This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json) Hash identifier: 5LnZoTgCaNJet6wnn3YtJDUSa6hDsfiEBFgNBqJCTn4= Subject key identifier: AF:B1:E1:38:BA:C6:F3:AA:D2:AB:9B:5A:64:8F:05:DB:66:A9:90:73 Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Certificate serial: 0F92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft Manifest number: 0F86 Signing time: Thu 04 Dec 2025 17:08:06 +0000 Manifest this update: Thu 04 Dec 2025 17:08:06 +0000 Manifest next update: Thu 11 Dec 2025 17:08:06 +0000 Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: pSB4puKTurlqWEslyB5HxKp/7hnBlSQqiBUe9LSDO5w=) 2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: BLJkluhKw88yyy85QriscmwIr8Z03FPtQoZtvtnCfp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3986 (0xf92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Validity Not Before: Dec 4 17:08:06 2025 GMT Not After : Dec 11 17:08:06 2025 GMT Subject: CN=6931bff6-b845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:25:2d:89:ba:d9:ba:dc:6d:35:69:fa:5b: 8e:6d:1b:e9:c5:53:b1:99:6f:c6:25:5a:7c:a2:1c: f4:43:96:2d:cc:35:56:96:4b:f3:e6:33:54:43:66: f3:d2:3f:e2:d7:2b:1a:ce:64:28:d5:5d:b6:cb:93: 08:dd:f1:60:79:2f:e1:ec:b6:df:bf:86:98:0a:ce: a7:85:96:e7:c4:ba:50:f8:f2:7a:ba:2c:e8:ab:3e: 8a:1d:ce:a1:c7:27:28:5c:bb:e9:dd:b9:03:dd:28: a1:d7:a5:6b:21:d4:59:73:33:12:0e:32:f7:bc:e1: f4:ed:4b:ca:13:76:8c:34:25:53:9e:17:2d:e6:79: 64:62:5e:9b:97:fd:cf:c7:20:5a:21:77:58:d8:e4: f0:e3:4d:96:c5:f8:39:9b:29:5f:25:10:57:b3:1a: db:c4:c4:87:bb:54:d8:c1:b3:fd:54:53:47:c9:9d: 1b:e2:b2:ea:d3:f3:69:a3:55:ee:cb:ca:a6:53:c4: d9:8e:c1:3f:84:0f:8f:6f:fe:58:a2:de:ff:b2:b8: 61:e5:9e:2a:a2:ae:e7:29:28:a4:bd:6c:95:17:80: 8a:2f:24:c9:75:c5:db:26:ff:be:26:d6:e0:cb:0e: 23:1f:3a:d2:97:22:4a:dd:b0:27:97:fe:c0:2c:4a: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B1:E1:38:BA:C6:F3:AA:D2:AB:9B:5A:64:8F:05:DB:66:A9:90:73 X509v3 Authority Key Identifier: keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:97:09:71:39:d7:87:b4:30:6c:18:93:f2:12:4d:a2:0e:23: 37:32:53:92:74:1e:1f:51:b9:1f:b9:93:49:f7:a1:9e:58:b6: 6f:6c:05:af:e7:9e:e0:10:7b:5f:09:0c:1a:5a:0d:2b:38:ac: 73:9f:70:16:fb:21:bc:96:10:bc:0d:2e:07:df:e4:6d:dd:c1: 40:58:e0:0c:2d:09:9e:05:9a:bd:64:2f:7e:74:22:54:64:68: 43:10:42:c6:76:13:8c:9a:79:9b:0b:76:bb:ea:9a:56:75:5a: b2:76:57:92:dc:ef:df:88:88:24:e2:18:82:e3:04:9f:99:00: e0:b4:fe:1e:e0:bb:5e:ae:bc:70:ac:f5:ca:29:b0:c2:50:6c: fe:a5:5d:a5:b5:d4:1e:5e:ef:d2:fe:6c:fb:2f:f4:39:6d:68: d0:b0:b1:43:a2:46:f2:5a:e0:d0:0c:ef:e2:23:c5:06:b9:36: a9:54:38:5f:ea:bf:38:18:f1:5a:8d:21:90:0d:94:63:b0:5c: 27:97:c6:7e:45:7a:d7:a8:a6:36:3f:b5:5d:d0:d9:90:62:f2: b8:49:8f:e0:5e:7c:9f:b5:7c:3b:ac:3e:a5:59:35:ba:2c:84: 1d:b1:b9:22:47:51:22:ea:30:8c:d3:f4:7b:ce:8b:8b:41:4a: a3:ec:7b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4 ODYxRkRDRTAwHhcNMjUxMjA0MTcwODA2WhcNMjUxMjExMTcwODA2WjAYMRYwFAYD VQQDEw02OTMxYmZmNi1iODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumElLYm62brcbTVp+luObRvpxVOxmW/GJVp8ohz0Q5YtzDVWlkvz5jNUQ2bz 0j/i1ysazmQo1V22y5MI3fFgeS/h7Lbfv4aYCs6nhZbnxLpQ+PJ6uizoqz6KHc6h xycoXLvp3bkD3Sih16VrIdRZczMSDjL3vOH07UvKE3aMNCVTnhct5nlkYl6bl/3P xyBaIXdY2OTw402Wxfg5mylfJRBXsxrbxMSHu1TYwbP9VFNHyZ0b4rLq0/Npo1Xu y8qmU8TZjsE/hA+Pb/5Yot7/srhh5Z4qoq7nKSikvWyVF4CKLyTJdcXbJv++Jtbg yw4jHzrSlyJK3bAnl/7ALEpL9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+x4Ti6 xvOq0qubWmSPBdtmqZBzMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2 NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG T1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9lwlxOdeHtDBsGJPyEk2iDiM3MlOSdB4fUbkfuZNJ96GeWLZvbAWv 557gEHtfCQwaWg0rOKxzn3AW+yG8lhC8DS4H3+Rt3cFAWOAMLQmeBZq9ZC9+dCJU ZGhDEELGdhOMmnmbC3a76ppWdVqydleS3O/fiIgk4hiC4wSfmQDgtP4e4Lterrxw rPXKKbDCUGz+pV2ltdQeXu/S/mz7L/Q5bWjQsLFDokbyWuDQDO/iI8UGuTapVDhf 6r84GPFajSGQDZRjsFwnl8Z+RXrXqKY2P7Vd0NmQYvK4SY/gXnyftXw7rD6lWTW6 LIQdsbkiR1Ei6jCM0/R7zouLQUqj7HtP -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:50 2025 by rpki-client