This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: TLvS+EjShvNaAi26whfaVgjZTioe7sEADwhAEgW0vWI= Subject key identifier: 5B:D3:AF:02:25:B2:6A:7D:38:3E:B1:01:68:70:DB:BA:A8:32:F4:F3 Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 05EE Signing time: Sun 28 Dec 2025 23:08:15 +0000 Manifest this update: Sun 28 Dec 2025 23:08:14 +0000 Manifest next update: Sun 04 Jan 2026 23:08:14 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: dlKWl2d5rk68fCF3KJOL+41Gyp9AtEMDab8qu7icpMI=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: dfPqBXiRpDvhClfs1CwvKkxPhMNPV6qZtiOuHI4j7UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 23:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Validity Not Before: Dec 28 23:08:14 2025 GMT Not After : Jan 4 23:08:14 2026 GMT Subject: CN=6951b85f-67ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:37:3c:ca:5c:13:4e:56:c9:e9:b8:7b:fe: 27:16:f5:4e:64:ed:02:c2:c7:92:7b:9b:cd:03:50: 18:22:42:f0:6a:63:a7:58:05:4f:32:a5:27:1d:6d: ef:07:4a:4c:7c:e9:1a:18:b8:2b:eb:b4:18:a9:24: dc:b9:c8:20:83:84:c8:5a:9e:5d:1a:fc:93:21:a9: a3:f4:11:d2:26:86:ec:06:b8:cb:56:77:88:7b:41: 1f:db:e6:52:03:55:63:96:78:15:f7:7a:8b:6a:4b: a7:19:2f:5a:99:0c:75:e7:a3:e6:25:bd:04:31:58: d7:04:72:c4:51:0b:74:c4:21:4a:b4:7f:9a:2f:b9: c2:90:c1:15:98:9a:96:f6:e4:0a:38:ae:49:ff:0c: 27:70:e4:f3:a9:d7:6b:5a:95:34:20:d1:58:76:4c: 88:4f:d6:9e:f2:b8:f0:d6:b8:8f:5b:d6:c7:fd:c8: 63:6d:6a:ad:24:ed:bf:2c:5a:3c:50:53:fb:07:5d: e4:c6:dd:d9:cf:74:53:d6:e6:5a:0c:46:ee:52:60: 98:e4:df:f4:84:c1:46:5d:a4:8a:4d:09:90:af:d1: 41:b4:4e:13:97:dd:07:27:a4:ca:a8:f8:c4:7e:60: 32:88:33:a1:97:ef:80:f1:e0:7a:da:aa:4c:af:c9: 90:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D3:AF:02:25:B2:6A:7D:38:3E:B1:01:68:70:DB:BA:A8:32:F4:F3 X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:00:ae:a4:94:a5:c9:1b:92:83:95:b0:84:4d:83:1b:d6:bc: 2f:c3:da:64:04:2b:ce:e3:82:77:a6:79:af:22:e9:24:a0:4e: a7:ab:ae:00:07:14:44:f5:50:0c:59:d1:6c:ca:27:88:b6:09: 5a:67:a9:08:ca:f8:65:47:4a:9a:51:c2:9c:ba:33:59:e8:ef: 8e:33:f4:7b:40:29:41:92:df:4b:b9:6f:1a:2b:f4:63:3b:7f: f7:8e:b3:66:19:a1:7f:9b:68:48:a1:2b:28:90:6b:1d:f3:47: 4a:eb:42:90:ce:5f:fb:4e:ae:4d:57:e8:5b:bc:44:f9:82:ac: 14:f0:22:1c:a4:40:ef:be:24:91:6d:fe:b1:01:6c:4f:f3:50: 7e:87:51:49:9b:fb:50:44:70:f8:bf:0f:62:48:8f:40:82:70: 8d:f6:23:b5:4c:f0:4a:3e:ae:6b:ba:f4:a8:45:6d:0d:db:b1: 02:0e:64:2c:bc:cf:f0:61:63:c2:ab:51:e4:82:50:f4:92:83: 84:20:c0:80:c1:01:94:ac:cb:a5:6c:cf:25:f0:42:0a:65:fd: 1f:0d:14:66:43:f5:df:ba:b1:be:e3:98:06:51:c1:6c:35:68: db:6e:1b:55:78:c6:e7:a0:fd:93:53:94:10:ee:a0:05:8d:7a: 6c:30:68:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjUxMjI4MjMwODE0WhcNMjYwMTA0MjMwODE0WjAYMRYwFAYD VQQDDA02OTUxYjg1Zi02N2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+03PMpcE05Wyem4e/4nFvVOZO0CwseSe5vNA1AYIkLwamOnWAVPMqUnHW3v B0pMfOkaGLgr67QYqSTcucggg4TIWp5dGvyTIamj9BHSJobsBrjLVneIe0Ef2+ZS A1VjlngV93qLakunGS9amQx156PmJb0EMVjXBHLEUQt0xCFKtH+aL7nCkMEVmJqW 9uQKOK5J/wwncOTzqddrWpU0INFYdkyIT9ae8rjw1riPW9bH/chjbWqtJO2/LFo8 UFP7B13kxt3Zz3RT1uZaDEbuUmCY5N/0hMFGXaSKTQmQr9FBtE4Tl90HJ6TKqPjE fmAyiDOhl++A8eB62qpMr8mQ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvTrwIl smp9OD6xAWhw27qoMvTzMB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnAK6klKXJG5KDlbCETYMb1rwvw9pkBCvO44J3pnmvIukkoE6nq64A BxRE9VAMWdFsyieItglaZ6kIyvhlR0qaUcKcujNZ6O+OM/R7QClBkt9LuW8aK/Rj O3/3jrNmGaF/m2hIoSsokGsd80dK60KQzl/7Tq5NV+hbvET5gqwU8CIcpEDvviSR bf6xAWxP81B+h1FJm/tQRHD4vw9iSI9AgnCN9iO1TPBKPq5ruvSoRW0N27ECDmQs vM/wYWPCq1HkglD0koOEIMCAwQGUrMulbM8l8EIKZf0fDRRmQ/XfurG+45gGUcFs NWjbbhtVeMbnoP2TU5QQ7qAFjXpsMGgP -----END CERTIFICATE-----Generated at Mon Dec 29 00:48:01 2025 by rpki-client