This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: 5PpxzB3wA8AmYrIGUHKU7idzNEb1c8HAmJOuPNQpCx4= Subject key identifier: 53:41:42:11:BC:BC:C3:FF:E4:52:88:7A:1D:48:FE:99:E6:3A:A5:E9 Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0CFE Signing time: Sat 06 Dec 2025 17:28:48 +0000 Manifest this update: Sat 06 Dec 2025 17:28:47 +0000 Manifest next update: Sat 13 Dec 2025 17:28:47 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: +rqQCmHsXhKbHUXGKM3ZPg6tx/iGheLmS0A23HbX9o8=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: Anh2GximFPk7REReNBXULcTH3P6lLG5IbasX9kKM4Fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Validity Not Before: Dec 6 17:28:47 2025 GMT Not After : Dec 13 17:28:47 2025 GMT Subject: CN=693467d0-013a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ee:50:81:da:d2:c5:f9:a8:84:09:66:18:89: 6a:bf:d4:d0:9f:bf:15:d9:11:63:65:6f:c7:8a:66: 75:f2:57:b1:bb:ed:8d:cc:4e:a8:3c:64:ab:44:0a: df:2d:b0:f1:6c:ab:52:11:ec:ff:02:0b:fe:c3:eb: 74:07:a5:0c:9c:37:27:e4:6a:15:94:88:31:e7:3b: 7a:d4:67:42:1e:e8:12:fa:6e:57:33:16:4d:bd:73: 7b:0e:71:ee:2e:93:61:72:48:14:06:41:50:f3:56: b0:09:8d:6e:e1:d2:0c:39:82:5e:12:e8:1e:0c:eb: ee:13:dc:a8:01:7b:73:28:9a:73:59:48:d8:f0:90: 69:51:1d:9f:d2:c7:b9:b2:90:bd:0c:91:ef:5f:af: cc:b5:26:5a:c0:c8:45:21:2f:1a:e8:cb:71:d3:1a: fc:a1:9f:d2:0a:50:b6:a6:7c:2c:b8:44:8f:66:85: 86:4b:11:a3:69:d4:c1:ea:a9:1f:20:1c:16:e6:02: c2:53:b3:b1:90:16:d8:b4:f6:fd:47:52:33:3e:6b: f9:07:9e:71:59:f3:67:df:3c:d0:f1:f1:3d:9b:6c: f4:41:ac:33:8e:3c:cc:7f:60:2c:b5:8a:9d:ae:90: e9:d5:c7:11:32:c0:56:79:09:5f:1c:af:09:47:46: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:41:42:11:BC:BC:C3:FF:E4:52:88:7A:1D:48:FE:99:E6:3A:A5:E9 X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:32:df:8e:cc:2e:95:81:9c:2e:dc:a0:76:1c:cd:d2:31:40: 15:9e:2b:cd:02:bf:35:ce:3e:b8:e3:47:08:c0:e5:50:df:70: 0f:3e:50:4c:47:e0:94:57:47:34:cb:8f:7c:75:85:88:94:43: d1:78:03:91:d8:a9:41:88:81:5b:bb:33:93:71:23:c8:d0:ce: 69:d9:89:eb:24:6b:b3:44:90:20:d7:39:60:3a:d2:24:d6:c4: af:5e:6b:3a:db:53:f7:84:d5:55:06:d8:f1:d4:46:00:ad:bb: 7d:75:a4:ee:3a:f4:32:97:d2:4f:03:6d:37:75:ca:59:d6:bd: 7c:1a:75:ed:71:0b:3d:bd:1c:ba:28:a4:f2:61:f7:98:a6:50: d1:ce:63:62:ce:d4:d4:4c:c2:d1:39:1d:ab:91:85:e6:82:b3: bf:c2:76:f0:f1:a1:3e:45:ef:ce:89:2d:2f:14:7c:b4:2a:fc: 71:99:95:cb:5d:b3:38:66:83:71:3b:df:03:69:3b:5c:a2:8e: b5:75:7b:f5:7d:aa:59:ea:37:97:20:51:a4:f7:a7:03:5c:cc: f4:d2:d9:09:d6:2f:2d:0c:ac:1e:5d:c9:d9:85:ca:14:88:75: 0a:48:bb:29:1e:93:f7:6d:61:43:a3:24:e7:c5:a1:fd:2e:ed: ff:07:81:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjUxMjA2MTcyODQ3WhcNMjUxMjEzMTcyODQ3WjAYMRYwFAYD VQQDEw02OTM0NjdkMC0wMTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1e5QgdrSxfmohAlmGIlqv9TQn78V2RFjZW/HimZ18lexu+2NzE6oPGSrRArf LbDxbKtSEez/Agv+w+t0B6UMnDcn5GoVlIgx5zt61GdCHugS+m5XMxZNvXN7DnHu LpNhckgUBkFQ81awCY1u4dIMOYJeEugeDOvuE9yoAXtzKJpzWUjY8JBpUR2f0se5 spC9DJHvX6/MtSZawMhFIS8a6Mtx0xr8oZ/SClC2pnwsuESPZoWGSxGjadTB6qkf IBwW5gLCU7OxkBbYtPb9R1IzPmv5B55xWfNn3zzQ8fE9m2z0QawzjjzMf2AstYqd rpDp1ccRMsBWeQlfHK8JR0acbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNBQhG8 vMP/5FKIeh1I/pnmOqXpMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/Mt+OzC6VgZwu3KB2HM3SMUAVnivNAr81zj6440cIwOVQ33APPlBM R+CUV0c0y498dYWIlEPReAOR2KlBiIFbuzOTcSPI0M5p2YnrJGuzRJAg1zlgOtIk 1sSvXms621P3hNVVBtjx1EYArbt9daTuOvQyl9JPA203dcpZ1r18GnXtcQs9vRy6 KKTyYfeYplDRzmNiztTUTMLROR2rkYXmgrO/wnbw8aE+Re/OiS0vFHy0KvxxmZXL XbM4ZoNxO98DaTtcoo61dXv1fapZ6jeXIFGk96cDXMz00tkJ1i8tDKweXcnZhcoU iHUKSLspHpP3bWFDoyTnxaH9Lu3/B4E/ -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:41 2025 by rpki-client