This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft File: odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json) Hash identifier: D8f4ANhU3nahqtQ5xEYIPnsFosQygWB1aBfAvBf9ZhM= Subject key identifier: 5E:5F:E8:32:CA:6F:C8:BD:7B:B3:EC:B2:FA:44:B8:36:F8:FF:28:CE Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 Certificate issuer: /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft Manifest number: F1 Signing time: Fri 19 Dec 2025 04:25:12 +0000 Manifest this update: Fri 19 Dec 2025 04:25:12 +0000 Manifest next update: Fri 26 Dec 2025 04:25:12 +0000 Files and hashes: 1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: 0TZFd9YDtY9CEK7X64jWLgyfDYL70DBDVqLSjcFsDu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Validity Not Before: Dec 19 04:25:12 2025 GMT Not After : Dec 26 04:25:12 2025 GMT Subject: CN=6944d3a8-c723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:b9:e2:6d:c5:1a:ab:92:1f:64:10:38:39: fa:2e:91:b9:c5:f4:da:da:45:c7:f8:2d:57:72:37: 82:77:a5:4c:37:c5:a1:79:ac:0f:46:1b:bc:d8:63: d7:ae:06:31:7d:b6:5d:52:a9:ef:a9:88:9e:89:e3: e1:6f:ec:92:28:46:2e:21:b6:bb:3f:f0:8e:4a:ad: da:91:0c:24:a7:1c:45:c4:be:5b:4e:67:a9:f0:bf: 1b:ce:d6:f3:50:96:d8:84:4f:b6:88:da:55:44:58: 4c:bf:71:75:fc:39:3a:30:98:9f:08:69:2a:3b:ed: 90:a5:3a:f3:39:4f:32:88:49:90:f4:ad:e7:db:e7: a1:94:ba:02:4c:99:19:b8:69:6a:24:82:25:32:63: 57:3e:ad:9f:64:36:39:79:f9:5c:5c:8a:25:21:15: 0c:ce:1b:9e:2c:d3:24:86:34:e8:75:3d:8d:39:2c: 31:67:54:7a:18:84:ff:05:9f:dc:d7:ed:1f:ea:fe: 90:68:ad:59:36:8a:4a:7c:dc:0a:8f:30:dd:aa:36: 41:06:fc:81:91:cd:02:15:ce:90:16:88:2d:eb:05: bf:1d:f6:75:35:67:6e:8e:d3:e6:32:1b:63:e6:ab: b7:af:a2:6b:0c:97:49:bc:02:93:f5:77:67:4a:29: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5F:E8:32:CA:6F:C8:BD:7B:B3:EC:B2:FA:44:B8:36:F8:FF:28:CE X509v3 Authority Key Identifier: keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:37:b5:23:62:21:49:e1:75:d1:c9:33:91:f7:e2:10:c1:8f: ad:e3:e1:b0:74:9a:d7:b6:ce:90:54:86:a3:72:a4:86:00:90: cf:c6:39:85:a2:e8:df:73:75:c9:3c:17:a9:28:32:00:27:a6: bf:c1:ec:ee:3f:e3:80:82:1e:a1:27:60:f7:b3:7d:0a:04:0d: 44:8f:2e:44:13:ce:5f:83:51:2f:fa:bf:3d:f7:68:86:8d:35: 04:a6:72:83:46:36:fb:36:34:2a:91:73:19:0b:d3:e9:17:84: 51:dd:10:ed:b8:9e:79:fb:5d:5a:e2:b5:50:d3:73:4e:07:d0: 98:06:60:94:42:8b:10:79:65:e5:1e:51:b0:4a:ef:aa:38:fb: e9:f8:61:17:69:b6:b9:e5:f4:7b:96:be:6d:b2:95:79:b1:39: 9f:ba:a6:00:3b:cd:a1:a1:41:84:c9:4a:69:f6:95:4f:a7:23: 07:7b:4f:1f:60:6a:32:73:ef:a8:94:36:84:94:77:d0:31:e6: 0b:86:67:c5:f3:57:88:43:75:12:9d:c2:be:3d:a0:08:53:d5: 7d:98:46:82:8f:67:f2:75:c9:6f:4a:64:7a:09:e5:7f:c3:11: b5:cb:0d:5b:71:ad:56:5e:57:7b:83:94:ca:9c:7d:50:40:8b: d3:2e:94:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBERTAxMTAvBgNVBAUTKEExRDI1REUzQTU1OUZEQUYzMDQ0OUQ5NDc3RDE3NkVB Mzc4OTcxRjgwHhcNMjUxMjE5MDQyNTEyWhcNMjUxMjI2MDQyNTEyWjAYMRYwFAYD VQQDDA02OTQ0ZDNhOC1jNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SK54m3FGquSH2QQODn6LpG5xfTa2kXH+C1XcjeCd6VMN8WheawPRhu82GPX rgYxfbZdUqnvqYieiePhb+ySKEYuIba7P/COSq3akQwkpxxFxL5bTmep8L8bztbz UJbYhE+2iNpVRFhMv3F1/Dk6MJifCGkqO+2QpTrzOU8yiEmQ9K3n2+ehlLoCTJkZ uGlqJIIlMmNXPq2fZDY5eflcXIolIRUMzhueLNMkhjTodT2NOSwxZ1R6GIT/BZ/c 1+0f6v6QaK1ZNopKfNwKjzDdqjZBBvyBkc0CFc6QFogt6wW/HfZ1NWdujtPmMhtj 5qu3r6JrDJdJvAKT9XdnSimhDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5f6DLK b8i9e7PssvpEuDb4/yjOMB8GA1UdIwQYMBaAFKHSXeOlWf2vMESdlHfRduo3iXH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMERFMC83QTY1RTkzQzZB ODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9vZEpkNDZWWl9hOHdSSjJVZDlGMjZqZUpj ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29kSmQ0NlZaX2E4d1JKMlVkOUYyNmplSmNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MERFMC83QTY1RTkzQzZBODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9vZEpkNDZWWl9h OHdSSjJVZDlGMjZqZUpjZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVN7UjYiFJ4XXRyTOR9+IQwY+t4+GwdJrXts6QVIajcqSGAJDPxjmF oujfc3XJPBepKDIAJ6a/wezuP+OAgh6hJ2D3s30KBA1Ejy5EE85fg1Ev+r8992iG jTUEpnKDRjb7NjQqkXMZC9PpF4RR3RDtuJ55+11a4rVQ03NOB9CYBmCUQosQeWXl HlGwSu+qOPvp+GEXaba55fR7lr5tspV5sTmfuqYAO82hoUGEyUpp9pVPpyMHe08f YGoyc++olDaElHfQMeYLhmfF81eIQ3USncK+PaAIU9V9mEaCj2fydclvSmR6CeV/ wxG1yw1bca1WXld7g5TKnH1QQIvTLpSi -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:13 2025 by rpki-client