This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: Qab94z01hrVqAZeG9y8OT15sM5vXG7wbONpMmQq/gkA= Subject key identifier: 50:D3:EC:F7:EF:8A:D1:9D:0A:38:14:F5:2A:DD:6A:74:E4:B8:4C:9D Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 060F Signing time: Sat 06 Dec 2025 21:44:22 +0000 Manifest this update: Sat 06 Dec 2025 21:44:22 +0000 Manifest next update: Sat 13 Dec 2025 21:44:22 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: ko7WTI6BLqGcU8xmL1iJNtPFyZnVE9JBj1p4smO4Aac=) 2: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: weFEOxrVQ1R73fykzCNyC6/gZBqdWvZXSpKP3W9J0hQ=) 3: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: SoMp5duXOAwol503IxpDfQSWDWEVUuEjZp2f9lzEdw8=) 4: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: MXR9v07MaUgaUp2EpRPUYi0YWE/byXOzVwu5NXbaWsg=) 5: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: vWRcSTu3hKVKTzFiY2NVAPZ7PA6+HMwNwvKyVpnCyx8=) 6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: ywF33ZMJOUcpgMUIi20lZlpyg8JGMBrKC6zMJ/6wuTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Dec 6 21:44:22 2025 GMT Not After : Dec 13 21:44:22 2025 GMT Subject: CN=6934a3b6-2701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:27:fd:ae:91:f7:42:27:90:4a:73:78:02: ef:c4:55:16:b6:09:70:77:51:05:cc:a2:d0:8f:5f: 7a:67:04:9a:b1:16:d1:e3:32:71:e5:60:57:fc:45: 43:20:62:ca:be:a2:65:9d:9a:88:39:ac:38:cd:e4: 9e:42:de:e1:de:23:ae:ab:9d:7a:b7:b6:d2:f6:00: e3:5d:3c:1c:9f:85:68:92:c7:86:1d:97:a2:0c:12: 46:b9:20:f6:52:b9:7e:ae:40:d1:f5:d9:a2:b1:ed: 8b:82:73:ac:02:e4:e7:85:9a:a8:25:a4:21:a2:9d: 6a:b1:0e:17:ae:fd:54:a5:45:5c:84:7c:b9:66:12: 31:75:c5:79:f3:76:48:3e:7c:7e:2b:c9:65:87:63: b9:8c:8d:e1:2d:50:39:50:1f:30:4a:cb:7a:e3:bd: 89:a6:ef:f4:6d:a2:de:b9:59:2e:67:d0:35:f8:b9: f8:a2:90:99:76:fc:15:55:5f:52:3c:0b:e3:3a:eb: bd:1d:06:9c:d4:e3:f0:bf:62:6a:99:68:a2:05:6b: 3a:bf:49:37:ef:07:8a:64:8f:ff:e0:95:ff:8d:0a: de:4b:d9:c9:b0:81:8e:0e:0d:7f:a2:9b:05:78:d0: 2d:17:aa:3d:87:01:52:2e:aa:fb:4e:22:9f:01:e2: 9c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D3:EC:F7:EF:8A:D1:9D:0A:38:14:F5:2A:DD:6A:74:E4:B8:4C:9D X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:27:e7:7f:4f:e1:01:58:75:51:a9:58:81:81:a9:21:bf:dc: 9d:bb:09:40:d0:ef:38:d9:28:09:9b:ec:5b:f2:c3:1c:0b:b9: a2:98:c3:f1:a6:62:f2:ec:4c:02:9d:a3:1d:ec:49:81:b2:64: c5:b8:fd:8c:06:4f:88:3e:fd:f3:85:2e:a6:4d:02:c6:57:4e: 5d:d1:36:29:33:06:30:c3:a6:d9:03:e6:ac:76:aa:57:e5:ae: 43:87:6a:1a:f4:be:82:de:df:7c:ab:e4:52:c5:a0:ad:42:f4: 3b:f6:0f:05:b1:fb:8b:5d:29:9d:ec:7e:dc:66:3b:14:95:ba: 6f:80:f7:a8:79:12:12:6c:23:30:b1:52:7a:94:97:41:46:cf: c0:75:a1:c9:91:76:25:a8:f4:8c:b6:d4:e1:88:7f:31:54:47: 6d:f9:16:d8:d8:57:9a:ea:b1:0a:bb:29:1b:74:ba:fa:2a:34: 37:1e:b5:9e:17:ed:92:28:88:17:60:e0:be:7a:19:15:21:f1: 18:ee:52:7e:57:ce:8a:c8:f3:96:a7:00:71:c0:d8:36:54:f8: ed:82:aa:64:49:98:55:76:27:95:92:11:55:84:c5:35:92:56: ef:5a:d2:08:02:d0:3d:5f:7a:6f:e1:75:13:af:bd:2e:c1:82: 98:eb:54:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjUxMjA2MjE0NDIyWhcNMjUxMjEzMjE0NDIyWjAYMRYwFAYD VQQDEw02OTM0YTNiNi0yNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMkn/a6R90InkEpzeALvxFUWtglwd1EFzKLQj196ZwSasRbR4zJx5WBX/EVD IGLKvqJlnZqIOaw4zeSeQt7h3iOuq516t7bS9gDjXTwcn4VokseGHZeiDBJGuSD2 Url+rkDR9dmise2LgnOsAuTnhZqoJaQhop1qsQ4Xrv1UpUVchHy5ZhIxdcV583ZI Pnx+K8llh2O5jI3hLVA5UB8wSst6472Jpu/0baLeuVkuZ9A1+Ln4opCZdvwVVV9S PAvjOuu9HQac1OPwv2JqmWiiBWs6v0k37weKZI//4JX/jQreS9nJsIGODg1/opsF eNAtF6o9hwFSLqr7TiKfAeKcCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDT7Pfv itGdCjgU9SrdanTkuEydMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvJ+d/T+EBWHVRqViBgakhv9yduwlA0O842SgJm+xb8sMcC7mimMPx pmLy7EwCnaMd7EmBsmTFuP2MBk+IPv3zhS6mTQLGV05d0TYpMwYww6bZA+asdqpX 5a5Dh2oa9L6C3t98q+RSxaCtQvQ79g8FsfuLXSmd7H7cZjsUlbpvgPeoeRISbCMw sVJ6lJdBRs/AdaHJkXYlqPSMttThiH8xVEdt+RbY2Fea6rEKuykbdLr6KjQ3HrWe F+2SKIgXYOC+ehkVIfEY7lJ+V86KyPOWpwBxwNg2VPjtgqpkSZhVdieVkhFVhMU1 klbvWtIIAtA9X3pv4XUTr70uwYKY61TI -----END CERTIFICATE-----Generated at Sun Dec 7 13:59:26 2025 by rpki-client