This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: HHIxyXlA797y6Ws/HpkYRH5P/c/wCqIrF9OdAtJNkwo= Subject key identifier: A7:68:96:8D:78:D8:BA:60:5D:B0:C4:32:36:2D:A6:D1:6A:13:3E:BE Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: DA Signing time: Tue 23 Dec 2025 04:34:42 +0000 Manifest this update: Tue 23 Dec 2025 04:34:41 +0000 Manifest next update: Tue 30 Dec 2025 04:34:41 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: gnWy8HMXZBwZp0io2a1DHTDd9xUcuorMrdTXlpfSV6w=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: 1Pw3F4k0O1ke+ThDTspVWhZWgUjv2zsb15CKjPdj4IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: Dec 23 04:34:41 2025 GMT Not After : Dec 30 04:34:41 2025 GMT Subject: CN=694a1be2-83fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:e4:da:03:6e:03:ad:b4:ad:72:98:8d:dd: 34:a8:7e:b4:86:33:ad:49:b0:c9:97:df:58:ae:6d: e5:ea:9a:1b:04:d5:1e:6a:70:ec:7b:3b:a8:a8:44: 97:01:e8:9b:14:80:28:2a:5f:5d:b8:e6:3b:3d:94: 58:f4:35:c5:5f:2c:95:df:a5:03:19:e1:5d:d2:99: d7:6c:57:14:d9:0e:63:58:80:4f:2a:6d:ae:e5:f6: 9d:2e:55:88:53:ac:4a:21:4a:a8:60:95:04:95:b0: 79:17:0d:07:ee:53:2f:d1:09:7f:97:c3:5c:db:d4: c6:65:da:e2:74:ec:08:9d:17:87:26:f5:20:f0:4d: 52:9b:ab:52:d6:dc:d5:72:85:0a:2d:32:29:5b:42: 27:e6:c3:71:d0:c5:56:7e:c4:f1:bc:3a:56:5f:2b: f4:46:c0:a7:5a:d3:56:aa:d5:5d:2c:23:5d:79:71: ea:d0:ef:70:19:2f:30:69:ce:ad:92:90:bd:c5:f2: 80:0b:d9:82:82:ed:da:72:10:33:08:45:47:0b:da: fe:80:d5:ce:31:0d:86:6f:ea:a3:1f:f5:04:d4:79: eb:fc:1a:b7:54:e9:c2:e6:4e:c3:e2:de:f5:b8:8d: cf:04:06:d3:b2:d8:90:63:a3:92:01:09:90:dc:60: d6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:68:96:8D:78:D8:BA:60:5D:B0:C4:32:36:2D:A6:D1:6A:13:3E:BE X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4c:74:94:92:e9:b0:c5:90:60:6c:f8:12:bd:22:49:b3:84: 34:41:33:e9:97:c2:c4:f5:aa:fd:84:b7:b0:0b:fa:cb:95:8b: e9:11:0e:7c:ca:dc:f6:c8:7c:89:4f:d2:ee:c3:94:b0:51:5d: 81:29:32:16:2e:b5:28:6b:51:52:a5:f6:5a:0d:83:59:7d:90: cb:f3:7c:39:74:ff:e5:f2:11:70:cc:4a:dd:c6:04:0d:bb:4b: 2f:34:fb:a8:5b:28:a6:56:86:07:5e:68:c6:a0:ee:d3:e6:8e: 57:ad:3c:14:2c:2d:c2:4e:84:38:7b:7a:1f:f7:14:1d:b2:ed: eb:c1:aa:f6:0c:1d:61:bf:b9:3a:ed:af:8e:45:0e:ce:64:c2: 3c:a1:ec:87:ef:aa:8d:8c:d0:f5:2c:87:c9:c2:35:92:cb:9a: a3:57:9c:cb:7e:c3:d4:c1:d2:c5:66:3a:77:a8:e6:15:91:4a: ad:f9:92:79:e7:e7:2f:96:0d:32:df:a8:ff:4e:fd:8d:d0:62: ba:d8:08:44:b1:ec:8e:e7:de:7d:03:e2:72:0c:5d:4e:61:a4: 62:5a:7c:d9:26:49:a3:e5:d8:84:28:9a:aa:bb:8f:29:75:d2: c3:4e:2d:8b:ba:c7:ea:81:3b:ce:e3:57:74:5a:5e:52:d6:96: a6:3e:2e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1 QzFGNzIxMzkwHhcNMjUxMjIzMDQzNDQxWhcNMjUxMjMwMDQzNDQxWjAYMRYwFAYD VQQDDA02OTRhMWJlMi04M2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZPk2gNuA620rXKYjd00qH60hjOtSbDJl99Yrm3l6pobBNUeanDsezuoqESX AeibFIAoKl9duOY7PZRY9DXFXyyV36UDGeFd0pnXbFcU2Q5jWIBPKm2u5fadLlWI U6xKIUqoYJUElbB5Fw0H7lMv0Ql/l8Nc29TGZdridOwInReHJvUg8E1Sm6tS1tzV coUKLTIpW0In5sNx0MVWfsTxvDpWXyv0RsCnWtNWqtVdLCNdeXHq0O9wGS8wac6t kpC9xfKAC9mCgu3achAzCEVHC9r+gNXOMQ2Gb+qjH/UE1Hnr/Bq3VOnC5k7D4t71 uI3PBAbTstiQY6OSAQmQ3GDWYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdolo14 2LpgXbDEMjYtptFqEz6+MB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo b245UGliMEpLdTVjSDNJVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqTHSUkumwxZBgbPgSvSJJs4Q0QTPpl8LE9ar9hLewC/rLlYvpEQ58 ytz2yHyJT9Luw5SwUV2BKTIWLrUoa1FSpfZaDYNZfZDL83w5dP/l8hFwzErdxgQN u0svNPuoWyimVoYHXmjGoO7T5o5XrTwULC3CToQ4e3of9xQdsu3rwar2DB1hv7k6 7a+ORQ7OZMI8oeyH76qNjND1LIfJwjWSy5qjV5zLfsPUwdLFZjp3qOYVkUqt+ZJ5 5+cvlg0y36j/Tv2N0GK62AhEseyO5959A+JyDF1OYaRiWnzZJkmj5diEKJqqu48p ddLDTi2LusfqgTvO41d0Wl5S1pamPi7y -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:46 2025 by rpki-client