This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json) Hash identifier: ZWNSBF6GTzv5/sJSKBZMQmSq8i5rTRg8EnVc3/rnqzY= Subject key identifier: F6:F6:C3:9C:60:48:B3:16:DE:36:F2:70:59:F9:83:12:43:5A:43:8D Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft Manifest number: 5D Signing time: Fri 05 Dec 2025 05:07:46 +0000 Manifest this update: Fri 05 Dec 2025 05:07:45 +0000 Manifest next update: Fri 12 Dec 2025 05:07:45 +0000 Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: gq2lV7ESqvQRtuD5QMfqNymqTF0qcE/xxhVV4YwF8t4=) 2: C24679DC741211F0808A8240C4F9AE02.roa (hash: 0sz+kpmtwGElJIZS+dbC02B4JWfvDxu2J1QwiI80uIU=) 3: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: ciBVXi3NuZ9007zCdd3QAQNC4sYFdA5GkfUuea4GHXA=) 4: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: 1ZtqCzNNxWxSJ7uFzzu6FWZe/QSQ6qrzF6WDQCLLHuM=) 5: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: BBZhX9HK3NBq65o9RCyGDdGBDo4hsR5Etdc6G3lRbjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Validity Not Before: Dec 5 05:07:45 2025 GMT Not After : Dec 12 05:07:45 2025 GMT Subject: CN=693268a2-877f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a6:d1:cd:e9:3b:c3:52:15:fe:fe:96:fb:ab: 4a:63:93:fa:0a:2f:de:7f:f3:91:26:04:2d:91:1a: e2:13:1d:29:87:16:82:98:f6:2b:f8:5f:46:57:77: e6:49:91:73:b3:26:7d:fb:44:23:d9:39:91:4f:2b: 95:3e:12:06:e5:d4:c0:9f:a8:74:41:77:47:ab:41: 24:ca:2b:8a:3e:96:f4:2c:42:8f:d2:a6:cb:57:ec: 97:6d:49:34:ca:f8:dc:67:69:1d:c9:7c:15:1d:cc: 31:c7:12:2d:26:17:a6:ff:b8:af:41:b5:1f:c1:66: 84:b7:81:50:88:32:cf:3c:3a:8f:58:fd:e2:79:d5: 27:c7:f1:39:19:c5:82:c6:e5:c2:5a:7f:54:f3:35: dd:2e:8d:ef:1b:07:ec:41:b6:fa:6f:9b:2f:3f:38: 9f:c4:05:1f:9b:c5:09:d0:6f:76:bf:0d:cb:5c:8e: 23:73:6f:14:20:16:dd:e9:4c:f6:52:51:d8:8e:5e: de:21:eb:d9:13:50:0c:cd:13:1f:89:9b:f8:0c:2d: 66:5d:7c:62:21:85:c1:1c:39:1a:24:1d:80:e8:dc: 5f:6e:84:58:7f:c3:b7:56:08:08:bc:44:ed:fa:28: 53:a6:a8:0c:bb:d4:d4:22:f7:6f:cf:18:7b:a4:78: bf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F6:C3:9C:60:48:B3:16:DE:36:F2:70:59:F9:83:12:43:5A:43:8D X509v3 Authority Key Identifier: keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3f:61:b5:8a:77:70:6c:5e:93:11:29:71:63:1c:bf:71:03: 42:8b:dc:ce:82:a3:6d:d7:86:09:d1:e6:54:7d:60:c8:dd:53: 22:1d:19:84:df:b9:2d:52:97:25:02:d8:cf:2c:14:bc:2f:ae: 35:5b:ff:25:a7:71:e5:89:d4:84:77:38:ad:1e:63:81:7a:9a: 88:a4:1b:67:5f:00:88:d6:e9:c4:ac:43:f0:69:ec:a4:5b:59: c3:90:dd:6e:7c:3a:c8:94:33:64:02:61:d8:f6:bb:d5:b3:ac: b7:69:2e:3a:6a:97:e1:de:fe:06:76:33:c4:24:37:0d:78:00: 8b:e9:f6:50:5e:73:b3:21:76:55:b7:90:cc:d3:c6:4d:e4:1e: ba:75:2b:7c:bd:51:b7:e7:dd:0d:47:58:f3:8f:7c:48:11:1d: a8:63:e8:ae:b9:3d:86:c8:56:29:68:38:98:8c:fd:1d:74:dd: b2:29:77:75:c5:25:14:4d:92:29:61:0e:fe:83:85:61:3f:a8: 57:d0:a4:87:a6:59:2f:0b:a2:c4:83:9f:77:d8:c5:dd:8c:34: 0a:68:ac:58:a9:89:5c:24:ad:84:46:08:0e:99:f7:4a:73:e2: 0e:90:24:01:ad:11:79:83:38:93:f1:b7:5d:ff:2a:27:b2:bb: 5f:93:03:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzVCQzExMC8GA1UEBRMoQTE0NTI0MUQ5ODMwQUYyNEE3MTU2NzM1MTI1NUVDOEU3 RUQ1M0VGRTAeFw0yNTEyMDUwNTA3NDVaFw0yNTEyMTIwNTA3NDVaMBgxFjAUBgNV BAMTDTY5MzI2OGEyLTg3N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZptHN6TvDUhX+/pb7q0pjk/oKL95/85EmBC2RGuITHSmHFoKY9iv4X0ZXd+ZJ kXOzJn37RCPZOZFPK5U+Egbl1MCfqHRBd0erQSTKK4o+lvQsQo/SpstX7JdtSTTK +NxnaR3JfBUdzDHHEi0mF6b/uK9BtR/BZoS3gVCIMs88Oo9Y/eJ51SfH8TkZxYLG 5cJaf1TzNd0uje8bB+xBtvpvmy8/OJ/EBR+bxQnQb3a/DctcjiNzbxQgFt3pTPZS UdiOXt4h69kTUAzNEx+Jm/gMLWZdfGIhhcEcORokHYDo3F9uhFh/w7dWCAi8RO36 KFOmqAy71NQi92/PGHukeL8rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9vbDnGBI sxbeNvJwWfmDEkNaQ40wHwYDVR0jBBgwFoAUoUUkHZgwrySnFWc1ElXsjn7VPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNUJDLzcxRTVEOEJFNTlG MjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1VVa0haZ3dyeVNuRldjMUVsWHNqbjdWUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NUJDLzcxRTVEOEJFNTlGMjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlT bkZXYzFFbFhzam43VlB2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGI/YbWKd3BsXpMRKXFjHL9xA0KL3M6Co23XhgnR5lR9YMjdUyIdGYTf uS1SlyUC2M8sFLwvrjVb/yWnceWJ1IR3OK0eY4F6moikG2dfAIjW6cSsQ/Bp7KRb WcOQ3W58OsiUM2QCYdj2u9WzrLdpLjpql+He/gZ2M8QkNw14AIvp9lBec7MhdlW3 kMzTxk3kHrp1K3y9Ubfn3Q1HWPOPfEgRHahj6K65PYbIViloOJiM/R103bIpd3XF JRRNkilhDv6DhWE/qFfQpIemWS8LosSDn3fYxd2MNAporFipiVwkrYRGCA6Z90pz 4g6QJAGtEXmDOJPxt13/Kieyu1+TA10= -----END CERTIFICATE-----Generated at Fri Dec 5 19:33:35 2025 by rpki-client