This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json) Hash identifier: 9sVl6D/3uVzOc7kIVVf7Ck/rlsi+mYmujczMTqzdTZ4= Subject key identifier: AE:1A:88:07:80:AF:F9:0E:1C:1E:F1:76:83:57:E3:4E:A6:EC:62:37 Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0F0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft Manifest number: 0F03 Signing time: Thu 04 Dec 2025 17:11:05 +0000 Manifest this update: Thu 04 Dec 2025 17:11:05 +0000 Manifest next update: Thu 11 Dec 2025 17:11:05 +0000 Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: qHD/1N9Ovc6sAKi6Gl/ztAny+TsQ6C8q7WXZyuNFCP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3853 (0xf0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Validity Not Before: Dec 4 17:11:05 2025 GMT Not After : Dec 11 17:11:05 2025 GMT Subject: CN=6931c0a9-2b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3a:5f:2f:36:80:6e:5a:e5:0a:45:e1:89:29: c2:bf:73:5a:3d:7c:f0:7d:65:42:c9:f8:14:fb:79: e5:7c:66:d6:2c:22:b4:45:67:5f:b7:e2:29:5d:bf: 9a:32:a0:30:50:a9:46:23:d6:45:e7:c8:3b:45:5e: 4d:61:1a:42:0e:7e:5e:58:51:b7:4c:8e:20:33:cb: fd:61:3a:7c:65:0a:ad:2d:72:79:a9:cc:5c:41:83: ad:bf:a6:9f:5d:46:98:0e:66:41:48:21:de:ad:e5: 95:45:24:e0:b0:0c:50:35:42:cb:4e:ca:71:e5:ff: 54:aa:13:05:f0:a1:9d:88:b5:63:98:3a:cd:55:78: 1f:83:17:98:45:7d:23:12:94:21:24:fa:de:3f:47: d6:ae:93:b8:94:f8:e3:db:20:88:a8:2b:cf:dc:eb: e7:d7:da:50:ef:c4:98:8d:be:f4:db:a9:6a:5d:a6: a8:f1:3e:1a:76:31:55:02:8f:ce:ea:09:87:ad:90: 03:f6:1d:c8:64:1b:0b:72:6d:4a:6a:14:9f:49:22: 0b:15:d7:e3:45:2b:9c:ec:01:a6:8d:f1:55:a7:78: 93:11:27:67:25:38:19:9b:e5:48:b6:be:ce:48:7b: bd:36:10:44:41:b2:a3:96:d9:f3:24:d6:e1:52:74: 75:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1A:88:07:80:AF:F9:0E:1C:1E:F1:76:83:57:E3:4E:A6:EC:62:37 X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5b:b8:ec:14:00:5f:ed:5e:a6:91:48:48:00:2a:b7:93:27: 22:0a:5f:c1:2c:92:77:d8:16:b7:6f:69:6c:12:1b:35:34:33: b7:3a:35:d0:27:99:27:a8:b0:45:69:dd:33:e4:10:ae:64:22: b4:60:76:fd:ff:ba:55:a0:48:8b:ad:6d:78:e6:2e:1b:61:a5: 22:c1:d7:23:31:54:8b:03:16:94:a8:ad:b1:65:c7:69:a5:82: 46:db:43:28:3d:cd:f4:aa:89:ba:9d:96:0a:28:3b:90:82:ce: 62:f5:8c:56:9b:c6:10:09:91:8f:01:9c:38:c8:63:ed:ec:37: 92:10:93:0f:9d:f3:87:08:89:cb:f6:9c:f5:87:ea:54:b7:ca: cd:3b:d5:49:9f:cf:86:df:64:e6:62:48:a2:30:45:e0:0b:b3: fd:66:62:a4:35:8b:fa:94:d3:aa:e1:f4:cd:b8:74:23:e8:30: 7b:fe:73:df:68:03:51:4e:c0:a2:d2:b6:9f:9f:c1:01:ef:4c: bd:9f:83:5b:93:4a:c4:8f:d7:7d:6d:7a:69:ff:f0:51:df:20: 00:3a:4e:7c:50:81:2d:2d:56:0b:49:eb:3f:06:b1:a3:55:6a: be:30:f3:a5:6a:6f:3f:b9:25:e7:f1:91:d3:10:cc:1a:1b:30: 52:8d:48:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjUxMjA0MTcxMTA1WhcNMjUxMjExMTcxMTA1WjAYMRYwFAYD VQQDEw02OTMxYzBhOS0yYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDpfLzaAblrlCkXhiSnCv3NaPXzwfWVCyfgU+3nlfGbWLCK0RWdft+IpXb+a MqAwUKlGI9ZF58g7RV5NYRpCDn5eWFG3TI4gM8v9YTp8ZQqtLXJ5qcxcQYOtv6af XUaYDmZBSCHereWVRSTgsAxQNULLTspx5f9UqhMF8KGdiLVjmDrNVXgfgxeYRX0j EpQhJPreP0fWrpO4lPjj2yCIqCvP3Ovn19pQ78SYjb7026lqXaao8T4adjFVAo/O 6gmHrZAD9h3IZBsLcm1KahSfSSILFdfjRSuc7AGmjfFVp3iTESdnJTgZm+VItr7O SHu9NhBEQbKjltnzJNbhUnR1WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4aiAeA r/kOHB7xdoNX406m7GI3MB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9W ZVBaLUdiQXBaVG16ZFN5YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9W7jsFABf7V6mkUhIACq3kyciCl/BLJJ32Ba3b2lsEhs1NDO3OjXQ J5knqLBFad0z5BCuZCK0YHb9/7pVoEiLrW145i4bYaUiwdcjMVSLAxaUqK2xZcdp pYJG20MoPc30qom6nZYKKDuQgs5i9YxWm8YQCZGPAZw4yGPt7DeSEJMPnfOHCInL 9pz1h+pUt8rNO9VJn8+G32TmYkiiMEXgC7P9ZmKkNYv6lNOq4fTNuHQj6DB7/nPf aANRTsCi0rafn8EB70y9n4Nbk0rEj9d9bXpp//BR3yAAOk58UIEtLVYLSes/BrGj VWq+MPOlam8/uSXn8ZHTEMwaGzBSjUi8 -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:32 2025 by rpki-client