This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft File: 0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json) Hash identifier: ehJpys+jcQRslZ6X7Ab/xPXsKr4S6FQ8Yv0QVFklFbo= Subject key identifier: 49:AE:45:A1:3F:D2:F9:2D:03:B4:6E:1C:B5:6B:4A:C7:73:23:B2:B7 Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft Manifest number: 0580 Signing time: Mon 22 Dec 2025 22:24:49 +0000 Manifest this update: Mon 22 Dec 2025 22:24:49 +0000 Manifest next update: Mon 29 Dec 2025 22:24:49 +0000 Files and hashes: 1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: 8e5/g435QjtAzIQwuOJp86GpfkJzGwAFG0KvfeJ9C70=) 2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: JNxs4L4e1ceFr4b8NRWrFPbylob6Fmj/cL16X1jkyEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Validity Not Before: Dec 22 22:24:49 2025 GMT Not After : Dec 29 22:24:49 2025 GMT Subject: CN=6949c531-9273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e5:10:99:60:b2:46:ec:3d:64:f7:cb:36:5a: 51:e8:54:ed:98:84:08:96:09:26:b0:31:68:59:95: 6a:dc:4b:7b:b9:62:8a:ed:a5:ea:62:43:ad:8b:26: 9e:8b:19:c0:0a:5f:ca:94:9b:17:b4:7b:f5:8a:e2: db:bd:34:d7:67:ab:d5:d8:e1:fa:3e:8d:3b:3f:31: d6:3f:80:48:94:00:00:93:6c:75:31:79:82:80:2c: 91:4b:76:d7:b5:77:db:5c:13:32:20:c6:45:14:4d: 2f:95:19:11:bd:4a:5f:8a:77:cf:b9:0c:b9:5e:29: 0f:20:cc:6e:f9:55:a1:47:18:ac:bf:a8:a3:7a:a9: 98:46:d2:a3:5a:10:d7:f5:35:6a:03:fb:df:63:99: 8d:b1:26:05:c6:bc:93:e7:09:fc:d9:30:f4:4a:61: 2f:39:ee:c6:9d:0c:26:ee:6d:b3:b9:58:4b:b6:76: 4a:6f:1e:9c:82:7c:fb:cf:b6:7a:a6:5f:ee:6c:11: 33:72:f6:f7:95:9e:46:d6:fe:6a:2e:20:09:d4:25: 0e:7a:2e:bb:8c:1d:25:77:e9:26:c2:fa:4f:77:d9: 16:be:2b:73:ab:b5:e0:75:67:c8:58:aa:90:67:33: f0:be:6f:31:9f:5b:f3:ed:59:35:2a:24:af:c4:04: c6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AE:45:A1:3F:D2:F9:2D:03:B4:6E:1C:B5:6B:4A:C7:73:23:B2:B7 X509v3 Authority Key Identifier: keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0c:ba:47:03:3b:67:64:3d:83:f6:a1:91:88:b1:94:6c:92: d8:99:98:e9:39:8c:cc:38:14:6e:20:e0:cd:12:7c:44:0a:7a: 82:c1:77:51:96:cf:3f:a9:23:85:5c:ac:34:3e:48:7b:49:f4: ec:65:ee:72:09:35:bb:1f:14:30:3b:57:3f:1a:76:8f:42:8c: 41:9c:97:ad:fc:4d:1b:4e:6b:77:18:ac:03:ee:53:e1:0c:7b: dc:1c:29:77:11:48:25:74:f4:06:51:98:47:4c:84:48:a1:a5: ca:7f:be:63:fc:3c:fd:79:2e:e8:bb:5d:cb:94:b9:83:0b:b3: c9:70:98:ed:21:25:32:7d:d3:0a:b4:24:82:21:e1:10:5d:92: d7:83:83:3d:cb:8d:c4:a7:85:42:cc:7e:1f:6e:da:2a:35:7d: 0f:d7:d0:b1:c0:e9:76:17:f3:7b:f9:81:ef:f6:84:af:22:63: f0:cb:b8:b0:ae:09:0e:3d:4a:af:4f:8c:b5:ed:8b:2c:a0:54: b8:9a:60:80:43:28:63:a3:63:f7:55:9f:b9:5b:47:a6:1a:82: f3:9f:2d:9c:34:c1:50:bd:7c:60:c9:05:a1:6e:3a:66:12:ba: 9a:a3:d8:9c:05:c2:ad:d2:f0:8a:c1:d0:9b:3a:54:e0:09:4d: b3:87:c5:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQUMxMTAvBgNVBAUTKEQxNTJERjcyRTVENkMxQzZGRTQyQjY0MjM3N0MzQjA4 ODEyODZERTcwHhcNMjUxMjIyMjIyNDQ5WhcNMjUxMjI5MjIyNDQ5WjAYMRYwFAYD VQQDDA02OTQ5YzUzMS05MjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+UQmWCyRuw9ZPfLNlpR6FTtmIQIlgkmsDFoWZVq3Et7uWKK7aXqYkOtiyae ixnACl/KlJsXtHv1iuLbvTTXZ6vV2OH6Po07PzHWP4BIlAAAk2x1MXmCgCyRS3bX tXfbXBMyIMZFFE0vlRkRvUpfinfPuQy5XikPIMxu+VWhRxisv6ijeqmYRtKjWhDX 9TVqA/vfY5mNsSYFxryT5wn82TD0SmEvOe7GnQwm7m2zuVhLtnZKbx6cgnz7z7Z6 pl/ubBEzcvb3lZ5G1v5qLiAJ1CUOei67jB0ld+kmwvpPd9kWvitzq7XgdWfIWKqQ ZzPwvm8xn1vz7Vk1KiSvxATG4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmuRaE/ 0vktA7RuHLVrSsdzI7K3MB8GA1UdIwQYMBaAFNFS33Ll1sHG/kK2Qjd8OwiBKG3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZBQy8zQ0Y3OThFMDA0 OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3djYi1RclpDTjN3N0NJRW9i ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWTGZjdVhXd2NiLVFyWkNOM3c3Q0lFb2JlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZBQy8zQ0Y3OThFMDA0OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3dj Yi1RclpDTjN3N0NJRW9iZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKDLpHAztnZD2D9qGRiLGUbJLYmZjpOYzMOBRuIODNEnxECnqCwXdR ls8/qSOFXKw0Pkh7SfTsZe5yCTW7HxQwO1c/GnaPQoxBnJet/E0bTmt3GKwD7lPh DHvcHCl3EUgldPQGUZhHTIRIoaXKf75j/Dz9eS7ou13LlLmDC7PJcJjtISUyfdMK tCSCIeEQXZLXg4M9y43Ep4VCzH4fbtoqNX0P19CxwOl2F/N7+YHv9oSvImPwy7iw rgkOPUqvT4y17YssoFS4mmCAQyhjo2P3VZ+5W0emGoLzny2cNMFQvXxgyQWhbjpm Erqao9icBcKt0vCKwdCbOlTgCU2zh8XB -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:40 2025 by rpki-client