This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: XjYT+vGSaI9tLC1GRQkYvR7Uo7Os8MMjKnASdNoBlBo= Subject key identifier: 5B:84:C2:E7:9A:E7:F0:91:A8:20:92:B1:0D:32:BC:D6:1D:41:95:6C Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 169D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 168B Signing time: Thu 18 Dec 2025 16:33:46 +0000 Manifest this update: Thu 18 Dec 2025 16:33:45 +0000 Manifest next update: Thu 25 Dec 2025 16:33:45 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: jVpU4oAVIfAaYiL8X8Ea7cezMUVhcerqqFrEGyCF7RQ=) 2: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: bW1tXZTK5POt+zZDGbG4YDsox5kPeg50QnLxOuLANNg=) 3: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: sJz6G/xstqw6p4gPUJK4gZEDHHsTgFb0oSV9wpMQ7es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5789 (0x169d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Dec 18 16:33:45 2025 GMT Not After : Dec 25 16:33:45 2025 GMT Subject: CN=69442cea-a3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:a4:b3:fa:1f:c0:24:dc:e6:0d:fd:f5:5c: 30:17:0d:93:e6:db:cb:10:90:d1:0f:3a:59:8f:70: 88:80:0e:83:02:dd:6d:4e:31:6c:9f:22:1e:29:3d: c8:8d:8f:29:40:7b:06:72:6e:67:aa:35:61:8b:a3: 11:b0:d9:aa:62:d2:d2:73:15:c2:9a:4d:ae:cd:fb: 65:10:11:00:35:36:f5:59:23:49:35:97:ed:ce:7f: cb:df:f2:53:d2:44:69:71:f2:95:34:9f:2a:1a:75: 36:8c:3f:cf:08:02:35:05:14:eb:74:e3:93:e2:69: 94:70:30:d3:c8:4f:ca:7f:59:4a:f1:27:79:8b:1f: 84:6f:08:fa:6f:c6:10:89:50:e6:8b:53:f7:69:22: 22:04:28:39:32:16:ee:8a:eb:03:62:bc:c5:10:02: 5b:53:cc:0f:4e:7d:56:f6:9b:56:65:f6:65:15:0f: 67:85:2a:25:b7:91:d3:49:55:74:85:c6:81:51:87: 92:ff:da:11:3a:94:05:7f:7f:c7:fc:58:21:e6:0d: cd:0a:b0:f0:91:3e:ce:0a:2c:3b:93:0d:b1:f0:0c: b0:df:a8:54:c2:6c:89:46:1e:2a:ed:f6:30:db:16: 3a:d3:52:35:80:c7:55:25:44:95:1d:1e:f6:a5:6a: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:84:C2:E7:9A:E7:F0:91:A8:20:92:B1:0D:32:BC:D6:1D:41:95:6C X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a0:38:74:e7:49:7f:99:32:93:2a:f1:1a:3f:42:3a:ba:6b: 1a:f1:2c:41:82:a5:54:fc:43:5a:f1:c4:72:15:9e:a8:f9:8e: 7d:46:26:64:81:ea:c7:e7:e5:8f:3e:92:dc:e1:52:01:cb:01: 87:c4:19:7f:d8:ae:86:5c:7e:47:bc:86:c4:a3:b8:d5:32:1b: 9e:df:1c:62:c2:18:24:2f:5a:8c:f4:81:6f:01:79:d9:40:6d: 56:88:ac:42:44:e0:87:34:a4:50:6d:dd:22:9b:64:c8:ab:c3: 73:4a:a4:bd:67:78:05:f9:2f:b5:b5:01:72:58:5c:24:4d:71: d3:fa:71:46:7e:11:c5:04:61:98:ea:33:8c:a5:e4:53:cd:26: 84:18:ab:64:de:1a:32:03:02:a0:f0:b0:65:c2:2f:94:8f:f8: 69:c0:49:ad:74:9b:f3:af:f1:40:b8:ba:db:5c:11:be:67:15: a0:37:76:ad:ab:26:0b:75:ad:b8:f9:30:67:c2:fd:2e:2b:8b: 38:69:61:98:f6:23:66:7d:7c:1a:61:63:f0:b1:c4:dc:83:b0: ec:d2:b7:e5:24:00:f2:f2:5b:6a:b6:5b:2a:9b:7c:cc:a3:8e: 87:4e:b6:09:2a:8a:5e:3b:27:5f:30:79:81:a0:b7:ea:1a:a2: 41:2e:24:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjUxMjE4MTYzMzQ1WhcNMjUxMjI1MTYzMzQ1WjAYMRYwFAYD VQQDDA02OTQ0MmNlYS1hM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvKks/ofwCTc5g399VwwFw2T5tvLEJDRDzpZj3CIgA6DAt1tTjFsnyIeKT3I jY8pQHsGcm5nqjVhi6MRsNmqYtLScxXCmk2uzftlEBEANTb1WSNJNZftzn/L3/JT 0kRpcfKVNJ8qGnU2jD/PCAI1BRTrdOOT4mmUcDDTyE/Kf1lK8Sd5ix+Ebwj6b8YQ iVDmi1P3aSIiBCg5MhbuiusDYrzFEAJbU8wPTn1W9ptWZfZlFQ9nhSolt5HTSVV0 hcaBUYeS/9oROpQFf3/H/Fgh5g3NCrDwkT7OCiw7kw2x8Ayw36hUwmyJRh4q7fYw 2xY601I1gMdVJUSVHR72pWoVxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuEwuea 5/CRqCCSsQ0yvNYdQZVsMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzoDh050l/mTKTKvEaP0I6umsa8SxBgqVU/ENa8cRyFZ6o+Y59RiZk gerH5+WPPpLc4VIBywGHxBl/2K6GXH5HvIbEo7jVMhue3xxiwhgkL1qM9IFvAXnZ QG1WiKxCROCHNKRQbd0im2TIq8NzSqS9Z3gF+S+1tQFyWFwkTXHT+nFGfhHFBGGY 6jOMpeRTzSaEGKtk3hoyAwKg8LBlwi+Uj/hpwEmtdJvzr/FAuLrbXBG+ZxWgN3at qyYLda24+TBnwv0uK4s4aWGY9iNmfXwaYWPwscTcg7Ds0rflJADy8ltqtlsqm3zM o46HTrYJKopeOydfMHmBoLfqGqJBLiS4 -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:59 2025 by rpki-client