This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json) Hash identifier: feOMMZKYueJOZMBdDitkr98fq8/N/7WhF7TLB+nS0ng= Subject key identifier: B6:D2:1D:2B:0D:55:05:57:8B:2E:B7:64:DC:7A:57:17:BC:A6:43:6A Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Certificate serial: 0425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft Manifest number: 0421 Signing time: Thu 04 Dec 2025 22:49:48 +0000 Manifest this update: Thu 04 Dec 2025 22:49:48 +0000 Manifest next update: Thu 11 Dec 2025 22:49:48 +0000 Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: krbwqMoxRzX09ISjMNeDjSWRoi5U1D4eaT//A6hvv/k=) 2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: C6Zw9H9pNGGZB/RXCN/WX9ohjV5fQUJIiw4vkNV68w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Validity Not Before: Dec 4 22:49:48 2025 GMT Not After : Dec 11 22:49:48 2025 GMT Subject: CN=6932100c-91f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:77:7b:95:22:a1:67:66:65:7c:f9:c7:38:96: 9e:8c:9a:03:04:c3:e7:7d:3d:be:0f:09:0a:9e:38: d5:12:c7:a5:2b:ad:60:4a:4e:11:ee:25:e8:24:01: 93:49:dd:6a:5c:a2:b1:2c:e4:3b:57:78:76:74:34: fc:71:07:3f:d5:5e:f0:f5:49:bb:41:11:6e:62:22: a2:29:0a:15:07:23:63:7c:04:34:47:4a:f9:10:1d: 2a:77:4a:10:2f:f3:1d:7e:3e:a6:54:e4:0f:8f:c4: 28:6b:fb:17:c0:17:b0:ca:cb:2b:91:9c:27:6a:c9: f3:70:d1:39:8c:b0:2e:99:18:34:a3:6a:14:6a:67: 0e:c4:78:f2:75:24:f7:ca:e0:95:4f:e6:44:c7:51: 64:2a:d1:14:14:84:e8:06:4a:1e:c5:fe:b6:6c:6d: fb:f4:c2:ff:de:04:10:7c:6a:eb:62:ab:7f:86:24: 7f:2d:4b:ff:f6:dd:e2:14:7a:56:dd:fb:46:ae:28: d6:89:e0:3d:f4:6f:08:9b:5e:68:b3:ae:5b:bc:43: 68:9a:e7:66:46:26:57:7d:8d:73:e5:87:b0:bf:21: b3:88:fc:61:ef:27:fe:6f:f2:15:fc:e1:f6:37:c7: 07:5e:6c:b2:3d:7a:41:61:a3:e1:e2:be:d2:cc:4a: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D2:1D:2B:0D:55:05:57:8B:2E:B7:64:DC:7A:57:17:BC:A6:43:6A X509v3 Authority Key Identifier: keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:16:b6:c7:0d:08:eb:32:22:8f:91:74:9a:d2:3f:7e:dd:a5: 3f:ae:85:9c:2c:fd:08:10:34:97:e6:25:ad:46:a5:ea:f1:31: 42:b3:4a:44:64:18:30:24:f1:3c:93:10:5e:8d:ea:52:5d:27: b0:1a:cd:31:04:ef:02:fa:95:88:d5:19:96:74:08:5d:42:b6: b0:fc:57:07:ac:ab:6d:f9:8d:d0:a7:4e:85:34:36:b3:b3:b9: a8:97:71:64:2e:b5:33:a8:de:d3:d3:22:31:13:5e:c7:92:39: 40:55:22:3e:5f:10:67:d1:9d:f9:e7:5c:8d:70:a7:e8:f5:75: 4c:22:cb:72:95:b2:6a:d1:4a:7b:46:f0:46:26:1b:fd:0b:b5: 1c:96:41:f1:54:97:d4:83:31:64:87:f0:58:3b:61:21:52:f7: 56:ee:e0:a4:6c:cd:20:a1:b8:c1:c2:d2:07:82:ad:fc:95:da: 09:83:0d:92:48:1a:50:c3:ef:ec:06:dd:1f:8d:e9:63:cf:fd: 12:aa:35:29:02:92:98:1f:0b:eb:47:8f:8c:2a:88:95:75:f6: 91:24:a4:6c:43:fb:b5:85:3e:02:98:00:52:75:53:19:8f:4f: 39:69:61:a2:73:58:e4:7a:63:e9:b6:a2:bb:bf:2d:04:58:9c: 7e:4c:1a:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5 MkRERUJERkMwHhcNMjUxMjA0MjI0OTQ4WhcNMjUxMjExMjI0OTQ4WjAYMRYwFAYD VQQDEw02OTMyMTAwYy05MWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nd7lSKhZ2ZlfPnHOJaejJoDBMPnfT2+DwkKnjjVEselK61gSk4R7iXoJAGT Sd1qXKKxLOQ7V3h2dDT8cQc/1V7w9Um7QRFuYiKiKQoVByNjfAQ0R0r5EB0qd0oQ L/Mdfj6mVOQPj8Qoa/sXwBewyssrkZwnasnzcNE5jLAumRg0o2oUamcOxHjydST3 yuCVT+ZEx1FkKtEUFIToBkoexf62bG379ML/3gQQfGrrYqt/hiR/LUv/9t3iFHpW 3ftGrijWieA99G8Im15os65bvENomudmRiZXfY1z5YewvyGziPxh7yf+b/IV/OH2 N8cHXmyyPXpBYaPh4r7SzEolBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbSHSsN VQVXiy63ZNx6Vxe8pkNqMB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2 ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY3Mi83QzVEM0ZERThCQ0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZj LWhNek1MbU5zMkdTM2V2ZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqFrbHDQjrMiKPkXSa0j9+3aU/roWcLP0IEDSX5iWtRqXq8TFCs0pE ZBgwJPE8kxBejepSXSewGs0xBO8C+pWI1RmWdAhdQraw/FcHrKtt+Y3Qp06FNDaz s7mol3FkLrUzqN7T0yIxE17HkjlAVSI+XxBn0Z3551yNcKfo9XVMIstylbJq0Up7 RvBGJhv9C7UclkHxVJfUgzFkh/BYO2EhUvdW7uCkbM0gobjBwtIHgq38ldoJgw2S SBpQw+/sBt0fjeljz/0SqjUpApKYHwvrR4+MKoiVdfaRJKRsQ/u1hT4CmABSdVMZ j085aWGic1jkemPptqK7vy0EWJx+TBrl -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:00 2025 by rpki-client