This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json) Hash identifier: m9Nrjkb+acxbBwbebAZxEKcFkM+GcvAEAZPZSGCJk9Y= Subject key identifier: C8:75:5B:A8:10:3F:9E:47:43:11:9C:2A:18:79:63:6F:DA:61:8A:0A Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Certificate serial: 13F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft Manifest number: 13EC Signing time: Mon 22 Dec 2025 16:38:56 +0000 Manifest this update: Mon 22 Dec 2025 16:38:55 +0000 Manifest next update: Mon 29 Dec 2025 16:38:55 +0000 Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: H5TWxgP52AATKHWQe/XZtUdlg0nmHake44hUr/3W7Hc=) 2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: 9C6Tg9SKyHhrTv8/E20KOofW2E66mUILhErIQqYMZ/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5110 (0x13f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Validity Not Before: Dec 22 16:38:55 2025 GMT Not After : Dec 29 16:38:55 2025 GMT Subject: CN=6949741f-9e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f7:57:90:4d:08:d2:44:2e:a8:79:54:be:cc: 5e:36:9e:b4:6f:13:98:54:31:ad:88:9a:86:c5:f5: 00:c5:88:91:e1:72:8f:6f:f5:eb:fc:c2:78:d1:36: bd:5e:94:f9:8a:fc:1b:a1:84:7d:34:76:86:fb:e9: 5d:a7:94:ab:28:90:9b:53:b9:0b:90:74:b8:ed:9f: d5:16:92:05:ed:85:18:3d:ed:3d:c7:cb:dc:d5:15: 01:d1:b5:73:6e:d1:10:d7:0f:4c:05:c4:0f:9b:73: 07:24:01:ed:2f:f1:4e:f6:b3:19:5c:75:34:c3:e7: 77:ae:95:50:45:b1:39:da:67:c0:4a:f3:b1:f4:97: da:b6:04:e6:cf:ba:a7:63:fc:6c:68:6b:6b:4b:b3: b6:06:61:03:d4:5c:bb:f2:c8:e0:79:a0:4c:c8:2a: 09:1c:9a:34:b0:e0:5f:cb:45:c8:9d:46:57:e5:3c: a7:78:ef:46:8d:22:73:af:95:03:e4:47:32:0a:99: d9:db:c1:87:30:dd:40:71:c4:29:98:3b:37:ed:99: 96:4c:a4:fa:d8:5f:11:f8:77:76:b5:df:68:d3:00: 28:97:77:a3:74:fc:46:8c:f0:2a:8c:6a:c7:92:ec: 9c:3d:df:0a:c8:c3:98:06:19:5b:87:a2:69:0a:ff: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:75:5B:A8:10:3F:9E:47:43:11:9C:2A:18:79:63:6F:DA:61:8A:0A X509v3 Authority Key Identifier: keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:6b:f7:b3:ba:39:5b:db:9d:59:9f:ec:cd:44:d5:7d:80:a6: 72:58:af:c7:ac:e9:81:63:f8:36:39:3a:67:b6:3b:52:93:7c: 04:89:33:c2:16:ba:a2:79:b5:70:5e:a7:37:3b:a6:8d:2f:6a: 8a:84:88:17:48:0d:40:f9:97:52:7f:68:57:48:25:d9:f1:f2: fc:74:65:c6:ff:67:3f:c9:d3:d1:17:51:10:3a:6c:1b:a6:7b: fc:8e:69:ee:df:52:14:24:b8:8d:43:35:87:5a:23:09:32:98: d8:9a:64:bd:11:c4:a6:d4:32:ae:3a:94:fe:d2:7e:cc:cf:4f: b5:32:6d:08:2a:8b:73:5c:10:f4:40:b7:8b:a6:59:7f:6b:7a: 95:53:cb:e0:e4:a1:4d:4f:1c:55:c2:bd:c5:85:cf:42:4a:b9: b3:fa:de:cb:13:d8:fb:3a:8f:c8:90:8b:8c:5c:23:2b:ce:78: ed:56:8e:19:90:b6:68:85:21:85:7d:c8:24:d6:25:80:ea:b5: d1:56:cb:c2:bf:30:0b:7a:98:20:30:06:57:0c:35:41:e0:a8: 44:9d:38:cb:71:da:59:14:0c:62:e1:0c:78:57:b6:9b:01:49: e8:51:8e:b3:84:53:8c:c3:db:93:76:3e:a8:35:f6:17:be:a4: 16:82:60:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCNEUxMTAvBgNVBAUTKDNBMTQ5NDI1QkUzMjg1RDYxMTRCMDFGNkMyRkM4OEEx N0FGRjRCRUMwHhcNMjUxMjIyMTYzODU1WhcNMjUxMjI5MTYzODU1WjAYMRYwFAYD VQQDDA02OTQ5NzQxZi05ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vdXkE0I0kQuqHlUvsxeNp60bxOYVDGtiJqGxfUAxYiR4XKPb/Xr/MJ40Ta9 XpT5ivwboYR9NHaG++ldp5SrKJCbU7kLkHS47Z/VFpIF7YUYPe09x8vc1RUB0bVz btEQ1w9MBcQPm3MHJAHtL/FO9rMZXHU0w+d3rpVQRbE52mfASvOx9JfatgTmz7qn Y/xsaGtrS7O2BmED1Fy78sjgeaBMyCoJHJo0sOBfy0XInUZX5TyneO9GjSJzr5UD 5EcyCpnZ28GHMN1AccQpmDs37ZmWTKT62F8R+Hd2td9o0wAol3ejdPxGjPAqjGrH kuycPd8KyMOYBhlbh6JpCv8FIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh1W6gQ P55HQxGcKhh5Y2/aYYoKMB8GA1UdIwQYMBaAFDoUlCW+MoXWEUsB9sL8iKF6/0vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUI0RS8yQ0E0NzA2Njk5 NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhkWVJTd0gyd3Z5SW9Ycl9T LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oU1VKYjR5aGRZUlN3SDJ3dnlJb1hyX1Mtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUI0RS8yQ0E0NzA2Njk5NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhk WVJTd0gyd3Z5SW9Ycl9TLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUa/ezujlb251Zn+zNRNV9gKZyWK/HrOmBY/g2OTpntjtSk3wEiTPC FrqiebVwXqc3O6aNL2qKhIgXSA1A+ZdSf2hXSCXZ8fL8dGXG/2c/ydPRF1EQOmwb pnv8jmnu31IUJLiNQzWHWiMJMpjYmmS9EcSm1DKuOpT+0n7Mz0+1Mm0IKotzXBD0 QLeLpll/a3qVU8vg5KFNTxxVwr3Fhc9CSrmz+t7LE9j7Oo/IkIuMXCMrznjtVo4Z kLZohSGFfcgk1iWA6rXRVsvCvzALepggMAZXDDVB4KhEnTjLcdpZFAxi4Qx4V7ab AUnoUY6zhFOMw9uTdj6oNfYXvqQWgmA1 -----END CERTIFICATE-----Generated at Tue Dec 23 12:43:37 2025 by rpki-client