This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json) Hash identifier: KnTvLi7HCSMz7PlytOunHwPtMkLTLqL759UNu4KAgU0= Subject key identifier: E2:3E:62:E1:3C:93:84:1C:59:62:AF:C2:AB:78:2E:CE:27:5E:22:C1 Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Certificate serial: 064D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft Manifest number: 0646 Signing time: Fri 26 Dec 2025 21:52:32 +0000 Manifest this update: Fri 26 Dec 2025 21:52:32 +0000 Manifest next update: Fri 02 Jan 2026 21:52:32 +0000 Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: nsz4KllphabaJqQIM72eEmATlHZ0pt6xtaZBcuGYgVg=) 2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: AxnCXioU+pzcVhOQczSiGNqFZn1BtxYji3/Mt/svcQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 21:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Validity Not Before: Dec 26 21:52:32 2025 GMT Not After : Jan 2 21:52:32 2026 GMT Subject: CN=694f03a0-adf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:c5:d6:8b:cf:f0:05:fa:76:64:1e:59:bd: d4:8a:71:c7:16:7a:1f:70:45:34:f3:9b:61:e4:d5: 92:fa:14:cd:ef:65:0b:2d:d6:a8:01:b0:e9:fd:a5: da:dd:0b:2e:5c:9b:68:35:ae:17:19:26:b4:97:7e: dd:84:d1:5e:dd:b9:d7:b5:1c:22:6a:36:04:5f:d8: f2:c8:f0:18:91:81:ca:c0:2e:22:f6:4b:ba:fb:de: 25:1a:d5:63:f6:66:a5:d1:e6:67:4f:bb:b2:1c:e8: 5d:cf:78:35:13:7a:8d:a8:2f:fc:dc:36:67:71:ce: 59:84:15:88:96:d9:be:2b:dd:fd:ec:9c:98:68:38: b9:55:5f:d6:f7:65:c6:12:67:ca:01:49:c8:82:9a: 4e:e0:0e:d1:8d:ce:14:2d:b5:fa:31:1d:76:cd:1e: 47:20:19:3a:8e:97:54:4a:a4:1d:69:3d:13:bf:f5: a2:1c:c7:36:83:a5:1e:0e:22:cf:64:f0:ba:0f:2b: 2b:57:c3:74:30:10:76:5d:ad:31:68:d3:24:d2:ce: 87:54:2e:81:aa:f6:7d:c9:c0:d5:b0:7e:74:d9:99: 35:db:a8:da:de:1c:8c:d0:72:31:29:08:5b:dc:f4: b7:a4:f9:bb:fa:4a:59:d2:a7:2c:c6:09:e6:f7:a9: a8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3E:62:E1:3C:93:84:1C:59:62:AF:C2:AB:78:2E:CE:27:5E:22:C1 X509v3 Authority Key Identifier: keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:62:cb:c0:ce:a7:1a:ea:e0:37:49:76:bb:f7:ec:50:7a:bc: 8d:fa:d5:47:f9:a6:e1:53:d7:80:bf:44:4a:c6:5c:cd:dc:fd: 16:90:ca:04:65:9e:a4:7d:91:d1:3c:3f:c8:43:86:da:be:70: fd:42:a0:42:ad:5b:c5:49:91:f2:ad:b6:1d:d3:79:bd:09:d8: 84:38:84:55:79:04:bd:57:71:8d:14:21:d9:0b:c0:b7:bd:23: 84:5e:cf:55:f0:7f:77:09:af:4d:aa:e9:21:ac:68:68:6b:b7: 7d:a9:10:3c:c5:04:aa:55:55:47:72:af:37:ce:50:c4:79:a6: 85:f0:cd:68:94:a9:65:1c:a6:b5:50:1d:48:89:58:99:91:4a: 98:e6:5e:ac:b7:54:06:61:fc:6a:37:4b:d6:74:63:a9:9e:97: b1:f9:72:27:a8:bf:d3:97:a3:48:6e:b8:bb:85:36:c2:1b:0b: 58:51:7b:14:da:ab:38:47:1c:46:42:cd:d1:67:76:74:81:c5: 38:9a:7f:90:5a:a2:fe:5b:6a:9e:e1:62:a4:d8:c1:58:85:dd: c0:0e:de:6f:dc:ab:e7:95:98:d4:4b:7f:f3:6b:41:b6:14:17: 0b:7f:3a:dc:ff:0c:ec:6b:ab:14:b6:57:18:b9:74:34:3a:ec: 4d:6a:45:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF Q0Q3QjM2NDgwHhcNMjUxMjI2MjE1MjMyWhcNMjYwMTAyMjE1MjMyWjAYMRYwFAYD VQQDDA02OTRmMDNhMC1hZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUrF1ovP8AX6dmQeWb3UinHHFnofcEU085th5NWS+hTN72ULLdaoAbDp/aXa 3QsuXJtoNa4XGSa0l37dhNFe3bnXtRwiajYEX9jyyPAYkYHKwC4i9ku6+94lGtVj 9mal0eZnT7uyHOhdz3g1E3qNqC/83DZncc5ZhBWIltm+K9397JyYaDi5VV/W92XG EmfKAUnIgppO4A7Rjc4ULbX6MR12zR5HIBk6jpdUSqQdaT0Tv/WiHMc2g6UeDiLP ZPC6DysrV8N0MBB2Xa0xaNMk0s6HVC6BqvZ9ycDVsH502Zk126ja3hyM0HIxKQhb 3PS3pPm7+kpZ0qcsxgnm96mo1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOI+YuE8 k4QcWWKvwqt4Ls4nXiLBMB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5 NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZBNy84QUE2NUFGQ0I5NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpH aXlNRWVUY3hmNlRzMTdOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtYsvAzqca6uA3SXa79+xQeryN+tVH+abhU9eAv0RKxlzN3P0WkMoE ZZ6kfZHRPD/IQ4bavnD9QqBCrVvFSZHyrbYd03m9CdiEOIRVeQS9V3GNFCHZC8C3 vSOEXs9V8H93Ca9NqukhrGhoa7d9qRA8xQSqVVVHcq83zlDEeaaF8M1olKllHKa1 UB1IiViZkUqY5l6st1QGYfxqN0vWdGOpnpex+XInqL/Tl6NIbri7hTbCGwtYUXsU 2qs4RxxGQs3RZ3Z0gcU4mn+QWqL+W2qe4WKk2MFYhd3ADt5v3KvnlZjUS3/za0G2 FBcLfzrc/wzsa6sUtlcYuXQ0OuxNakWb -----END CERTIFICATE-----Generated at Sun Dec 28 19:14:10 2025 by rpki-client