This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft File: oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft (raw, json) Hash identifier: 0/7aqmL6i+PQNxjJ4KqesExqdUAA+zp3796zD24ozlE= Subject key identifier: 02:1C:AB:C6:2E:73:A6:20:03:B0:90:7B:E0:F9:94:B3:61:0C:86:4F Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 Certificate issuer: /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft Manifest number: 063E Signing time: Mon 22 Dec 2025 21:52:42 +0000 Manifest this update: Mon 22 Dec 2025 21:52:41 +0000 Manifest next update: Mon 29 Dec 2025 21:52:41 +0000 Files and hashes: 1: oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl (hash: lU8mBRgoFzjUxNwKHLjpEo8tfZ3pe8JuzncufET46bk=) 2: 27560994BA0611EB8B424C22C4F9AE02.roa (hash: 6pIeJa5XHZxFNB4lFdKcS5COM+fLfin0ZU91W6J3bYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E43F6, serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Validity Not Before: Dec 22 21:52:41 2025 GMT Not After : Dec 29 21:52:41 2025 GMT Subject: CN=6949bdaa-a852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:1b:3d:79:14:e2:33:0e:7f:c9:67:0e:bd: 95:b6:f9:18:0c:b0:fd:5c:23:70:07:0d:54:6d:d0: d6:81:bb:e4:c4:35:4b:e7:a4:d1:2a:19:e3:cd:55: 17:e7:9f:63:95:e1:a5:b9:d1:2e:97:fb:6b:b3:d2: 0b:c0:74:69:bf:9a:c6:9b:e1:a7:a3:56:fb:16:d0: a1:c0:4b:28:5c:2c:f2:93:62:7d:47:67:99:40:b5: dd:5c:30:10:61:c7:ec:dc:03:b3:07:d1:1f:d0:2a: c1:6b:78:6e:e3:7e:b1:0b:ce:47:b6:35:45:cf:06: 5c:c7:53:b6:32:a0:79:de:02:00:dd:4e:36:5d:d1: 0d:be:f8:9f:da:74:4d:41:36:1a:b3:24:22:b7:9c: 2f:5b:5d:63:b8:c2:b1:af:d8:52:43:5b:66:27:5a: 85:65:44:82:b6:70:5b:39:68:1f:7c:c8:a8:ef:a0: cf:32:fb:93:18:ef:16:bf:73:49:3a:5f:36:ba:19: 69:8d:f1:e2:c8:aa:f2:41:39:2e:a9:4a:a5:ee:5e: 00:12:9c:4d:fb:aa:44:94:b5:80:6a:61:04:93:61: a7:6a:ec:a1:6b:2e:d5:52:3f:54:2e:50:46:1a:b9: cd:79:a3:7b:8f:5f:cf:b0:64:90:ac:23:f0:3e:49: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1C:AB:C6:2E:73:A6:20:03:B0:90:7B:E0:F9:94:B3:61:0C:86:4F X509v3 Authority Key Identifier: keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ff:dd:5e:56:9a:aa:81:39:6c:c8:4c:3a:ee:e2:7b:84:40: 01:d7:3b:15:35:fc:71:73:22:52:a3:a2:7d:12:f5:6c:9c:d6: ac:02:7f:5e:46:8e:19:29:a0:1e:fa:96:39:8f:fa:10:8e:47: 75:72:63:07:b1:18:6e:48:fd:d7:21:d5:b4:13:2a:fa:2c:43: be:a9:0e:6d:34:e3:57:b3:10:73:0d:73:4f:62:d4:eb:92:f6: dc:63:bc:23:08:9f:d8:a2:a2:98:ee:01:f5:8d:32:8b:5d:c7: a2:3c:b2:bf:3e:9b:77:d8:20:ce:01:b3:1f:c5:c4:3d:1c:1e: 67:0e:59:08:5d:09:d8:90:49:24:f6:85:cb:43:60:e5:67:a6: 50:11:ab:d3:44:4d:fb:5d:ca:1d:3b:df:c6:e3:82:52:69:49: a9:63:8f:c6:8b:14:a3:f1:96:11:f1:63:1d:32:9b:68:ac:f7: 9f:ad:bd:78:78:63:4c:76:8b:d9:81:e5:ea:5d:81:44:c6:62: f7:f0:ed:35:3e:25:42:c9:ae:05:85:df:f2:18:61:71:1a:3a: 61:e6:20:02:7d:36:f5:a4:b5:69:79:3d:a7:bf:c2:a8:4c:e4: b2:5e:16:fa:a9:f3:35:34:b8:e3:49:58:ec:cc:64:f7:5f:6a: 3a:60:38:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzRjYxMTAvBgNVBAUTKEEwQkE0NjJGMjlGODI1QTQwMjA5NkEzMkNENzRGN0Ey OENCQ0ZFRTEwHhcNMjUxMjIyMjE1MjQxWhcNMjUxMjI5MjE1MjQxWjAYMRYwFAYD VQQDDA02OTQ5YmRhYS1hODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzycbPXkU4jMOf8lnDr2VtvkYDLD9XCNwBw1UbdDWgbvkxDVL56TRKhnjzVUX 559jleGludEul/trs9ILwHRpv5rGm+Gno1b7FtChwEsoXCzyk2J9R2eZQLXdXDAQ Ycfs3AOzB9Ef0CrBa3hu436xC85HtjVFzwZcx1O2MqB53gIA3U42XdENvvif2nRN QTYasyQit5wvW11juMKxr9hSQ1tmJ1qFZUSCtnBbOWgffMio76DPMvuTGO8Wv3NJ Ol82uhlpjfHiyKryQTkuqUql7l4AEpxN+6pElLWAamEEk2Gnauyhay7VUj9ULlBG GrnNeaN7j1/PsGSQrCPwPkl5WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIcq8Yu c6YgA7CQe+D5lLNhDIZPMB8GA1UdIwQYMBaAFKC6Ri8p+CWkAglqMs1096KMvP7h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDNGNi8yRDJGMjE4NkJB MDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEphUUNDV295elhUM29veThf dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29McEdMeW40SmFRQ0NXb3l6WFQzb295OF91RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDNGNi8yRDJGMjE4NkJBMDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEph UUNDV295elhUM29veThfdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9/91eVpqqgTlsyEw67uJ7hEAB1zsVNfxxcyJSo6J9EvVsnNasAn9e Ro4ZKaAe+pY5j/oQjkd1cmMHsRhuSP3XIdW0Eyr6LEO+qQ5tNONXsxBzDXNPYtTr kvbcY7wjCJ/YoqKY7gH1jTKLXceiPLK/Ppt32CDOAbMfxcQ9HB5nDlkIXQnYkEkk 9oXLQ2DlZ6ZQEavTRE37XcodO9/G44JSaUmpY4/GixSj8ZYR8WMdMptorPefrb14 eGNMdovZgeXqXYFExmL38O01PiVCya4Fhd/yGGFxGjph5iACfTb1pLVpeT2nv8Ko TOSyXhb6qfM1NLjjSVjszGT3X2o6YDjd -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:04 2025 by rpki-client