This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: JBdqzeQE5lSvigoRpNpokqx/IAChNXH7ii/Ved6CP4U= Subject key identifier: 83:2B:EB:F5:25:66:40:20:7C:59:AB:C0:6C:23:62:70:0A:B3:5E:7E Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 0226 Signing time: Tue 23 Dec 2025 01:08:28 +0000 Manifest this update: Tue 23 Dec 2025 01:08:28 +0000 Manifest next update: Tue 30 Dec 2025 01:08:28 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: ux2FYZCmnL2TKf5EZY9J/uvLvCOy8AtMHBuED24uQZs=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: 4yRhL9kVMGnZbWA+LNDehvbTaP/J/shZ+9q9XJ0iuQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Dec 23 01:08:28 2025 GMT Not After : Dec 30 01:08:28 2025 GMT Subject: CN=6949eb8c-64d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b6:21:a0:85:e0:24:1b:05:95:5e:58:fc:16: 63:8b:dd:87:69:d8:9d:12:e4:64:97:db:c2:ca:7d: 0f:25:bd:da:a6:f2:a3:6f:ac:4a:fb:e7:ab:2f:8d: c8:e9:d1:67:99:b7:2a:d5:64:46:b0:a3:59:3d:aa: 7c:63:cc:e0:0a:c4:a8:5d:d4:c5:bc:ad:91:b6:88: 96:3a:00:cf:0b:bf:02:8f:76:95:16:e6:b2:f7:8b: ed:c0:4a:c2:d3:06:41:67:5a:d4:1f:0b:5f:d8:b2: f9:55:5c:59:6b:e2:2d:a6:b9:4d:6c:e9:63:5a:4b: d0:b3:3a:6c:af:52:50:a6:24:3f:a1:fd:fc:c8:7a: 59:09:6b:62:bc:95:84:dc:bc:4e:d8:96:52:dc:59: 95:4d:b6:40:60:7f:95:3b:11:b1:52:fd:56:19:c3: 5f:52:b0:4c:3c:6a:54:74:42:d9:2f:e2:34:48:e8: 22:f5:1b:23:f4:2c:18:6e:40:4c:fb:1d:3a:93:3f: 85:d1:85:0b:1b:57:82:aa:ac:90:bd:57:59:ca:bc: 28:6d:64:5b:5e:29:b0:bf:3a:3a:6c:3d:21:5e:8e: 59:e1:8d:86:39:df:f9:44:be:c0:93:c2:d2:12:9d: af:f3:46:6c:e8:f2:85:9e:0a:78:df:f0:e5:e3:42: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2B:EB:F5:25:66:40:20:7C:59:AB:C0:6C:23:62:70:0A:B3:5E:7E X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:65:41:48:d0:05:88:34:a7:f1:03:5f:9a:85:bf:99:59:4c: d0:0d:65:3d:d7:95:d5:d8:52:bd:25:bd:1c:9a:64:a8:82:5c: 06:93:e2:d0:32:ad:e3:40:49:38:6c:0b:2e:d3:4d:02:ee:28: 9d:1d:8e:75:be:f0:0b:fe:bb:e5:e4:c8:90:c0:87:35:ed:66: 88:9c:c2:4a:7b:42:3d:c4:54:45:c7:a7:79:3e:55:ec:64:ce: aa:29:26:3c:77:68:ed:bd:97:71:c3:f1:06:72:ca:6c:cc:65: 1e:ef:35:ee:4c:c5:a7:a6:5d:dd:7f:ce:31:7c:81:d9:d8:b5: 0f:70:15:fa:0b:8c:56:28:77:fc:3f:1d:29:3e:46:76:f7:6c: fb:73:8f:15:8e:85:c9:0e:de:69:3c:9e:9b:b4:d1:e2:3e:6d: 93:71:f6:86:19:f9:65:95:37:72:e2:f9:cd:f6:5b:7f:99:7e: fc:b4:5f:7e:23:ce:77:b1:26:95:1a:ab:19:3f:10:82:b8:ee: e6:b7:74:7a:ae:30:41:a7:c8:db:d3:c5:51:17:aa:fd:80:25: c4:14:83:40:7b:42:0f:f9:ab:7a:47:64:cc:a4:8b:3e:24:fb: 9a:30:dd:46:e3:29:14:29:15:d0:44:9d:91:49:07:ae:df:ac: bd:6b:3c:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUxMjIzMDEwODI4WhcNMjUxMjMwMDEwODI4WjAYMRYwFAYD VQQDDA02OTQ5ZWI4Yy02NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbYhoIXgJBsFlV5Y/BZji92HadidEuRkl9vCyn0PJb3apvKjb6xK++erL43I 6dFnmbcq1WRGsKNZPap8Y8zgCsSoXdTFvK2RtoiWOgDPC78Cj3aVFuay94vtwErC 0wZBZ1rUHwtf2LL5VVxZa+ItprlNbOljWkvQszpsr1JQpiQ/of38yHpZCWtivJWE 3LxO2JZS3FmVTbZAYH+VOxGxUv1WGcNfUrBMPGpUdELZL+I0SOgi9Rsj9CwYbkBM +x06kz+F0YULG1eCqqyQvVdZyrwobWRbXimwvzo6bD0hXo5Z4Y2GOd/5RL7Ak8LS Ep2v80Zs6PKFngp43/Dl40INAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMr6/Ul ZkAgfFmrwGwjYnAKs15+MB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7ZUFI0AWINKfxA1+ahb+ZWUzQDWU915XV2FK9Jb0cmmSoglwGk+LQ Mq3jQEk4bAsu000C7iidHY51vvAL/rvl5MiQwIc17WaInMJKe0I9xFRFx6d5PlXs ZM6qKSY8d2jtvZdxw/EGcspszGUe7zXuTMWnpl3df84xfIHZ2LUPcBX6C4xWKHf8 Px0pPkZ292z7c48VjoXJDt5pPJ6btNHiPm2TcfaGGflllTdy4vnN9lt/mX78tF9+ I853sSaVGqsZPxCCuO7mt3R6rjBBp8jb08VRF6r9gCXEFINAe0IP+at6R2TMpIs+ JPuaMN1G4ykUKRXQRJ2RSQeu36y9azxv -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:16 2025 by rpki-client