This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json) Hash identifier: kScmHdSMyVrRILjqOa6eeI1C0MTC0DRGJX+XPxJPehU= Subject key identifier: 42:12:5F:D5:FB:65:78:B4:11:43:76:EA:09:F5:B2:7B:6F:5E:66:1A Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft Manifest number: 0282 Signing time: Wed 31 Dec 2025 00:38:43 +0000 Manifest this update: Wed 31 Dec 2025 00:38:43 +0000 Manifest next update: Wed 07 Jan 2026 00:38:43 +0000 Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: R2sJBh+ecct3PogSSYV6Oo5FU/m0lEQ8rvS94gvfOxY=) 2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: XLhgRmis7uOQ8aJ9/uFiC1tdxAcEfjqgmzA7lC0wW9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 00:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Validity Not Before: Dec 31 00:38:43 2025 GMT Not After : Jan 7 00:38:43 2026 GMT Subject: CN=69547093-3507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:9d:ee:9c:52:b0:ab:ad:ce:87:9f:ae:4d: ea:99:90:d4:57:3c:2d:91:ec:15:a6:d9:2f:74:af: 8f:3d:d0:06:52:02:ff:7f:58:f5:60:ae:ff:68:58: 7d:22:02:c2:28:35:96:77:6e:55:47:0b:3f:ca:cd: c7:79:fe:c3:b2:8c:ea:11:1a:bf:b2:0f:86:f4:2f: f1:3b:f4:9b:83:51:98:59:00:74:5c:e4:b0:a4:d6: b1:37:18:d4:3e:7d:13:00:de:2a:26:5d:d5:af:52: d4:32:00:ac:da:b0:ed:d3:2d:9b:64:e8:d1:4e:56: 42:ad:30:f4:48:20:d6:40:85:bd:da:6a:27:2e:a6: 85:d0:5d:53:4a:1a:2e:34:dc:9e:33:8b:d0:16:22: 1f:58:f0:d6:74:75:58:9e:c9:aa:91:3d:a3:2b:5d: 81:43:74:f6:cb:6c:b2:11:73:74:98:7e:8e:57:92: 13:fa:8e:fb:50:9f:da:6c:f3:a3:76:18:78:f9:b0: 77:63:0d:b9:cd:5a:89:d1:18:9c:ba:f4:8d:67:da: 4a:95:e2:af:5f:e9:b7:e1:66:66:b2:03:d4:88:5c: 66:da:87:3d:ff:b9:d1:64:7c:48:4b:ae:e7:f6:d5: 0b:ec:8d:26:b2:6b:7a:c6:41:ec:e5:36:a8:7d:d2: 7d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:12:5F:D5:FB:65:78:B4:11:43:76:EA:09:F5:B2:7B:6F:5E:66:1A X509v3 Authority Key Identifier: keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:f3:0e:cb:88:3b:6e:2c:9e:0a:ba:97:9f:57:bf:70:b0:4c: 29:f5:46:d6:eb:ad:6a:6e:11:c7:9b:5b:d1:b7:48:51:3a:a1: ef:8f:e5:c5:e1:b7:ed:08:9c:1b:33:93:04:3d:bb:e6:2d:e4: fc:be:7a:2c:16:5e:0c:2a:54:61:a8:e9:82:2a:c8:30:47:fe: 9e:b8:06:5e:be:ac:fb:9e:5c:5a:d4:96:2e:5b:08:46:78:50: 4f:f7:59:22:db:f6:dc:f5:c8:4a:07:29:a9:fd:73:1e:36:05: 8c:b5:33:66:64:28:8c:e7:87:45:41:b6:cd:8f:2d:fd:cf:c9: 5b:6d:3c:0d:ae:27:bb:fa:fb:a0:3f:1a:94:b8:fc:1d:c8:db: 64:bf:da:6b:ca:75:c5:74:58:b9:da:8b:83:df:2b:4c:4d:89: 0c:55:fc:f9:f1:1d:4b:8d:f7:3d:f1:aa:03:82:b6:6f:2d:77: f8:42:c8:ab:f8:4a:b6:1c:76:f3:d0:12:3b:ba:7e:f6:dd:57: 82:be:36:47:2a:16:3a:ef:61:4a:73:89:ad:24:c8:b9:8f:ff: 36:04:18:ec:70:41:43:79:49:8a:1b:d6:6a:a9:d6:dc:a9:4d: 8e:54:90:2d:c4:e3:35:35:48:f3:58:42:59:10:33:c8:a0:90: b2:2a:e2:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFENjMxMTAvBgNVBAUTKDc3ODNCRERDRUMyREY5QjlGQ0ZCOEYxMDlCNzNENEY3 OTRBMTczODYwHhcNMjUxMjMxMDAzODQzWhcNMjYwMTA3MDAzODQzWjAYMRYwFAYD VQQDDA02OTU0NzA5My0zNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuH+d7pxSsKutzoefrk3qmZDUVzwtkewVptkvdK+PPdAGUgL/f1j1YK7/aFh9 IgLCKDWWd25VRws/ys3Hef7DsozqERq/sg+G9C/xO/Sbg1GYWQB0XOSwpNaxNxjU Pn0TAN4qJl3Vr1LUMgCs2rDt0y2bZOjRTlZCrTD0SCDWQIW92monLqaF0F1TShou NNyeM4vQFiIfWPDWdHVYnsmqkT2jK12BQ3T2y2yyEXN0mH6OV5IT+o77UJ/abPOj dhh4+bB3Yw25zVqJ0RicuvSNZ9pKleKvX+m34WZmsgPUiFxm2oc9/7nRZHxIS67n 9tUL7I0msmt6xkHs5TaofdJ9GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEISX9X7 ZXi0EUN26gn1sntvXmYaMB8GA1UdIwQYMBaAFHeDvdzsLfm5/PuPEJtz1PeUoXOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ2My9ERDM2NDExODM0 NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1ibjgtNDhRbTNQVTk1U2hj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0TzkzT3d0LWJuOC00OFFtM1BVOTVTaGM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUQ2My9ERDM2NDExODM0NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1i bjgtNDhRbTNQVTk1U2hjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB38w7LiDtuLJ4KupefV79wsEwp9UbW661qbhHHm1vRt0hROqHvj+XF 4bftCJwbM5MEPbvmLeT8vnosFl4MKlRhqOmCKsgwR/6euAZevqz7nlxa1JYuWwhG eFBP91ki2/bc9chKBymp/XMeNgWMtTNmZCiM54dFQbbNjy39z8lbbTwNrie7+vug PxqUuPwdyNtkv9prynXFdFi52ouD3ytMTYkMVfz58R1Ljfc98aoDgrZvLXf4Qsir +Eq2HHbz0BI7un723VeCvjZHKhY672FKc4mtJMi5j/82BBjscEFDeUmKG9Zqqdbc qU2OVJAtxOM1NUjzWEJZEDPIoJCyKuIr -----END CERTIFICATE-----Generated at Wed Dec 31 05:55:16 2025 by rpki-client