This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft File: 0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json) Hash identifier: LJvReNOenGSTlaD9lEoFbpIV1JAK6n8DInt47dtflpM= Subject key identifier: BA:4D:AB:0B:C9:88:79:36:F8:A4:AC:65:81:77:DF:96:AB:DD:CC:8E Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Certificate serial: 057C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft Manifest number: 0577 Signing time: Thu 04 Dec 2025 21:56:39 +0000 Manifest this update: Thu 04 Dec 2025 21:56:39 +0000 Manifest next update: Thu 11 Dec 2025 21:56:39 +0000 Files and hashes: 1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: efAWH72KoPLbcd6a/lsYdFFXOIERNt57a49uRXPx/Ic=) 2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: JNxs4L4e1ceFr4b8NRWrFPbylob6Fmj/cL16X1jkyEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Validity Not Before: Dec 4 21:56:39 2025 GMT Not After : Dec 11 21:56:39 2025 GMT Subject: CN=69320397-f997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:ce:b0:7a:a1:35:53:d6:ec:f7:df:83:ba: 31:a4:42:fe:ac:0e:c9:63:e1:c9:8c:36:15:0f:26: 2f:03:f2:01:f0:2c:9d:73:3c:84:f6:2b:49:68:19: cf:b3:97:1c:20:45:6b:59:cb:c9:96:cc:c5:d3:78: 73:50:1a:58:e6:ba:bf:58:a1:62:93:1a:ba:9b:b7: dd:b7:a2:bf:c3:c3:36:07:3a:0e:ce:fa:87:eb:59: 79:8e:b5:de:ff:5e:f9:9b:22:e7:4b:c4:b7:76:dc: 3c:70:c2:44:7d:0b:73:29:16:d9:b3:4b:2a:49:4f: 93:93:06:4f:ff:0c:ad:ef:51:09:bb:bb:bf:45:58: be:a2:f8:d9:3d:a5:9b:9e:ca:98:5f:76:4d:1c:cd: 53:71:82:ea:93:20:1c:e0:fe:1c:5d:41:6a:56:4f: 71:23:e7:2b:90:7a:2e:44:a4:c6:5e:0e:1f:1f:a5: b2:dd:eb:60:67:92:e0:22:2c:45:24:40:9b:ae:db: c8:73:bc:ee:ea:fa:7d:86:67:4c:8b:d3:29:7f:0f: cb:8e:ea:46:b0:bd:63:81:53:e8:5d:66:cb:a8:7b: 26:fe:c9:76:5f:c3:da:7c:9c:e1:b6:8a:90:14:d8: 24:96:a7:7c:af:e8:50:80:0b:40:8a:aa:b6:0f:ba: fd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4D:AB:0B:C9:88:79:36:F8:A4:AC:65:81:77:DF:96:AB:DD:CC:8E X509v3 Authority Key Identifier: keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:1a:14:91:1a:4d:78:90:03:06:94:4d:d3:4b:67:be:65:3d: 87:da:1c:61:b7:04:98:f8:bc:60:1a:13:22:6f:18:7d:50:aa: 2a:03:f7:b6:7d:06:6f:fc:bc:48:09:20:60:7e:50:2d:aa:a4: 18:32:8c:08:49:f6:88:a3:34:4f:e7:fc:bb:97:ad:9b:b6:53: 9e:91:53:96:82:96:4f:71:c1:af:57:e7:9d:9d:0e:52:45:57: 96:6c:71:7e:f1:93:51:4c:d3:28:ad:96:b1:ab:62:cc:22:94: 4f:8e:f6:44:36:36:0c:8e:ce:9b:40:a3:48:7b:32:41:f5:32: 11:3e:b7:05:c7:4b:c1:22:90:fb:33:f8:2d:93:c5:31:f6:da: 1a:d8:dc:7d:41:65:f4:14:1f:d6:e7:ba:0e:51:22:d1:3f:14: 6e:89:68:03:bb:b3:60:68:c9:de:a1:df:da:97:d9:4f:05:3b: 10:15:f9:85:dc:47:01:96:94:04:d7:30:13:28:60:6c:14:22: a5:92:be:a0:85:18:21:9a:16:e9:86:67:9a:18:d0:46:23:f4: 46:eb:d3:28:5b:16:8b:b4:1e:d3:5c:93:dc:65:9b:81:c8:47: 29:93:95:af:24:c3:88:3e:f3:88:e8:72:e8:b8:95:10:35:2f: a5:11:8f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQUMxMTAvBgNVBAUTKEQxNTJERjcyRTVENkMxQzZGRTQyQjY0MjM3N0MzQjA4 ODEyODZERTcwHhcNMjUxMjA0MjE1NjM5WhcNMjUxMjExMjE1NjM5WjAYMRYwFAYD VQQDEw02OTMyMDM5Ny1mOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVbOsHqhNVPW7Pffg7oxpEL+rA7JY+HJjDYVDyYvA/IB8CydczyE9itJaBnP s5ccIEVrWcvJlszF03hzUBpY5rq/WKFikxq6m7fdt6K/w8M2BzoOzvqH61l5jrXe /175myLnS8S3dtw8cMJEfQtzKRbZs0sqSU+TkwZP/wyt71EJu7u/RVi+ovjZPaWb nsqYX3ZNHM1TcYLqkyAc4P4cXUFqVk9xI+crkHouRKTGXg4fH6Wy3etgZ5LgIixF JECbrtvIc7zu6vp9hmdMi9Mpfw/LjupGsL1jgVPoXWbLqHsm/sl2X8PafJzhtoqQ FNgklqd8r+hQgAtAiqq2D7r9HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpNqwvJ iHk2+KSsZYF335ar3cyOMB8GA1UdIwQYMBaAFNFS33Ll1sHG/kK2Qjd8OwiBKG3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZBQy8zQ0Y3OThFMDA0 OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3djYi1RclpDTjN3N0NJRW9i ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWTGZjdVhXd2NiLVFyWkNOM3c3Q0lFb2JlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZBQy8zQ0Y3OThFMDA0OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3dj Yi1RclpDTjN3N0NJRW9iZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4GhSRGk14kAMGlE3TS2e+ZT2H2hxhtwSY+LxgGhMibxh9UKoqA/e2 fQZv/LxICSBgflAtqqQYMowISfaIozRP5/y7l62btlOekVOWgpZPccGvV+ednQ5S RVeWbHF+8ZNRTNMorZaxq2LMIpRPjvZENjYMjs6bQKNIezJB9TIRPrcFx0vBIpD7 M/gtk8Ux9toa2Nx9QWX0FB/W57oOUSLRPxRuiWgDu7NgaMneod/al9lPBTsQFfmF 3EcBlpQE1zATKGBsFCKlkr6ghRghmhbphmeaGNBGI/RG69MoWxaLtB7TXJPcZZuB yEcpk5WvJMOIPvOI6HLouJUQNS+lEY8a -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:40 2025 by rpki-client