This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json) Hash identifier: oB/rFOpxyJK0w/AiFmSltlTmulTMNOVaesYXlORdtdo= Subject key identifier: 54:6C:26:F6:FD:0A:26:9D:42:7C:CE:77:A4:22:F7:75:DB:B3:3F:0B Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Certificate serial: 07AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft Manifest number: 07A8 Signing time: Thu 04 Dec 2025 20:22:49 +0000 Manifest this update: Thu 04 Dec 2025 20:22:48 +0000 Manifest next update: Thu 11 Dec 2025 20:22:48 +0000 Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: /YduVUfBCRElI8w/1p6G8HBOlTHrK/PMn9D0bJU2BrE=) 2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: USU8pNkMAdz6WSNLBXiulBGQVhWKRWb5vA71xaDbimA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1967 (0x7af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Validity Not Before: Dec 4 20:22:48 2025 GMT Not After : Dec 11 20:22:48 2025 GMT Subject: CN=6931ed98-4536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7d:28:21:66:3b:a2:eb:d2:77:00:a0:33:2c: 33:7f:48:d5:1a:12:76:4b:42:3d:cb:e4:13:2e:67: a2:60:41:90:5a:5c:41:db:57:7c:c2:81:6d:44:d2: 2d:1d:85:7c:33:f7:4b:94:fb:3c:fc:0a:a6:0c:f1: c9:97:58:7b:0e:ec:9e:c2:66:90:75:26:37:41:14: 8f:20:c0:00:b7:27:4e:70:6e:75:be:8a:c3:61:a7: 22:ac:6c:03:21:b9:59:1d:31:7a:a4:b7:0f:80:aa: 69:b1:5c:78:05:70:ee:a8:99:a4:07:ad:37:84:94: 2e:cd:5b:40:2d:c8:4d:d4:ac:59:87:24:c8:6f:16: 70:7c:6c:88:5a:49:22:1e:7e:5d:2f:c8:3b:cf:e5: d3:e8:5d:af:56:3d:38:7d:e4:3a:07:8b:38:e7:c7: 98:17:bc:5f:17:a5:0b:8e:f1:d7:d1:4c:c0:ec:f9: bb:b0:3a:48:1e:96:2a:78:8c:20:87:24:47:ca:16: 78:a7:31:f8:24:55:d7:2b:9f:30:15:92:21:12:c6: 9e:9e:94:38:3a:29:e1:23:2b:50:54:28:24:c9:b4: 4f:39:0d:49:4a:a7:1b:05:d2:ab:3e:5d:98:97:41: 9f:19:5e:f8:87:9b:d4:7b:79:75:70:dd:9b:aa:62: 98:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6C:26:F6:FD:0A:26:9D:42:7C:CE:77:A4:22:F7:75:DB:B3:3F:0B X509v3 Authority Key Identifier: keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f3:11:b1:2e:06:fb:a3:f6:11:80:cd:97:e0:59:74:d1:ca: 78:c1:a1:08:4f:9f:9a:a3:50:da:8f:ca:04:ef:0c:82:ee:10: d4:66:5c:ea:13:c1:cb:1f:1c:02:d5:d0:21:fe:8a:c2:4b:ee: 71:a1:e3:cb:42:f6:88:52:ae:92:12:91:9f:69:94:e0:e9:70: 04:18:29:fb:27:70:b2:65:bc:0b:23:52:c3:06:e4:64:32:36: f1:85:97:6b:07:88:d3:e1:dd:04:85:cc:75:7e:4a:cb:f8:7a: 11:09:78:9d:be:4b:6f:aa:e8:64:42:32:e9:2b:1a:f0:7b:e9: 57:56:f3:a5:ea:8e:1d:5a:41:9a:d3:8e:53:f6:2f:0f:0e:25: 95:53:00:29:c7:e9:54:5f:44:a2:08:12:9b:fd:e6:fb:10:90: 22:9b:ed:6c:79:60:64:85:6a:60:44:5b:f0:e7:9e:ef:f2:e4: 66:4a:85:7c:89:14:67:62:15:28:7b:ad:80:0b:eb:b3:4c:ee: 5d:68:1d:e2:46:51:e8:d3:21:d6:f8:01:ec:01:09:ae:6a:60: 59:46:a6:c9:74:ef:df:2a:00:1f:93:a3:75:32:a5:98:f9:e8: 90:4a:fb:70:b8:de:62:05:3c:72:ac:20:b9:40:9b:48:b2:dd: 6a:e6:fe:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD REU0NjQ0QUQwHhcNMjUxMjA0MjAyMjQ4WhcNMjUxMjExMjAyMjQ4WjAYMRYwFAYD VQQDEw02OTMxZWQ5OC00NTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA130oIWY7ouvSdwCgMywzf0jVGhJ2S0I9y+QTLmeiYEGQWlxB21d8woFtRNIt HYV8M/dLlPs8/AqmDPHJl1h7DuyewmaQdSY3QRSPIMAAtydOcG51vorDYacirGwD IblZHTF6pLcPgKppsVx4BXDuqJmkB603hJQuzVtALchN1KxZhyTIbxZwfGyIWkki Hn5dL8g7z+XT6F2vVj04feQ6B4s458eYF7xfF6ULjvHX0UzA7Pm7sDpIHpYqeIwg hyRHyhZ4pzH4JFXXK58wFZIhEsaenpQ4OinhIytQVCgkybRPOQ1JSqcbBdKrPl2Y l0GfGV74h5vUe3l1cN2bqmKY/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRsJvb9 CiadQnzOd6Qi93Xbsz8LMB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4 OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp TExjZW1wRG9GWFRONUdSSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/8xGxLgb7o/YRgM2X4Fl00cp4waEIT5+ao1Daj8oE7wyC7hDUZlzq E8HLHxwC1dAh/orCS+5xoePLQvaIUq6SEpGfaZTg6XAEGCn7J3CyZbwLI1LDBuRk MjbxhZdrB4jT4d0Ehcx1fkrL+HoRCXidvktvquhkQjLpKxrwe+lXVvOl6o4dWkGa 045T9i8PDiWVUwApx+lUX0SiCBKb/eb7EJAim+1seWBkhWpgRFvw557v8uRmSoV8 iRRnYhUoe62AC+uzTO5daB3iRlHo0yHW+AHsAQmuamBZRqbJdO/fKgAfk6N1MqWY +eiQSvtwuN5iBTxyrCC5QJtIst1q5v7O -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:02 2025 by rpki-client