This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: XZpNpD4Fv1TZtqN7yPybQLAP6qwVrZOC2teC0+mBo6c= Subject key identifier: B7:9D:B1:EE:19:F2:0D:A9:F6:51:57:89:47:BF:D6:A1:1D:00:C1:83 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 021D Signing time: Fri 05 Dec 2025 00:30:08 +0000 Manifest this update: Fri 05 Dec 2025 00:30:07 +0000 Manifest next update: Fri 12 Dec 2025 00:30:07 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: 2D8Uv5Z7BqjGqzeheQUGnbgJmIjbHB+J27BpbWzQdOQ=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: 4yRhL9kVMGnZbWA+LNDehvbTaP/J/shZ+9q9XJ0iuQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Dec 5 00:30:07 2025 GMT Not After : Dec 12 00:30:07 2025 GMT Subject: CN=69322790-ef20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:50:f5:2f:9b:9b:a1:bb:68:49:56:d7:8f: a2:5a:d0:49:57:67:a4:6e:f3:7f:11:7e:36:13:bd: c2:dc:a0:4b:96:0f:5b:51:c2:0d:c6:43:ca:9e:f6: 11:a7:9e:3f:c8:b4:8d:94:11:a3:96:8e:25:36:5d: 1d:83:07:83:23:51:6b:f4:76:17:69:a6:43:e3:f9: c7:f9:fd:2a:60:f2:a8:52:df:0c:bd:30:ab:dd:e6: 20:cd:88:3e:42:68:df:3a:e4:ed:46:f8:84:a1:d3: 9b:43:f7:eb:5c:15:38:c1:0a:b3:5f:b4:3b:32:c1: 56:2e:53:01:a4:12:cc:1b:24:6f:b7:4e:5c:b2:17: 4e:47:cb:f2:c1:3d:53:b9:a6:f1:68:0f:bd:1a:9b: 42:5b:1d:25:30:44:f7:81:3c:61:1b:8f:08:cb:2d: e8:cb:64:87:10:16:3e:ff:7e:e4:ec:d4:5e:1f:df: e2:a4:ad:ca:8c:92:40:4a:e8:91:f4:b4:5a:2f:21: 26:c2:b3:1b:df:b7:0e:a3:e9:39:f9:6f:c2:1d:63: cf:14:b1:86:7c:d7:2e:9d:d6:6a:52:50:46:d9:54: bd:75:ac:09:82:b2:e5:ce:f3:62:a3:f4:a8:41:d4: 89:53:a6:2e:4a:b6:da:97:43:b4:bc:e9:11:1b:ac: 64:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9D:B1:EE:19:F2:0D:A9:F6:51:57:89:47:BF:D6:A1:1D:00:C1:83 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:26:18:e9:71:d3:b3:eb:1a:fd:da:63:48:78:49:3a:2f:c6: db:00:58:77:dc:e0:5e:f4:fc:d7:aa:60:ae:20:ff:4f:49:dd: ca:77:69:57:a6:8e:3a:aa:88:6a:85:ee:34:3f:6a:af:69:cf: eb:33:9b:50:aa:2a:d7:db:4b:8a:de:18:f2:ba:13:94:43:a4: 3a:cc:be:ea:f0:c3:8d:f7:8f:64:90:01:92:d0:80:2e:db:b6: 85:e9:85:4f:54:92:6e:6e:31:a2:66:04:4b:ce:e9:b7:21:38: ac:9a:54:aa:c7:c2:9e:a3:35:4a:bc:26:48:8a:78:51:d8:28: f7:97:0f:7f:8e:e9:7c:8a:76:0e:d1:ef:7f:6e:c3:cf:63:d7: 4a:ed:5d:f0:87:2b:f7:cd:00:7d:a7:d9:2c:c6:8b:ad:02:45: 3b:10:77:39:0a:db:05:82:63:22:59:6b:62:af:1a:86:51:66: bf:21:49:40:83:4f:73:52:a6:5c:e3:a0:10:67:ef:db:5b:b1: d1:5b:61:01:31:d0:49:f7:95:04:05:ed:a1:6c:a6:37:b8:c2: ba:0b:68:62:d2:56:71:fd:99:e3:33:94:f1:bc:7b:6d:ae:96: 95:bb:08:43:65:0a:98:44:3d:95:22:a7:0e:40:69:34:0e:0a: 3c:24:07:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUxMjA1MDAzMDA3WhcNMjUxMjEyMDAzMDA3WjAYMRYwFAYD VQQDEw02OTMyMjc5MC1lZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprhQ9S+bm6G7aElW14+iWtBJV2ekbvN/EX42E73C3KBLlg9bUcINxkPKnvYR p54/yLSNlBGjlo4lNl0dgweDI1Fr9HYXaaZD4/nH+f0qYPKoUt8MvTCr3eYgzYg+ QmjfOuTtRviEodObQ/frXBU4wQqzX7Q7MsFWLlMBpBLMGyRvt05cshdOR8vywT1T uabxaA+9GptCWx0lMET3gTxhG48Iyy3oy2SHEBY+/37k7NReH9/ipK3KjJJASuiR 9LRaLyEmwrMb37cOo+k5+W/CHWPPFLGGfNcundZqUlBG2VS9dawJgrLlzvNio/So QdSJU6YuSrbal0O0vOkRG6xk2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLedse4Z 8g2p9lFXiUe/1qEdAMGDMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/JhjpcdOz6xr92mNIeEk6L8bbAFh33OBe9PzXqmCuIP9PSd3Kd2lX po46qohqhe40P2qvac/rM5tQqirX20uK3hjyuhOUQ6Q6zL7q8MON949kkAGS0IAu 27aF6YVPVJJubjGiZgRLzum3ITismlSqx8KeozVKvCZIinhR2Cj3lw9/jul8inYO 0e9/bsPPY9dK7V3whyv3zQB9p9ksxoutAkU7EHc5CtsFgmMiWWtirxqGUWa/IUlA g09zUqZc46AQZ+/bW7HRW2EBMdBJ95UEBe2hbKY3uMK6C2hi0lZx/ZnjM5TxvHtt rpaVuwhDZQqYRD2VIqcOQGk0Dgo8JAcf -----END CERTIFICATE-----Generated at Sun Dec 7 01:58:00 2025 by rpki-client