This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: bhvgqIPcHfcRWAJoKKsDSgAqQNlM0Iby6I3p9Cmddk8= Subject key identifier: D8:0F:74:7D:D3:5D:1E:CA:A8:BE:20:4F:63:36:82:8B:D6:41:2E:25 Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0EBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0EB5 Signing time: Mon 22 Dec 2025 17:19:17 +0000 Manifest this update: Mon 22 Dec 2025 17:19:16 +0000 Manifest next update: Mon 29 Dec 2025 17:19:16 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: cADN5hNRuinZmmplirr3aLq69YOcFivZQqTYzqqz7Pg=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3772 (0xebc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: Dec 22 17:19:16 2025 GMT Not After : Dec 29 17:19:16 2025 GMT Subject: CN=69497d94-419b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:ad:11:fd:10:bc:f8:5f:7b:08:35:fd:8b: 26:3a:18:5a:e8:54:76:53:89:2b:ee:9d:63:25:7b: d4:2c:e2:91:16:f7:75:7f:7e:3d:c3:be:66:f1:f9: 27:7d:0a:a5:61:e2:d6:a8:2d:a7:a0:ca:ea:64:de: 9c:60:a5:13:f2:19:2c:be:3c:d1:2a:3f:11:3c:de: 4d:d9:83:eb:17:05:01:b6:47:e0:c1:43:df:b6:e6: fa:e8:d0:48:af:2b:e9:ff:4f:ff:06:17:e3:c0:e5: 28:8a:fe:3f:7a:45:56:96:e5:fe:f1:2b:d7:91:7d: 0a:36:45:7a:5c:84:55:25:8a:76:a1:2e:63:2c:70: 8e:5d:c0:bc:03:f5:d3:41:01:e6:fc:d9:a2:b0:b9: 9b:3b:46:6b:38:45:76:ce:11:b1:1b:0b:1e:e1:64: 5c:94:39:0e:58:48:c9:88:7d:b4:4c:e6:75:7d:7e: ac:5d:9e:f2:91:ac:90:b8:79:ab:97:3d:a2:a1:33: 46:25:e7:13:78:57:b1:d7:4d:8f:b1:63:b7:e7:07: 3a:d2:7f:c0:03:df:88:09:a7:0b:f0:dd:87:41:54: 3c:66:f8:08:81:1e:2c:5e:a5:9e:f2:28:80:e7:8e: 35:b6:ea:0b:8f:fb:6a:9b:cf:68:41:85:b7:0a:3b: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0F:74:7D:D3:5D:1E:CA:A8:BE:20:4F:63:36:82:8B:D6:41:2E:25 X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:dd:12:22:08:99:6c:58:28:76:1a:98:fb:1d:f1:5b:8b:4c: a0:0f:32:bb:b6:62:6a:02:97:4c:8e:8c:d8:1e:0d:b0:2c:e2: 6f:ca:d8:bf:4e:e5:06:d7:e5:4e:1c:32:10:ba:2e:88:1d:58: 05:43:e7:76:01:8c:97:be:e9:97:9d:8d:37:4b:4e:01:dc:a2: 86:58:91:fd:c9:e5:ad:04:11:1b:6d:9b:d4:09:51:7d:8f:41: 2b:3f:dc:cb:dd:a6:0f:d7:4b:95:27:ac:bc:26:bd:8f:04:6b: b7:7c:72:15:cb:32:f8:75:b1:7d:75:c0:ad:82:a1:a6:49:27: 30:8d:04:f6:be:cb:d5:ca:1e:34:d7:38:8a:7d:6d:db:9e:9e: 8b:41:ce:30:fc:26:db:e2:a3:f9:bf:73:f4:d1:55:dd:9d:fc: 19:a9:cf:55:56:e8:fc:76:05:d3:4d:b5:bf:8b:1d:f9:aa:9c: ad:91:2b:f7:69:d9:d2:ba:28:e3:c6:3a:3e:45:fc:e9:44:c0: bd:74:35:ba:88:50:2f:f9:26:df:ce:97:0e:fc:e6:41:93:eb: 0d:a5:ee:f8:00:b2:d0:bf:c5:31:e0:bf:33:c1:41:5c:18:12: 1d:a6:55:66:86:3e:a1:53:3f:7f:b4:79:33:f9:94:e3:15:c2: 19:7a:f7:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUxMjIyMTcxOTE2WhcNMjUxMjI5MTcxOTE2WjAYMRYwFAYD VQQDDA02OTQ5N2Q5NC00MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/mtEf0QvPhfewg1/YsmOhha6FR2U4kr7p1jJXvULOKRFvd1f349w75m8fkn fQqlYeLWqC2noMrqZN6cYKUT8hksvjzRKj8RPN5N2YPrFwUBtkfgwUPftub66NBI ryvp/0//BhfjwOUoiv4/ekVWluX+8SvXkX0KNkV6XIRVJYp2oS5jLHCOXcC8A/XT QQHm/NmisLmbO0ZrOEV2zhGxGwse4WRclDkOWEjJiH20TOZ1fX6sXZ7ykayQuHmr lz2ioTNGJecTeFex102PsWO35wc60n/AA9+ICacL8N2HQVQ8ZvgIgR4sXqWe8iiA 5441tuoLj/tqm89oQYW3CjuHEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgPdH3T XR7KqL4gT2M2govWQS4lMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt3RIiCJlsWCh2Gpj7HfFbi0ygDzK7tmJqApdMjozYHg2wLOJvyti/ TuUG1+VOHDIQui6IHVgFQ+d2AYyXvumXnY03S04B3KKGWJH9yeWtBBEbbZvUCVF9 j0ErP9zL3aYP10uVJ6y8Jr2PBGu3fHIVyzL4dbF9dcCtgqGmSScwjQT2vsvVyh40 1ziKfW3bnp6LQc4w/Cbb4qP5v3P00VXdnfwZqc9VVuj8dgXTTbW/ix35qpytkSv3 adnSuijjxjo+RfzpRMC9dDW6iFAv+SbfzpcO/OZBk+sNpe74ALLQv8Ux4L8zwUFc GBIdplVmhj6hUz9/tHkz+ZTjFcIZevc3 -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:28 2025 by rpki-client