This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: 73ZcO+bfokl6mBJHjhSLkshQPP5dKZ3U0KNn8yPbdlQ= Subject key identifier: 12:00:90:5E:32:0B:3F:67:FD:13:09:BE:F7:78:80:50:8B:29:BA:8B Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 055D Signing time: Sat 06 Dec 2025 22:10:37 +0000 Manifest this update: Sat 06 Dec 2025 22:10:36 +0000 Manifest next update: Sat 13 Dec 2025 22:10:36 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: CcQGkV6o5PipOXV/b/DhBvq7PH64y1Ke8m/Idv9fcCE=) 2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: i+4QPkDr7qROj7/pAJHeiI7OYc4LcFLnkxvd/3tQE7c=) 3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: YjByi+kMoaXFs4xfo+3KNYUznj3HRd0PCR5hLvm4CE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: Dec 6 22:10:36 2025 GMT Not After : Dec 13 22:10:36 2025 GMT Subject: CN=6934a9dc-9409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:79:2a:6f:b8:e3:46:af:1b:7b:b0:ba:a0: 16:2c:b4:97:fd:ae:f5:7b:35:a8:14:39:c4:95:d5: 75:b7:17:12:ab:03:49:a6:41:b7:75:c0:f7:03:23: 46:82:a0:7a:78:62:c4:6a:e5:c3:19:58:3e:a4:50: 87:e2:c0:38:ec:fd:48:a9:a0:63:20:69:5d:f3:fc: 1a:5a:f5:7c:45:cb:c6:52:46:6b:cd:2e:d5:e7:de: fd:b4:e3:f1:9f:97:80:12:59:da:55:2c:47:2b:3b: f1:7f:17:c1:9f:b0:fd:90:50:a0:a0:cb:ed:80:01: 2e:ee:b6:6a:55:72:2d:bc:13:1d:9b:db:ec:12:b0: 30:9d:e9:55:14:21:39:c1:57:5c:bb:f8:00:26:f5: fb:f0:3c:d9:6f:51:ba:c5:54:3d:49:60:e0:40:d1: a4:22:7b:d9:db:2b:1f:4a:27:94:e0:16:8a:8e:5b: 75:4b:3b:54:d9:60:7d:bd:88:e4:98:12:95:a8:48: 6e:ef:75:b5:a9:5e:99:39:34:85:2f:60:44:40:77: d0:45:1b:28:33:29:bc:4b:ff:7f:19:9a:02:b4:f1: 6c:18:02:d9:99:c7:3b:49:9a:29:4d:4f:c7:29:d8: e8:96:cf:88:9c:98:a1:1c:4e:34:a4:92:be:1a:fe: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:00:90:5E:32:0B:3F:67:FD:13:09:BE:F7:78:80:50:8B:29:BA:8B X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f5:53:30:db:a5:59:de:da:d6:37:14:c9:9e:d7:1d:af:d6: 21:11:0c:8a:2b:99:52:c9:b7:bd:bb:d0:db:63:7c:a7:07:f7: da:56:1b:d4:84:f9:37:ee:f6:3c:73:59:b8:ee:62:d5:d2:54: ca:f3:2d:7d:bf:7f:6b:75:36:eb:5f:f6:c1:5c:02:33:c7:b6: ac:cf:c0:7a:13:3b:d2:61:19:a9:67:4d:8f:99:3f:a9:b5:0a: eb:da:06:74:92:c7:a0:6f:41:c2:89:f6:c5:96:f7:27:78:f3: 64:92:72:6e:62:99:2b:93:77:e6:e0:c3:93:7e:24:53:68:75: 1c:fd:f2:9e:47:ba:29:71:19:02:28:48:ff:9c:eb:8b:e8:d8: 60:ca:0e:70:c8:80:5b:37:26:57:51:d4:06:09:f2:84:de:e7: e3:8e:fb:81:e8:c4:8d:08:0b:b3:eb:89:66:8d:c4:bf:2e:4a: f4:78:90:ff:67:4e:de:f5:f2:69:3e:50:6b:ad:f8:3d:0e:f0: 74:d5:7c:31:b4:7b:e1:1a:c9:5f:c3:3c:8e:8b:a5:26:13:ee: 83:af:e0:ba:dd:65:9e:c0:dc:f7:50:05:47:27:74:1d:45:d4: 40:10:9e:f4:a3:d4:ce:2e:9d:b7:4c:4a:f0:82:5b:5c:6f:64: 7d:9b:ef:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjUxMjA2MjIxMDM2WhcNMjUxMjEzMjIxMDM2WjAYMRYwFAYD VQQDEw02OTM0YTlkYy05NDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyV5Km+440avG3uwuqAWLLSX/a71ezWoFDnEldV1txcSqwNJpkG3dcD3AyNG gqB6eGLEauXDGVg+pFCH4sA47P1IqaBjIGld8/waWvV8RcvGUkZrzS7V5979tOPx n5eAElnaVSxHKzvxfxfBn7D9kFCgoMvtgAEu7rZqVXItvBMdm9vsErAwnelVFCE5 wVdcu/gAJvX78DzZb1G6xVQ9SWDgQNGkInvZ2ysfSieU4BaKjlt1SztU2WB9vYjk mBKVqEhu73W1qV6ZOTSFL2BEQHfQRRsoMym8S/9/GZoCtPFsGALZmcc7SZopTU/H Kdjols+InJihHE40pJK+Gv6fvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIAkF4y Cz9n/RMJvvd4gFCLKbqLMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj9VMw26VZ3trWNxTJntcdr9YhEQyKK5lSybe9u9DbY3ynB/faVhvU hPk37vY8c1m47mLV0lTK8y19v39rdTbrX/bBXAIzx7asz8B6EzvSYRmpZ02PmT+p tQrr2gZ0ksegb0HCifbFlvcnePNkknJuYpkrk3fm4MOTfiRTaHUc/fKeR7opcRkC KEj/nOuL6Nhgyg5wyIBbNyZXUdQGCfKE3ufjjvuB6MSNCAuz64lmjcS/Lkr0eJD/ Z07e9fJpPlBrrfg9DvB01XwxtHvhGslfwzyOi6UmE+6Dr+C63WWewNz3UAVHJ3Qd RdRAEJ70o9TOLp23TErwgltcb2R9m+/p -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:25 2025 by rpki-client