This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json) Hash identifier: tBVn5CToib9+W7mOi+iib8ZvYIG9YD1H0QsbSKKoQQA= Subject key identifier: 4C:E5:7E:EB:D5:1F:2F:97:8F:94:FF:F4:9A:1F:99:C2:A2:26:50:8F Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 101B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft Manifest number: 1012 Signing time: Sun 28 Dec 2025 17:08:40 +0000 Manifest this update: Sun 28 Dec 2025 17:08:40 +0000 Manifest next update: Sun 04 Jan 2026 17:08:40 +0000 Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: Pl/6jzAV49XUgVLMmSiN29OFSSFIauqNFX+OlW9iXuA=) 2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 17:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4123 (0x101b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: Dec 28 17:08:40 2025 GMT Not After : Jan 4 17:08:40 2026 GMT Subject: CN=69516418-ee5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:69:8c:f1:90:4a:6a:bf:d9:f9:26:49:55: 4b:01:3f:b2:bd:5d:7b:73:b5:e7:25:67:0f:0b:95: 1d:7e:26:fa:65:f3:e1:84:0e:4c:b4:90:f6:be:5e: 78:85:74:9d:7c:46:07:ef:b6:2a:88:49:e2:80:5d: e0:bb:df:2a:64:e0:c0:ff:0e:d7:80:3d:70:03:87: 76:dd:ae:29:d0:3e:f5:b6:38:ca:c7:eb:f1:56:24: 35:27:89:48:ed:32:4a:2d:1b:69:f3:f7:4f:9b:31: 65:b7:5a:f5:5b:3a:81:97:fc:f6:21:c4:b4:d6:7a: a5:25:cf:b1:79:68:14:af:91:dd:75:0f:97:d3:e1: a5:b0:fc:72:bb:23:79:0e:f3:0f:ed:0b:58:73:d6: 3d:ae:93:3f:d8:41:c9:fd:ff:1e:05:5d:e6:fd:ea: 13:31:9e:e5:b3:30:82:be:79:91:ff:99:8e:d9:4c: 19:8f:c3:08:7e:56:57:ab:0e:b9:fd:9f:a1:98:d3: 62:dd:13:0f:fb:2f:93:c0:3a:7b:d8:45:0c:b6:70: ae:a1:96:4b:39:4d:df:0f:b1:cc:ed:0e:4d:af:0d: b2:92:39:a3:20:17:46:c3:50:4b:1f:50:c9:60:23: 5c:c6:6e:53:f9:1d:05:6b:86:74:53:aa:ee:b4:94: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E5:7E:EB:D5:1F:2F:97:8F:94:FF:F4:9A:1F:99:C2:A2:26:50:8F X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3b:6f:9a:76:f1:6b:93:c6:70:f6:55:99:d6:02:c4:cd:24: a4:66:4a:96:ed:82:d6:d7:0f:f2:55:f6:c4:36:7a:e1:bc:ad: a8:45:5d:bf:ca:29:57:05:50:0f:2d:96:10:8a:bc:a2:23:04: b5:fa:fd:23:bd:f6:bc:0f:45:d6:87:c6:ee:a4:77:f2:4d:7a: f6:be:4b:23:30:db:aa:c7:02:60:0c:dd:c8:0e:5d:4a:9a:29: 5d:6a:25:23:9d:33:e9:cb:22:5f:30:8b:b2:88:bb:5c:9c:82: 6c:36:c1:f3:03:65:94:88:68:9d:18:b6:08:39:4e:65:86:32: aa:1b:b6:de:3f:2f:bc:47:21:4c:3f:86:26:b9:74:70:e1:57: 3b:64:11:66:9f:c1:a6:0a:34:ab:8d:7a:c2:72:9d:8f:7d:55: fa:c6:42:3a:13:fd:fa:4d:68:26:95:40:4f:c4:24:83:b2:f2: ea:16:c8:75:7e:00:4c:89:01:3d:90:9f:21:bb:4e:d6:a7:c0: 08:0c:25:8a:c3:50:8f:65:50:d0:84:df:b5:21:c9:e7:11:df: 9a:e4:d0:47:3f:88:6e:cb:b1:8c:32:7f:36:72:cd:05:13:32: 29:4e:f2:4b:55:a5:3c:97:eb:5b:c6:81:07:0b:c6:da:eb:fa: a0:c8:49:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjUxMjI4MTcwODQwWhcNMjYwMTA0MTcwODQwWjAYMRYwFAYD VQQDDA02OTUxNjQxOC1lZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIppjPGQSmq/2fkmSVVLAT+yvV17c7XnJWcPC5Udfib6ZfPhhA5MtJD2vl54 hXSdfEYH77YqiEnigF3gu98qZODA/w7XgD1wA4d23a4p0D71tjjKx+vxViQ1J4lI 7TJKLRtp8/dPmzFlt1r1WzqBl/z2IcS01nqlJc+xeWgUr5HddQ+X0+GlsPxyuyN5 DvMP7QtYc9Y9rpM/2EHJ/f8eBV3m/eoTMZ7lszCCvnmR/5mO2UwZj8MIflZXqw65 /Z+hmNNi3RMP+y+TwDp72EUMtnCuoZZLOU3fD7HM7Q5Nrw2ykjmjIBdGw1BLH1DJ YCNcxm5T+R0Fa4Z0U6rutJRUgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzlfuvV Hy+Xj5T/9JofmcKiJlCPMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W c1NXbUFzZEdhNXBXMDBRbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+O2+advFrk8Zw9lWZ1gLEzSSkZkqW7YLW1w/yVfbENnrhvK2oRV2/ yilXBVAPLZYQiryiIwS1+v0jvfa8D0XWh8bupHfyTXr2vksjMNuqxwJgDN3IDl1K mildaiUjnTPpyyJfMIuyiLtcnIJsNsHzA2WUiGidGLYIOU5lhjKqG7bePy+8RyFM P4YmuXRw4Vc7ZBFmn8GmCjSrjXrCcp2PfVX6xkI6E/36TWgmlUBPxCSDsvLqFsh1 fgBMiQE9kJ8hu07Wp8AIDCWKw1CPZVDQhN+1IcnnEd+a5NBHP4huy7GMMn82cs0F EzIpTvJLVaU8l+tbxoEHC8ba6/qgyEkC -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:43 2025 by rpki-client