This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json) Hash identifier: tEj/ocTC0Pty9iOu/ie++q/23nywtQr5CR/UF5aZEjQ= Subject key identifier: CB:35:0D:71:51:25:47:92:39:08:9D:59:3B:D8:FD:9F:4E:D7:F9:14 Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft Manifest number: 027C Signing time: Fri 19 Dec 2025 00:48:13 +0000 Manifest this update: Fri 19 Dec 2025 00:48:12 +0000 Manifest next update: Fri 26 Dec 2025 00:48:12 +0000 Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: quEcrR9fowg+1XvldHuVteYQvu0sH8zIo+FKeBV4Dto=) 2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: XLhgRmis7uOQ8aJ9/uFiC1tdxAcEfjqgmzA7lC0wW9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Validity Not Before: Dec 19 00:48:12 2025 GMT Not After : Dec 26 00:48:12 2025 GMT Subject: CN=6944a0cd-8cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7c:88:cc:e3:20:da:2e:20:9d:db:20:2b:3b: 8a:43:b1:0f:0e:6f:fc:c2:03:dd:c0:5c:13:59:49: e2:cb:be:d1:1c:a0:6e:8a:94:7a:a3:d9:e4:91:b3: 58:1a:c5:81:f6:88:58:51:58:a9:9e:fd:ca:6f:25: a6:db:29:35:40:d6:b2:54:d2:47:58:f9:3f:34:13: f5:44:60:d4:97:6b:d1:b3:51:cd:f1:3a:b3:64:d2: c4:9c:d8:12:4a:fe:a0:71:5c:f9:96:93:cd:7d:c2: 73:98:a3:d0:e3:ef:a8:3d:bb:7f:b7:93:06:84:4e: a2:ae:8b:00:c8:e2:5e:14:09:c9:79:d6:37:f3:9d: df:c7:20:cf:3b:12:77:c6:e0:48:4e:9e:1b:56:0a: c1:04:2b:c2:27:9b:43:7c:19:af:ca:c7:ec:db:8c: f9:99:9a:0b:8f:36:c0:b9:5d:4f:99:f5:62:c4:de: 22:25:54:72:90:ce:70:a6:c4:5d:99:7b:0e:fc:d5: ab:65:59:7f:1d:04:d7:16:61:fc:6d:30:19:63:a2: 98:84:94:8a:16:3c:94:d9:b6:37:97:d6:46:b9:b6: 71:7c:7a:1d:a2:be:b4:2b:23:07:14:96:03:ad:2d: 04:f7:97:8b:ba:5f:54:03:0c:32:97:cf:78:3a:8a: ae:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:35:0D:71:51:25:47:92:39:08:9D:59:3B:D8:FD:9F:4E:D7:F9:14 X509v3 Authority Key Identifier: keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f1:05:88:d1:be:df:1e:bb:cd:66:a8:9a:56:8f:bb:b7:09: f2:dd:72:5b:24:29:d6:cc:cd:6b:82:95:df:13:04:a9:cf:6b: 3c:67:8f:9f:ba:f6:50:a2:59:7a:31:2e:62:0b:a9:96:ef:5e: 5c:4d:7b:39:cf:06:03:e7:fe:33:d5:32:72:07:16:70:cf:27: 5d:55:cc:99:af:67:20:92:cc:95:13:a7:64:fa:78:c1:3e:13: 1a:e4:3d:95:57:c4:e3:e9:8e:b7:df:f8:d5:d4:c6:7c:bd:16: 55:66:3e:d9:08:0e:dc:18:38:b8:44:c4:83:35:26:09:86:20: 89:45:06:d7:80:b1:39:a4:ab:1e:61:7f:73:dd:4c:ca:7e:2d: bb:82:61:43:c5:3a:a6:e1:d1:91:6e:94:aa:0f:9c:c8:6e:24: 2a:40:c2:15:1d:ff:67:5d:5a:aa:27:f2:12:60:8d:69:dc:a1: 93:ea:b5:b3:db:40:b9:e6:cf:45:12:da:a5:7d:3c:36:c0:ef: 91:1e:99:f2:87:91:bf:6c:fe:f0:df:14:08:ff:d5:a3:d4:99: de:fb:e5:21:10:7d:f5:d4:5e:43:96:86:d2:da:cc:f7:24:f8: 86:0d:75:b8:0a:4e:61:68:37:e4:ba:7f:1f:d8:12:26:00:66: 4a:a4:af:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFENjMxMTAvBgNVBAUTKDc3ODNCRERDRUMyREY5QjlGQ0ZCOEYxMDlCNzNENEY3 OTRBMTczODYwHhcNMjUxMjE5MDA0ODEyWhcNMjUxMjI2MDA0ODEyWjAYMRYwFAYD VQQDDA02OTQ0YTBjZC04Y2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnyIzOMg2i4gndsgKzuKQ7EPDm/8wgPdwFwTWUniy77RHKBuipR6o9nkkbNY GsWB9ohYUVipnv3KbyWm2yk1QNayVNJHWPk/NBP1RGDUl2vRs1HN8TqzZNLEnNgS Sv6gcVz5lpPNfcJzmKPQ4++oPbt/t5MGhE6irosAyOJeFAnJedY3853fxyDPOxJ3 xuBITp4bVgrBBCvCJ5tDfBmvysfs24z5mZoLjzbAuV1PmfVixN4iJVRykM5wpsRd mXsO/NWrZVl/HQTXFmH8bTAZY6KYhJSKFjyU2bY3l9ZGubZxfHodor60KyMHFJYD rS0E95eLul9UAwwyl894Ooqu4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs1DXFR JUeSOQidWTvY/Z9O1/kUMB8GA1UdIwQYMBaAFHeDvdzsLfm5/PuPEJtz1PeUoXOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ2My9ERDM2NDExODM0 NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1ibjgtNDhRbTNQVTk1U2hj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0TzkzT3d0LWJuOC00OFFtM1BVOTVTaGM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUQ2My9ERDM2NDExODM0NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1i bjgtNDhRbTNQVTk1U2hjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf8QWI0b7fHrvNZqiaVo+7twny3XJbJCnWzM1rgpXfEwSpz2s8Z4+f uvZQoll6MS5iC6mW715cTXs5zwYD5/4z1TJyBxZwzyddVcyZr2cgksyVE6dk+njB PhMa5D2VV8Tj6Y633/jV1MZ8vRZVZj7ZCA7cGDi4RMSDNSYJhiCJRQbXgLE5pKse YX9z3UzKfi27gmFDxTqm4dGRbpSqD5zIbiQqQMIVHf9nXVqqJ/ISYI1p3KGT6rWz 20C55s9FEtqlfTw2wO+RHpnyh5G/bP7w3xQI/9Wj1Jne++UhEH311F5DlobS2sz3 JPiGDXW4Ck5haDfkun8f2BImAGZKpK9G -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:38 2025 by rpki-client