This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft File: oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json) Hash identifier: 8zf4H2iPvLh1cJAGg/QXp6xwgJv0J17CNhM7YtfUejM= Subject key identifier: AB:25:26:B9:C2:43:D0:5A:AA:96:98:7B:FB:C9:46:CC:F3:44:4B:33 Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft Manifest number: 73 Signing time: Tue 23 Dec 2025 05:44:07 +0000 Manifest this update: Tue 23 Dec 2025 05:44:06 +0000 Manifest next update: Tue 30 Dec 2025 05:44:06 +0000 Files and hashes: 1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: nFHwCDgrC6ZDegHJh6YmcjX+D3IwFqUNgRTvGWPE81Q=) 2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: YjLtFlGgcNbwn9rRIgf5MeQrG8tFe9vr3RMokUM4ipM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Validity Not Before: Dec 23 05:44:06 2025 GMT Not After : Dec 30 05:44:06 2025 GMT Subject: CN=694a2c26-f293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:5a:df:42:4b:48:f3:0f:2b:05:fe:92:f7: bc:e5:73:ad:06:43:b6:d1:4c:66:21:62:9d:2b:7d: ec:b9:1b:0c:16:b5:94:df:c1:ba:9c:36:34:11:cf: c8:da:ba:36:4a:70:86:99:f6:ef:90:1e:4d:98:17: fc:02:4d:27:97:72:e9:e8:b1:5b:9e:90:94:eb:c9: 9d:0d:c0:bc:ee:be:cc:43:0d:d6:90:08:52:ac:36: 20:41:c5:ca:31:4b:f4:ea:d8:ce:9d:cd:9f:52:73: f4:e6:a1:15:be:fc:60:78:a3:d8:dc:e1:7d:11:7a: c0:b6:e2:4d:3c:4a:af:e6:51:48:e4:f6:81:ab:86: 81:38:27:f8:e6:5f:bd:78:f8:48:b4:b2:5a:46:76: 21:42:c7:bb:8a:bc:d6:0f:7b:57:5d:2f:d6:fa:54: 85:c6:b0:4c:b9:a2:80:a5:6d:77:8e:ab:4f:cf:d5: b4:9d:a3:a2:f2:c0:28:5b:5f:4d:56:cc:10:31:11: ab:56:9a:0f:9b:66:3f:99:4f:a1:df:1f:8c:81:10: 66:80:84:1b:d8:25:32:1a:26:d3:55:43:a4:65:6c: 19:30:47:bf:75:35:bd:ea:c7:51:46:36:06:a0:87: 53:d2:a1:b2:3e:b9:77:7b:6e:79:b1:1f:0d:08:b6: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:25:26:B9:C2:43:D0:5A:AA:96:98:7B:FB:C9:46:CC:F3:44:4B:33 X509v3 Authority Key Identifier: keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:02:a1:34:57:df:de:8c:ec:86:90:8f:3d:b1:3e:e7:21:0e: ee:7b:08:47:09:e3:21:34:ad:cc:aa:a4:af:9e:83:5e:e8:98: 69:ae:9e:85:07:0a:33:d8:91:a1:fa:63:fc:b6:a1:99:ff:ae: bd:b9:6d:0b:2f:07:b9:9a:42:4a:76:73:e7:15:96:3a:db:b7: c5:ef:8d:cd:ac:b8:cd:c2:b2:cf:f7:48:89:33:7e:93:95:7a: 6c:38:cf:5b:0f:bd:87:33:aa:74:b0:7c:8c:63:2c:13:b5:2f: dc:fc:32:ce:e0:03:58:82:ca:a7:31:57:70:95:14:7b:8b:4e: a8:b3:d0:19:4e:d6:bd:5d:cf:35:f1:fb:ad:4a:e3:72:66:b4: a9:bf:c9:60:e3:bb:a8:a8:58:0f:87:9c:a6:c7:3c:85:0c:1f: 1f:2c:4a:8d:b5:fd:18:a5:3c:af:06:8a:4d:b3:78:64:49:85: 3e:5b:9c:3d:0f:1f:14:c0:b8:c9:1b:37:8c:e7:2d:8e:fb:1b: 8a:c2:36:1a:77:42:49:39:ab:fb:91:ee:5a:36:e5:28:6b:58: a9:ec:fd:3c:0f:97:a4:05:3a:15:16:36:75:ed:a5:f1:12:14: 87:a2:fe:10:59:a0:91:5f:41:eb:a1:74:c3:91:72:21:af:4c: 61:e3:8f:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVBMDExMC8GA1UEBRMoQTBGOUVCNjk4MURDNzJBMjc4QjE4NTI4OTkwNkMxRTEx QzBCMzVGMTAeFw0yNTEyMjMwNTQ0MDZaFw0yNTEyMzAwNTQ0MDZaMBgxFjAUBgNV BAMMDTY5NGEyYzI2LWYyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Y1rfQktI8w8rBf6S97zlc60GQ7bRTGYhYp0rfey5GwwWtZTfwbqcNjQRz8ja ujZKcIaZ9u+QHk2YF/wCTSeXcunosVuekJTryZ0NwLzuvsxDDdaQCFKsNiBBxcox S/Tq2M6dzZ9Sc/TmoRW+/GB4o9jc4X0ResC24k08Sq/mUUjk9oGrhoE4J/jmX714 +Ei0slpGdiFCx7uKvNYPe1ddL9b6VIXGsEy5ooClbXeOq0/P1bSdo6LywChbX01W zBAxEatWmg+bZj+ZT6HfH4yBEGaAhBvYJTIaJtNVQ6RlbBkwR791Nb3qx1FGNgag h1PSobI+uXd7bnmxHw0ItmpzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqyUmucJD 0Fqqlph7+8lGzPNESzMwHwYDVR0jBBgwFoAUoPnraYHccqJ4sYUomQbB4RwLNfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUEwLzlDNTM3MTc4MkY2 NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5m RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BucmFZSGNjcUo0c1lVb21RYkI0UndMTmZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUEwLzlDNTM3MTc4MkY2NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FK NHNZVW9tUWJCNFJ3TE5mRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFwCoTRX396M7IaQjz2xPuchDu57CEcJ4yE0rcyqpK+eg17omGmunoUH CjPYkaH6Y/y2oZn/rr25bQsvB7maQkp2c+cVljrbt8Xvjc2suM3Css/3SIkzfpOV emw4z1sPvYczqnSwfIxjLBO1L9z8Ms7gA1iCyqcxV3CVFHuLTqiz0BlO1r1dzzXx +61K43JmtKm/yWDju6ioWA+HnKbHPIUMHx8sSo21/RilPK8Gik2zeGRJhT5bnD0P HxTAuMkbN4znLY77G4rCNhp3Qkk5q/uR7lo25ShrWKns/TwPl6QFOhUWNnXtpfES FIei/hBZoJFfQeuhdMORciGvTGHjjxw= -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:26 2025 by rpki-client