This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: gwAp/qR6pfV11TGrzXieOYEbKbt0MRAIcGRQrGyRCOU= Subject key identifier: B0:B4:C6:59:7C:42:B8:7A:5A:B9:57:9B:23:18:84:9E:D1:93:66:81 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 055B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 0538 Signing time: Sat 06 Dec 2025 22:19:50 +0000 Manifest this update: Sat 06 Dec 2025 22:19:49 +0000 Manifest next update: Sat 13 Dec 2025 22:19:49 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: wsowWCWWFTb3ISHuLJdcqq+Fz/ohTkczYmLhFf053CQ=) 2: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E=) 3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: wlCYlDts3RjNxBy/eT/e5B1Vtzz4yVgtwvYVdQThmhs=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: /gYeqqbk6WlA+N6Yv/cuDVmH4COmNboDX4ybOjU2VTk=) 5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: u0zCnyDN76eHB+CmzgwmvJ+3FVkHG07LYemqATFaMtk=) 6: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: DkBXKwosqunys840APEr3udcdpKlpKYanK0TdpOCbNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1371 (0x55b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Dec 6 22:19:49 2025 GMT Not After : Dec 13 22:19:49 2025 GMT Subject: CN=6934ac05-571f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:27:f4:fa:1a:d9:6d:fa:d8:b6:e3:30:d7: 35:89:c0:eb:75:fa:20:c7:71:51:42:e7:cb:6a:d6: a5:dc:30:8a:81:b5:c3:c0:c8:12:f6:e6:10:1c:86: a5:c2:22:59:d9:73:cd:ad:2c:79:b1:6a:e6:c2:4b: 81:63:3f:9c:ae:cd:c9:9e:cc:1f:34:e2:d7:4f:cb: ad:c3:b9:04:e4:87:49:f5:e4:06:c9:8e:7a:78:5d: c4:e7:c4:7d:96:ca:80:3b:89:c7:f0:aa:e4:8c:62: 02:7c:89:05:70:3b:6b:a5:d0:60:6e:87:a0:f7:a1: 0b:0f:57:79:40:53:c0:fb:82:ef:19:05:21:4f:55: d2:60:69:37:94:f8:42:31:2c:e6:a8:19:cf:57:70: 9a:da:06:4d:6c:93:ff:54:fb:36:e1:ef:5e:12:11: 26:ce:99:a6:34:29:80:62:ef:00:b0:c8:91:77:63: 36:c2:11:08:f6:1b:26:77:12:8c:db:69:a3:08:ec: f9:e0:c9:18:b0:80:f8:01:1d:ad:45:6a:c0:b0:06: 13:74:dd:8f:29:0a:6b:ec:de:7a:1f:24:34:0a:64: fd:88:da:4f:27:6d:34:b2:d1:31:b0:ff:91:a0:70: fe:ce:3e:0b:a9:2b:68:2b:63:62:b0:16:ec:96:50: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B4:C6:59:7C:42:B8:7A:5A:B9:57:9B:23:18:84:9E:D1:93:66:81 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:19:c7:6b:9c:50:1d:15:13:b0:21:c0:ee:f0:05:39:2d:01: 95:cc:54:60:4d:fa:bb:08:b3:c2:92:55:dc:7d:dc:2e:47:2f: 69:4c:26:d7:e0:f7:26:ab:ca:cf:75:ba:c6:65:79:f4:5a:14: 04:67:bb:f8:b4:24:75:8a:33:92:11:4b:42:94:38:59:f8:82: 0d:93:66:a8:40:78:65:63:e4:69:12:12:23:37:a7:96:55:bf: 4c:b3:e3:68:97:3b:82:a4:8d:92:9b:28:55:a0:89:25:7d:b3: 42:f4:0c:72:b3:7c:34:03:25:10:66:36:d8:11:20:2e:9b:f9: 66:69:0b:86:e0:44:77:f1:86:40:44:f7:fa:ae:19:d3:99:c7: af:1d:01:c0:7f:44:21:6c:b6:11:67:8a:d8:72:7a:a1:ff:6a: 56:34:2a:4f:1f:00:bb:be:63:46:07:d5:57:cf:12:6c:f7:7e: 20:bf:73:2f:dd:38:6e:41:a3:17:05:12:dd:aa:a3:34:61:e7: 9e:a9:84:5e:08:fd:6a:84:91:12:e2:5e:03:6b:b8:64:5e:28: 8c:65:a6:ec:c2:8a:e4:65:ab:28:d0:ae:ce:1f:f5:7d:e7:23: 35:97:0a:17:ad:fb:4c:72:05:fb:c5:16:5a:84:01:43:1c:cd: d2:9a:5f:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUxMjA2MjIxOTQ5WhcNMjUxMjEzMjIxOTQ5WjAYMRYwFAYD VQQDEw02OTM0YWMwNS01NzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxY0n9Poa2W362LbjMNc1icDrdfogx3FRQufLatal3DCKgbXDwMgS9uYQHIal wiJZ2XPNrSx5sWrmwkuBYz+crs3JnswfNOLXT8utw7kE5IdJ9eQGyY56eF3E58R9 lsqAO4nH8KrkjGICfIkFcDtrpdBgboeg96ELD1d5QFPA+4LvGQUhT1XSYGk3lPhC MSzmqBnPV3Ca2gZNbJP/VPs24e9eEhEmzpmmNCmAYu8AsMiRd2M2whEI9hsmdxKM 22mjCOz54MkYsID4AR2tRWrAsAYTdN2PKQpr7N56HyQ0CmT9iNpPJ200stExsP+R oHD+zj4LqStoK2NisBbsllCXdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC0xll8 Qrh6WrlXmyMYhJ7Rk2aBMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvGcdrnFAdFROwIcDu8AU5LQGVzFRgTfq7CLPCklXcfdwuRy9pTCbX 4Pcmq8rPdbrGZXn0WhQEZ7v4tCR1ijOSEUtClDhZ+IINk2aoQHhlY+RpEhIjN6eW Vb9Ms+NolzuCpI2SmyhVoIklfbNC9Axys3w0AyUQZjbYESAum/lmaQuG4ER38YZA RPf6rhnTmcevHQHAf0QhbLYRZ4rYcnqh/2pWNCpPHwC7vmNGB9VXzxJs934gv3Mv 3ThuQaMXBRLdqqM0YeeeqYReCP1qhJES4l4Da7hkXiiMZabsworkZaso0K7OH/V9 5yM1lwoXrftMcgX7xRZahAFDHM3Sml/E -----END CERTIFICATE-----Generated at Sun Dec 7 05:18:32 2025 by rpki-client