This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft File: oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json) Hash identifier: u+I3qnzpq+T48pvRJRyOQ+YTAJk/iMW8V4iGEQTTpS4= Subject key identifier: 9F:A3:A2:E8:98:B0:55:33:56:B7:6C:1B:9C:51:BB:58:FD:14:49:F4 Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 Certificate issuer: /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft Manifest number: AE Signing time: Tue 02 Dec 2025 14:16:06 +0000 Manifest this update: Tue 02 Dec 2025 14:16:06 +0000 Manifest next update: Tue 09 Dec 2025 14:16:06 +0000 Files and hashes: 1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: 8MhvjpnfYsnWDMs6qNXFcQyoOKZhIePtsRKwI5iAsaY=) 2: 81E4D4A2053011F09C73001FC4F9AE02.roa (hash: BG8Qcl3ND1x5a+MIHh/xpmjjxkGhO2Fu+dtsOmd2KRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Validity Not Before: Dec 2 14:16:06 2025 GMT Not After : Dec 9 14:16:06 2025 GMT Subject: CN=692ef4a6-a406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:a9:d7:d3:5f:05:28:44:19:8f:80:54:4d: e7:a5:e0:78:0a:b7:45:05:5a:b3:ef:a8:b6:54:48: 0d:51:b6:4c:85:6a:cc:42:b4:5b:ec:90:89:fa:a9: 91:b1:40:17:af:03:76:99:79:08:a6:64:24:5c:a1: dc:ec:8c:c4:e5:d3:5d:f1:49:5a:df:48:d2:ae:90: 5e:dc:30:b1:97:42:10:a7:6f:c8:18:2c:05:37:ee: 75:4b:fe:d5:b1:33:47:3c:c4:dc:3e:38:ef:60:b7: ce:73:b9:b5:d4:40:88:21:04:aa:b1:fd:0e:89:be: 26:fe:d2:9b:31:52:cf:34:b5:34:43:fa:b8:8e:30: b4:e3:f0:3a:04:cf:14:17:9c:4e:55:78:70:8d:12: a8:68:81:c4:19:dd:80:78:eb:c4:04:eb:78:ab:a3: 15:91:69:c5:09:79:f5:02:6b:58:32:ca:c1:b1:28: cc:65:c4:6e:8a:af:de:e9:80:5d:fe:dd:ef:e7:c8: c3:41:65:96:4f:1f:06:21:71:97:72:78:78:ef:77: a2:ce:56:62:7b:ef:d9:c8:58:2d:9f:42:bb:8c:ea: 6a:18:bb:eb:7c:29:b1:47:65:5d:3c:08:23:b0:98: b2:25:96:7a:3c:41:0d:48:98:a5:f9:3a:c4:07:4d: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A3:A2:E8:98:B0:55:33:56:B7:6C:1B:9C:51:BB:58:FD:14:49:F4 X509v3 Authority Key Identifier: keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d5:f0:1e:ea:a6:c4:5c:db:c4:fd:34:bb:b7:cd:16:7b:a9: 84:f4:3e:1a:53:ef:6f:44:5b:61:3d:57:bd:4a:74:e2:0b:e9: 8b:c7:d3:0a:9e:e3:00:6b:5c:a4:25:a9:2a:61:dd:67:82:6f: dc:fc:8f:d5:d9:a7:2a:18:18:09:61:f3:46:3e:13:1c:8a:18: e9:58:2e:68:ab:f9:ae:1b:df:12:3d:0d:93:06:f1:62:ba:11: c8:09:4b:ad:95:e0:81:7b:33:b8:d2:44:f7:08:d8:af:52:05: 84:4c:b8:e6:b2:af:1f:0c:db:56:0b:70:cb:fd:77:49:35:ae: ed:a3:e4:79:f5:39:2b:f7:f4:37:ee:ec:48:8c:94:a2:7a:32: ca:92:8d:2f:c8:5f:af:f8:1a:eb:68:49:e7:75:75:03:a5:ee: 52:7e:61:de:d0:40:75:48:72:f6:76:97:da:d7:b9:9c:40:f6: 6d:f2:11:02:67:08:e0:9d:18:6f:25:fa:d1:7d:3b:fd:80:52: c0:78:05:2c:0a:97:fe:0b:b2:73:71:47:a2:2b:ec:9e:ee:f7: 19:94:cf:96:00:20:f4:06:1e:52:a5:77:c5:f9:07:03:bc:a6: b5:e0:96:ee:ce:ce:b4:be:d0:3b:da:f7:18:23:fd:07:50:f4: 70:b2:8f:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEEwMjcxOTVBNDgyMEYzRDcyNjRBNEQ1N0VFOUE5RDRD MkExMEM5MjMwHhcNMjUxMjAyMTQxNjA2WhcNMjUxMjA5MTQxNjA2WjAYMRYwFAYD VQQDEw02OTJlZjRhNi1hNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+Kp19NfBShEGY+AVE3npeB4CrdFBVqz76i2VEgNUbZMhWrMQrRb7JCJ+qmR sUAXrwN2mXkIpmQkXKHc7IzE5dNd8Ula30jSrpBe3DCxl0IQp2/IGCwFN+51S/7V sTNHPMTcPjjvYLfOc7m11ECIIQSqsf0Oib4m/tKbMVLPNLU0Q/q4jjC04/A6BM8U F5xOVXhwjRKoaIHEGd2AeOvEBOt4q6MVkWnFCXn1AmtYMsrBsSjMZcRuiq/e6YBd /t3v58jDQWWWTx8GIXGXcnh473eizlZie+/ZyFgtn0K7jOpqGLvrfCmxR2VdPAgj sJiyJZZ6PEENSJil+TrEB03GIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+jouiY sFUzVrdsG5xRu1j9FEn0MB8GA1UdIwQYMBaAFKAnGVpIIPPXJkpNV+6anUwqEMkj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS8zNUVEQTkyRUNG MEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5Y21TazFYN3BxZFRDb1F5 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29DY1pXa2dnODljbVNrMVg3cHFkVENvUXlTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS8zNUVEQTkyRUNGMEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5 Y21TazFYN3BxZFRDb1F5U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw1fAe6qbEXNvE/TS7t80We6mE9D4aU+9vRFthPVe9SnTiC+mLx9MK nuMAa1ykJakqYd1ngm/c/I/V2acqGBgJYfNGPhMcihjpWC5oq/muG98SPQ2TBvFi uhHICUutleCBezO40kT3CNivUgWETLjmsq8fDNtWC3DL/XdJNa7to+R59Tkr9/Q3 7uxIjJSiejLKko0vyF+v+BrraEnndXUDpe5SfmHe0EB1SHL2dpfa17mcQPZt8hEC ZwjgnRhvJfrRfTv9gFLAeAUsCpf+C7JzcUeiK+ye7vcZlM+WACD0Bh5SpXfF+QcD vKa14Jbuzs60vtA72vcYI/0HUPRwso/4 -----END CERTIFICATE-----Generated at Wed Dec 3 16:22:52 2025 by rpki-client