This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft File: oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json) Hash identifier: uwhcK9Ew5bMFRh3/p1TEzTFzx8qqgoYF3SQyeja/5UU= Subject key identifier: E7:E9:A1:89:16:A8:0A:8C:9D:86:C7:A6:4E:94:D0:B6:FB:5F:9F:89 Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft Manifest number: 71 Signing time: Fri 19 Dec 2025 05:51:50 +0000 Manifest this update: Fri 19 Dec 2025 05:51:50 +0000 Manifest next update: Fri 26 Dec 2025 05:51:50 +0000 Files and hashes: 1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: huEhiVVsm+VwlMxQ5EnvgMZ3wEVVJQepDENrs8Z8pwI=) 2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: YjLtFlGgcNbwn9rRIgf5MeQrG8tFe9vr3RMokUM4ipM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Validity Not Before: Dec 19 05:51:50 2025 GMT Not After : Dec 26 05:51:50 2025 GMT Subject: CN=6944e7f6-7f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:53:b0:96:62:93:34:16:7a:d7:6c:df:dd: 0a:0e:e6:cd:fb:c2:ec:38:ec:b7:78:24:fe:2c:60: 8b:2c:41:23:8e:2b:ca:00:ca:3a:94:75:2e:ac:b5: a7:28:45:74:3f:c9:0a:23:15:3d:e3:1e:af:dc:e3: 5d:17:2d:44:7a:f3:49:b8:01:78:27:b8:a4:39:ac: 97:da:a3:07:1d:7a:89:72:fd:77:af:ee:08:31:62: 59:cc:84:e4:6c:ae:56:98:ff:3a:8c:49:e8:50:c8: 6d:84:49:6e:49:36:89:d8:9b:d8:82:a9:b1:5f:ca: d2:35:b9:32:35:fe:7c:ad:98:f8:68:5a:0a:72:60: ae:b3:17:fc:00:93:bf:62:9b:90:69:0c:e0:91:56: e5:b2:6d:1a:54:33:da:a4:a8:a8:38:07:39:63:b6: 8d:11:0b:bb:dd:de:df:12:ca:c7:5f:ea:43:48:83: a4:f9:c8:93:57:00:d2:ed:59:79:d2:e2:ae:8c:1c: a8:7f:3e:8b:dd:bb:75:48:47:d4:21:97:1e:c4:0b: 04:fb:42:3e:2d:22:83:c6:75:49:46:f3:a4:c3:97: 28:df:df:93:90:dd:d4:e5:9c:c6:0d:7d:72:5d:c2: 5f:c5:db:91:90:1e:21:f4:30:5d:16:be:31:ec:63: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E9:A1:89:16:A8:0A:8C:9D:86:C7:A6:4E:94:D0:B6:FB:5F:9F:89 X509v3 Authority Key Identifier: keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:32:bd:36:03:25:0c:58:c0:ee:72:96:58:c7:38:c9:6c:bc: 9b:fe:4a:16:ef:88:a8:39:f4:96:a0:06:4a:8e:f7:32:51:62: 1b:c4:65:78:bb:b1:ac:2c:5c:db:86:7e:24:82:ef:70:e8:15: 14:9a:4f:ae:f5:e8:a3:40:dd:7d:e7:d8:a6:a2:23:92:df:a8: e8:5e:ee:f6:e3:49:4a:66:0e:44:1b:a7:77:e7:dc:52:46:2e: 55:fb:fa:bb:c7:25:1b:cc:0b:07:7e:b3:1b:a6:48:9f:8f:d1: 2f:bc:22:58:55:72:ba:6b:d7:e1:7c:79:ef:b0:bb:78:16:64: e2:f8:b9:42:88:3f:0b:81:eb:a1:6d:d3:65:12:30:a1:1c:2e: cb:7e:88:f9:ec:25:d6:dd:f3:c9:d8:f4:71:18:f8:6b:36:ba: 82:e5:30:23:09:29:cc:8f:45:fa:ab:cd:31:9f:e3:9a:45:33: a1:8a:de:0b:60:27:a9:c8:e6:0b:29:de:7d:da:44:b4:fb:2c: 41:f5:8e:75:86:6f:bc:a6:43:36:a2:c5:d7:8f:ed:bf:09:92: 36:1e:10:fa:e6:20:8e:c7:df:28:6a:92:98:4f:20:5f:97:ee: 17:f9:d2:43:e5:23:b0:97:6c:92:de:a2:c3:aa:4d:62:fb:b6: 47:f0:51:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVBMDExMC8GA1UEBRMoQTBGOUVCNjk4MURDNzJBMjc4QjE4NTI4OTkwNkMxRTEx QzBCMzVGMTAeFw0yNTEyMTkwNTUxNTBaFw0yNTEyMjYwNTUxNTBaMBgxFjAUBgNV BAMMDTY5NDRlN2Y2LTdmMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOeVOwlmKTNBZ612zf3QoO5s37wuw47Ld4JP4sYIssQSOOK8oAyjqUdS6staco RXQ/yQojFT3jHq/c410XLUR680m4AXgnuKQ5rJfaowcdeoly/Xev7ggxYlnMhORs rlaY/zqMSehQyG2ESW5JNonYm9iCqbFfytI1uTI1/nytmPhoWgpyYK6zF/wAk79i m5BpDOCRVuWybRpUM9qkqKg4Bzljto0RC7vd3t8Sysdf6kNIg6T5yJNXANLtWXnS 4q6MHKh/Povdu3VIR9Qhlx7ECwT7Qj4tIoPGdUlG86TDlyjf35OQ3dTlnMYNfXJd wl/F25GQHiH0MF0WvjHsY7lTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5+mhiRao CoydhsemTpTQtvtfn4kwHwYDVR0jBBgwFoAUoPnraYHccqJ4sYUomQbB4RwLNfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUEwLzlDNTM3MTc4MkY2 NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5m RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BucmFZSGNjcUo0c1lVb21RYkI0UndMTmZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUEwLzlDNTM3MTc4MkY2NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FK NHNZVW9tUWJCNFJ3TE5mRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFUyvTYDJQxYwO5ylljHOMlsvJv+ShbviKg59JagBkqO9zJRYhvEZXi7 sawsXNuGfiSC73DoFRSaT6716KNA3X3n2KaiI5LfqOhe7vbjSUpmDkQbp3fn3FJG LlX7+rvHJRvMCwd+sxumSJ+P0S+8IlhVcrpr1+F8ee+wu3gWZOL4uUKIPwuB66Ft 02USMKEcLst+iPnsJdbd88nY9HEY+Gs2uoLlMCMJKcyPRfqrzTGf45pFM6GK3gtg J6nI5gsp3n3aRLT7LEH1jnWGb7ymQzaixdeP7b8JkjYeEPrmII7H3yhqkphPIF+X 7hf50kPlI7CXbJLeosOqTWL7tkfwUaA= -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:00 2025 by rpki-client