This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: VJdYPkSfrc9aOWHfxTItEbtf1LbSoGJPbXpefjGRv/I= Subject key identifier: 00:88:F4:BC:82:6D:29:EE:0B:1D:3B:83:F8:8B:D8:F0:A5:DA:FB:D2 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 0910 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 090F Signing time: Sat 06 Dec 2025 19:27:10 +0000 Manifest this update: Sat 06 Dec 2025 19:27:09 +0000 Manifest next update: Sat 13 Dec 2025 19:27:09 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: Ys7XP5UmN5YBmRt04T7YKopB/Qt0+juoHptvWv4PDxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2320 (0x910) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Dec 6 19:27:09 2025 GMT Not After : Dec 13 19:27:09 2025 GMT Subject: CN=6934838e-380b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:a4:aa:f7:3e:9f:df:36:23:c7:c0:ef:5a: 04:21:f5:c4:d5:3a:fc:a8:c1:3e:fd:e4:4d:4e:49: 7d:f4:c3:9a:95:83:a7:6e:c1:d3:79:fb:3a:42:88: f0:03:74:48:b7:33:15:84:f0:17:e7:9c:b2:dc:5f: 53:0d:ba:bc:56:95:ee:c2:44:80:57:ac:15:f6:ce: 50:09:a0:74:ee:a6:81:58:e8:e9:e9:b3:10:c6:1f: bb:af:16:a6:94:5a:cb:ba:0c:86:ae:48:64:f7:8a: 71:f8:a3:bd:d6:13:17:0a:12:ad:fd:09:9a:26:de: 9b:1b:41:27:4a:23:2e:68:a2:c2:86:bc:73:b7:8c: d2:cb:60:06:e8:d6:cd:14:02:1e:6a:03:14:e5:12: 05:e7:28:ff:de:da:23:9e:3d:55:1f:74:68:88:61: da:e5:9f:7f:4d:68:f4:5a:6b:f0:24:45:39:22:cf: 9a:8b:cf:82:d8:4b:f0:7a:20:f5:34:b8:02:f6:cb: cb:39:dd:70:08:7b:e5:e3:63:e1:ce:b8:72:66:3b: 44:93:17:1f:1b:ba:30:92:e1:b0:d0:02:0e:f8:af: f8:e8:68:1e:77:6d:1b:6d:92:99:bc:1c:a8:96:5b: 8d:3e:1d:06:1f:ad:fa:e7:9f:fd:97:d6:a2:68:ce: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:88:F4:BC:82:6D:29:EE:0B:1D:3B:83:F8:8B:D8:F0:A5:DA:FB:D2 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:9e:18:a3:5d:c2:61:fe:87:64:33:e5:43:a0:b9:17:2d:0d: c9:55:9f:1c:ef:6c:00:25:8a:7d:45:1c:74:b3:15:8e:d7:09: b2:f3:33:f7:e0:2d:38:8f:ef:e3:51:e2:1a:7e:7d:ba:76:90: 36:ac:30:d9:7f:03:67:09:e5:62:55:72:ce:89:c1:9d:e9:2e: d9:c1:4e:ed:35:d1:db:3e:4a:09:ce:f0:19:c3:5c:a4:c2:cc: 55:6a:b4:52:e9:cf:f8:1c:c3:17:fb:d0:d9:fc:26:c8:a7:9c: 93:fd:f0:94:b5:43:9e:55:c2:f1:ef:1e:e4:af:e3:07:46:25: d1:72:e8:1d:7a:9b:7f:cd:1e:ff:96:21:a6:c2:de:82:36:aa: 74:67:1c:f1:65:9e:fa:c1:c3:2a:85:8f:ca:cc:ad:46:20:20: 4d:fe:f4:53:aa:27:9b:61:59:0e:df:67:e2:51:38:29:82:b4: 35:72:b8:bb:26:c0:11:fa:40:b2:19:9c:4f:89:2a:d8:0a:97: fd:fb:f9:54:34:92:63:2e:9c:59:5f:01:54:02:85:fe:d8:32: d8:70:73:68:1b:eb:97:dc:13:f9:75:66:0f:f1:f0:92:b1:90: ff:21:77:06:b2:60:b5:ec:09:7e:6e:1b:b2:ca:f9:b6:b7:a1: cb:7f:3e:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUxMjA2MTkyNzA5WhcNMjUxMjEzMTkyNzA5WjAYMRYwFAYD VQQDEw02OTM0ODM4ZS0zODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9Wkqvc+n982I8fA71oEIfXE1Tr8qME+/eRNTkl99MOalYOnbsHTefs6Qojw A3RItzMVhPAX55yy3F9TDbq8VpXuwkSAV6wV9s5QCaB07qaBWOjp6bMQxh+7rxam lFrLugyGrkhk94px+KO91hMXChKt/QmaJt6bG0EnSiMuaKLChrxzt4zSy2AG6NbN FAIeagMU5RIF5yj/3tojnj1VH3RoiGHa5Z9/TWj0WmvwJEU5Is+ai8+C2EvweiD1 NLgC9svLOd1wCHvl42PhzrhyZjtEkxcfG7owkuGw0AIO+K/46Gged20bbZKZvByo lluNPh0GH63655/9l9aiaM5vxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACI9LyC bSnuCx07g/iL2PCl2vvSMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBnhijXcJh/odkM+VDoLkXLQ3JVZ8c72wAJYp9RRx0sxWO1wmy8zP3 4C04j+/jUeIafn26dpA2rDDZfwNnCeViVXLOicGd6S7ZwU7tNdHbPkoJzvAZw1yk wsxVarRS6c/4HMMX+9DZ/CbIp5yT/fCUtUOeVcLx7x7kr+MHRiXRcugdept/zR7/ liGmwt6CNqp0ZxzxZZ76wcMqhY/KzK1GICBN/vRTqiebYVkO32fiUTgpgrQ1cri7 JsAR+kCyGZxPiSrYCpf9+/lUNJJjLpxZXwFUAoX+2DLYcHNoG+uX3BP5dWYP8fCS sZD/IXcGsmC17Al+bhuyyvm2t6HLfz6A -----END CERTIFICATE-----Generated at Sat Dec 6 21:09:30 2025 by rpki-client