This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: VsKK7i0o4BxcuaN9fAMIzVCyp92yVYqHKkRRYCV6oQg= Subject key identifier: C3:CC:94:13:B5:8A:22:57:87:42:5A:92:F5:7D:EB:D7:64:C2:37:BD Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: 59 Signing time: Fri 05 Dec 2025 05:06:37 +0000 Manifest this update: Fri 05 Dec 2025 05:06:36 +0000 Manifest next update: Fri 12 Dec 2025 05:06:36 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: GAFJjgjsuUAEsThxyHCXJt6QWXKatXbi4KFDQpwgd80=) 2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: g234+BOrsFID00gHUsuGQ7ja/TZsYXQzY8A84ZILmbw=) 3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: SDWOzOls7ewbKsDsDovGzzc6zqRka52NsV9334kX+ts=) 4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: DDcpKf4cwajzPz7iOk0WiFF4+R4nRejRaM+Ry6/ubVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Dec 5 05:06:36 2025 GMT Not After : Dec 12 05:06:36 2025 GMT Subject: CN=6932685c-2421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:76:02:34:4a:fc:ba:62:b6:84:e6:fb:d7:a6: 04:d5:56:52:24:95:21:c7:f9:27:48:92:db:a6:bf: 7b:8f:33:be:23:f1:93:9b:93:dc:67:87:51:f8:68: 51:6c:9c:80:22:74:c9:b7:b2:22:1c:f9:e2:da:38: 88:4a:cc:34:00:14:dc:27:97:14:4f:7d:28:9b:ef: 93:78:cc:59:f4:9f:27:ee:59:77:45:3b:57:d9:04: 2f:36:27:3e:8d:e2:c5:46:13:43:64:56:ba:2c:03: c4:55:45:04:15:b9:3f:89:21:51:05:3b:ab:9d:3d: 2d:00:8a:63:d1:98:79:fc:93:5a:8a:ee:fc:66:6f: 5d:24:f0:b1:ab:47:55:73:b5:ce:7d:09:51:77:71: 02:7a:82:7a:69:17:14:1e:fc:79:d6:b5:0f:55:0a: 27:b6:49:e2:a9:89:39:4e:0b:da:06:05:86:36:60: 1f:a0:7d:bb:88:c7:db:c2:8f:2a:a3:80:5e:65:1a: 1b:8a:52:44:ff:06:b7:b7:2a:1f:36:4d:5e:96:82: 06:30:93:bf:b6:4a:43:3e:9d:b9:55:73:15:79:13: 5c:0a:59:92:1e:7a:d6:95:e1:4d:de:8d:bd:6b:74: f5:56:16:20:8c:70:34:09:1f:f0:1f:52:0d:fa:92: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CC:94:13:B5:8A:22:57:87:42:5A:92:F5:7D:EB:D7:64:C2:37:BD X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a0:76:d2:8e:34:ef:c0:76:35:83:1c:85:0b:96:7e:13:db: c6:36:5c:6d:55:d6:1f:75:16:d5:4f:b1:f5:91:e8:1c:f7:7a: c4:5d:29:0e:a7:d9:90:4a:31:9b:69:19:c1:60:db:e7:00:bc: 81:e6:06:59:b4:c0:c8:73:67:32:24:e3:f7:65:38:bb:de:b6: a5:63:8b:49:38:38:8d:f7:ea:88:36:6c:14:b5:e5:5e:c5:b0: 63:fc:46:98:64:64:77:67:7e:63:7b:67:fd:9a:6e:b3:c7:42: 0c:88:fa:61:f3:7e:d6:90:e5:3a:82:41:61:69:4c:45:00:27: 4d:2e:1b:ff:90:3b:10:98:ab:51:c6:bd:5e:0f:a3:44:3c:da: 3c:a4:ce:dd:16:72:da:b3:e2:a6:4a:50:2f:36:5e:04:a7:15: bc:83:f5:24:25:e3:70:24:b3:89:c7:e3:ea:ae:27:cd:ee:cf: d3:f1:d3:10:d6:94:35:c5:22:3e:2a:7b:c6:98:77:a7:ce:bc: 6d:a3:dc:f3:e7:d4:f3:db:31:f6:9e:92:9d:64:45:1f:81:74: b4:83:7a:ff:9a:e6:04:a1:96:ee:a0:9c:d1:fc:08:37:6b:f5: c5:6f:0c:f1:9f:b1:8a:81:b3:8e:7f:e0:ae:51:61:ae:20:a4: e2:cf:72:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkEwMTExMC8GA1UEBRMoQTA1RUMyNjZCM0MwQkZENkNFQjUxNzEwMEJFMDVDNTA1 Qjk0MzYyNDAeFw0yNTEyMDUwNTA2MzZaFw0yNTEyMTIwNTA2MzZaMBgxFjAUBgNV BAMTDTY5MzI2ODVjLTI0MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDddgI0Svy6YraE5vvXpgTVVlIklSHH+SdIktumv3uPM74j8ZObk9xnh1H4aFFs nIAidMm3siIc+eLaOIhKzDQAFNwnlxRPfSib75N4zFn0nyfuWXdFO1fZBC82Jz6N 4sVGE0NkVrosA8RVRQQVuT+JIVEFO6udPS0AimPRmHn8k1qK7vxmb10k8LGrR1Vz tc59CVF3cQJ6gnppFxQe/HnWtQ9VCie2SeKpiTlOC9oGBYY2YB+gfbuIx9vCjyqj gF5lGhuKUkT/Bre3Kh82TV6WggYwk7+2SkM+nblVcxV5E1wKWZIeetaV4U3ejb1r dPVWFiCMcDQJH/AfUg36kvGpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw8yUE7WK IleHQlqS9X3r12TCN70wHwYDVR0jBBgwFoAUoF7CZrPAv9bOtRcQC+BcUFuUNiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QTAxL0Y2NEQzQjI0NTdB OTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0Y3Q1pyUEF2OWJPdFJjUUMtQmNVRnVVTmlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QTAxL0Y2NEQzQjI0NTdBOTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjli T3RSY1FDLUJjVUZ1VU5pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFKgdtKONO/AdjWDHIULln4T28Y2XG1V1h91FtVPsfWR6Bz3esRdKQ6n 2ZBKMZtpGcFg2+cAvIHmBlm0wMhzZzIk4/dlOLvetqVji0k4OI336og2bBS15V7F sGP8RphkZHdnfmN7Z/2abrPHQgyI+mHzftaQ5TqCQWFpTEUAJ00uG/+QOxCYq1HG vV4Po0Q82jykzt0Wctqz4qZKUC82XgSnFbyD9SQl43Aks4nH4+quJ83uz9Px0xDW lDXFIj4qe8aYd6fOvG2j3PPn1PPbMfaekp1kRR+BdLSDev+a5gShlu6gnNH8CDdr 9cVvDPGfsYqBs45/4K5RYa4gpOLPcg0= -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:39 2025 by rpki-client