This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft File: OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json) Hash identifier: WUodoseAacYzR57SvqdPqfR/a0xahAcgIOgvK416aMg= Subject key identifier: 9E:44:EC:42:04:8C:1F:2C:40:E3:9E:8C:29:6B:A3:BE:82:37:1F:29 Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A Certificate issuer: /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Certificate serial: 0ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft Manifest number: 0AD3 Signing time: Thu 04 Dec 2025 18:45:11 +0000 Manifest this update: Thu 04 Dec 2025 18:45:11 +0000 Manifest next update: Thu 11 Dec 2025 18:45:11 +0000 Files and hashes: 1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: 3ChGzgjSgUsv0VzXoSFKZSJ4sGSrOXJDy8viwJ6XiGs=) 2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: RsV1HG0sblH5nYeZVkL9f/OZ/ev49KnYKTaHyjLrK0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Validity Not Before: Dec 4 18:45:11 2025 GMT Not After : Dec 11 18:45:11 2025 GMT Subject: CN=6931d6b7-b851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:32:6d:fc:6b:c1:63:54:4f:99:c4:8e:65:56: 41:a3:3f:71:b3:77:d8:b9:42:82:8c:41:d5:a1:52: 39:1d:34:6b:f2:5a:47:51:0c:e6:de:d6:28:6c:75: ae:45:52:5e:ce:c0:35:44:38:c5:0b:f5:70:22:82: b0:39:ed:c7:66:21:6d:7a:e2:67:28:8f:d2:2b:cb: b1:00:c0:00:7d:3a:ab:1b:13:bd:c0:2e:cc:3a:be: 43:ab:83:f6:bb:2d:98:0e:9b:ac:c7:dc:d9:16:53: 12:9d:09:76:b2:d2:3c:62:60:08:fa:87:78:f9:9e: 56:1d:ba:a7:bf:5a:94:4b:6c:b3:0b:0a:80:c4:0d: bd:5e:d9:0e:98:3a:df:99:a6:c7:ca:48:1e:a8:40: 84:44:d6:f7:42:ae:45:6d:4a:b2:dc:02:94:61:25: 48:31:19:0f:12:db:48:26:72:50:1c:6a:78:e2:26: 16:94:4c:59:dc:66:51:2f:58:13:29:89:05:1f:bb: 55:dd:be:15:25:78:de:b1:31:29:4d:2f:88:7b:42: 71:fd:e7:68:08:35:84:a4:0a:20:85:f7:f4:02:b7: 7f:4c:1e:2e:f8:bf:10:eb:a0:5b:9a:73:7f:c5:2a: f2:c6:f9:82:f2:ad:05:28:8e:ad:4d:48:3f:65:a2: 97:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:44:EC:42:04:8C:1F:2C:40:E3:9E:8C:29:6B:A3:BE:82:37:1F:29 X509v3 Authority Key Identifier: keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:cf:15:11:9d:b4:17:16:b1:ac:db:42:d7:0b:c9:36:7b:45: 90:cc:da:45:e8:4e:71:2d:02:94:31:de:26:c4:1b:dc:77:6f: e2:65:98:8b:89:30:fb:9f:06:64:25:6d:35:ed:f9:9d:58:f1: 60:33:97:3e:fd:fb:c4:53:43:ca:2a:d3:c1:ce:2e:82:40:e4: 83:7d:e4:c1:61:4c:bf:99:6d:e5:e1:7d:fe:40:76:e3:0f:e6: 4c:38:ae:75:83:e1:90:90:ad:5f:ac:c1:99:e6:f4:9d:1b:6f: 6e:09:42:f0:d0:71:b6:09:e1:c8:ff:fd:4d:6d:88:bf:53:f1: e3:c5:8e:c1:30:8f:b2:1d:e3:cf:36:49:c6:11:1f:d2:16:56: e9:a2:74:6f:57:fa:8a:7e:80:15:0f:67:7b:42:97:4f:fa:a8: 2a:97:97:b0:7e:55:82:16:9a:f3:28:00:6f:4c:6e:6c:ac:81: 23:bd:86:c0:48:c4:f8:e7:b4:f0:77:20:f4:a5:d6:4a:e0:dc: 7d:9a:a6:56:af:9e:ee:8e:75:aa:53:78:ab:e8:e4:42:73:c4: d7:1f:8c:da:ec:5c:13:92:dc:99:eb:e7:8b:9f:27:3f:3d:3a: 0e:05:99:3b:dd:37:b8:29:49:8c:fc:40:1d:5d:c2:b6:8e:83: 1c:7e:7f:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzIxMTAvBgNVBAUTKDM4MUU1MzQ4NTA0NkNCMzAyNzkxQzkwOUYyREJENjdE QUY4RDc4MUEwHhcNMjUxMjA0MTg0NTExWhcNMjUxMjExMTg0NTExWjAYMRYwFAYD VQQDEw02OTMxZDZiNy1iODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8DJt/GvBY1RPmcSOZVZBoz9xs3fYuUKCjEHVoVI5HTRr8lpHUQzm3tYobHWu RVJezsA1RDjFC/VwIoKwOe3HZiFteuJnKI/SK8uxAMAAfTqrGxO9wC7MOr5Dq4P2 uy2YDpusx9zZFlMSnQl2stI8YmAI+od4+Z5WHbqnv1qUS2yzCwqAxA29XtkOmDrf mabHykgeqECERNb3Qq5FbUqy3AKUYSVIMRkPEttIJnJQHGp44iYWlExZ3GZRL1gT KYkFH7tV3b4VJXjesTEpTS+Ie0Jx/edoCDWEpAoghff0Ard/TB4u+L8Q66BbmnN/ xSryxvmC8q0FKI6tTUg/ZaKXWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5E7EIE jB8sQOOejClro76CNx8pMB8GA1UdIwQYMBaAFDgeU0hQRsswJ5HJCfLb1n2vjXga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMi9GRDg4MzgyMjVG NTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6QW5rY2tKOHR2V2ZhLU5l Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CNVRTRkJHeXpBbmtja0o4dHZXZmEtTmVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMi9GRDg4MzgyMjVGNTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6 QW5rY2tKOHR2V2ZhLU5lQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAzxURnbQXFrGs20LXC8k2e0WQzNpF6E5xLQKUMd4mxBvcd2/iZZiL iTD7nwZkJW017fmdWPFgM5c+/fvEU0PKKtPBzi6CQOSDfeTBYUy/mW3l4X3+QHbj D+ZMOK51g+GQkK1frMGZ5vSdG29uCULw0HG2CeHI//1NbYi/U/HjxY7BMI+yHePP NknGER/SFlbponRvV/qKfoAVD2d7QpdP+qgql5ewflWCFprzKABvTG5srIEjvYbA SMT457TwdyD0pdZK4Nx9mqZWr57ujnWqU3ir6ORCc8TXH4za7FwTktyZ6+eLnyc/ PToOBZk73Te4KUmM/EAdXcK2joMcfn8e -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:14 2025 by rpki-client