This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: 6GMChRVee9hvo5jIa7Lk8U1Xw3wYPZM7ByKisEf8mvo= Subject key identifier: A9:F9:E2:45:47:08:A3:73:CA:89:8D:98:00:33:80:F3:25:DC:A2:C9 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: 0123 Signing time: Sun 07 Dec 2025 03:07:03 +0000 Manifest this update: Sun 07 Dec 2025 03:07:02 +0000 Manifest next update: Sun 14 Dec 2025 03:07:02 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: UmCziliHTnaq/nwetGBWV5G08uyEVYVuE6WHlnRzzWQ=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: d8hqa3VZK4uOVZ2NvSviBU2tKSi94lw2kqJ0YIkiOVk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: 4xCjhLIdX51ri4H5JFEDOXxLAoM3aQzhavfN2qSp8lM=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: 4rxa1nn9pIW4f6C2tqJ4BWqQLDcGWeXHub2QF8i41eo=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: rhkmKm24Z3LGwUDn9U8wPN9PfTD6fV18fMcA/oDsqYQ=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: zHkwstjBU9okILb/X+WL5mE12pvjEZDjhxeOKIBOBNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Dec 7 03:07:02 2025 GMT Not After : Dec 14 03:07:02 2025 GMT Subject: CN=6934ef56-9803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1f:7e:cf:9e:24:69:81:2c:14:51:e7:53:0e: 89:ce:bb:1f:90:fc:4f:a4:55:38:21:4b:c7:d4:33: 0a:17:a6:7e:09:e8:3f:e9:d6:77:7d:8d:69:eb:0b: d9:58:a6:bb:67:f9:03:71:8e:7b:0c:5f:e3:94:33: 85:8b:88:1b:73:15:bf:55:77:4d:58:b2:13:ab:2b: 93:bc:f2:3a:a4:e4:28:0a:b4:76:b9:de:f0:30:77: 1f:b1:6a:20:86:41:ee:b6:de:29:df:36:0a:e7:cb: e6:a7:46:58:de:50:49:98:42:a3:22:ed:89:26:f9: af:ec:96:2d:1c:dc:de:c6:4e:da:c6:e9:af:f6:49: 10:67:ce:08:40:a0:b0:e7:87:73:ce:4e:25:37:11: a4:96:24:a2:72:36:a0:0d:44:fb:57:0d:b4:9d:f9: 63:c9:28:27:48:34:08:95:14:e7:bb:5e:80:7b:07: 97:57:6b:81:4d:13:e1:28:1b:59:6a:7d:91:49:d0: 81:67:c3:86:84:e9:05:33:66:bf:6b:f3:fd:60:6e: e1:2e:c8:52:b5:93:c4:ec:e0:d4:c5:43:0c:d0:de: 26:71:e4:4d:ad:cd:dd:3e:ef:cb:87:de:2c:3f:73: 24:5c:3f:1b:4a:34:0d:03:d6:44:91:5e:50:17:14: 77:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F9:E2:45:47:08:A3:73:CA:89:8D:98:00:33:80:F3:25:DC:A2:C9 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:81:ab:e6:e2:2a:22:02:b3:df:de:13:15:fc:34:c2:7e:07: 7b:89:41:6c:91:27:3f:3e:24:5b:40:53:76:d5:09:0e:6f:a0: 03:64:7b:5f:ee:d0:1b:64:aa:90:5c:19:a1:2a:cc:0f:42:2a: 61:58:68:55:8d:d7:bf:fc:de:14:05:20:60:03:41:54:d3:27: a5:2c:df:c7:dc:2e:ca:c9:ed:e1:2e:17:6a:0e:3a:db:cc:1a: 51:85:70:59:be:bc:e9:b0:5f:cd:08:c3:33:a9:6a:71:1c:6e: ef:87:09:d1:23:bd:c5:fc:de:3e:c8:0c:7d:fa:28:9b:60:c9: 13:0b:57:4b:5f:96:5a:b0:62:47:bd:b7:56:56:a9:3d:6b:03: c9:85:96:9e:33:4b:fc:e9:b2:a4:96:91:8b:25:ed:c9:05:3d: 2a:6c:82:67:32:7c:53:fc:11:a7:28:65:5c:65:9e:e6:49:01: 35:6e:70:e6:77:d5:3d:80:5e:7f:1d:68:3a:9f:14:4f:d2:5c: 1f:c2:1b:0e:3d:14:bb:fb:44:86:b5:97:20:29:48:45:46:81: 4a:25:e5:18:1b:68:ee:c7:f4:5f:d6:5b:23:9c:d4:8a:ec:58: 53:c1:e2:b9:64:2a:ef:90:58:e9:ed:9d:5b:76:5c:0f:82:43: 6e:51:1f:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUxMjA3MDMwNzAyWhcNMjUxMjE0MDMwNzAyWjAYMRYwFAYD VQQDEw02OTM0ZWY1Ni05ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApx9+z54kaYEsFFHnUw6JzrsfkPxPpFU4IUvH1DMKF6Z+Ceg/6dZ3fY1p6wvZ WKa7Z/kDcY57DF/jlDOFi4gbcxW/VXdNWLITqyuTvPI6pOQoCrR2ud7wMHcfsWog hkHutt4p3zYK58vmp0ZY3lBJmEKjIu2JJvmv7JYtHNzexk7axumv9kkQZ84IQKCw 54dzzk4lNxGkliSicjagDUT7Vw20nfljySgnSDQIlRTnu16AeweXV2uBTRPhKBtZ an2RSdCBZ8OGhOkFM2a/a/P9YG7hLshStZPE7ODUxUMM0N4mceRNrc3dPu/Lh94s P3MkXD8bSjQNA9ZEkV5QFxR39QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn54kVH CKNzyomNmAAzgPMl3KLJMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABgavm4ioiArPf3hMV/DTCfgd7iUFskSc/PiRbQFN21QkOb6ADZHtf 7tAbZKqQXBmhKswPQiphWGhVjde//N4UBSBgA0FU0yelLN/H3C7Kye3hLhdqDjrb zBpRhXBZvrzpsF/NCMMzqWpxHG7vhwnRI73F/N4+yAx9+iibYMkTC1dLX5ZasGJH vbdWVqk9awPJhZaeM0v86bKklpGLJe3JBT0qbIJnMnxT/BGnKGVcZZ7mSQE1bnDm d9U9gF5/HWg6nxRP0lwfwhsOPRS7+0SGtZcgKUhFRoFKJeUYG2jux/Rf1lsjnNSK 7FhTweK5ZCrvkFjp7Z1bdlwPgkNuUR/Y -----END CERTIFICATE-----Generated at Mon Dec 8 06:10:59 2025 by rpki-client