This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: Uf/VY5AJeGTWUbs24vRWlqStibLmAxTJWwKqELYaHd4= Subject key identifier: 98:62:67:3A:D5:40:D8:7A:FC:93:3F:B9:11:AC:0B:60:1A:23:DF:E0 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 052F Signing time: Thu 04 Dec 2025 22:53:21 +0000 Manifest this update: Thu 04 Dec 2025 22:53:21 +0000 Manifest next update: Thu 11 Dec 2025 22:53:21 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: s+jU+9XxbTkE+agIjeO0OtvrASFI+BcA1a/0Uglk5d0=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: Dec 4 22:53:21 2025 GMT Not After : Dec 11 22:53:21 2025 GMT Subject: CN=693210e1-cb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:1d:75:b3:4c:c3:4d:c7:ee:ff:80:9a:d9: fb:a0:43:87:dd:6a:ad:f9:72:1f:c2:41:ec:eb:a6: 16:00:91:a1:e8:08:90:f0:e0:f5:86:ae:c6:90:65: b2:17:7e:e8:44:5d:de:ef:83:49:b7:00:24:4f:6a: bc:0a:36:fd:72:ae:0b:d7:54:ce:5e:18:c1:8b:9e: 9a:0c:d1:18:5d:a5:a6:0d:67:2f:71:01:59:fa:cc: 3c:91:8a:3e:f2:f2:2d:4d:fc:e5:b2:56:54:8b:dc: 8f:25:8d:55:1a:b7:96:53:a3:0b:e7:9c:88:bf:7f: 70:12:4e:fb:b6:90:56:78:f6:02:1c:3a:b1:bd:41: 26:ca:ab:ef:0f:23:d4:01:19:ba:10:97:a9:f5:87: 54:29:20:9d:42:e2:39:f1:e6:6f:d1:e5:c1:64:97: f2:84:24:c9:bc:65:7e:60:2c:52:a5:f6:b8:da:58: 48:27:aa:5b:94:f2:f0:a0:d9:93:d1:01:bc:6c:e2: a6:ff:19:d1:b6:17:1c:75:c0:14:38:94:18:fc:a7: 41:59:f4:52:34:b6:24:40:a1:17:eb:8e:e5:ba:f3: 23:86:a5:80:8d:1a:85:bd:1b:a6:e1:14:b7:27:47: 10:3a:a4:49:59:fc:19:a2:98:7e:35:f2:ed:4a:50: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:62:67:3A:D5:40:D8:7A:FC:93:3F:B9:11:AC:0B:60:1A:23:DF:E0 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b6:91:83:2b:1f:4a:b5:98:2e:d6:da:70:05:a0:f6:7d:f0: 07:f3:4d:97:c5:cf:b3:f4:ef:ce:28:d1:c4:5f:9d:1c:94:57: d6:8f:d2:61:38:9f:5c:3d:8b:da:ce:22:e2:3b:52:7e:d8:7c: 91:90:8a:d5:7f:4e:19:3f:71:3d:54:29:0b:61:9d:cb:ca:25: a9:2a:a7:c9:e1:01:5a:2c:50:9b:55:55:f5:77:bf:5a:1e:47: d8:fc:b1:b2:37:19:53:61:7f:19:41:34:0f:4e:49:23:53:f4: b4:16:c3:9b:55:95:a4:5a:b6:5d:3d:79:10:ec:fc:17:ad:9a: b7:19:11:06:3a:84:3e:1b:8b:d1:52:62:1a:76:71:d4:ef:34: 8c:50:45:ca:2a:7d:01:b9:4f:45:e4:7b:02:b8:a7:a9:68:19: 6a:83:67:cb:82:20:dd:cb:8a:80:37:8e:57:2b:b4:8e:7d:63: 2d:98:83:b7:85:01:f4:38:5d:c8:b6:03:c7:b1:7b:3b:f3:3c: 79:eb:f0:7b:d8:6a:fe:9c:0a:f2:a9:75:13:ed:11:67:09:a0: f0:ae:02:a9:20:c2:82:e0:63:30:95:7a:cf:b4:88:fd:b1:21: cc:b0:85:aa:50:b2:55:4c:50:2f:96:06:7a:27:b3:e2:53:c9: 0d:68:56:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUxMjA0MjI1MzIxWhcNMjUxMjExMjI1MzIxWjAYMRYwFAYD VQQDEw02OTMyMTBlMS1jYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDIddbNMw03H7v+Amtn7oEOH3Wqt+XIfwkHs66YWAJGh6AiQ8OD1hq7GkGWy F37oRF3e74NJtwAkT2q8Cjb9cq4L11TOXhjBi56aDNEYXaWmDWcvcQFZ+sw8kYo+ 8vItTfzlslZUi9yPJY1VGreWU6ML55yIv39wEk77tpBWePYCHDqxvUEmyqvvDyPU ARm6EJep9YdUKSCdQuI58eZv0eXBZJfyhCTJvGV+YCxSpfa42lhIJ6pblPLwoNmT 0QG8bOKm/xnRthccdcAUOJQY/KdBWfRSNLYkQKEX647luvMjhqWAjRqFvRum4RS3 J0cQOqRJWfwZoph+NfLtSlBSBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhiZzrV QNh6/JM/uRGsC2AaI9/gMB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNtpGDKx9KtZgu1tpwBaD2ffAH802Xxc+z9O/OKNHEX50clFfWj9Jh OJ9cPYvaziLiO1J+2HyRkIrVf04ZP3E9VCkLYZ3LyiWpKqfJ4QFaLFCbVVX1d79a HkfY/LGyNxlTYX8ZQTQPTkkjU/S0FsObVZWkWrZdPXkQ7PwXrZq3GREGOoQ+G4vR UmIadnHU7zSMUEXKKn0BuU9F5HsCuKepaBlqg2fLgiDdy4qAN45XK7SOfWMtmIO3 hQH0OF3ItgPHsXs78zx56/B72Gr+nAryqXUT7RFnCaDwrgKpIMKC4GMwlXrPtIj9 sSHMsIWqULJVTFAvlgZ6J7PiU8kNaFY1 -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:08 2025 by rpki-client