This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: TTKRj5w+EDxTskhVuY7yEs2I5yXp6YrbRDFpV805cvg= Subject key identifier: DC:3F:13:41:5E:82:62:C7:8E:8E:30:60:68:66:5E:9E:88:6C:A6:FB Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 3524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 350D Signing time: Sat 20 Dec 2025 14:29:27 +0000 Manifest this update: Sat 20 Dec 2025 14:29:27 +0000 Manifest next update: Sat 27 Dec 2025 14:29:27 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: ZP/Mx3LoUhU13zStjGPjlg5c3cKXTWlZHmLiVcerwrI=) 2: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: 5EP6Oh1DhTra+7YRBW3gJiagK7+ieas44GHGTmH8lmw=) 3: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: +zivxHqwMOkGSscAdHd++lg164OtYFNCzxhSNcI5zb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13604 (0x3524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Dec 20 14:29:27 2025 GMT Not After : Dec 27 14:29:27 2025 GMT Subject: CN=6946b2c7-3922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:e1:87:ae:71:c3:b8:3a:25:e7:81:89:38: bd:34:ed:c0:34:80:24:76:60:bf:27:fd:e2:f9:70: 7c:d3:d0:83:4b:71:02:e4:d6:db:34:51:f9:76:dc: 60:44:e5:70:18:21:19:0b:be:d3:be:ad:bd:43:35: 0c:41:2c:a4:42:73:3d:3f:40:68:af:07:90:d9:fc: e5:83:0c:33:0e:f6:3b:f8:32:5e:0e:5f:55:a9:46: ac:a8:ad:f9:18:b6:ce:f7:fc:3e:ab:b3:ad:a9:38: d3:25:a1:95:a5:c2:75:56:65:22:98:0f:ce:ec:1a: 6f:44:0a:fb:fa:97:12:2e:ae:6c:59:2c:9a:6d:aa: 48:f1:69:19:9a:fe:9a:c6:cb:b1:c3:b6:26:d7:93: 4f:59:51:13:13:be:0b:b6:bb:88:70:c3:df:1a:27: 35:83:9d:71:e3:68:3c:e3:c5:f5:6b:07:e7:9c:69: 89:56:16:52:9a:a9:98:51:e5:d5:b7:e5:ec:b9:2a: 30:82:bb:f6:c2:ce:0a:7d:bf:7b:37:ef:ef:46:4b: af:24:e4:ae:05:a7:24:25:7c:64:bb:76:ef:a5:32: bc:62:58:d4:77:39:36:36:8c:d9:f8:8f:d7:2b:6b: dd:ba:63:2b:94:d0:c3:7b:94:7e:51:5a:2e:4d:ef: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3F:13:41:5E:82:62:C7:8E:8E:30:60:68:66:5E:9E:88:6C:A6:FB X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:7d:ef:bd:7e:97:a2:8b:47:70:80:86:90:42:49:7b:f4:0b: ac:b6:43:10:32:7c:78:74:c5:12:bf:5e:33:c9:94:1e:93:92: f7:7e:8b:33:d3:bf:3c:41:ce:db:0f:f8:2c:59:48:bb:33:59: 0f:15:27:e1:a8:26:53:7f:32:4e:c9:fc:7d:29:bd:39:c4:8e: a3:a6:6b:77:56:bc:70:b2:98:aa:6e:c7:66:5c:97:7e:20:14: 88:90:aa:e6:67:ec:4e:e9:5b:87:7c:3b:29:0a:b8:a4:d4:91: 2c:f5:2e:4c:27:99:b5:21:3c:ba:e2:90:01:0e:03:8f:70:7e: af:3d:5f:8b:d7:57:fd:f7:73:07:91:e6:a0:e5:14:60:d5:f2: 4d:e1:a9:1c:2c:0c:3e:81:38:4d:d6:f4:0f:2d:e6:37:eb:27: 70:bd:58:17:08:0a:75:ac:02:67:58:0b:47:e5:b0:e1:3a:01: 7a:8b:66:97:92:ca:69:fe:86:e2:08:ba:95:d4:75:80:80:07: fb:cf:06:8f:8a:e6:01:54:8c:7f:f3:b3:47:bf:24:26:d0:a9: a2:9a:7e:09:c6:37:87:a3:f6:31:87:a5:41:47:0c:6c:d3:77: b5:45:ab:86:e3:c2:a3:a9:a9:d3:7b:16:fe:39:a7:c1:3d:b4: 79:bf:c1:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjUxMjIwMTQyOTI3WhcNMjUxMjI3MTQyOTI3WjAYMRYwFAYD VQQDDA02OTQ2YjJjNy0zOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdnhh65xw7g6JeeBiTi9NO3ANIAkdmC/J/3i+XB809CDS3EC5NbbNFH5dtxg ROVwGCEZC77Tvq29QzUMQSykQnM9P0BorweQ2fzlgwwzDvY7+DJeDl9VqUasqK35 GLbO9/w+q7OtqTjTJaGVpcJ1VmUimA/O7BpvRAr7+pcSLq5sWSyabapI8WkZmv6a xsuxw7Ym15NPWVETE74LtruIcMPfGic1g51x42g848X1awfnnGmJVhZSmqmYUeXV t+XsuSowgrv2ws4Kfb97N+/vRkuvJOSuBackJXxku3bvpTK8YljUdzk2NozZ+I/X K2vdumMrlNDDe5R+UVouTe/00QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw/E0Fe gmLHjo4wYGhmXp6IbKb7MB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnfe+9fpeii0dwgIaQQkl79AustkMQMnx4dMUSv14zyZQek5L3fosz 0788Qc7bD/gsWUi7M1kPFSfhqCZTfzJOyfx9Kb05xI6jpmt3VrxwspiqbsdmXJd+ IBSIkKrmZ+xO6VuHfDspCrik1JEs9S5MJ5m1ITy64pABDgOPcH6vPV+L11f993MH keag5RRg1fJN4akcLAw+gThN1vQPLeY36ydwvVgXCAp1rAJnWAtH5bDhOgF6i2aX kspp/obiCLqV1HWAgAf7zwaPiuYBVIx/87NHvyQm0Kmimn4JxjeHo/Yxh6VBRwxs 03e1RauG48KjqanTexb+OafBPbR5v8FF -----END CERTIFICATE-----Generated at Sun Dec 21 04:10:07 2025 by rpki-client