This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: yfuDfDIPzejz4EGcl09L7ctEk5j9eoPbz7/NhYg+bb0= Subject key identifier: 54:20:D2:28:A3:9F:AE:20:25:54:20:0B:10:C5:29:1B:03:D6:7B:32 Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 0288 Signing time: Thu 04 Dec 2025 23:55:08 +0000 Manifest this update: Thu 04 Dec 2025 23:55:08 +0000 Manifest next update: Thu 11 Dec 2025 23:55:08 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: SYz2ag6SHtaFjnO379WAlNK9BKRAyS1ZPOtcVFFbui0=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: FEAq+U9IY/vjb8fj+kVPH0Boa2FLCn9hMhhxSh+Ch10=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: ujc0MMs38JAyLv/lgGmTZJVWFsrRIcXX0fImBXf2Gng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Dec 4 23:55:08 2025 GMT Not After : Dec 11 23:55:08 2025 GMT Subject: CN=69321f5c-4717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:02:a3:af:48:69:51:2c:d4:b2:5e:fb:83:2a: 13:d0:b1:ce:c7:bf:5c:b4:dc:b4:55:11:8b:a9:0b: 62:8f:13:bf:f7:84:52:e4:e9:2d:c7:68:4d:31:45: 76:2a:f5:f2:8d:e9:08:99:28:3a:ba:05:a9:58:c4: 3a:98:32:84:c2:8c:87:42:92:8f:c5:dd:6c:0b:ef: bd:da:9f:9e:bc:82:25:95:6d:5e:53:06:47:7e:ac: 5a:a0:15:be:8a:f8:09:46:0e:88:33:7d:b8:07:91: 6d:f9:8e:ee:f3:7d:e6:54:b7:99:43:91:c3:02:4b: b9:9f:04:b5:92:1d:bc:2a:51:48:ef:77:34:34:af: 3b:e2:9a:f2:fa:8c:be:c6:17:d8:1f:3f:34:52:73: ca:a8:5b:89:07:22:a7:15:fd:56:5c:86:21:09:29: 2b:2e:50:ff:14:2e:97:73:de:fb:13:a4:b5:3d:b9: d1:1a:f7:b9:91:17:b5:37:90:e7:60:27:ba:53:60: da:a2:0a:9f:d5:cc:75:4c:8f:6c:ab:dc:0b:23:df: 83:7e:bc:c3:e6:12:62:24:6b:89:1e:0f:6c:b6:f7: 77:14:5e:53:7a:9f:16:b5:b9:9f:22:d3:72:3a:6f: 89:57:e7:3b:c8:30:c7:85:c9:8d:a9:a1:aa:b9:b3: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:20:D2:28:A3:9F:AE:20:25:54:20:0B:10:C5:29:1B:03:D6:7B:32 X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:fd:db:d9:4b:2f:f9:5f:70:9d:fc:a6:dc:4f:39:71:8c:fe: 40:72:3f:ae:64:ce:d2:d1:e1:ef:a7:21:83:f5:39:ac:ad:c1: e3:30:c5:c7:c3:a4:23:ff:67:05:ee:d1:0a:36:0d:50:fa:55: 51:f9:e2:ec:b6:ac:d2:7c:28:1d:22:f7:76:7c:d7:0f:19:fd: e5:8a:79:10:ed:d8:90:f6:31:af:62:c5:91:6f:a1:61:cb:93: 92:26:cd:7b:7f:f9:55:9f:cd:56:1c:90:d4:51:4b:a8:75:bd: f0:2f:00:25:9e:16:d7:52:6a:02:03:a6:ce:fd:55:8b:a5:97: 33:f3:bf:89:70:5a:ba:93:73:cf:c2:2a:e9:45:12:13:e5:9b: 93:a6:6c:83:96:9e:16:31:30:5e:22:7e:56:3d:9e:b7:50:e5: 51:b9:07:c9:bd:85:37:69:b8:81:b3:0d:c3:49:27:b4:d6:f4: 07:ee:0e:d1:4f:9a:57:2b:cb:60:9f:d7:20:14:57:76:d6:49: ac:3e:1f:7b:95:f2:54:cf:80:80:cd:5f:d7:64:21:37:b7:85: 2a:0b:6e:c1:17:bf:34:bd:9b:b6:26:37:a9:b0:ca:20:6c:73: 6a:9d:a9:b1:bd:2e:01:0c:95:2b:a2:38:1f:fb:b7:cc:29:5f: 78:0f:91:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjUxMjA0MjM1NTA4WhcNMjUxMjExMjM1NTA4WjAYMRYwFAYD VQQDEw02OTMyMWY1Yy00NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wKjr0hpUSzUsl77gyoT0LHOx79ctNy0VRGLqQtijxO/94RS5Oktx2hNMUV2 KvXyjekImSg6ugWpWMQ6mDKEwoyHQpKPxd1sC++92p+evIIllW1eUwZHfqxaoBW+ ivgJRg6IM324B5Ft+Y7u833mVLeZQ5HDAku5nwS1kh28KlFI73c0NK874pry+oy+ xhfYHz80UnPKqFuJByKnFf1WXIYhCSkrLlD/FC6Xc977E6S1PbnRGve5kRe1N5Dn YCe6U2Daogqf1cx1TI9sq9wLI9+DfrzD5hJiJGuJHg9stvd3FF5Tep8WtbmfItNy Om+JV+c7yDDHhcmNqaGqubPgTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQg0iij n64gJVQgCxDFKRsD1nsyMB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA/dvZSy/5X3Cd/KbcTzlxjP5Acj+uZM7S0eHvpyGD9TmsrcHjMMXH w6Qj/2cF7tEKNg1Q+lVR+eLstqzSfCgdIvd2fNcPGf3linkQ7diQ9jGvYsWRb6Fh y5OSJs17f/lVn81WHJDUUUuodb3wLwAlnhbXUmoCA6bO/VWLpZcz87+JcFq6k3PP wirpRRIT5ZuTpmyDlp4WMTBeIn5WPZ63UOVRuQfJvYU3abiBsw3DSSe01vQH7g7R T5pXK8tgn9cgFFd21kmsPh97lfJUz4CAzV/XZCE3t4UqC27BF780vZu2JjepsMog bHNqnamxvS4BDJUrojgf+7fMKV94D5El -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:46 2025 by rpki-client