This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json) Hash identifier: LRtNtMZ4ymhut3cZY3LegrWswk0BfXdtnFewRYWIopM= Subject key identifier: BC:2A:2D:B1:3B:DF:86:CE:11:59:32:8E:95:B6:38:A4:47:36:C2:F4 Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 1017 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft Manifest number: 100E Signing time: Sat 20 Dec 2025 17:10:28 +0000 Manifest this update: Sat 20 Dec 2025 17:10:28 +0000 Manifest next update: Sat 27 Dec 2025 17:10:28 +0000 Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: paMHEnGomheBH94koTPof5tCt8OahInMc0fe10U1/oY=) 2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4119 (0x1017) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: Dec 20 17:10:28 2025 GMT Not After : Dec 27 17:10:28 2025 GMT Subject: CN=6946d884-01aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:dd:93:1b:86:49:00:65:b0:01:42:68:ef: 3e:55:5c:9f:0e:7f:13:97:84:90:ff:e8:c6:97:00: 95:b5:22:d0:54:61:ed:2b:a3:90:8d:41:49:9d:65: db:a7:d0:11:1d:c5:aa:06:86:b3:04:61:48:e4:6a: b5:1f:88:9a:b7:31:36:e5:9e:6e:c3:79:77:c8:cc: a1:6d:d6:ef:9f:ea:a8:88:8e:83:cb:f0:93:03:f0: 12:18:c1:da:09:83:64:22:87:d9:d0:1c:98:13:76: 7f:16:5b:da:b6:eb:05:7b:f1:aa:b0:a7:cf:5f:8d: d6:ce:61:d0:eb:3c:79:70:01:65:88:28:d0:b0:89: aa:9d:60:f3:83:c2:5c:e7:c6:af:e9:5a:ff:52:be: 32:0a:2c:8d:f0:ee:fd:8b:dd:0b:d8:90:d6:79:78: ec:1b:14:20:d4:3c:bb:a4:0b:3c:b7:0c:88:58:ab: fa:0b:0f:5c:71:11:30:2c:fa:a1:67:cd:92:0a:29: 68:fa:9e:7f:b6:c5:f0:d0:62:2f:7e:ff:a7:e1:57: 27:5f:a8:45:5f:60:21:b9:03:42:fd:38:89:a4:c0: 89:5e:32:59:a8:8d:ba:fc:48:54:97:5a:e0:7f:cd: 65:6d:66:c4:46:30:0f:f5:e3:54:20:c8:b3:68:a4: a4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2A:2D:B1:3B:DF:86:CE:11:59:32:8E:95:B6:38:A4:47:36:C2:F4 X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:bd:e2:19:48:2a:26:dc:9e:52:ab:13:be:86:d3:5d:d7:d4: c0:a7:44:f9:7f:66:fa:f4:06:3e:52:33:b6:62:c1:29:20:1b: 2a:3a:71:35:1e:2c:d3:d1:6c:28:ae:cf:30:8c:6c:9b:ba:70: 27:68:5a:7f:d2:6c:1b:57:09:53:ac:77:fc:73:e1:40:25:af: c7:9f:ca:28:d9:54:3d:5c:bf:cd:48:0c:52:43:ec:20:f7:d3: ac:6f:60:ba:51:bf:25:f8:69:44:f2:ba:10:b9:b5:52:45:c2: 68:01:4f:b6:e1:3a:3a:04:ee:96:9b:4b:db:30:4d:39:a6:97: 88:29:d6:11:dd:70:e9:8a:4a:b9:63:90:b5:63:d4:19:2d:19: 98:1c:62:73:b2:8d:1a:0c:86:49:0c:93:0f:97:68:f3:b0:47: e1:66:30:b8:52:93:57:8f:42:26:a2:3f:c5:25:83:50:83:94: ca:c8:95:75:e9:7b:61:d7:44:78:e9:12:e8:bf:1e:7f:a0:50: a3:65:e1:f3:97:ab:b1:ee:62:55:fc:3d:9c:8d:4e:98:0d:21: ad:bf:86:f7:74:3d:f6:b9:20:29:85:79:98:c4:24:34:cf:8a: 03:dc:60:61:e4:df:e6:03:12:8a:14:65:bb:fd:4f:68:05:0f: 60:81:26:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjUxMjIwMTcxMDI4WhcNMjUxMjI3MTcxMDI4WjAYMRYwFAYD VQQDDA02OTQ2ZDg4NC0wMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8XdkxuGSQBlsAFCaO8+VVyfDn8Tl4SQ/+jGlwCVtSLQVGHtK6OQjUFJnWXb p9ARHcWqBoazBGFI5Gq1H4iatzE25Z5uw3l3yMyhbdbvn+qoiI6Dy/CTA/ASGMHa CYNkIofZ0ByYE3Z/FlvatusFe/GqsKfPX43WzmHQ6zx5cAFliCjQsImqnWDzg8Jc 58av6Vr/Ur4yCiyN8O79i90L2JDWeXjsGxQg1Dy7pAs8twyIWKv6Cw9ccREwLPqh Z82SCilo+p5/tsXw0GIvfv+n4VcnX6hFX2AhuQNC/TiJpMCJXjJZqI26/EhUl1rg f81lbWbERjAP9eNUIMizaKSk4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwqLbE7 34bOEVkyjpW2OKRHNsL0MB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W c1NXbUFzZEdhNXBXMDBRbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGveIZSCom3J5SqxO+htNd19TAp0T5f2b69AY+UjO2YsEpIBsqOnE1 HizT0Wwors8wjGybunAnaFp/0mwbVwlTrHf8c+FAJa/Hn8oo2VQ9XL/NSAxSQ+wg 99Osb2C6Ub8l+GlE8roQubVSRcJoAU+24To6BO6Wm0vbME05ppeIKdYR3XDpikq5 Y5C1Y9QZLRmYHGJzso0aDIZJDJMPl2jzsEfhZjC4UpNXj0Imoj/FJYNQg5TKyJV1 6Xth10R46RLovx5/oFCjZeHzl6ux7mJV/D2cjU6YDSGtv4b3dD32uSAphXmYxCQ0 z4oD3GBh5N/mAxKKFGW7/U9oBQ9ggSZu -----END CERTIFICATE-----Generated at Sun Dec 21 01:37:13 2025 by rpki-client