This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: n6oXH7QZ7CjjaXJTWoMd/25aYUv4bbVRBuvOtOnEbRQ= Subject key identifier: D9:2C:8D:FD:EA:58:89:C5:04:A2:72:FC:86:08:84:73:C5:AB:16:30 Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 04C2 Signing time: Sun 14 Dec 2025 23:15:12 +0000 Manifest this update: Sun 14 Dec 2025 23:15:11 +0000 Manifest next update: Sun 21 Dec 2025 23:15:11 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: Z2hswMGqBD2+19LmLFeeJWXK1akM2r1z7dfbr+6utkg=) 2: 451AF9F2E3DC11ECB9410B43C4F9AE02.roa (hash: PvyXkvk9rsG65qDLSBUO/zxV1I1w1ViEmt67rzLWH3U=) 3: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: p5RWbmc3OrbusuGd87uXwNNKECyHXGRqb7DFbO3Zzjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Dec 14 23:15:11 2025 GMT Not After : Dec 21 23:15:11 2025 GMT Subject: CN=693f44ff-80ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:30:0c:86:24:5e:55:f9:f2:81:62:aa:74: ba:eb:dd:c0:37:69:dd:33:0b:eb:f3:35:c3:d0:3e: 33:f1:3a:c6:ea:81:ec:d4:17:67:dd:63:1f:6c:78: 95:6b:c1:11:e5:80:01:ee:dd:be:12:9e:28:a9:8e: 21:a3:6f:14:8f:07:28:50:d6:c2:29:1b:3a:3b:c4: 02:6d:9e:d2:ad:17:06:5c:e6:51:57:13:6c:75:e9: 2f:dd:36:67:cb:95:b6:8b:0a:3b:cd:10:e4:61:21: 04:7b:90:44:0e:ae:cf:ab:fe:8d:bf:1e:44:2a:e7: d5:98:e1:0a:74:3a:f6:92:52:79:af:f2:62:8d:cd: 11:b5:a4:7e:44:60:83:c8:b7:13:e9:93:5f:69:aa: f4:2d:1a:45:89:2d:68:1b:d5:bd:74:40:26:e5:7e: be:be:9a:f6:ca:f5:eb:cd:51:b0:ba:3b:aa:38:57: 3f:b0:0f:5e:f2:8a:45:30:d2:90:65:5e:30:bd:26: 87:cc:ed:df:6e:11:f5:79:c0:4a:cb:60:63:98:b6: c7:2c:ff:72:0c:0a:7a:45:7d:37:2f:1d:d3:14:90: e2:ba:3d:fb:9a:d1:4d:6b:46:38:28:40:b3:08:b5: f5:d4:07:ed:63:5c:04:97:64:9c:91:02:2e:9d:3e: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2C:8D:FD:EA:58:89:C5:04:A2:72:FC:86:08:84:73:C5:AB:16:30 X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e1:78:2e:00:b6:4a:dd:91:42:c3:20:78:16:e2:4c:ae:d0: 20:a4:50:7b:8c:ad:16:6d:ec:27:dd:cb:c8:47:23:44:a9:b1: 82:62:57:05:c0:e9:83:21:e8:03:40:f0:f4:88:bc:08:3c:21: 71:bf:fc:9d:a8:dc:36:18:5b:5f:ba:68:7b:78:d7:6c:ee:76: e4:68:a5:85:58:ed:c2:50:d4:41:ac:b4:b4:58:de:4b:2f:c4: 66:05:0e:e7:09:23:87:54:84:3e:68:96:f0:cd:6c:d6:95:50: f5:29:43:10:40:dc:7c:50:cc:a6:97:7d:62:72:e5:4b:f3:51: 39:54:ee:04:17:b4:71:2a:0a:cf:b6:f8:be:16:a6:5c:f0:53: 51:c6:b2:f4:dc:a7:e1:c4:e6:55:ab:a8:d0:9b:c5:6f:8d:fa: fe:19:b4:17:c6:7c:9d:72:bb:64:86:00:55:0b:4c:a1:77:fc: 54:27:50:34:47:79:cf:b2:ed:b8:b4:25:73:a3:af:5f:e9:70: 13:58:1a:10:d5:d4:40:05:38:25:14:28:cc:f2:e0:e1:ca:d9: ea:92:58:1c:b5:cb:06:94:5d:2c:41:b2:98:d1:92:5f:43:72: e9:7b:97:dc:30:07:83:8d:d1:2e:ec:19:50:3e:b9:63:9f:9d: 2c:cc:66:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjUxMjE0MjMxNTExWhcNMjUxMjIxMjMxNTExWjAYMRYwFAYD VQQDDA02OTNmNDRmZi04MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQQwDIYkXlX58oFiqnS6693AN2ndMwvr8zXD0D4z8TrG6oHs1Bdn3WMfbHiV a8ER5YAB7t2+Ep4oqY4ho28UjwcoUNbCKRs6O8QCbZ7SrRcGXOZRVxNsdekv3TZn y5W2iwo7zRDkYSEEe5BEDq7Pq/6Nvx5EKufVmOEKdDr2klJ5r/Jijc0RtaR+RGCD yLcT6ZNfaar0LRpFiS1oG9W9dEAm5X6+vpr2yvXrzVGwujuqOFc/sA9e8opFMNKQ ZV4wvSaHzO3fbhH1ecBKy2BjmLbHLP9yDAp6RX03Lx3TFJDiuj37mtFNa0Y4KECz CLX11AftY1wEl2SckQIunT4gRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNksjf3q WInFBKJy/IYIhHPFqxYwMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE4XguALZK3ZFCwyB4FuJMrtAgpFB7jK0Wbewn3cvIRyNEqbGCYlcF wOmDIegDQPD0iLwIPCFxv/ydqNw2GFtfumh7eNds7nbkaKWFWO3CUNRBrLS0WN5L L8RmBQ7nCSOHVIQ+aJbwzWzWlVD1KUMQQNx8UMyml31icuVL81E5VO4EF7RxKgrP tvi+FqZc8FNRxrL03KfhxOZVq6jQm8Vvjfr+GbQXxnydcrtkhgBVC0yhd/xUJ1A0 R3nPsu24tCVzo69f6XATWBoQ1dRABTglFCjM8uDhytnqklgctcsGlF0sQbKY0ZJf Q3Lpe5fcMAeDjdEu7BlQPrljn50szGaG -----END CERTIFICATE-----Generated at Tue Dec 16 11:31:11 2025 by rpki-client