94:12: 55:9f:f3:c0:71:20:a8:39:66:92:1b:cc:12:94:1d: cd:94:fb:fd:4c:c7:61:81:b4:28:05:9b:99:8a:22: 72:38:41:fd:f8:e1:cf:7b:ae:47:5c:6e:46:09:b0: e6:2e:09:75:e4:3f:d3:be:85:76:5c:7a:9d:e0:af: f6:86:3a:5c:07:1e:f3:43:38:68:b1:e5:26:cf:f1: 68:6d:ca:ff:6f:a2:2a:9a:37:db:94:3c:f6:96:e6: af:8a:44:94:19:8f:d6:c1:84:77:8f:b3:3e:fa:cd: fa:8d:f1:49:8d:82:5c:0e:d4:ea:01:98:1e:96:6a: 6e:22:a3:75:16:4d:d8:92:da:2b:8b:dd:2b:7e:a8: 87:b4:7f:3d:83:d9:b3:2f:0b:c6:47:a9:ab:b0:d3: 78:52:b5:ed:d0:72:50:48:ec:fb:07:1a:7c:07:9a: cd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4C:38:F8:27:02:22:D5:F2:7D:5D:B7:96:8D:42:2D:72:7E:6A:A5 X509v3 Authority Key Identifier: keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:9a:35:81:f0:b8:20:3d:52:5d:bf:f5:fc:ac:7f:49:a3:9a: 13:4e:c4:48:bd:9b:56:3c:25:47:e9:d3:10:38:00:0a:99:12: 2d:cb:95:f3:4a:3e:54:ed:61:0f:51:76:6f:33:89:c3:72:a3: 60:76:e5:23:65:42:06:71:9b:c9:b5:d9:25:9a:e5:27:44:db: 6a:59:eb:74:23:c6:a9:f6:e1:05:e2:60:10:ce:9f:5c:41:a3: 95:c1:9b:82:ab:f5:c2:12:6a:57:32:f9:d5:0d:b3:4a:be:24: 5d:72:74:8b:d5:d1:4a:d6:7c:cb:42:8f:82:89:cf:38:f3:5e: 33:6d:6b:74:d3:f0:74:1a:d5:4c:3c:c7:53:cd:ec:a9:7d:9b: 24:f9:69:d6:25:c6:cf:9f:81:83:06:be:a2:36:09:fd:c5:c8: c1:63:5b:9e:6d:0e:e8:c7:9e:bb:b1:45:3d:06:67:98:4f:8c: 3f:26:49:44:d1:92:ff:17:f2:0e:4e:61:f9:06:31:33:1d:f0: ba:19:db:70:e7:b9:e1:a5:d1:c6:e9:e1:9f:41:66:b5:aa:78: 48:85:27:18:d7:1b:d7:9d:9a:48:39:41:41:5a:49:26:33:ff: ab:65:f7:38:55:41:49:87:99:e8:dc:1d:af:cd:7c:7a:2c:98: 1e:c0:03:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG Qzg3MkU1QzUwHhcNMjUxMjIyMjExODI5WhcNMjUxMjI5MjExODI5WjAYMRYwFAYD VQQDDA02OTQ5YjVhNS00YTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFzLTr1BYF8ZUEqVOpyjgCOwu8o/E6ekkPucYzvR8Z7bFHALQ32qRSAIPGmO 14D84/fYlLeNX2VW0elpIs5R3O5VOXggyE9uOJVymSe8RFXQJl0pqycclBJVn/PA cSCoOWaSG8wSlB3NlPv9TMdhgbQoBZuZiiJyOEH9+OHPe65HXG5GCbDmLgl15D/T voV2XHqd4K/2hjpcBx7zQzhoseUmz/Fobcr/b6IqmjfblDz2luavikSUGY/WwYR3 j7M++s36jfFJjYJcDtTqAZgelmpuIqN1Fk3Yktori90rfqiHtH89g9mzLwvGR6mr sNN4UrXt0HJQSOz7Bxp8B5rNZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhMOPgn AiLV8n1dt5aNQi1yfmqlMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa V05pbmtSam83MWI4aHk1Y1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkmjWB8LggPVJdv/X8rH9Jo5oTTsRIvZtWPCVH6dMQOAAKmRIty5Xz Sj5U7WEPUXZvM4nDcqNgduUjZUIGcZvJtdklmuUnRNtqWet0I8ap9uEF4mAQzp9c QaOVwZuCq/XCEmpXMvnVDbNKviRdcnSL1dFK1nzLQo+Cic84814zbWt00/B0GtVM PMdTzeypfZsk+WnWJcbPn4GDBr6iNgn9xcjBY1uebQ7ox567sUU9BmeYT4w/JklE 0ZL/F/IOTmH5BjEzHfC6Gdtw57nhpdHG6eGfQWa1qnhIhScY1xvXnZpIOUFBWkkm M/+rZfc4VUFJh5no3B2vzXx6LJgewAP2 -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:09 2025 by rpki-client