This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: wqaDmBZzxOHidVTrePYBuiw0syBhTYuVh0I4pOt3jwY= Subject key identifier: A4:CB:4D:7C:37:E4:4C:C7:2F:DA:33:51:B9:33:E3:35:1F:71:BE:47 Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 08B5 Signing time: Sat 20 Dec 2025 19:54:05 +0000 Manifest this update: Sat 20 Dec 2025 19:54:05 +0000 Manifest next update: Sat 27 Dec 2025 19:54:05 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: kFtt6AU0TCpICCKdpDUzdXZtifbuQDuKiT9sbLgm+DE=) 2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: LYF+KadzZ69diyD5rWiKHJlYkwO/eA/Z250K04w+xPI=) 3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: +w6DPiK2iGC1sFd6+H0KMfGyjFvRHYPwKc/prnzBHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: Dec 20 19:54:05 2025 GMT Not After : Dec 27 19:54:05 2025 GMT Subject: CN=6946fedd-11af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:5a:4f:53:34:69:15:02:70:0e:c0:f4:57: 98:d8:f6:cd:61:e9:ba:69:36:ed:ea:e9:19:67:19: 56:08:3f:4f:86:32:3f:ed:8b:c7:53:51:df:d9:a4: 3c:d9:cb:be:55:bb:f9:56:21:b4:3c:3d:3e:e8:13: 4b:90:a5:bc:44:71:6a:f7:2b:26:40:8e:d5:8e:f8: 2c:f4:66:1a:40:1b:1f:54:08:21:ed:fb:ba:88:8e: 59:21:ed:81:35:32:95:07:5d:65:5f:eb:dc:09:d5: 7e:42:6d:6a:ec:0b:ea:da:29:16:7c:a0:ea:32:39: 61:3d:08:6e:4e:83:d1:6c:8e:73:37:9b:6a:f4:c4: 9e:b7:43:cc:4c:17:0b:5e:61:f9:ae:72:7f:e8:48: 62:14:ba:a0:a3:e1:97:60:95:cc:cd:54:5e:84:b6: 56:8b:35:01:6e:a7:e2:0d:1d:db:68:e6:d7:bb:12: d9:eb:a4:39:35:3f:95:b9:d4:1d:32:9e:d0:38:df: 7f:5f:82:c6:54:e6:96:b7:90:cf:fa:fc:3b:37:d0: 75:c0:d5:bb:1c:5e:34:2f:12:ae:25:e1:83:b9:18: 51:b0:aa:ab:47:51:95:af:d3:28:8b:1e:fb:20:eb: b0:2d:4b:6d:2f:e9:2c:e3:b8:02:4f:7d:f7:0f:e9: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CB:4D:7C:37:E4:4C:C7:2F:DA:33:51:B9:33:E3:35:1F:71:BE:47 X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:87:35:21:a7:4e:fb:8f:5f:8f:06:51:bd:9b:08:90:28:8b: be:36:96:aa:24:26:c1:02:d3:8f:0e:24:f6:90:63:d8:1b:48: c3:39:a9:5a:b0:dc:76:ac:03:54:aa:f2:19:ac:c0:42:59:38: 3a:5a:2e:41:b0:f1:b5:98:83:84:9b:0d:2e:f1:75:75:e6:33: ce:04:a8:60:ec:14:21:72:3b:12:ad:6c:3d:cd:34:98:82:a0: cb:2f:d8:2a:b4:57:d7:e5:c3:7e:0e:e9:50:d1:b9:1b:60:60: 79:23:35:89:90:3d:ad:3a:22:5f:d4:28:6f:40:7c:da:af:95: 35:6d:71:b5:23:ea:55:ae:aa:22:d9:c4:c0:a4:77:d9:d6:b5: cf:1a:02:58:f9:ec:05:b4:29:83:b6:9f:72:83:45:05:03:86: 4a:78:da:c2:01:f6:2b:46:d7:2a:2b:98:5e:41:2c:72:b9:71: 38:7d:74:23:2c:4e:d2:a5:1a:af:41:64:0c:9d:73:85:be:a8: 6b:eb:bb:33:5c:bb:5a:54:d3:4d:9d:0d:11:7e:65:0a:ce:9f: 59:cb:91:fb:cb:3a:4e:1c:a7:3d:1e:d5:34:04:e3:c0:8c:3c: 7e:69:f6:c0:99:73:e3:42:ff:df:cd:9d:f5:fc:56:d1:a2:a4: 9b:b3:9b:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjUxMjIwMTk1NDA1WhcNMjUxMjI3MTk1NDA1WjAYMRYwFAYD VQQDDA02OTQ2ZmVkZC0xMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGFaT1M0aRUCcA7A9FeY2PbNYem6aTbt6ukZZxlWCD9PhjI/7YvHU1Hf2aQ8 2cu+Vbv5ViG0PD0+6BNLkKW8RHFq9ysmQI7Vjvgs9GYaQBsfVAgh7fu6iI5ZIe2B NTKVB11lX+vcCdV+Qm1q7Avq2ikWfKDqMjlhPQhuToPRbI5zN5tq9MSet0PMTBcL XmH5rnJ/6EhiFLqgo+GXYJXMzVRehLZWizUBbqfiDR3baObXuxLZ66Q5NT+VudQd Mp7QON9/X4LGVOaWt5DP+vw7N9B1wNW7HF40LxKuJeGDuRhRsKqrR1GVr9Moix77 IOuwLUttL+ks47gCT333D+nG4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTLTXw3 5EzHL9ozUbkz4zUfcb5HMB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+hzUhp077j1+PBlG9mwiQKIu+NpaqJCbBAtOPDiT2kGPYG0jDOala sNx2rANUqvIZrMBCWTg6Wi5BsPG1mIOEmw0u8XV15jPOBKhg7BQhcjsSrWw9zTSY gqDLL9gqtFfX5cN+DulQ0bkbYGB5IzWJkD2tOiJf1ChvQHzar5U1bXG1I+pVrqoi 2cTApHfZ1rXPGgJY+ewFtCmDtp9yg0UFA4ZKeNrCAfYrRtcqK5heQSxyuXE4fXQj LE7SpRqvQWQMnXOFvqhr67szXLtaVNNNnQ0RfmUKzp9Zy5H7yzpOHKc9HtU0BOPA jDx+afbAmXPjQv/fzZ31/FbRoqSbs5sJ -----END CERTIFICATE-----Generated at Mon Dec 22 14:00:34 2025 by rpki-client