This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: niuoPRLE+ISmqlQw8P12PweqektVXCE25O0QW9SsytE= Subject key identifier: 4E:33:EC:96:8A:E3:8C:78:64:51:36:E2:17:00:95:97:90:5B:57:D0 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 21DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 21D3 Signing time: Sat 20 Dec 2025 15:44:24 +0000 Manifest this update: Sat 20 Dec 2025 15:44:24 +0000 Manifest next update: Sat 27 Dec 2025 15:44:24 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: C2Pmu4mxOmQlplYqRbHkolDXSAEbN2PvTUYdTxIJcLs=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: PxUOEDED+JHKJelWKhOvajOHx5KTZi4sFxCqv9/Wuds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8669 (0x21dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Dec 20 15:44:24 2025 GMT Not After : Dec 27 15:44:24 2025 GMT Subject: CN=6946c458-b4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:26:8b:4f:87:dd:96:e7:1b:31:8c:3f:64: 27:96:58:63:0e:46:de:c3:56:ce:c8:f7:8d:7e:cb: 88:95:71:77:be:64:d2:8f:cf:07:1c:c7:5a:3e:c7: 1e:c9:26:6f:7a:dc:07:37:55:f5:31:e4:32:8c:34: 4b:89:17:d0:8d:8f:02:1d:c2:95:03:37:05:2b:33: fa:55:31:f8:dc:05:59:78:13:1b:3a:5c:ef:46:bb: 76:84:66:21:2c:c9:8f:46:41:27:82:b2:da:e2:f7: 21:63:8c:52:64:f1:06:89:13:c4:2a:64:f4:4e:13: e7:93:84:b1:8d:75:cd:aa:4c:d2:8a:4b:56:84:4a: 25:14:f2:a3:4c:f6:9b:63:59:fa:ea:50:e7:c2:2d: 3d:db:b3:c9:d4:1f:bd:eb:22:59:38:6f:b9:01:f9: 12:0f:be:19:b8:d8:81:84:0f:b8:0b:81:35:20:07: d0:58:81:76:0e:67:9a:23:66:62:96:2e:dd:39:2e: 81:36:f9:fb:35:22:5c:88:3c:52:d2:03:3d:ad:c4: 39:e7:a8:6b:ee:b1:2d:07:60:77:33:9d:07:3f:0f: 94:9e:c3:3c:a0:3f:0e:12:76:20:8f:39:4b:79:01: 7d:ef:17:4a:48:d9:1d:8c:9c:d5:d7:75:f8:0b:a2: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:33:EC:96:8A:E3:8C:78:64:51:36:E2:17:00:95:97:90:5B:57:D0 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c7:75:83:54:9f:90:90:4f:63:9c:3e:f2:4c:5e:e5:4e:31: 1c:2f:17:c4:f3:53:22:5e:b3:18:1f:d1:ae:15:e3:72:94:67: a5:01:4e:e9:d9:c1:42:8d:51:64:01:27:e5:6c:8b:53:0f:32: ad:05:99:bf:db:20:ec:20:75:95:cf:b1:0b:76:25:c3:3e:33: 76:2a:3b:c1:33:0b:d3:a0:a5:1a:00:80:a4:59:9e:f5:41:f3: f8:d2:7e:0b:f8:1d:dd:b3:04:33:6e:d3:e3:95:74:17:b3:24: c5:13:01:69:86:71:a5:77:b7:b8:c8:35:d7:23:aa:4f:81:6a: be:ba:9d:f0:d2:81:0e:67:4b:59:ef:4e:e3:85:ec:fb:82:10: 20:91:ca:83:c5:e2:07:36:15:83:52:74:52:63:36:ab:db:2d: 8f:61:07:65:07:c4:af:41:7e:c5:6c:40:bf:3e:a5:7f:91:a7: 5d:ae:7d:39:2e:19:59:13:3c:f5:c1:01:80:22:32:57:56:88: 1c:46:22:3b:a6:dd:97:39:dd:7f:3b:ea:90:91:b8:e8:82:fc: 98:be:e0:9a:84:00:3f:52:a5:04:21:f0:c5:bb:b0:19:b3:8f: f9:cd:31:98:4a:55:55:f1:69:91:e1:b4:ad:e5:31:43:35:0c: ec:fa:a8:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICId0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUxMjIwMTU0NDI0WhcNMjUxMjI3MTU0NDI0WjAYMRYwFAYD VQQDDA02OTQ2YzQ1OC1iNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu20mi0+H3ZbnGzGMP2QnllhjDkbew1bOyPeNfsuIlXF3vmTSj88HHMdaPsce ySZvetwHN1X1MeQyjDRLiRfQjY8CHcKVAzcFKzP6VTH43AVZeBMbOlzvRrt2hGYh LMmPRkEngrLa4vchY4xSZPEGiRPEKmT0ThPnk4SxjXXNqkzSiktWhEolFPKjTPab Y1n66lDnwi0927PJ1B+96yJZOG+5AfkSD74ZuNiBhA+4C4E1IAfQWIF2DmeaI2Zi li7dOS6BNvn7NSJciDxS0gM9rcQ556hr7rEtB2B3M50HPw+UnsM8oD8OEnYgjzlL eQF97xdKSNkdjJzV13X4C6IrSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4z7JaK 44x4ZFE24hcAlZeQW1fQMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSx3WDVJ+QkE9jnD7yTF7lTjEcLxfE81MiXrMYH9GuFeNylGelAU7p 2cFCjVFkASflbItTDzKtBZm/2yDsIHWVz7ELdiXDPjN2KjvBMwvToKUaAICkWZ71 QfP40n4L+B3dswQzbtPjlXQXsyTFEwFphnGld7e4yDXXI6pPgWq+up3w0oEOZ0tZ 707jhez7ghAgkcqDxeIHNhWDUnRSYzar2y2PYQdlB8SvQX7FbEC/PqV/kaddrn05 LhlZEzz1wQGAIjJXVogcRiI7pt2XOd1/O+qQkbjogvyYvuCahAA/UqUEIfDFu7AZ s4/5zTGYSlVV8WmR4bSt5TFDNQzs+qj6 -----END CERTIFICATE-----Generated at Mon Dec 22 11:34:24 2025 by rpki-client