This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: aUCh4zBclPMY9sW6//h11sqMmZz0aFJF06MdihUWCgo= Subject key identifier: 7E:92:46:A3:28:B4:5D:F3:73:74:EE:6D:32:B5:89:B1:62:E0:A0:A9 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0CF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0CDC Signing time: Thu 04 Dec 2025 17:39:10 +0000 Manifest this update: Thu 04 Dec 2025 17:39:09 +0000 Manifest next update: Thu 11 Dec 2025 17:39:09 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: 9KAtDo1QvfHdKY+LBT5n6jDoJYcdcnAVP28ZJf7mczQ=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: 6JiNuWz5Fkw8aMu3lON6uTLPgLOG+xf9uCqK1rE3Qew=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: 80MLiBcpNIycThAKM26TDicBsDE58l79IER/QoSPi08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Dec 4 17:39:09 2025 GMT Not After : Dec 11 17:39:09 2025 GMT Subject: CN=6931c73e-5c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:e5:9a:b4:d1:91:63:a4:cc:01:30:af:d7: 37:be:0c:33:66:81:8f:4f:ad:62:24:12:3f:bc:d5: 61:03:95:62:73:09:fa:69:6f:73:8d:4a:67:84:1d: 0a:65:06:0f:dc:da:0f:27:c7:86:68:aa:7e:4c:30: 88:64:f5:8a:61:24:0c:ce:4b:48:8d:36:92:5e:c6: ca:01:d1:64:60:68:25:11:63:f3:08:58:4c:16:03: 71:44:83:dc:8f:e2:e8:a6:48:af:59:6a:b9:f2:f5: d0:e9:ac:e1:8b:f9:53:7b:f2:cd:13:e0:f6:7f:76: 8b:15:7a:db:05:34:6a:be:1b:4f:e6:51:b6:e3:d3: 72:52:86:40:9e:76:ae:df:fb:a4:f8:a7:e1:51:e5: 8d:78:f0:cb:b4:67:16:0e:46:2d:4c:de:a7:f3:30: 5c:0a:d2:e6:ee:84:42:d3:38:61:02:a5:7a:6d:d6: df:cd:30:79:6b:22:a2:0c:9f:58:34:e1:b9:92:ae: cd:42:82:1a:fb:ed:a7:43:c1:71:e4:28:8a:ef:c4: e2:3b:b6:a5:02:b9:d5:ab:df:1a:79:d6:58:b3:8b: b5:db:97:af:61:8d:ae:6f:9a:e0:b6:3f:13:1e:8f: ee:9d:86:95:20:5f:12:23:27:8e:da:2d:a4:59:ae: 9f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:92:46:A3:28:B4:5D:F3:73:74:EE:6D:32:B5:89:B1:62:E0:A0:A9 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5a:e1:5a:ee:93:ab:83:f7:de:b9:80:2d:3f:d1:e4:aa:dc: 86:16:88:ae:3f:61:c1:9e:cd:92:c0:4d:13:57:9f:68:fc:c2: f6:51:15:6f:41:e9:c0:06:7e:e9:3e:79:a3:09:19:4d:39:c3: b0:59:7b:92:30:c4:8e:ed:b3:0c:65:0a:8a:70:aa:88:ff:51: a0:fa:ac:2c:ba:95:b0:7b:a5:f9:4d:b3:a7:4f:e7:ab:a8:b3: 9c:6d:39:f5:4c:dd:4f:76:ec:cb:6b:d8:67:99:40:e2:38:a7: ea:e9:2e:cd:fe:e2:52:07:26:4e:e5:bc:8e:83:d0:5e:0c:b8: d6:b2:89:a6:b8:36:89:5c:0f:32:9d:82:d9:f5:0e:c2:97:c4: 66:f8:f4:02:3b:8a:ca:1a:6b:8f:01:a2:19:8a:75:da:17:f2: 3f:20:f1:b7:79:87:07:66:5c:1f:b3:23:ab:fc:7f:13:c7:0c: 5b:f3:e5:db:db:93:f7:33:64:16:8b:05:fa:25:83:02:0a:72: 25:b1:77:37:37:6c:29:88:ff:79:bc:2d:f5:f0:d2:d7:7e:25: 18:7b:c3:eb:f9:ba:7a:54:e4:0b:ca:c5:a7:fa:4e:30:06:f2: 9b:e4:91:4f:ee:89:7e:e5:dd:14:b9:89:ac:cf:13:b8:05:82: 0b:df:d3:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjUxMjA0MTczOTA5WhcNMjUxMjExMTczOTA5WjAYMRYwFAYD VQQDEw02OTMxYzczZS01YzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hTlmrTRkWOkzAEwr9c3vgwzZoGPT61iJBI/vNVhA5Vicwn6aW9zjUpnhB0K ZQYP3NoPJ8eGaKp+TDCIZPWKYSQMzktIjTaSXsbKAdFkYGglEWPzCFhMFgNxRIPc j+LopkivWWq58vXQ6azhi/lTe/LNE+D2f3aLFXrbBTRqvhtP5lG249NyUoZAnnau 3/uk+KfhUeWNePDLtGcWDkYtTN6n8zBcCtLm7oRC0zhhAqV6bdbfzTB5ayKiDJ9Y NOG5kq7NQoIa++2nQ8Fx5CiK78TiO7alArnVq98aedZYs4u125evYY2ub5rgtj8T Ho/unYaVIF8SIyeO2i2kWa6fKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6SRqMo tF3zc3TubTK1ibFi4KCpMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPWuFa7pOrg/feuYAtP9HkqtyGFoiuP2HBns2SwE0TV59o/ML2URVv QenABn7pPnmjCRlNOcOwWXuSMMSO7bMMZQqKcKqI/1Gg+qwsupWwe6X5TbOnT+er qLOcbTn1TN1PduzLa9hnmUDiOKfq6S7N/uJSByZO5byOg9BeDLjWsommuDaJXA8y nYLZ9Q7Cl8Rm+PQCO4rKGmuPAaIZinXaF/I/IPG3eYcHZlwfsyOr/H8Txwxb8+Xb 25P3M2QWiwX6JYMCCnIlsXc3N2wpiP95vC318NLXfiUYe8Pr+bp6VOQLysWn+k4w BvKb5JFP7ol+5d0UuYmszxO4BYIL39N3 -----END CERTIFICATE-----Generated at Sat Dec 6 13:13:47 2025 by rpki-client