This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json) Hash identifier: Z5NOAXRDGzToov72rBHDeltV0zCqfc2QMDORbSDSmf4= Subject key identifier: DC:6F:42:48:98:BA:0C:F0:98:6B:46:09:76:A3:13:E7:8D:54:AA:B8 Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 25E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft Manifest number: 25DB Signing time: Sat 06 Dec 2025 15:29:23 +0000 Manifest this update: Sat 06 Dec 2025 15:29:22 +0000 Manifest next update: Sat 13 Dec 2025 15:29:22 +0000 Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: UssvB/7SqnM6GQStPgz2FVFbTfaDUu5RgRLMCRk+Fso=) 2: 96F26DD8E4A511EF8259C769C4F9AE02.roa (hash: 106BmLtTyVCv8aiEyQESyMsMUTUgBCG4YPN0EmuEMYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9703 (0x25e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Dec 6 15:29:22 2025 GMT Not After : Dec 13 15:29:22 2025 GMT Subject: CN=69344bd3-b7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:cc:93:5b:aa:ef:ee:31:ef:56:e3:b9:b6: b9:00:72:b8:4a:59:43:3d:07:1e:6e:f4:ea:a4:4f: d4:5e:62:01:5b:af:7e:f5:6c:e3:40:96:4f:ba:33: b1:bd:f6:a6:be:02:70:ac:b2:5f:1d:e6:11:f3:a8: f7:d6:59:82:88:d3:13:32:aa:f7:cb:67:37:5d:00: 59:a2:57:63:4d:f2:82:19:79:d3:f8:77:db:4f:6c: c3:5b:dc:59:26:b3:ce:13:1d:b8:dc:4c:6c:dc:65: 2e:b8:c9:f1:88:75:cb:21:d0:34:cc:49:b7:67:c7: 68:8e:e2:8f:6c:87:ac:40:a7:9d:ec:fe:d7:b2:f4: 63:9c:ff:7c:76:0b:84:81:5f:3c:7d:f8:af:6d:12: 42:79:ce:76:58:48:32:85:20:94:8b:5c:47:e7:f3: ba:b0:7e:16:60:1b:5c:86:dd:9d:82:c2:de:e3:7c: f4:cb:64:2b:04:d8:cb:0b:c3:d3:3f:cf:59:f3:46: 6f:1d:7a:0c:30:1d:d2:36:5f:75:5e:89:94:eb:bb: 76:4d:76:07:2d:bf:d5:b2:02:d0:33:08:8a:57:21: de:6f:d6:d4:03:e4:cc:a5:09:50:5e:91:7d:33:31: 2e:ba:be:64:8e:48:11:f4:ff:24:ce:28:bb:9b:ed: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6F:42:48:98:BA:0C:F0:98:6B:46:09:76:A3:13:E7:8D:54:AA:B8 X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ee:07:ef:f0:71:43:52:24:50:9e:96:05:f4:83:dc:c2:72: 5a:89:db:5d:81:e3:84:fb:da:74:cf:75:23:b3:69:fd:b9:02: fd:b9:5c:fd:92:f2:bd:cf:95:6e:45:33:30:0a:c7:e4:da:1f: 13:1b:a2:b1:6f:2b:b0:24:3c:0c:33:85:ae:78:ed:33:59:e5: f1:03:19:e1:a3:c1:e8:af:89:ed:f6:20:6b:bb:12:4c:81:0a: 34:13:ea:b9:30:03:e7:d6:6b:b6:d8:51:fe:8f:bc:be:3a:b6: a1:41:2c:1f:ae:3b:10:d0:9a:0a:ee:57:de:07:43:5e:57:85: e1:f3:1f:58:57:88:a8:ad:55:88:02:78:2a:f5:f3:49:15:71: 16:7c:46:9d:72:c4:02:9e:4f:0b:1e:54:a6:6c:e8:7e:f4:e3: 37:64:dd:36:a7:3f:f0:fd:2f:32:57:cf:d8:86:cd:83:63:8b: 64:4d:49:d8:a1:df:9d:61:41:6b:91:c3:b7:01:f7:7e:87:b6: 72:79:7a:0d:ff:9c:90:06:3a:bf:00:00:58:5c:c5:63:96:b4: 01:f9:a7:74:8f:e7:1b:97:bf:4f:b9:b2:9c:7f:79:2b:d2:19: 62:a5:19:b0:2d:f2:dc:02:fe:40:e5:39:80:29:66:9e:a2:77: 50:31:c1:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjUxMjA2MTUyOTIyWhcNMjUxMjEzMTUyOTIyWjAYMRYwFAYD VQQDEw02OTM0NGJkMy1iN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MPMk1uq7+4x71bjuba5AHK4SllDPQcebvTqpE/UXmIBW69+9WzjQJZPujOx vfamvgJwrLJfHeYR86j31lmCiNMTMqr3y2c3XQBZoldjTfKCGXnT+HfbT2zDW9xZ JrPOEx243Exs3GUuuMnxiHXLIdA0zEm3Z8dojuKPbIesQKed7P7XsvRjnP98dguE gV88ffivbRJCec52WEgyhSCUi1xH5/O6sH4WYBtcht2dgsLe43z0y2QrBNjLC8PT P89Z80ZvHXoMMB3SNl91XomU67t2TXYHLb/VsgLQMwiKVyHeb9bUA+TMpQlQXpF9 MzEuur5kjkgR9P8kzii7m+2A+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxvQkiY ugzwmGtGCXajE+eNVKq4MB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz SkNucmpMc045bVVfRm5qUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB7gfv8HFDUiRQnpYF9IPcwnJaidtdgeOE+9p0z3Ujs2n9uQL9uVz9 kvK9z5VuRTMwCsfk2h8TG6KxbyuwJDwMM4WueO0zWeXxAxnho8Hor4nt9iBruxJM gQo0E+q5MAPn1mu22FH+j7y+OrahQSwfrjsQ0JoK7lfeB0NeV4Xh8x9YV4iorVWI Angq9fNJFXEWfEadcsQCnk8LHlSmbOh+9OM3ZN02pz/w/S8yV8/Yhs2DY4tkTUnY od+dYUFrkcO3Afd+h7ZyeXoN/5yQBjq/AABYXMVjlrQB+ad0j+cbl79PubKcf3kr 0hlipRmwLfLcAv5A5TmAKWaeondQMcGt -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:09 2025 by rpki-client