This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft File: oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json) Hash identifier: j1+k0KEDe+02qx8HCEhWyt1xO7qZVXYwKxX/mH+EJrA= Subject key identifier: 76:F4:27:14:86:99:8E:E3:2A:FD:45:21:F1:C3:B3:C3:BC:6D:73:56 Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft Manifest number: 6A Signing time: Fri 05 Dec 2025 04:50:13 +0000 Manifest this update: Fri 05 Dec 2025 04:50:12 +0000 Manifest next update: Fri 12 Dec 2025 04:50:12 +0000 Files and hashes: 1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: crDVjTTq8BBtj2AsR8HT1W+g2TaNBgT2OIAnJptYvhI=) 2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: YjLtFlGgcNbwn9rRIgf5MeQrG8tFe9vr3RMokUM4ipM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Validity Not Before: Dec 5 04:50:12 2025 GMT Not After : Dec 12 04:50:12 2025 GMT Subject: CN=69326484-d283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:24:6b:a6:5f:1d:54:13:a4:e1:bd:45:20: f7:4f:93:4e:a4:1a:13:31:68:79:91:e3:28:69:6d: 0d:47:cf:f1:4f:94:6d:25:27:b2:50:72:b9:97:69: e0:91:b8:8d:71:5a:94:60:37:bc:96:ec:90:5a:eb: d4:74:3a:da:4c:8a:0c:d6:df:0c:12:ae:c1:c9:d1: 01:b1:45:81:5a:3c:c1:9a:67:df:71:02:59:11:54: 13:1d:aa:a8:83:f0:9b:11:87:c7:ee:7e:a4:aa:b0: 51:7e:83:80:5f:46:b7:e5:a3:0e:b7:5f:ea:b4:dd: 47:fe:40:43:2d:c0:ce:78:c1:1f:b6:0b:1f:26:db: 28:58:bf:27:8d:76:65:80:f1:c0:71:4a:52:15:16: 0a:3e:17:3d:cb:81:d1:6b:47:8b:71:ab:99:2e:27: 1a:11:13:16:31:70:d0:20:b7:32:1c:f5:72:bb:73: c4:80:5b:02:e6:4a:00:41:b1:7c:f9:7e:7e:fa:49: 6c:18:ca:f6:0f:96:3e:01:0a:e7:02:8b:f0:21:24: 3b:c7:97:20:27:43:d6:5a:d7:57:ae:ef:8c:f8:7d: 70:b8:d2:ef:cc:5a:cb:9e:4b:4e:9f:bd:2e:e0:09: 4b:03:ee:8b:60:fe:34:a7:81:cd:e9:04:9a:92:fe: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F4:27:14:86:99:8E:E3:2A:FD:45:21:F1:C3:B3:C3:BC:6D:73:56 X509v3 Authority Key Identifier: keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:05:82:fc:4c:23:94:ec:3a:53:df:3e:c6:86:1d:a8:5f:dd: da:49:8b:6f:7e:22:a0:9e:62:c7:83:9f:69:e6:ed:5a:68:ff: ab:cf:58:11:b7:32:2b:eb:48:a3:53:00:6c:53:8f:ff:e6:a7: 25:84:ab:44:ce:0a:d8:5b:ed:00:66:8b:f7:04:8d:30:a1:bb: 6a:2c:f8:69:43:76:e2:ad:84:14:d0:82:02:7b:f7:5a:72:83: ce:14:99:e8:74:a2:48:a3:e8:31:b2:92:00:e1:75:f1:34:0d: d9:6a:e6:5e:cb:73:3a:2b:a9:5f:db:02:24:88:96:79:f9:8b: 9b:12:3a:74:52:fd:93:e7:9c:70:c5:bc:8a:dc:9c:77:e5:b8: 04:a7:48:f3:97:a9:63:52:0d:74:43:bd:3a:2a:19:6c:46:c3: b5:05:dd:bb:47:a7:44:d4:72:c4:35:80:98:ad:ed:c4:a4:dd: 63:78:eb:f6:d9:5d:41:be:f6:25:48:17:ec:d8:5b:b3:8d:7a: af:a4:10:49:7c:8f:be:c7:52:cf:72:42:e5:2e:0e:70:81:2b: d5:6b:c4:fc:68:ee:f5:3f:c6:73:55:06:ef:be:b0:30:3f:71: 3b:fc:a8:2f:55:e2:10:c6:47:50:df:6e:2e:24:22:5d:2a:e1: 63:ad:4f:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVBMDExMC8GA1UEBRMoQTBGOUVCNjk4MURDNzJBMjc4QjE4NTI4OTkwNkMxRTEx QzBCMzVGMTAeFw0yNTEyMDUwNDUwMTJaFw0yNTEyMTIwNDUwMTJaMBgxFjAUBgNV BAMTDTY5MzI2NDg0LWQyODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXDyRrpl8dVBOk4b1FIPdPk06kGhMxaHmR4yhpbQ1Hz/FPlG0lJ7JQcrmXaeCR uI1xWpRgN7yW7JBa69R0OtpMigzW3wwSrsHJ0QGxRYFaPMGaZ99xAlkRVBMdqqiD 8JsRh8fufqSqsFF+g4BfRrflow63X+q03Uf+QEMtwM54wR+2Cx8m2yhYvyeNdmWA 8cBxSlIVFgo+Fz3LgdFrR4txq5kuJxoRExYxcNAgtzIc9XK7c8SAWwLmSgBBsXz5 fn76SWwYyvYPlj4BCucCi/AhJDvHlyAnQ9Za11eu74z4fXC40u/MWsueS06fvS7g CUsD7otg/jSngc3pBJqS/mCbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdvQnFIaZ juMq/UUh8cOzw7xtc1YwHwYDVR0jBBgwFoAUoPnraYHccqJ4sYUomQbB4RwLNfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUEwLzlDNTM3MTc4MkY2 NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5m RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BucmFZSGNjcUo0c1lVb21RYkI0UndMTmZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUEwLzlDNTM3MTc4MkY2NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FK NHNZVW9tUWJCNFJ3TE5mRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJkFgvxMI5TsOlPfPsaGHahf3dpJi29+IqCeYseDn2nm7Vpo/6vPWBG3 MivrSKNTAGxTj//mpyWEq0TOCthb7QBmi/cEjTChu2os+GlDduKthBTQggJ791py g84Umeh0okij6DGykgDhdfE0Ddlq5l7LczorqV/bAiSIlnn5i5sSOnRS/ZPnnHDF vIrcnHfluASnSPOXqWNSDXRDvToqGWxGw7UF3btHp0TUcsQ1gJit7cSk3WN46/bZ XUG+9iVIF+zYW7ONeq+kEEl8j77HUs9yQuUuDnCBK9VrxPxo7vU/xnNVBu++sDA/ cTv8qC9V4hDGR1Dfbi4kIl0q4WOtT/Q= -----END CERTIFICATE-----Generated at Sun Dec 7 03:32:23 2025 by rpki-client