This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft File: EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json) Hash identifier: tgiEDXytOVqftGzzcsRhnoFW4+ZuikwLgmlBk2M5Dt0= Subject key identifier: 99:FF:0F:80:7F:38:34:90:34:A1:13:A6:90:5C:9A:5C:85:E2:4B:A9 Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft Manifest number: FF Signing time: Fri 05 Dec 2025 03:10:54 +0000 Manifest this update: Fri 05 Dec 2025 03:10:53 +0000 Manifest next update: Fri 12 Dec 2025 03:10:53 +0000 Files and hashes: 1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: QHLq95aim6C9Q9TY6MW1Pju17/ySKqsv/wpEHz5puE4=) 2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: HYF/fg1voE6IFgfpnqUye0EtCWfbuCFF1mA1Z69GiMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Validity Not Before: Dec 5 03:10:53 2025 GMT Not After : Dec 12 03:10:53 2025 GMT Subject: CN=69324d3d-4d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:62:80:ee:7d:08:82:7c:53:56:86:21:0e: 42:6f:ad:fa:5d:26:3a:bd:77:1c:5b:04:f0:9f:44: d0:7f:e4:2e:b8:ff:96:c3:35:30:07:15:c8:35:9f: 4d:04:d5:32:86:da:63:a2:f8:e4:b4:7b:40:44:51: 32:26:15:80:ed:b9:8b:1b:a3:f9:43:62:cd:92:2d: ed:4c:ac:eb:23:cd:45:22:39:77:6a:ab:42:e5:3c: a8:62:a1:10:ac:82:29:42:0f:44:81:d8:a7:44:c0: 42:81:de:8c:fd:af:1b:ce:21:fb:4b:5e:6a:ac:58: be:f0:fd:66:cc:af:08:2d:f9:c9:6b:0b:58:e0:ae: 03:54:73:cb:ee:a7:dd:45:f5:2a:99:61:8c:c8:58: f4:b8:a6:0a:5d:3a:e7:22:fc:a9:e9:d9:35:c5:cb: e0:32:f9:cc:29:cd:d4:87:cd:a8:eb:f7:22:f6:10: dd:63:dd:6f:29:db:9a:f7:d6:76:39:97:3b:50:ff: 49:a2:70:31:77:c3:b0:a3:57:4b:82:96:25:b1:48: f7:e1:9f:50:ef:96:76:21:a5:0c:f8:ec:38:83:42: d3:9b:c1:c5:41:a2:ea:2c:8a:6f:57:77:bd:2a:24: 0f:b6:5c:f6:fa:0e:0d:e9:b5:81:42:e5:e7:e9:50: ce:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FF:0F:80:7F:38:34:90:34:A1:13:A6:90:5C:9A:5C:85:E2:4B:A9 X509v3 Authority Key Identifier: keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fe:1e:21:8a:3c:91:b5:80:cd:51:35:c7:9a:75:5c:69:d4: 39:fd:f7:79:00:2b:e6:c1:a3:c4:c7:33:43:0b:5b:02:94:4d: 32:c8:5f:8f:77:b9:51:82:32:df:6f:82:4d:93:97:a2:18:f2: 0f:c2:59:63:cd:eb:90:3d:16:4c:12:b6:83:2b:c7:1b:d2:4e: 30:c2:1e:e9:bd:db:c2:2c:f4:7e:d2:5c:e4:cf:40:2a:7b:9a: 88:ae:24:43:e8:e5:86:b2:8f:57:e3:6c:69:0b:1e:54:2f:4f: f7:fc:bd:5b:25:4f:a3:3d:05:0d:90:71:e4:aa:38:09:d0:8e: 77:72:80:74:7f:38:da:03:77:fc:5d:b2:cc:b0:a3:c9:43:2d: c9:12:ee:4e:13:00:75:8d:4a:a5:06:e7:ee:db:20:f5:bd:da: 8c:f6:ac:80:b7:23:5e:cd:c0:7d:1a:84:98:af:f1:9d:65:9a: 9d:a7:6f:3c:68:e5:5f:e5:00:26:bf:8f:32:0a:48:8e:01:49: ee:d4:dd:28:7a:1e:9a:e1:4b:3d:0c:3c:2f:cf:cf:fa:c9:b4: 2b:85:63:ef:6e:dc:df:7a:00:a5:85:8c:41:dc:3c:77:87:f6: 23:d9:a1:fe:72:13:f5:88:f3:c2:d4:c4:c8:81:82:be:8d:dd: 8c:39:e7:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDOTAxMTAvBgNVBAUTKDEwRUE2NTMyNjUxMDI1MDI5NDQzQ0UxMjQzNTdEMzNE MjhBQzI0QzAwHhcNMjUxMjA1MDMxMDUzWhcNMjUxMjEyMDMxMDUzWjAYMRYwFAYD VQQDEw02OTMyNGQzZC00ZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUtigO59CIJ8U1aGIQ5Cb636XSY6vXccWwTwn0TQf+QuuP+WwzUwBxXINZ9N BNUyhtpjovjktHtARFEyJhWA7bmLG6P5Q2LNki3tTKzrI81FIjl3aqtC5TyoYqEQ rIIpQg9EgdinRMBCgd6M/a8bziH7S15qrFi+8P1mzK8ILfnJawtY4K4DVHPL7qfd RfUqmWGMyFj0uKYKXTrnIvyp6dk1xcvgMvnMKc3Uh82o6/ci9hDdY91vKdua99Z2 OZc7UP9JonAxd8Owo1dLgpYlsUj34Z9Q75Z2IaUM+Ow4g0LTm8HFQaLqLIpvV3e9 KiQPtlz2+g4N6bWBQuXn6VDOVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJn/D4B/ ODSQNKETppBcmlyF4kupMB8GA1UdIwQYMBaAFBDqZTJlECUClEPOEkNX0z0orCTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0M5MC8wMEQ3QjA0RTRF RTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpRS1VRODRTUTFmVFBTaXNK TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPcGxNbVVRSlFLVVE4NFNRMWZUUFNpc0pNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0M5MC8wMEQ3QjA0RTRFRTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpR S1VRODRTUTFmVFBTaXNKTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9/h4hijyRtYDNUTXHmnVcadQ5/fd5ACvmwaPExzNDC1sClE0yyF+P d7lRgjLfb4JNk5eiGPIPwlljzeuQPRZMEraDK8cb0k4wwh7pvdvCLPR+0lzkz0Aq e5qIriRD6OWGso9X42xpCx5UL0/3/L1bJU+jPQUNkHHkqjgJ0I53coB0fzjaA3f8 XbLMsKPJQy3JEu5OEwB1jUqlBufu2yD1vdqM9qyAtyNezcB9GoSYr/GdZZqdp288 aOVf5QAmv48yCkiOAUnu1N0oeh6a4Us9DDwvz8/6ybQrhWPvbtzfegClhYxB3Dx3 h/Yj2aH+chP1iPPC1MTIgYK+jd2MOec/ -----END CERTIFICATE-----Generated at Sat Dec 6 19:56:13 2025 by rpki-client