This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft File: 0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json) Hash identifier: KLAebYYCmtmzmvi43q7HDFfz8Wuo1KZ+kIG8DObhMOo= Subject key identifier: F0:94:D5:29:9C:40:D8:19:F2:80:13:18:66:A6:0C:40:51:EE:94:34 Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6 Certificate issuer: /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6 Certificate serial: 3437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft Manifest number: 3429 Signing time: Sat 20 Dec 2025 15:13:19 +0000 Manifest this update: Sat 20 Dec 2025 15:13:18 +0000 Manifest next update: Sat 27 Dec 2025 15:13:18 +0000 Files and hashes: 1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: 9ZyPnSFYDdtm8V4USCJCWKKIWIlToPTED9559RC4Hu8=) 2: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: FAySI2su8cL3vKBRY/mDcgCBdpz6IW+fV0g4HW92eb8=) 3: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ko3Luk3NXRMVTdrKjxB+T1Aq5Rz7BTBaPzcxuwLSdz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13367 (0x3437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6 Validity Not Before: Dec 20 15:13:18 2025 GMT Not After : Dec 27 15:13:18 2025 GMT Subject: CN=6946bd0e-b953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:e4:2f:40:42:7c:39:36:1d:64:c2:8f:97: 23:c1:71:82:2d:5d:d0:92:53:5e:c6:49:bf:27:b1: a5:8a:be:77:90:27:47:be:42:18:42:05:c1:65:b7: 34:8d:56:88:57:58:da:0b:38:d5:7a:a0:ea:2e:25: fb:9f:da:d6:47:5d:37:98:6c:bf:98:6d:34:d2:11: 03:cf:65:7f:33:7e:a0:c3:84:90:d0:61:98:cf:21: c2:5d:8b:cf:7b:e4:9b:b6:69:ec:d3:13:cd:7b:eb: ad:6f:7b:b8:3b:7f:b7:48:a6:b5:76:c3:b5:88:d8: 8b:62:a8:2d:97:82:45:59:7a:28:d3:b5:62:36:5e: 59:25:25:b1:7a:1f:9b:29:dc:60:d8:f3:c6:c3:43: 0d:ce:8d:0b:92:cf:cc:35:ed:36:8a:d2:e7:67:18: e8:32:22:9f:1e:06:77:58:94:84:fb:86:c1:b0:c1: 76:8d:d4:a7:33:0a:6f:65:ac:5a:1c:c6:a1:51:3d: 6f:67:c0:ae:f6:c9:98:8d:fa:1b:79:9d:96:3b:53: fc:9e:70:81:7d:29:c0:0a:cb:0d:42:45:f9:b7:67: 79:29:9a:3c:84:00:1b:af:cf:b1:e9:a9:f2:c4:72: b2:50:06:4e:35:f4:e7:fe:1e:5c:2a:ce:bb:87:7b: b8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:94:D5:29:9C:40:D8:19:F2:80:13:18:66:A6:0C:40:51:EE:94:34 X509v3 Authority Key Identifier: keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:48:25:e8:18:c3:4b:dd:8c:90:89:3c:1f:31:1d:45:1c:1c: ed:3c:83:38:ca:cc:62:e3:61:65:db:d7:56:cb:7d:72:87:b6: 61:aa:bd:37:26:37:8e:2f:96:a0:9e:da:57:ce:df:99:4c:69: 59:af:ee:e0:33:8d:3e:cb:25:44:f9:ab:7e:64:d2:5d:06:7a: 2f:10:6b:c1:c6:aa:71:9d:bf:ba:24:ec:d5:aa:6e:e4:37:d5: 16:c5:13:c7:72:53:36:73:65:e3:da:94:85:50:1d:fa:80:92: b3:8a:44:d1:47:3b:42:08:e9:aa:bf:00:91:c2:1a:00:48:ef: af:c1:cc:f6:97:90:09:68:55:3c:55:e4:fb:b4:02:d7:13:1e: 1b:ed:19:8f:42:13:3e:1e:a6:06:15:c4:5f:a9:1b:3e:b1:25: 95:76:e3:ca:74:30:8a:ef:3f:9b:2c:dd:dd:e1:c1:30:c6:88: 3d:c8:1e:8f:2d:d3:18:12:5f:e5:52:b8:df:02:55:e4:67:02: 54:7c:09:a5:dc:22:7c:7c:ea:2b:d5:8b:73:c0:3a:ef:a6:9e: 24:5f:a5:12:75:f6:eb:cf:98:2b:57:de:35:94:d6:68:af:70: 84:25:2c:d9:62:5b:0f:1f:37:c5:7f:ab:4c:b7:32:1a:62:b6: 30:b3:e1:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFRjkxMTAvBgNVBAUTKEQzMkRBMzZFODgyMTgyMkU2QkQzQzgyQ0ZGQTk4NEU3 QTkwOUMzRjYwHhcNMjUxMjIwMTUxMzE4WhcNMjUxMjI3MTUxMzE4WjAYMRYwFAYD VQQDDA02OTQ2YmQwZS1iOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCzkL0BCfDk2HWTCj5cjwXGCLV3QklNexkm/J7Glir53kCdHvkIYQgXBZbc0 jVaIV1jaCzjVeqDqLiX7n9rWR103mGy/mG000hEDz2V/M36gw4SQ0GGYzyHCXYvP e+Sbtmns0xPNe+utb3u4O3+3SKa1dsO1iNiLYqgtl4JFWXoo07ViNl5ZJSWxeh+b Kdxg2PPGw0MNzo0Lks/MNe02itLnZxjoMiKfHgZ3WJSE+4bBsMF2jdSnMwpvZaxa HMahUT1vZ8Cu9smYjfobeZ2WO1P8nnCBfSnACssNQkX5t2d5KZo8hAAbr8+x6any xHKyUAZONfTn/h5cKs67h3u4ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCU1Smc QNgZ8oATGGamDEBR7pQ0MB8GA1UdIwQYMBaAFNMto26IIYIua9PILP+phOepCcP2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEVGOS80NEE4MDVFRTQ0 QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdpNXIwOGdzXzZtRTU2a0p3 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5Mmpib2doZ2k1cjA4Z3NfNm1FNTZrSndfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEVGOS80NEE4MDVFRTQ0QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdp NXIwOGdzXzZtRTU2a0p3X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcSCXoGMNL3YyQiTwfMR1FHBztPIM4ysxi42Fl29dWy31yh7Zhqr03 JjeOL5agntpXzt+ZTGlZr+7gM40+yyVE+at+ZNJdBnovEGvBxqpxnb+6JOzVqm7k N9UWxRPHclM2c2Xj2pSFUB36gJKzikTRRztCCOmqvwCRwhoASO+vwcz2l5AJaFU8 VeT7tALXEx4b7RmPQhM+HqYGFcRfqRs+sSWVduPKdDCK7z+bLN3d4cEwxog9yB6P LdMYEl/lUrjfAlXkZwJUfAml3CJ8fOor1YtzwDrvpp4kX6USdfbrz5grV941lNZo r3CEJSzZYlsPHzfFf6tMtzIaYrYws+HX -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:01 2025 by rpki-client