This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json) Hash identifier: Iu2k7aWqHuTfk87ojtcriG3i8w6VLUHAo+afa5IQBJY= Subject key identifier: 88:53:34:4F:CE:A4:5D:36:4B:8A:47:63:1C:BD:1E:C5:CC:86:DA:0B Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 17F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft Manifest number: 17EB Signing time: Sat 06 Dec 2025 16:09:39 +0000 Manifest this update: Sat 06 Dec 2025 16:09:38 +0000 Manifest next update: Sat 13 Dec 2025 16:09:38 +0000 Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: FNyDyLGcGKeEE+3SixoWrCtqYCHYeJgU2VCDtaRSWL0=) 2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: NYe/OwRHgWBG4n1tEVTichlRmY2tFDrc7PdcIFXXIB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6132 (0x17f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: Dec 6 16:09:38 2025 GMT Not After : Dec 13 16:09:38 2025 GMT Subject: CN=69345543-b334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ed:33:c2:f9:2f:50:0d:8d:4c:59:12:ef:e4: 1a:a3:da:cf:22:d9:e8:05:a3:a2:f4:39:c0:a4:fc: 7c:12:bb:c8:04:ef:19:51:5a:c4:f3:ca:3d:a1:c5: cb:fb:53:9a:b5:c4:4b:1c:36:72:f8:1c:d0:02:cb: ff:fe:4d:b3:bc:b8:5b:ad:94:86:e1:ef:e9:4c:15: f7:c2:65:bf:fe:32:0e:60:eb:66:3a:a0:0e:f7:fa: d7:b7:ea:51:19:40:b3:0f:1d:de:68:3f:fe:f7:c1: 2e:80:86:f0:9b:6d:cd:92:63:68:87:86:d6:64:d6: ef:7c:14:ca:fb:7a:9e:4a:24:90:34:48:c3:4c:c5: 27:24:08:d8:1c:a8:f4:9d:27:91:29:a0:a6:03:19: 8b:b5:87:99:3b:58:51:30:a6:d5:40:6c:da:44:9a: 62:db:82:1a:76:8e:b8:2a:e9:18:c4:69:9f:dd:be: 22:d0:0b:bf:cb:77:47:5d:d5:f7:9e:85:a2:ae:f7: 6b:bc:97:ab:ed:e8:53:3e:db:5e:9c:02:8c:9a:aa: 64:d4:1a:cf:58:e9:27:7c:36:3e:62:d0:e9:ad:09: 04:53:3b:1d:a1:1d:c6:5c:51:6a:b8:f7:5b:c3:43: 08:96:b6:d3:1a:de:75:de:21:5c:19:a1:37:f5:4b: d7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:53:34:4F:CE:A4:5D:36:4B:8A:47:63:1C:BD:1E:C5:CC:86:DA:0B X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9b:1c:cc:0e:01:f1:7e:a6:ae:85:1b:9b:0b:f5:4d:53:7c: ca:80:ee:5e:97:8a:7d:6f:a6:dc:14:1f:78:b9:bb:7d:67:55: f3:cc:d1:ec:98:a0:cf:15:03:a1:13:30:2d:3e:ad:99:bd:01: 72:f8:6b:5a:65:af:6b:ab:60:d4:d2:c8:b5:6c:e1:f7:86:9d: ff:99:42:da:9d:d6:f4:0b:8a:ee:e2:6c:a3:8d:5d:1d:e3:c0: c3:48:1f:89:e4:0c:b2:05:a4:f9:2a:f5:f2:1f:7c:46:40:a4: 75:b4:45:86:20:9e:bc:c3:a4:ef:55:fb:69:a3:2d:15:fd:9c: a4:9e:89:41:25:c0:d6:bd:c8:9b:92:78:94:fa:e9:76:56:57: e7:aa:72:c1:7c:71:db:d4:36:a8:97:ba:16:8a:3f:d4:c6:8d: 3b:80:71:be:77:07:b9:8a:43:3e:88:32:67:18:d9:be:be:52: c6:39:b4:2b:b8:4b:47:91:ab:43:77:d6:87:94:6a:1a:cf:2c: fe:e7:67:e5:5f:15:6e:8d:87:37:f6:9e:69:96:5b:16:49:18: 6a:7e:1b:48:cb:fc:e4:94:8f:94:3c:00:0e:75:04:87:44:72: dc:24:7e:8f:76:48:d0:e8:76:ae:b6:ed:a3:4d:56:16:12:2e: ee:b2:e4:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjUxMjA2MTYwOTM4WhcNMjUxMjEzMTYwOTM4WjAYMRYwFAYD VQQDEw02OTM0NTU0My1iMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6O0zwvkvUA2NTFkS7+Qao9rPItnoBaOi9DnApPx8ErvIBO8ZUVrE88o9ocXL +1OatcRLHDZy+BzQAsv//k2zvLhbrZSG4e/pTBX3wmW//jIOYOtmOqAO9/rXt+pR GUCzDx3eaD/+98EugIbwm23NkmNoh4bWZNbvfBTK+3qeSiSQNEjDTMUnJAjYHKj0 nSeRKaCmAxmLtYeZO1hRMKbVQGzaRJpi24Iado64KukYxGmf3b4i0Au/y3dHXdX3 noWirvdrvJer7ehTPttenAKMmqpk1BrPWOknfDY+YtDprQkEUzsdoR3GXFFquPdb w0MIlrbTGt513iFcGaE39UvX4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhTNE/O pF02S4pHYxy9HsXMhtoLMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/mxzMDgHxfqauhRubC/VNU3zKgO5el4p9b6bcFB94ubt9Z1XzzNHs mKDPFQOhEzAtPq2ZvQFy+GtaZa9rq2DU0si1bOH3hp3/mULandb0C4ru4myjjV0d 48DDSB+J5AyyBaT5KvXyH3xGQKR1tEWGIJ68w6TvVftpoy0V/ZyknolBJcDWvcib kniU+ul2VlfnqnLBfHHb1Daol7oWij/Uxo07gHG+dwe5ikM+iDJnGNm+vlLGObQr uEtHkatDd9aHlGoazyz+52flXxVujYc39p5pllsWSRhqfhtIy/zklI+UPAAOdQSH RHLcJH6PdkjQ6Hautu2jTVYWEi7usuSB -----END CERTIFICATE-----Generated at Sat Dec 6 19:26:22 2025 by rpki-client