This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft File: oL8weU5q5J7AaNUDjPmv9UNdHdI.mft (raw, json) Hash identifier: UL9d2MTDDhg3pg5WeT5ClsAj/oJjAtyGpO+H9mzgAIw= Subject key identifier: 21:5B:AF:50:94:28:AB:1D:73:7D:CF:0B:2D:F6:71:9D:B8:EE:0F:DA Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2 Certificate issuer: /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft Manifest number: 13 Signing time: Wed 03 Dec 2025 06:06:31 +0000 Manifest this update: Wed 03 Dec 2025 06:06:31 +0000 Manifest next update: Wed 10 Dec 2025 06:06:31 +0000 Files and hashes: 1: oL8weU5q5J7AaNUDjPmv9UNdHdI.crl (hash: JAvRl/8KBCSglIE+7JMUAyBhxdO99vPLTWG3Ulrcrgw=) 2: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (hash: J1tjfo0Tv8cAIcr5spIPpEp7gs6ochVbVgOyTGB+uQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2 Validity Not Before: Dec 3 06:06:31 2025 GMT Not After : Dec 10 06:06:31 2025 GMT Subject: CN=692fd367-95f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:4f:a5:c0:bd:9e:ca:d1:43:3f:79:79:e7: b9:2c:3d:0f:84:99:f1:9e:3d:d9:d1:9a:2c:ea:44: ce:12:14:fb:ea:be:21:97:47:58:12:37:5b:67:12: 27:b4:de:60:22:a8:3c:2a:23:11:d4:d2:f7:d0:c0: 21:31:ae:88:f6:3c:c5:96:1e:d5:a5:c2:30:45:27: d9:e1:3f:56:38:01:62:43:34:16:a2:c7:55:f9:e7: 2d:f3:34:ee:42:4a:73:89:50:d4:cf:45:66:e0:65: 64:ce:a7:41:61:36:e8:a8:cc:47:ec:a5:8d:0f:09: 7e:1d:73:d8:63:4d:70:bc:b0:f5:b0:27:75:ad:83: 6e:83:f9:55:12:b4:97:cf:87:19:2d:ab:fe:92:3e: 85:ac:52:b4:b1:7e:65:c1:16:51:1c:4e:08:35:5b: 4f:6e:bd:70:c1:6e:2b:32:7c:85:a6:e5:3d:90:6d: 79:d6:9e:5d:da:5c:87:3d:b1:a1:69:a7:f1:cc:cf: bc:48:6a:7c:bf:34:3c:33:8f:92:eb:2a:f8:41:43: 7d:eb:82:2a:ce:de:31:03:e1:e0:f2:ef:81:16:dd: 27:04:7e:33:77:21:fd:cb:75:bb:f5:bf:b4:07:7e: 9c:bf:c0:b6:3e:7f:39:8c:78:9b:82:48:69:d7:39: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5B:AF:50:94:28:AB:1D:73:7D:CF:0B:2D:F6:71:9D:B8:EE:0F:DA X509v3 Authority Key Identifier: keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:14:9e:1a:9f:91:9d:b6:5d:33:96:d6:01:07:56:35:71:0d: 30:13:57:fe:41:91:5f:67:dc:ca:46:c6:97:f6:f4:da:05:49: ea:d9:9f:08:77:cb:19:88:78:dd:35:af:3b:b1:f1:c6:3d:48: 44:ad:b8:22:30:11:e4:21:90:0d:20:fe:a7:74:aa:93:49:be: 3c:35:87:5d:51:a4:e3:db:e2:08:a6:ca:ae:df:95:98:36:c7: 17:66:57:8c:91:a6:d6:fa:1d:82:ed:f2:26:48:90:26:dd:7c: 29:c1:a8:39:a3:f9:dc:1a:6a:60:87:d4:e8:06:9d:77:cf:0f: db:c7:7a:45:9f:02:59:f4:7f:d7:9e:61:2c:a5:69:47:83:6f: c9:ae:af:26:42:f9:a6:6e:3f:f5:e3:d8:ec:13:cf:22:18:1a: 46:67:ab:e0:3b:84:de:6e:fc:78:a2:9d:54:28:bd:1e:3d:ef: a8:21:7d:81:cf:40:05:ec:e7:dc:c1:03:0a:61:c3:6d:b2:27: ad:d1:66:16:05:9a:38:98:27:79:8d:26:c3:b9:22:71:4f:81: 1b:dc:70:5e:d9:ff:a0:63:d9:c6:b8:73:08:03:03:93:e4:33: 44:ed:8b:54:f3:ec:58:39:75:1e:cb:40:82:d9:33:79:9d:08: 49:bc:82:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdBNzExMC8GA1UEBRMoQTBCRjMwNzk0RTZBRTQ5RUMwNjhENTAzOENGOUFGRjU0 MzVEMUREMjAeFw0yNTEyMDMwNjA2MzFaFw0yNTEyMTAwNjA2MzFaMBgxFjAUBgNV BAMTDTY5MmZkMzY3LTk1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCa60+lwL2eytFDP3l557ksPQ+EmfGePdnRmizqRM4SFPvqviGXR1gSN1tnEie0 3mAiqDwqIxHU0vfQwCExroj2PMWWHtWlwjBFJ9nhP1Y4AWJDNBaix1X55y3zNO5C SnOJUNTPRWbgZWTOp0FhNuiozEfspY0PCX4dc9hjTXC8sPWwJ3Wtg26D+VUStJfP hxktq/6SPoWsUrSxfmXBFlEcTgg1W09uvXDBbisyfIWm5T2QbXnWnl3aXIc9saFp p/HMz7xIany/NDwzj5LrKvhBQ33rgirO3jED4eDy74EW3ScEfjN3If3Ldbv1v7QH fpy/wLY+fzmMeJuCSGnXOYi9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIVuvUJQo qx1zfc8LLfZxnbjuD9owHwYDVR0jBBgwFoAUoL8weU5q5J7AaNUDjPmv9UNdHdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0E3LzAxMDIyNzgyQkEz ODExRjA5MzQwOEY2QkM0RjlBRTAyL29MOHdlVTVxNUo3QWFOVURqUG12OVVOZEhk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb0w4d2VVNXE1SjdBYU5VRGpQbXY5VU5kSGRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 N0E3LzAxMDIyNzgyQkEzODExRjA5MzQwOEY2QkM0RjlBRTAyL29MOHdlVTVxNUo3 QWFOVURqUG12OVVOZEhkSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEEUnhqfkZ22XTOW1gEHVjVxDTATV/5BkV9n3MpGxpf29NoFSerZnwh3 yxmIeN01rzux8cY9SEStuCIwEeQhkA0g/qd0qpNJvjw1h11RpOPb4gimyq7flZg2 xxdmV4yRptb6HYLt8iZIkCbdfCnBqDmj+dwaamCH1OgGnXfPD9vHekWfAln0f9ee YSylaUeDb8muryZC+aZuP/Xj2OwTzyIYGkZnq+A7hN5u/HiinVQovR4976ghfYHP QAXs59zBAwphw22yJ63RZhYFmjiYJ3mNJsO5InFPgRvccF7Z/6Bj2ca4cwgDA5Pk M0Tti1Tz7Fg5dR7LQILZM3mdCEm8gvk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:11 2025 by rpki-client