This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: LmD+J1jADlo3vJ5zluJoYpqbKa6fjKKfw3KgJ4VatoU= Subject key identifier: 0F:F7:F4:D0:C6:0E:B4:83:8D:65:72:F2:06:A4:15:65:1A:80:F1:5D Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 0580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 056E Signing time: Mon 22 Dec 2025 22:29:22 +0000 Manifest this update: Mon 22 Dec 2025 22:29:21 +0000 Manifest next update: Mon 29 Dec 2025 22:29:21 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: YkRRKkBz/Spn3RIPKv6e5T5AWiXvxwtObCovdgAa5Cw=) 2: 02817064DCD811F0A33153DF516F56BC.roa (hash: 8I9UOp4Z+/Xy0X8dibahvto/spl08HnHkRuVpTID/Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: Dec 22 22:29:21 2025 GMT Not After : Dec 29 22:29:21 2025 GMT Subject: CN=6949c642-c781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5d:78:1e:76:7d:85:b5:58:b9:00:94:75:ad: 6f:bc:4d:bf:6d:12:e9:ba:dd:03:12:10:0a:d7:5c: 71:bb:35:80:18:bb:31:ba:b8:5a:f4:b7:ee:45:39: 45:8a:9d:4d:c2:3b:70:c9:b9:0c:c9:63:f4:bc:ba: 5a:a4:b0:de:0d:07:07:d3:f5:d1:d5:4d:d0:a8:77: 93:7a:7f:d7:54:df:8b:85:0e:93:ba:5c:3e:a7:1a: 53:64:32:ae:69:65:1a:01:59:b7:f9:b6:0f:2c:56: e3:f8:76:4e:a6:50:b2:99:11:1a:a1:f6:cb:31:57: 97:0a:8c:62:84:9e:23:2f:9b:ca:00:26:d1:58:2e: f9:85:27:68:9f:60:22:0b:39:78:59:cf:10:51:08: 7d:fb:4d:c7:56:91:36:fb:06:dc:ff:0a:57:92:21: e2:23:2e:2d:e2:16:9f:a7:6a:de:6f:49:27:32:2b: a5:ad:77:a8:f1:74:83:58:1c:04:af:97:ad:8c:68: b1:1f:24:1f:6d:0f:28:3c:e7:c6:3f:ef:99:6c:ed: 53:bf:90:03:d4:85:49:df:a8:d6:36:d6:61:83:70: bc:4f:d9:ce:b1:e7:e4:24:93:d6:22:0d:20:76:83: e9:65:b5:1f:3f:d0:5e:30:aa:e9:44:b0:6b:f3:a8: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F7:F4:D0:C6:0E:B4:83:8D:65:72:F2:06:A4:15:65:1A:80:F1:5D X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:49:b2:72:15:a1:b1:a7:da:15:a4:d8:2e:82:41:6e:67:ec: b1:66:63:62:c9:04:54:88:33:8c:11:d1:c5:b9:13:42:ee:b0: ef:9d:2b:28:5e:0e:e1:7d:a4:a2:53:6c:9f:0f:a2:d7:a9:26: 41:3f:59:db:a4:91:14:0c:d3:02:1e:d2:e2:28:ed:00:2f:b5: 3a:a9:6d:c1:6a:0e:85:bb:eb:13:62:6f:ec:9a:ef:6f:bf:4d: 38:07:23:91:e2:99:dd:04:49:a2:13:a3:a5:64:f9:5c:fe:36: e5:c8:97:78:10:4b:ac:9f:24:64:a2:f6:43:a7:0c:66:f7:7e: e5:8c:be:cb:9f:33:65:2f:a7:a6:77:33:46:9c:d3:46:e5:b7: 16:68:64:a3:5d:b6:f8:9c:a0:1f:03:35:58:14:a6:bd:47:75: d5:0c:84:9d:1f:24:88:04:cc:84:01:7b:4d:b6:5c:5c:6b:0a: 8e:4a:da:d6:58:dd:2f:41:05:00:55:1f:ae:bf:07:44:ae:e1: 29:bd:0b:2b:62:e4:dd:a1:fd:fc:2b:c2:a6:18:ab:25:d2:51: 83:40:b7:c1:f7:30:63:2c:64:7c:76:6c:81:61:13:37:a7:f6: 8a:67:42:f3:d9:33:69:b7:d1:2f:e1:83:07:96:99:e1:32:02: 38:32:79:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjUxMjIyMjIyOTIxWhcNMjUxMjI5MjIyOTIxWjAYMRYwFAYD VQQDDA02OTQ5YzY0Mi1jNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1l14HnZ9hbVYuQCUda1vvE2/bRLput0DEhAK11xxuzWAGLsxurha9LfuRTlF ip1NwjtwybkMyWP0vLpapLDeDQcH0/XR1U3QqHeTen/XVN+LhQ6Tulw+pxpTZDKu aWUaAVm3+bYPLFbj+HZOplCymREaofbLMVeXCoxihJ4jL5vKACbRWC75hSdon2Ai Czl4Wc8QUQh9+03HVpE2+wbc/wpXkiHiIy4t4hafp2reb0knMiulrXeo8XSDWBwE r5etjGixHyQfbQ8oPOfGP++ZbO1Tv5AD1IVJ36jWNtZhg3C8T9nOsefkJJPWIg0g doPpZbUfP9BeMKrpRLBr86ib0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/39NDG DrSDjWVy8gakFWUagPFdMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnSbJyFaGxp9oVpNgugkFuZ+yxZmNiyQRUiDOMEdHFuRNC7rDvnSso Xg7hfaSiU2yfD6LXqSZBP1nbpJEUDNMCHtLiKO0AL7U6qW3Bag6Fu+sTYm/smu9v v004ByOR4pndBEmiE6OlZPlc/jblyJd4EEusnyRkovZDpwxm937ljL7LnzNlL6em dzNGnNNG5bcWaGSjXbb4nKAfAzVYFKa9R3XVDISdHySIBMyEAXtNtlxcawqOStrW WN0vQQUAVR+uvwdEruEpvQsrYuTdof38K8KmGKsl0lGDQLfB9zBjLGR8dmyBYRM3 p/aKZ0Lz2TNpt9Ev4YMHlpnhMgI4MnkV -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:36 2025 by rpki-client