This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: AwAm6UD8RPLbk36SgmlueTCA78H4B8VB2qj4ZG6YXZY= Subject key identifier: CD:B8:BA:6E:15:E2:36:BF:CA:1A:0A:F6:27:26:2D:E8:73:5B:37:9E Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: 0122 Signing time: Fri 05 Dec 2025 02:53:37 +0000 Manifest this update: Fri 05 Dec 2025 02:53:36 +0000 Manifest next update: Fri 12 Dec 2025 02:53:36 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: NjeKEIpvPfO6csojM5X7Giuf4Xv9s1qE/LkK/cIW1vI=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: d8hqa3VZK4uOVZ2NvSviBU2tKSi94lw2kqJ0YIkiOVk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: 4xCjhLIdX51ri4H5JFEDOXxLAoM3aQzhavfN2qSp8lM=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: 4rxa1nn9pIW4f6C2tqJ4BWqQLDcGWeXHub2QF8i41eo=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: rhkmKm24Z3LGwUDn9U8wPN9PfTD6fV18fMcA/oDsqYQ=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: zHkwstjBU9okILb/X+WL5mE12pvjEZDjhxeOKIBOBNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Dec 5 02:53:36 2025 GMT Not After : Dec 12 02:53:36 2025 GMT Subject: CN=69324931-4e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:e5:09:86:9c:9d:d9:b0:b5:48:ba:cc:b6: f3:4b:f6:33:5d:de:ad:44:fe:9d:d9:d5:0e:dd:0f: 30:b3:fb:24:6d:b3:e7:06:6c:c4:ad:3d:01:8d:ed: 03:2c:86:03:52:14:c9:37:7a:39:47:81:65:61:c7: bd:5d:50:4c:3b:82:6c:41:31:f1:a7:0b:b0:4e:3c: 3c:9c:84:2a:78:77:97:18:42:80:f2:68:16:a6:26: 9e:5b:9f:24:70:2c:4a:e2:4f:83:87:5e:ac:6b:2f: d1:67:67:0f:61:39:76:42:45:c0:0f:45:45:1e:0d: 8b:fd:5c:02:33:dd:fb:1d:35:70:55:d7:f3:74:49: 87:91:e7:ae:1a:58:57:4b:c4:5b:2e:43:d4:2a:bf: b1:cb:bb:9a:bb:b8:09:fb:07:12:f5:66:55:47:72: 10:ce:36:3c:34:10:33:2d:f3:54:78:f3:22:57:a2: 91:22:ba:9d:1d:c7:17:9a:5f:43:81:99:4d:e2:73: 08:fd:0f:3f:be:4e:0b:e9:32:c5:9d:b9:cb:34:b5: e9:ed:51:c0:ba:73:be:1d:b5:8b:75:36:34:7e:c7: 78:94:8e:15:1c:20:b9:9d:06:64:ce:4d:0b:61:9c: b2:6b:53:8d:31:8b:7a:80:7e:ab:6b:f8:e3:1c:a8: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B8:BA:6E:15:E2:36:BF:CA:1A:0A:F6:27:26:2D:E8:73:5B:37:9E X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:02:da:35:ed:0f:b9:fb:89:02:40:11:ab:f6:cc:9b:4c:2f: 1e:09:d8:a1:7d:d2:2e:7b:bc:df:8b:d9:83:c6:0f:cd:1f:02: 48:2a:1c:e9:8d:d6:4e:e9:8e:b4:16:4a:a7:7b:6f:7f:dd:dc: 64:cc:39:66:f7:73:08:8b:17:be:26:05:58:95:54:d5:d3:ca: 7c:64:f5:40:f5:5c:d1:af:4d:b6:fd:0b:14:8b:6d:0e:0d:aa: 42:af:20:ec:fc:c2:38:cf:a1:dc:bf:37:99:e4:d2:70:bf:c5: d6:c1:79:3e:f5:a4:f6:76:1d:6b:81:fe:cc:d9:db:56:e7:bb: 73:02:8d:38:74:e5:c7:f2:1a:c2:62:19:88:ad:a8:11:45:3a: 88:5b:b2:fc:3b:6a:08:62:9b:cb:0e:9c:e6:cc:be:14:ff:8f: 49:af:c3:2b:4e:e1:a6:a9:b8:3e:a3:9d:40:10:c7:93:50:aa: 77:ce:ac:b5:de:6f:cf:4d:bc:b1:9b:d6:55:f0:29:f3:b6:1e: 4f:0c:9f:ff:a2:33:12:ef:6e:11:95:f7:e9:57:22:93:68:11: 30:9b:25:8b:a5:21:97:83:39:fe:c9:7c:df:d7:84:23:51:10: ca:5d:65:e5:92:11:c1:12:fd:4c:ef:81:43:95:d5:5f:a2:32: 47:a3:61:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUxMjA1MDI1MzM2WhcNMjUxMjEyMDI1MzM2WjAYMRYwFAYD VQQDEw02OTMyNDkzMS00ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDnlCYacndmwtUi6zLbzS/YzXd6tRP6d2dUO3Q8ws/skbbPnBmzErT0Bje0D LIYDUhTJN3o5R4FlYce9XVBMO4JsQTHxpwuwTjw8nIQqeHeXGEKA8mgWpiaeW58k cCxK4k+Dh16say/RZ2cPYTl2QkXAD0VFHg2L/VwCM937HTVwVdfzdEmHkeeuGlhX S8RbLkPUKr+xy7uau7gJ+wcS9WZVR3IQzjY8NBAzLfNUePMiV6KRIrqdHccXml9D gZlN4nMI/Q8/vk4L6TLFnbnLNLXp7VHAunO+HbWLdTY0fsd4lI4VHCC5nQZkzk0L YZyya1ONMYt6gH6ra/jjHKgN9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM24um4V 4ja/yhoK9icmLehzWzeeMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArAto17Q+5+4kCQBGr9sybTC8eCdihfdIue7zfi9mDxg/NHwJIKhzp jdZO6Y60Fkqne29/3dxkzDlm93MIixe+JgVYlVTV08p8ZPVA9VzRr022/QsUi20O DapCryDs/MI4z6HcvzeZ5NJwv8XWwXk+9aT2dh1rgf7M2dtW57tzAo04dOXH8hrC YhmIragRRTqIW7L8O2oIYpvLDpzmzL4U/49Jr8MrTuGmqbg+o51AEMeTUKp3zqy1 3m/PTbyxm9ZV8Cnzth5PDJ//ojMS724RlffpVyKTaBEwmyWLpSGXgzn+yXzf14Qj URDKXWXlkhHBEv1M74FDldVfojJHo2G3 -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:09 2025 by rpki-client