This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: LDnFC5USo04FeAN0YVshidXfMFfwz3qUZ6At8HbSaZw= Subject key identifier: 33:07:6B:65:47:62:6E:5C:4E:B9:3B:5D:43:A1:D7:08:04:F9:49:47 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 01B7 Signing time: Fri 05 Dec 2025 01:21:53 +0000 Manifest this update: Fri 05 Dec 2025 01:21:53 +0000 Manifest next update: Fri 12 Dec 2025 01:21:53 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: DeV+CQQb3qT0JFCZZFywdlHUunwrQGRLKw8driNbMTw=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Dec 5 01:21:53 2025 GMT Not After : Dec 12 01:21:53 2025 GMT Subject: CN=693233b1-a9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:27:62:42:3e:ac:b6:62:5c:8e:a5:37:b9: 43:20:ac:09:82:01:98:64:2c:9f:26:04:39:06:39: e0:f5:03:f4:70:48:22:42:8c:3d:03:dd:a5:e2:83: 8b:cf:23:4e:95:87:8d:28:2f:41:1d:ba:6e:1c:79: 11:62:3f:9f:49:a8:e3:00:b7:49:77:4e:d2:0d:51: fc:b8:48:1c:f0:76:5d:22:33:76:a2:77:9d:12:e2: 2c:9b:56:c0:4c:16:6f:5b:d4:52:e7:99:ba:17:18: 92:27:cb:60:50:9d:06:7e:6e:08:00:8f:93:e2:ac: 6e:ce:71:47:c7:f8:ba:9a:93:de:d9:73:f9:e9:92: 96:f9:c0:ed:58:8e:62:3e:da:15:a3:a0:2e:bf:1c: 6b:a6:4e:c3:b5:a9:b3:77:25:a7:77:40:7c:44:14: 52:d6:59:92:db:cc:7a:ec:0d:3a:2e:99:e3:91:f3: ab:14:0f:2f:29:da:f8:13:a8:39:15:47:10:55:77: 12:a6:a6:d4:12:9d:3e:5d:6f:cf:3f:15:66:9a:c0: 2c:fa:02:4e:31:ba:12:04:10:d0:ec:60:c7:a7:d1: 6a:a9:ac:ae:cf:a7:8a:22:a7:1d:4f:5d:4c:5b:46: e9:11:7a:c8:62:cd:66:ef:59:83:2e:ef:7c:5d:e3: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:6B:65:47:62:6E:5C:4E:B9:3B:5D:43:A1:D7:08:04:F9:49:47 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:43:36:a2:8d:2f:6c:95:98:4f:10:9c:fe:51:02:17:db:ae: dc:43:67:10:fa:4d:cd:42:52:db:10:65:e4:8a:71:16:8f:20: c0:ed:3c:09:c7:b9:55:f8:ad:d6:a1:3c:2c:a7:c3:b5:c6:7d: 33:e7:c5:b4:41:22:54:44:62:2d:39:28:a0:13:74:4c:6b:79: 55:a3:ce:c1:38:d6:d2:87:95:62:59:ae:2a:be:92:69:e4:32: 49:18:58:be:aa:17:33:e3:54:80:2f:b7:95:95:9e:d7:de:12: c9:e3:92:65:75:5b:13:94:5e:79:f7:26:52:4c:7a:ba:5e:14: d2:95:01:e5:80:de:26:49:0e:3d:20:80:4f:8d:a5:92:e2:bf: 65:14:51:b8:37:b8:55:95:ee:63:67:1f:73:a7:46:60:83:93: 08:69:fc:9a:6b:bf:4f:14:19:97:34:1a:fb:2f:76:50:86:92: 2d:47:12:5a:97:2a:e5:0f:10:25:35:4a:7b:90:53:3d:3b:17: 38:bf:39:e0:98:94:8d:82:69:04:46:ef:35:14:4c:52:8d:0e: 6d:94:ca:fb:a5:2b:a3:6a:ef:9c:47:a0:e8:1d:3b:36:04:ad: 82:7f:49:d9:e9:5f:64:ac:70:be:01:e8:98:23:8b:88:97:d5: 65:68:c7:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUxMjA1MDEyMTUzWhcNMjUxMjEyMDEyMTUzWjAYMRYwFAYD VQQDEw02OTMyMzNiMS1hOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gQnYkI+rLZiXI6lN7lDIKwJggGYZCyfJgQ5Bjng9QP0cEgiQow9A92l4oOL zyNOlYeNKC9BHbpuHHkRYj+fSajjALdJd07SDVH8uEgc8HZdIjN2onedEuIsm1bA TBZvW9RS55m6FxiSJ8tgUJ0Gfm4IAI+T4qxuznFHx/i6mpPe2XP56ZKW+cDtWI5i PtoVo6Auvxxrpk7DtamzdyWnd0B8RBRS1lmS28x67A06LpnjkfOrFA8vKdr4E6g5 FUcQVXcSpqbUEp0+XW/PPxVmmsAs+gJOMboSBBDQ7GDHp9Fqqayuz6eKIqcdT11M W0bpEXrIYs1m71mDLu98XeMysQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMHa2VH Ym5cTrk7XUOh1wgE+UlHMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqQzaijS9slZhPEJz+UQIX267cQ2cQ+k3NQlLbEGXkinEWjyDA7TwJ x7lV+K3WoTwsp8O1xn0z58W0QSJURGItOSigE3RMa3lVo87BONbSh5ViWa4qvpJp 5DJJGFi+qhcz41SAL7eVlZ7X3hLJ45JldVsTlF559yZSTHq6XhTSlQHlgN4mSQ49 IIBPjaWS4r9lFFG4N7hVle5jZx9zp0Zgg5MIafyaa79PFBmXNBr7L3ZQhpItRxJa lyrlDxAlNUp7kFM9Oxc4vzngmJSNgmkERu81FExSjQ5tlMr7pSujau+cR6DoHTs2 BK2Cf0nZ6V9krHC+AeiYI4uIl9VlaMeU -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:34 2025 by rpki-client