This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft File: 0KCTtlEHkzVIStC6HXZhX1w2aIo.mft (raw, json) Hash identifier: LInizH/w3t2yq3LEIY9oeM35NDNEpqvMAxQrhw3SX9Q= Subject key identifier: 0B:C4:A0:66:95:FE:4A:A9:42:AB:38:EE:DF:8A:8D:D3:F4:CD:73:B5 Authority key identifier: D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A Certificate issuer: /CN=A91E275B/serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A Certificate serial: 3382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft Manifest number: 9B5C Signing time: Sat 20 Dec 2025 15:09:46 +0000 Manifest this update: Sat 20 Dec 2025 15:09:46 +0000 Manifest next update: Sat 27 Dec 2025 15:09:46 +0000 Files and hashes: 1: 0KCTtlEHkzVIStC6HXZhX1w2aIo.crl (hash: uKcRwla+O8DsdKNbUHKCx+5nqurVub/P7B1OF6f2+Zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13186 (0x3382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A Validity Not Before: Dec 20 15:09:46 2025 GMT Not After : Dec 27 15:09:46 2025 GMT Subject: CN=6946bc3a-2a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:00:39:e3:a9:70:1f:47:12:ec:4f:90:ac: 69:b4:c1:09:1f:ac:f8:30:9d:17:bf:2e:36:97:10: b9:86:6b:ee:2d:4f:56:22:d9:af:2c:e1:9d:ca:23: 94:62:13:32:37:04:21:71:ac:46:26:76:7c:ef:dd: 1d:14:75:7b:92:6d:49:b6:c1:9c:71:48:eb:6b:7f: 4a:05:65:c9:92:92:3a:47:11:8c:0c:9a:fe:24:02: d6:42:0d:24:08:25:d1:f7:e0:d9:75:67:cc:de:d3: 26:74:18:f0:b6:48:cc:04:16:a8:74:9c:d5:ce:e1: 72:05:d1:23:9e:dd:c3:f6:65:90:4a:8a:48:d9:e3: a2:4e:4c:0c:81:e5:64:01:42:76:2a:34:e3:58:b9: 48:8d:d6:6e:d5:86:f8:3d:95:4f:a5:13:f5:4c:18: 85:06:4d:10:5a:9a:35:eb:18:cf:07:4c:fb:2b:e4: d5:50:92:e6:46:37:c4:31:62:bd:c3:8a:12:40:dc: 43:78:42:0e:25:24:d7:d0:0b:45:c7:d4:70:19:65: d8:b6:ef:73:9e:e6:b6:12:8d:b1:ce:6f:89:14:5e: e2:2c:fe:e4:9b:0f:75:4a:17:f8:b3:60:7e:f2:f9: 8a:e1:90:c5:b2:89:03:a8:67:82:3c:71:1e:aa:0e: 1b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C4:A0:66:95:FE:4A:A9:42:AB:38:EE:DF:8A:8D:D3:F4:CD:73:B5 X509v3 Authority Key Identifier: keyid:D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:70:a9:73:ff:04:b0:2a:17:12:bb:45:75:54:51:fb:23:b1: cc:4a:a9:5a:bb:ed:a2:fb:e9:d1:94:5c:a1:d1:17:ee:36:56: 7d:fa:b8:e9:8a:82:5d:66:a1:da:9b:42:97:eb:4c:18:af:59: 0d:b7:bd:9e:06:23:0c:77:1a:1b:f4:94:48:6d:3b:13:36:be: 95:37:d0:9b:67:06:fd:ac:fa:bb:69:b6:f4:65:fe:de:36:87: b5:75:81:d9:cd:bb:9f:0a:ee:53:06:d3:50:65:8a:64:b9:52: ca:65:2b:10:3e:d4:9f:cf:89:db:19:6e:5e:ba:a0:38:d7:cd: ef:41:0a:5e:b3:05:4e:19:52:7d:f9:e1:be:6f:9e:ce:d0:28: c4:54:d7:b5:ab:42:8c:43:df:ee:38:06:c9:2e:1d:f4:c8:da: 9c:94:16:5a:5a:2d:7a:4b:52:ec:ad:7e:72:be:e9:44:73:bd: aa:87:d8:79:47:14:a8:94:f1:4f:d1:bd:8b:0c:ee:b9:1d:15: a9:74:65:eb:6e:dc:1e:32:6c:20:0f:0e:ec:fa:ab:eb:dd:a8: 67:9a:89:b0:c6:9e:bb:31:ed:99:11:1c:d3:d2:2e:76:cd:5d: f3:dc:07:94:7b:bb:80:de:9c:9c:ec:1e:5c:df:6b:c8:12:6c: e2:91:7a:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKEQwQTA5M0I2NTEwNzkzMzU0ODRBRDBCQTFENzY2MTVG NUMzNjY4OEEwHhcNMjUxMjIwMTUwOTQ2WhcNMjUxMjI3MTUwOTQ2WjAYMRYwFAYD VQQDDA02OTQ2YmMzYS0yYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPUAOeOpcB9HEuxPkKxptMEJH6z4MJ0Xvy42lxC5hmvuLU9WItmvLOGdyiOU YhMyNwQhcaxGJnZ8790dFHV7km1JtsGccUjra39KBWXJkpI6RxGMDJr+JALWQg0k CCXR9+DZdWfM3tMmdBjwtkjMBBaodJzVzuFyBdEjnt3D9mWQSopI2eOiTkwMgeVk AUJ2KjTjWLlIjdZu1Yb4PZVPpRP1TBiFBk0QWpo16xjPB0z7K+TVUJLmRjfEMWK9 w4oSQNxDeEIOJSTX0AtFx9RwGWXYtu9znua2Eo2xzm+JFF7iLP7kmw91Shf4s2B+ 8vmK4ZDFsokDqGeCPHEeqg4bzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvEoGaV /kqpQqs47t+KjdP0zXO1MB8GA1UdIwQYMBaAFNCgk7ZRB5M1SErQuh12YV9cNmiK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi8wS0NUdGxFSGt6VklTdEM2SFhaaFgxdzJh SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBLQ1R0bEVIa3pWSVN0QzZIWFpoWDF3MmFJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi8wS0NUdGxFSGt6 VklTdEM2SFhaaFgxdzJhSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxcKlz/wSwKhcSu0V1VFH7I7HMSqlau+2i++nRlFyh0RfuNlZ9+rjp ioJdZqHam0KX60wYr1kNt72eBiMMdxob9JRIbTsTNr6VN9CbZwb9rPq7abb0Zf7e Noe1dYHZzbufCu5TBtNQZYpkuVLKZSsQPtSfz4nbGW5euqA4183vQQpeswVOGVJ9 +eG+b57O0CjEVNe1q0KMQ9/uOAbJLh30yNqclBZaWi16S1LsrX5yvulEc72qh9h5 RxSolPFP0b2LDO65HRWpdGXrbtweMmwgDw7s+qvr3ahnmomwxp67Me2ZERzT0i52 zV3z3AeUe7uA3pyc7B5c32vIEmzikXrj -----END CERTIFICATE-----Generated at Sun Dec 21 00:11:49 2025 by rpki-client