This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: ZfAQtK+fIbmk/+k8mpzWyPGYuE1daQP8/xEE8gkgsgI= Subject key identifier: F6:1F:00:7F:65:C2:15:40:D1:B7:56:20:85:19:F0:FD:CE:23:5B:48 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 21D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 21CC Signing time: Sat 06 Dec 2025 15:37:38 +0000 Manifest this update: Sat 06 Dec 2025 15:37:37 +0000 Manifest next update: Sat 13 Dec 2025 15:37:37 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: m9oD617R6NF539ZcY0+RjQlVlSq5qPGMDvOxvk9Pcd8=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: PxUOEDED+JHKJelWKhOvajOHx5KTZi4sFxCqv9/Wuds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8662 (0x21d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Dec 6 15:37:37 2025 GMT Not After : Dec 13 15:37:37 2025 GMT Subject: CN=69344dc2-7044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:78:e3:ed:b0:85:61:80:31:ce:b7:37:59: 62:61:48:1d:dc:52:cc:c8:dc:89:11:e1:a8:db:78: 5d:2d:19:91:10:5a:56:dd:20:af:7f:37:3f:60:41: c0:a4:1e:e9:43:ff:9e:2f:5e:a3:55:c1:be:9e:4d: eb:b3:55:b4:5a:e7:cd:60:af:d2:60:4d:72:83:4c: 85:97:90:ea:94:23:22:b2:9d:b4:ad:40:25:64:06: e1:f8:70:88:d8:b9:d3:a2:b3:3d:4a:c5:3e:4d:9a: a3:ba:ab:52:29:03:06:3f:c1:d7:9d:c8:c7:1c:ac: 46:ec:a2:90:f2:2f:61:c3:cd:3c:a7:bc:6f:e5:43: 51:31:c2:19:0f:3e:a9:88:14:ab:af:70:8c:ee:68: df:4f:4f:05:e4:ab:1a:0f:79:83:28:79:88:e1:60: 59:a9:36:ca:82:4e:8d:d2:9e:fc:5f:31:16:0b:d4: ba:09:63:70:41:d1:9f:3b:3b:a9:0b:af:44:62:f5: e6:16:df:53:08:44:84:c9:f0:08:89:23:84:44:b1: e4:18:09:d3:bf:62:4e:69:fd:0f:9c:16:27:3b:dc: 1f:04:b2:f5:7b:3e:ef:6a:66:14:3b:c0:64:f6:fa: 0f:ec:cc:30:9a:d5:b0:07:6b:39:fd:58:33:7d:0a: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1F:00:7F:65:C2:15:40:D1:B7:56:20:85:19:F0:FD:CE:23:5B:48 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b2:f9:a3:ab:8b:02:92:cf:65:fb:fd:0d:9d:c9:30:77:86: 51:4a:27:d0:4b:28:54:f9:28:7d:2f:b8:18:c3:b5:12:71:dd: 05:d1:b5:be:b5:72:15:b8:b9:78:77:b4:1c:48:cd:3b:0e:67: 77:cc:94:a8:26:21:ae:cf:a6:dc:29:43:92:5d:ef:9d:11:b8: f4:b1:f8:5c:cc:03:08:3b:6d:e7:63:61:19:16:76:11:14:a7: bf:4c:be:cd:20:aa:4a:3c:d4:34:66:fa:ee:f9:dd:e2:9e:81: 5d:97:f0:fe:04:06:5f:18:bb:68:bc:6c:a7:88:0a:60:33:aa: ad:11:d7:d6:e0:db:48:7b:c4:d8:03:49:f8:31:70:19:e5:81: d8:6f:9b:78:74:2f:f9:d0:07:6f:c5:98:1e:2a:51:8e:a1:7a: d7:b5:9e:f9:6c:e1:01:30:95:8e:1f:e6:1d:b7:b2:7e:2a:18: 49:59:29:f7:62:c4:ff:22:99:00:a9:6e:fa:ed:70:33:ba:3e: 01:45:43:7f:b0:3c:da:74:aa:25:ca:97:bc:1d:6d:f6:29:75: 19:fe:95:cf:64:cf:3e:9b:eb:b4:9b:42:5a:aa:07:e0:9d:c6: a9:08:c8:30:80:1e:3e:d2:bb:8d:30:82:4b:37:e2:77:67:73: b7:fc:77:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUxMjA2MTUzNzM3WhcNMjUxMjEzMTUzNzM3WjAYMRYwFAYD VQQDEw02OTM0NGRjMi03MDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V144+2whWGAMc63N1liYUgd3FLMyNyJEeGo23hdLRmREFpW3SCvfzc/YEHA pB7pQ/+eL16jVcG+nk3rs1W0WufNYK/SYE1yg0yFl5DqlCMisp20rUAlZAbh+HCI 2LnTorM9SsU+TZqjuqtSKQMGP8HXncjHHKxG7KKQ8i9hw808p7xv5UNRMcIZDz6p iBSrr3CM7mjfT08F5KsaD3mDKHmI4WBZqTbKgk6N0p78XzEWC9S6CWNwQdGfOzup C69EYvXmFt9TCESEyfAIiSOERLHkGAnTv2JOaf0PnBYnO9wfBLL1ez7vamYUO8Bk 9voP7MwwmtWwB2s5/VgzfQpsswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYfAH9l whVA0bdWIIUZ8P3OI1tIMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLsvmjq4sCks9l+/0Nnckwd4ZRSifQSyhU+Sh9L7gYw7UScd0F0bW+ tXIVuLl4d7QcSM07Dmd3zJSoJiGuz6bcKUOSXe+dEbj0sfhczAMIO23nY2EZFnYR FKe/TL7NIKpKPNQ0Zvru+d3inoFdl/D+BAZfGLtovGyniApgM6qtEdfW4NtIe8TY A0n4MXAZ5YHYb5t4dC/50AdvxZgeKlGOoXrXtZ75bOEBMJWOH+Ydt7J+KhhJWSn3 YsT/IpkAqW767XAzuj4BRUN/sDzadKolype8HW32KXUZ/pXPZM8+m+u0m0Jaqgfg ncapCMgwgB4+0ruNMIJLN+J3Z3O3/Hc6 -----END CERTIFICATE-----Generated at Sun Dec 7 04:54:11 2025 by rpki-client