This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: EE71MkkfPV4g4FtSAYc6GP5aGFOdlHYLvaVTRevUV+Q= Subject key identifier: 93:C3:46:71:A5:71:A9:0E:A4:72:6A:1B:B4:99:C2:7B:26:C8:D3:EE Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: 5A Signing time: Sun 07 Dec 2025 05:17:10 +0000 Manifest this update: Sun 07 Dec 2025 05:17:10 +0000 Manifest next update: Sun 14 Dec 2025 05:17:10 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: baZZtQDLtuLuJdw7Qx9jFxGRW125annxJmNfkMNggvM=) 2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: g234+BOrsFID00gHUsuGQ7ja/TZsYXQzY8A84ZILmbw=) 3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: SDWOzOls7ewbKsDsDovGzzc6zqRka52NsV9334kX+ts=) 4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: DDcpKf4cwajzPz7iOk0WiFF4+R4nRejRaM+Ry6/ubVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Dec 7 05:17:10 2025 GMT Not After : Dec 14 05:17:10 2025 GMT Subject: CN=69350dd6-57b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:c3:36:b0:e9:b0:30:61:0c:c5:33:14:b9: 70:91:98:8c:14:00:29:82:12:49:da:d3:f4:63:15: 28:6b:74:70:4d:8e:25:77:32:18:7c:b6:a2:a0:96: a1:4a:22:9f:f4:2d:ae:ec:11:66:08:1e:72:8e:bd: b6:6a:e3:20:ca:a8:eb:84:42:7a:11:e9:be:86:b1: c7:e8:95:c3:99:3e:a6:7a:81:92:00:58:ad:96:11: 00:0e:49:0e:2a:71:e0:8d:9a:bf:48:36:42:e5:b2: 51:24:67:21:6b:65:f2:69:ae:8e:4a:c6:b6:bf:fd: 4a:90:d1:a8:94:33:90:2a:49:f7:5d:a8:c5:e1:a7: 52:20:ec:9c:0a:30:48:28:ac:89:b7:09:69:72:b6: 6a:62:de:f7:36:cb:7f:d4:52:80:14:d8:87:42:4f: 54:1c:28:f1:fe:52:63:e4:aa:f5:bd:4c:6d:c1:1e: c0:47:6a:59:5c:3a:53:3f:ad:e2:a2:a0:93:3c:74: 98:c5:11:de:4c:08:25:a4:00:20:e3:cc:5c:da:21: 96:45:13:ee:ff:8d:32:fd:b6:74:20:5a:ea:90:41: 8a:bc:99:78:52:93:77:c0:9f:53:ba:1a:d2:57:b6: 5e:1f:00:6a:44:33:27:5c:1e:59:ad:60:e8:9c:5c: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C3:46:71:A5:71:A9:0E:A4:72:6A:1B:B4:99:C2:7B:26:C8:D3:EE X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:91:73:40:a8:d8:ed:29:cf:3a:38:0d:e4:d8:88:2c:f1:33: 09:6c:4f:e3:54:ea:6b:43:91:3f:8d:ea:bd:3b:b8:e8:01:a4: f5:48:0f:62:17:f5:19:fa:82:6a:29:dc:0a:89:0a:2e:99:8e: 06:31:e5:78:b9:71:8c:05:84:4b:2b:7a:43:4d:66:84:de:93: 87:c3:0a:7f:d9:07:9a:fe:15:a0:31:a8:ad:f4:12:f0:84:f2: f0:02:30:52:2b:74:fc:29:aa:08:1d:d6:90:f1:e8:13:a7:47: a6:f2:7c:dc:88:d3:b8:bd:1f:46:6b:14:ba:e7:15:29:72:6b: 20:8c:fc:5c:1a:65:1d:92:10:45:96:35:d8:00:32:cd:1b:f6: ac:f4:a0:e4:07:a7:fb:64:d1:81:de:4e:11:99:c9:c1:e0:60: 52:43:2d:ec:85:36:0a:08:6d:04:07:79:64:73:78:e3:89:e7: f9:7d:c2:13:31:f7:7f:da:5e:fd:ab:57:11:bb:37:83:16:1e: 12:9a:44:00:c7:f8:d2:41:a4:2e:f1:7a:20:0c:25:c5:c8:53: 87:7c:82:2e:79:1a:74:e3:ab:65:35:c2:26:33:07:8a:29:a4: 85:6e:6b:74:67:0b:43:e6:53:1d:8d:e4:c9:80:3e:0c:0a:0a: 1b:36:e8:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkEwMTExMC8GA1UEBRMoQTA1RUMyNjZCM0MwQkZENkNFQjUxNzEwMEJFMDVDNTA1 Qjk0MzYyNDAeFw0yNTEyMDcwNTE3MTBaFw0yNTEyMTQwNTE3MTBaMBgxFjAUBgNV BAMTDTY5MzUwZGQ2LTU3YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+kMM2sOmwMGEMxTMUuXCRmIwUACmCEkna0/RjFShrdHBNjiV3Mhh8tqKglqFK Ip/0La7sEWYIHnKOvbZq4yDKqOuEQnoR6b6GscfolcOZPqZ6gZIAWK2WEQAOSQ4q ceCNmr9INkLlslEkZyFrZfJpro5Kxra//UqQ0aiUM5AqSfddqMXhp1Ig7JwKMEgo rIm3CWlytmpi3vc2y3/UUoAU2IdCT1QcKPH+UmPkqvW9TG3BHsBHallcOlM/reKi oJM8dJjFEd5MCCWkACDjzFzaIZZFE+7/jTL9tnQgWuqQQYq8mXhSk3fAn1O6GtJX tl4fAGpEMydcHlmtYOicXCe1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk8NGcaVx qQ6kcmobtJnCeybI0+4wHwYDVR0jBBgwFoAUoF7CZrPAv9bOtRcQC+BcUFuUNiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QTAxL0Y2NEQzQjI0NTdB OTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0Y3Q1pyUEF2OWJPdFJjUUMtQmNVRnVVTmlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QTAxL0Y2NEQzQjI0NTdBOTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjli T3RSY1FDLUJjVUZ1VU5pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHWRc0Co2O0pzzo4DeTYiCzxMwlsT+NU6mtDkT+N6r07uOgBpPVID2IX 9Rn6gmop3AqJCi6ZjgYx5Xi5cYwFhEsrekNNZoTek4fDCn/ZB5r+FaAxqK30EvCE 8vACMFIrdPwpqggd1pDx6BOnR6byfNyI07i9H0ZrFLrnFSlyayCM/FwaZR2SEEWW NdgAMs0b9qz0oOQHp/tk0YHeThGZycHgYFJDLeyFNgoIbQQHeWRzeOOJ5/l9whMx 93/aXv2rVxG7N4MWHhKaRADH+NJBpC7xeiAMJcXIU4d8gi55GnTjq2U1wiYzB4op pIVua3RnC0PmUx2N5MmAPgwKChs26Hg= -----END CERTIFICATE-----Generated at Mon Dec 8 06:11:36 2025 by rpki-client