This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: s/a/KwnnYyqlvoqY7CCJhsKgEKIzCtBS6xBENih9ouA= Subject key identifier: F5:9C:28:2F:EE:7B:5F:75:B8:30:FB:36:7E:23:FA:45:69:C7:73:98 Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 10C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 10BD Signing time: Sat 06 Dec 2025 16:49:23 +0000 Manifest this update: Sat 06 Dec 2025 16:49:23 +0000 Manifest next update: Sat 13 Dec 2025 16:49:23 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: A1MWURyFqIvzFcWydlhC7OW0Nf/CagVaCvx8rR76uyY=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: zsPveXQ2Zd6a9Te4YhLc43ZEsJlTYYnv+fpeJR8IN2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4294 (0x10c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Dec 6 16:49:23 2025 GMT Not After : Dec 13 16:49:23 2025 GMT Subject: CN=69345e93-1fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:95:b2:1e:d5:42:a9:24:a7:33:ce:d0:f1:79: ea:00:3e:5d:82:f0:8d:f2:09:ef:27:de:01:fa:19: 25:4f:e4:f4:94:a5:eb:d3:ff:13:53:a5:a9:65:e7: 1b:0e:c8:df:46:87:ae:86:c0:fe:28:c9:47:1e:fb: 5d:60:11:11:08:bc:ec:70:d6:68:c7:fc:08:fa:d5: 67:86:6d:0d:51:af:a8:77:24:12:de:f8:04:53:34: 91:22:a5:ef:b8:5f:ca:b2:b7:0a:05:e5:7a:a2:3c: 2e:e2:89:cf:05:f3:25:c3:17:70:8f:f9:1e:66:4d: 74:06:83:fa:a6:63:e5:d5:56:70:0d:4a:d2:cc:4b: 7a:8d:1b:63:ff:4c:b6:9a:36:46:ad:56:d6:3e:c2: c5:dc:1b:20:50:b5:ac:8f:d6:e9:7a:8d:94:d4:8d: 0a:ab:dc:0f:34:56:eb:32:55:6d:4d:b7:a9:8e:d8: 26:9f:d4:42:b7:ef:55:05:62:ef:50:9a:f6:53:13: 97:38:92:c0:a9:a3:97:82:1b:2f:63:5d:8c:72:ab: 49:92:89:77:75:48:4a:54:93:62:ef:13:9f:fb:59: e4:b2:8c:d7:44:19:8e:a2:13:c4:82:9f:13:70:94: 27:4d:43:69:5b:01:a9:e8:0a:dc:ba:7a:0c:13:07: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9C:28:2F:EE:7B:5F:75:B8:30:FB:36:7E:23:FA:45:69:C7:73:98 X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:5e:11:5f:de:45:4a:d3:8b:b8:38:85:d6:71:2f:cb:4d:93: b5:cf:90:b6:6b:2a:dd:75:1e:78:bb:a5:5a:1e:19:ac:9f:bf: fd:fd:af:ac:6e:3d:a5:4e:6c:5f:63:54:91:0a:1b:97:b1:56: 2e:4b:a3:c6:01:06:eb:20:62:20:0d:59:fe:c3:1c:f2:21:7f: 5e:82:0e:cd:fd:7e:d9:67:a7:4e:94:6e:c7:c0:9e:a4:f7:ab: b6:cf:f6:2a:23:29:92:a6:57:75:54:ed:e6:e9:1e:7e:61:0b: 05:57:58:5b:61:ea:c0:48:af:b9:1e:0b:28:a8:e2:37:12:e8: e2:aa:6e:44:4e:60:7d:22:6f:e5:85:38:3d:1c:31:f4:96:e6: d9:f7:88:91:20:c5:31:62:10:55:50:7f:35:d0:bf:a3:4b:cf: 5c:3c:4d:7b:e6:ab:44:aa:51:73:88:dd:61:64:b0:df:47:ca: 5b:25:42:5f:2d:7d:18:11:a6:88:80:bb:49:7b:02:49:c0:03: 94:61:b0:06:a7:3e:19:b0:af:02:b9:17:83:94:2c:4f:96:5e: 1a:f9:a2:01:77:f0:d7:96:fe:d0:9c:18:34:b9:5f:d9:ef:b8: 8e:f0:e0:9a:19:02:9a:78:61:71:fa:8e:97:a3:4c:51:85:4c: 77:64:bc:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjUxMjA2MTY0OTIzWhcNMjUxMjEzMTY0OTIzWjAYMRYwFAYD VQQDEw02OTM0NWU5My0xZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pWyHtVCqSSnM87Q8XnqAD5dgvCN8gnvJ94B+hklT+T0lKXr0/8TU6WpZecb DsjfRoeuhsD+KMlHHvtdYBERCLzscNZox/wI+tVnhm0NUa+odyQS3vgEUzSRIqXv uF/KsrcKBeV6ojwu4onPBfMlwxdwj/keZk10BoP6pmPl1VZwDUrSzEt6jRtj/0y2 mjZGrVbWPsLF3BsgULWsj9bpeo2U1I0Kq9wPNFbrMlVtTbepjtgmn9RCt+9VBWLv UJr2UxOXOJLAqaOXghsvY12McqtJkol3dUhKVJNi7xOf+1nksozXRBmOohPEgp8T cJQnTUNpWwGp6ArcunoMEwfbYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWcKC/u e191uDD7Nn4j+kVpx3OYMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClXhFf3kVK04u4OIXWcS/LTZO1z5C2ayrddR54u6VaHhmsn7/9/a+s bj2lTmxfY1SRChuXsVYuS6PGAQbrIGIgDVn+wxzyIX9egg7N/X7ZZ6dOlG7HwJ6k 96u2z/YqIymSpld1VO3m6R5+YQsFV1hbYerASK+5HgsoqOI3Eujiqm5ETmB9Im/l hTg9HDH0lubZ94iRIMUxYhBVUH810L+jS89cPE175qtEqlFziN1hZLDfR8pbJUJf LX0YEaaIgLtJewJJwAOUYbAGpz4ZsK8CuReDlCxPll4a+aIBd/DXlv7QnBg0uV/Z 77iO8OCaGQKaeGFx+o6Xo0xRhUx3ZLzg -----END CERTIFICATE-----Generated at Sat Dec 6 23:04:34 2025 by rpki-client