This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft File: 9ouGJos33oELlo2481f3c-mDv20.mft (raw, json) Hash identifier: kLQ6Tx0SpT1muxsuGcWoba49R3eGmV0PzoP1B+Z/3Gw= Subject key identifier: 40:67:FC:61:C9:A1:72:EA:24:1A:10:65:CC:E0:A4:40:F3:EA:70:70 Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D Certificate issuer: /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft Manifest number: 0ADE Signing time: Thu 18 Dec 2025 19:02:56 +0000 Manifest this update: Thu 18 Dec 2025 19:02:56 +0000 Manifest next update: Thu 25 Dec 2025 19:02:56 +0000 Files and hashes: 1: 9ouGJos33oELlo2481f3c-mDv20.crl (hash: phrL2+S/9IOnqYZU4Fm4DyeZ8Z2z0sk93Mir7lmqG24=) 2: B47A0CDA660F11EB8A1DB351C4F9AE02.roa (hash: hPcGjX6pod1mQjVuO2fta8f52KKrIcQ5XI+2+yM8wXY=) 3: B5A31A8E660F11EB8A1DB351C4F9AE02.roa (hash: FEaiMi5+ZViFMZcOI+52QVvWi5kkjXKoDrc8FS7/m2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755F6, serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Validity Not Before: Dec 18 19:02:56 2025 GMT Not After : Dec 25 19:02:56 2025 GMT Subject: CN=69444fe0-f2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:b1:61:a6:fb:35:7f:7c:67:a0:a2:87:31: a8:02:ff:9d:53:f8:3e:01:c5:28:3d:7d:47:96:0b: 28:60:e6:43:d4:b5:ac:82:be:db:00:81:2e:4c:28: ae:44:8d:74:20:ce:3f:f6:7e:6d:56:6a:80:2a:da: 21:3a:c6:1e:fd:38:e6:4f:d5:30:67:2a:1b:ad:91: 75:d1:de:d4:fd:03:cb:00:22:c6:9f:79:19:76:c2: 27:38:59:b1:1e:91:9c:5d:9a:86:5f:32:4c:f0:08: 8e:3c:42:26:e4:bc:07:ee:b2:5d:e7:69:1b:55:9e: 01:1c:bd:25:b3:ff:5c:f9:72:60:aa:fb:92:1b:69: 64:a7:31:f9:0c:df:32:4f:1d:72:68:47:9d:f1:6f: 3d:df:ca:a1:21:6d:d7:c4:bd:bd:24:c0:4f:d3:52: d2:01:df:60:78:e0:79:74:c5:16:37:5e:18:65:b3: 29:2c:79:a6:23:a6:24:ca:7b:ef:ac:a2:43:03:4e: 1d:78:90:5c:2d:79:ee:6d:79:79:48:e6:42:a9:4f: e5:23:20:78:70:50:63:8c:ce:3f:2a:ea:84:fa:17: 52:d7:4c:cb:ec:33:bb:fe:2f:32:74:75:f4:53:a2: 77:d3:db:b8:58:9b:90:41:e3:06:50:e3:72:f8:ee: f1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:67:FC:61:C9:A1:72:EA:24:1A:10:65:CC:E0:A4:40:F3:EA:70:70 X509v3 Authority Key Identifier: keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c9:ca:cd:b6:33:6b:4c:f7:d1:d8:4d:b6:6a:1b:2b:95:7a: 28:e8:b4:87:c3:1a:ba:aa:bc:dc:78:7a:ec:e5:07:80:70:2d: 8d:5b:a4:09:5e:af:96:ae:4b:52:d3:64:64:46:64:15:f8:f0: ef:80:3e:3e:1b:e0:ea:62:d7:cf:9d:0d:8a:64:6b:33:eb:d5: b0:6e:1e:a9:51:30:aa:96:d7:98:4d:41:60:76:72:a7:2c:f8: 20:a0:11:5f:58:fb:bf:d5:68:53:e8:07:e3:7d:86:1e:fe:80: 43:6a:cd:59:47:39:8e:6c:95:ed:ae:82:09:6d:02:60:81:6c: fc:bf:2c:1a:78:6f:c4:ad:b4:ec:84:0c:49:b2:24:50:80:aa: 57:da:ee:ba:29:39:ab:a4:d4:4c:58:0b:ce:7f:67:13:fb:3b: 51:13:3d:02:66:ff:dd:83:08:50:98:66:58:e7:3d:39:9e:07: 71:b2:84:86:75:f5:1c:3f:24:44:fe:fc:49:04:b1:da:d5:14: de:f2:84:35:6f:8b:6c:c6:47:f8:b2:09:00:9c:f1:38:c4:d3: 19:7a:81:cb:c1:f8:33:93:51:a0:9b:d0:a1:b1:67:14:fd:9d: e2:ac:70:eb:02:e6:b9:f9:db:1b:02:13:d2:2f:fd:94:6d:11: e7:a8:e4:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RjYxMTAvBgNVBAUTKEY2OEI4NjI2OEIzN0RFODEwQjk2OERCOEYzNTdGNzcz RTk4M0JGNkQwHhcNMjUxMjE4MTkwMjU2WhcNMjUxMjI1MTkwMjU2WjAYMRYwFAYD VQQDDA02OTQ0NGZlMC1mMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokWxYab7NX98Z6CihzGoAv+dU/g+AcUoPX1HlgsoYOZD1LWsgr7bAIEuTCiu RI10IM4/9n5tVmqAKtohOsYe/TjmT9UwZyobrZF10d7U/QPLACLGn3kZdsInOFmx HpGcXZqGXzJM8AiOPEIm5LwH7rJd52kbVZ4BHL0ls/9c+XJgqvuSG2lkpzH5DN8y Tx1yaEed8W8938qhIW3XxL29JMBP01LSAd9geOB5dMUWN14YZbMpLHmmI6Ykynvv rKJDA04deJBcLXnubXl5SOZCqU/lIyB4cFBjjM4/KuqE+hdS10zL7DO7/i8ydHX0 U6J309u4WJuQQeMGUONy+O7xCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBn/GHJ oXLqJBoQZczgpEDz6nBwMB8GA1UdIwQYMBaAFPaLhiaLN96BC5aNuPNX93Ppg79t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVGNi9ENjlFQUFCMjVG NjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNvRUxsbzI0ODFmM2MtbUR2 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvdUdKb3MzM29FTGxvMjQ4MWYzYy1tRHYyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVGNi9ENjlFQUFCMjVGNjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNv RUxsbzI0ODFmM2MtbUR2MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaycrNtjNrTPfR2E22ahsrlXoo6LSHwxq6qrzceHrs5QeAcC2NW6QJ Xq+WrktS02RkRmQV+PDvgD4+G+DqYtfPnQ2KZGsz69Wwbh6pUTCqlteYTUFgdnKn LPggoBFfWPu/1WhT6AfjfYYe/oBDas1ZRzmObJXtroIJbQJggWz8vywaeG/ErbTs hAxJsiRQgKpX2u66KTmrpNRMWAvOf2cT+ztREz0CZv/dgwhQmGZY5z05ngdxsoSG dfUcPyRE/vxJBLHa1RTe8oQ1b4tsxkf4sgkAnPE4xNMZeoHLwfgzk1Ggm9ChsWcU /Z3irHDrAua5+dsbAhPSL/2UbRHnqORQ -----END CERTIFICATE-----Generated at Sat Dec 20 04:58:33 2025 by rpki-client