This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: OKgizkG+/acU4WygUPdLQ/1pAgCSgfsxdaXXj7v1GUg= Subject key identifier: 06:B4:05:21:D1:4D:BD:E5:44:AC:19:9B:BF:02:EC:D6:54:AB:76:04 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 0540 Signing time: Thu 18 Dec 2025 22:53:00 +0000 Manifest this update: Thu 18 Dec 2025 22:52:59 +0000 Manifest next update: Thu 25 Dec 2025 22:52:59 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: 8fZAGfqCMiIrZN3yHyBO/b3MD7LcGgQLJBiOUOvWEqM=) 2: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: O4d2rjcxKIku+xiW/1KGQUyVAJ12dGdhkkO9KRL1EOw=) 3: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: 4Had5FY4pwFyUD0aCqgDusTgRp2pErIXiEruwD2H9Yc=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: FkiL6AOguV/ODkMs4HRo/0ifEPFjnGb8m2pRQF54UiY=) 5: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: ZIrhP9UDAVYRNfKeRGlyTPy785zmXCzmRz3nPy9yy2g=) 6: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: 1dqO6r+A2uTRxInxtjkWF1ndg9y4kX4fvagqEnUInnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Dec 18 22:52:59 2025 GMT Not After : Dec 25 22:52:59 2025 GMT Subject: CN=694485cb-b900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:0a:cb:c7:2b:0d:1b:5d:5c:cf:08:72:cc: 55:0e:73:9b:9e:48:a2:e5:2a:61:e9:86:d1:00:0e: cc:c8:ba:12:8d:75:39:5d:5c:fd:d6:a7:b7:d6:c9: 51:2f:c0:9f:1a:4a:47:71:31:86:a3:33:d4:42:e4: 7a:8f:a9:ef:95:16:36:41:19:a4:9c:8b:53:52:09: f6:f3:d7:02:51:cb:c6:fb:8c:6d:37:c8:32:cf:17: 47:1e:15:8a:21:8f:cc:a5:d6:3b:ee:68:3c:76:13: 4d:7d:b1:c6:69:17:53:6a:40:5c:50:a4:02:5d:28: 21:cc:74:60:89:d8:e1:7b:38:3d:fc:42:09:04:ac: 39:15:51:7e:39:d4:09:a7:ea:c7:08:bd:d7:f8:4f: 71:2c:28:9b:fc:ca:b9:95:33:40:c6:ee:b7:e1:f7: 01:31:e5:a1:65:bb:db:e3:53:ef:cb:e7:71:52:36: 17:ae:50:97:81:d3:e3:ae:1d:1d:4e:34:a1:d2:f8: ad:07:f0:0c:95:d1:a7:62:0e:40:05:56:5b:bc:7b: dc:d4:09:2e:2d:6d:ad:2b:3b:af:54:91:23:41:5e: 74:c3:3d:c4:55:e7:42:e4:b0:4f:40:52:66:ce:7a: b1:c5:b3:db:3d:f2:c2:74:8c:c1:75:ff:99:79:92: bd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B4:05:21:D1:4D:BD:E5:44:AC:19:9B:BF:02:EC:D6:54:AB:76:04 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:92:d0:be:bb:bd:d6:7a:7b:de:c5:2f:95:36:ab:3e:74:49: 9f:55:f7:10:8c:c0:cb:fe:9a:17:31:05:ee:02:52:35:27:fa: d1:e3:3a:d5:e2:c9:7b:6d:b1:f6:78:f1:6b:8f:8d:64:c2:59: f3:f9:c6:af:29:e9:05:00:de:98:64:84:95:20:10:34:a8:39: 4d:fb:0a:57:d8:77:10:0c:58:b5:c7:e5:3c:40:4e:f4:be:72: cf:d0:9f:5a:1e:20:6e:82:07:a9:88:66:87:01:fc:8a:dd:cc: c8:e1:a9:54:50:98:fa:7c:1d:ef:9e:cc:ac:4c:3e:a1:bf:c6: 4d:bf:1a:2e:73:2d:cd:8f:d8:98:8e:05:3e:13:69:d4:0b:fb: d9:51:5d:3c:37:fd:20:60:e2:e0:f8:4a:d9:61:89:5c:5d:48: 7f:2a:6b:78:e0:a6:27:8a:d8:5c:bc:7a:2d:45:a6:39:a5:00: 80:2c:7e:1a:9a:95:5d:b9:81:77:b6:ae:79:67:3c:6f:3d:fa: 42:29:75:1b:a1:ba:15:c5:b7:d5:86:ee:e1:2c:67:66:8d:fa: b1:73:fc:1a:1d:e0:d0:06:2f:a7:17:dc:73:a0:fb:21:9c:b7: 41:ea:71:a5:6b:9b:ba:80:7f:db:e4:0c:28:9e:69:9d:4b:bb: b2:4a:13:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUxMjE4MjI1MjU5WhcNMjUxMjI1MjI1MjU5WjAYMRYwFAYD VQQDDA02OTQ0ODVjYi1iOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKkKy8crDRtdXM8IcsxVDnObnkii5Sph6YbRAA7MyLoSjXU5XVz91qe31slR L8CfGkpHcTGGozPUQuR6j6nvlRY2QRmknItTUgn289cCUcvG+4xtN8gyzxdHHhWK IY/MpdY77mg8dhNNfbHGaRdTakBcUKQCXSghzHRgidjhezg9/EIJBKw5FVF+OdQJ p+rHCL3X+E9xLCib/Mq5lTNAxu634fcBMeWhZbvb41Pvy+dxUjYXrlCXgdPjrh0d TjSh0vitB/AMldGnYg5ABVZbvHvc1AkuLW2tKzuvVJEjQV50wz3EVedC5LBPQFJm znqxxbPbPfLCdIzBdf+ZeZK9OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa0BSHR Tb3lRKwZm78C7NZUq3YEMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmktC+u73WenvexS+VNqs+dEmfVfcQjMDL/poXMQXuAlI1J/rR4zrV 4sl7bbH2ePFrj41kwlnz+cavKekFAN6YZISVIBA0qDlN+wpX2HcQDFi1x+U8QE70 vnLP0J9aHiBuggepiGaHAfyK3czI4alUUJj6fB3vnsysTD6hv8ZNvxoucy3Nj9iY jgU+E2nUC/vZUV08N/0gYOLg+ErZYYlcXUh/Kmt44KYnithcvHotRaY5pQCALH4a mpVduYF3tq55ZzxvPfpCKXUboboVxbfVhu7hLGdmjfqxc/waHeDQBi+nF9xzoPsh nLdB6nGla5u6gH/b5AwonmmdS7uyShN8 -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:57 2025 by rpki-client