This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: PxgM4Z0LvOIBUCNrnneFHjz+iqVji5ixdSxWzTV8tQM= Subject key identifier: 29:0E:BC:38:88:18:BD:92:B6:04:7D:5E:0E:A9:77:30:EB:15:D4:00 Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 0969 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 094F Signing time: Thu 18 Dec 2025 19:44:11 +0000 Manifest this update: Thu 18 Dec 2025 19:44:11 +0000 Manifest next update: Thu 25 Dec 2025 19:44:11 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: FpD5hvkYnYvRqj4T7AQSMoIsYdAFuLiw30psH95iMsE=) 2: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: lvX9qWs0U9FJpaiKhdFBFudNcs3mWD37dbOmEs33Njk=) 3: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: PnqDvM4vjQdsVy80UhznbWoKhp/dlqh33E+GG+RU+dk=) 4: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: Ci305f1V47fRIRqmqjLy+EIi8DLnLoGCGpVVZ48v10E=) 5: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: Del+9YrkACA6yrhYJeSPVVuh01l/16gJ82iy69S9BRo=) 6: 03706138786411EC8624EB12C4F9AE02.roa (hash: qKXv165pzdK/WBxXfxqKy/V+953i+G1rFbe37yvanHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2409 (0x969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Dec 18 19:44:11 2025 GMT Not After : Dec 25 19:44:11 2025 GMT Subject: CN=6944598b-243e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:b4:c4:55:70:56:48:d2:b9:b5:68:f1:a7: b0:9f:e2:d3:40:24:4f:18:7a:f4:8e:4f:42:b7:28: 93:d8:f4:54:fb:ee:df:2e:20:3f:99:b4:d2:34:c8: 27:4d:b6:26:38:99:e8:13:4f:76:d4:7b:b1:44:58: c0:a9:b4:2d:0f:3d:29:e9:db:82:1d:ce:09:96:c4: 64:02:37:50:aa:c7:67:8e:16:c5:eb:fe:5f:93:79: 43:96:9a:52:76:a6:0c:f3:02:5e:7a:9c:44:5e:1a: c5:1f:c9:38:a0:ea:37:7f:52:b4:f6:51:ef:e2:9c: 6e:d9:97:0f:97:f4:c6:49:57:c2:12:54:6e:a7:73: 3c:ae:56:2d:de:f5:a9:23:43:1e:a7:cc:50:e6:85: 97:48:f9:73:4c:99:ce:90:a9:20:de:ec:86:3f:f8: 78:aa:c9:de:83:c3:62:1a:ef:bc:a7:03:71:76:a2: 4b:38:69:06:28:13:82:cc:ee:c9:46:ea:de:9a:ae: 7e:ae:db:ea:d1:4d:e3:b4:ff:46:8e:f9:ed:da:82: a4:9c:65:63:79:7e:b4:96:10:60:72:6e:ce:d1:62: c9:34:b3:a0:02:1c:f3:b0:ef:07:55:54:a1:ba:b8: 9b:af:10:a2:10:dd:bc:84:3d:9e:2b:76:b5:7c:03: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0E:BC:38:88:18:BD:92:B6:04:7D:5E:0E:A9:77:30:EB:15:D4:00 X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f9:07:85:a4:2d:3e:61:9e:11:c6:b5:4a:cb:50:0e:94:8a: 95:85:41:98:1a:c9:1e:ad:ee:80:78:d0:71:99:45:cd:00:4d: 1f:96:db:85:0e:1e:d0:bc:e9:8d:a2:97:1e:30:a2:f0:3c:1d: 09:dc:44:ac:38:b5:8d:78:06:8a:62:a0:bf:d9:c9:ed:db:6c: 9b:4b:d0:e7:f4:b2:a7:38:b5:27:00:81:b0:be:25:55:c5:29: 67:07:e1:ce:f6:7b:07:5e:53:c0:02:3a:b9:a9:85:18:9d:e0: b2:1b:70:db:09:17:c5:08:c8:89:a8:c0:e6:41:81:88:b8:12: 31:28:5e:98:f1:4c:77:fe:88:1c:3f:9d:24:f0:d9:be:33:a2: 59:94:dc:3f:7c:1c:03:f9:fa:1d:4e:73:ff:0f:98:45:f7:b1: db:55:92:5c:b1:b8:66:89:7b:fc:ca:de:c6:ae:28:4e:b4:04: 95:d4:02:10:1f:c4:cc:b4:81:51:96:c7:59:c2:a3:13:72:fb: a6:39:26:98:12:86:e9:38:ac:0d:7a:8c:02:98:ef:31:cf:4c: c6:6a:99:3d:86:31:b7:74:16:06:4d:45:8e:52:ab:b9:17:ac: 13:3e:35:a6:e4:3e:55:a0:5e:0d:c4:67:36:41:0a:ad:3b:db: c3:ae:d9:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjUxMjE4MTk0NDExWhcNMjUxMjI1MTk0NDExWjAYMRYwFAYD VQQDDA02OTQ0NTk4Yi0yNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOy0xFVwVkjSubVo8aewn+LTQCRPGHr0jk9CtyiT2PRU++7fLiA/mbTSNMgn TbYmOJnoE0921HuxRFjAqbQtDz0p6duCHc4JlsRkAjdQqsdnjhbF6/5fk3lDlppS dqYM8wJeepxEXhrFH8k4oOo3f1K09lHv4pxu2ZcPl/TGSVfCElRup3M8rlYt3vWp I0Mep8xQ5oWXSPlzTJnOkKkg3uyGP/h4qsneg8NiGu+8pwNxdqJLOGkGKBOCzO7J Ruremq5+rtvq0U3jtP9Gjvnt2oKknGVjeX60lhBgcm7O0WLJNLOgAhzzsO8HVVSh uribrxCiEN28hD2eK3a1fAM0qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkOvDiI GL2StgR9Xg6pdzDrFdQAMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX+QeFpC0+YZ4RxrVKy1AOlIqVhUGYGskere6AeNBxmUXNAE0fltuF Dh7QvOmNopceMKLwPB0J3ESsOLWNeAaKYqC/2cnt22ybS9Dn9LKnOLUnAIGwviVV xSlnB+HO9nsHXlPAAjq5qYUYneCyG3DbCRfFCMiJqMDmQYGIuBIxKF6Y8Ux3/ogc P50k8Nm+M6JZlNw/fBwD+fodTnP/D5hF97HbVZJcsbhmiXv8yt7GrihOtASV1AIQ H8TMtIFRlsdZwqMTcvumOSaYEobpOKwNeowCmO8xz0zGapk9hjG3dBYGTUWOUqu5 F6wTPjWm5D5VoF4NxGc2QQqtO9vDrtka -----END CERTIFICATE-----Generated at Sat Dec 20 19:05:36 2025 by rpki-client