This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json) Hash identifier: REywvigGdKCzo8vmF1PRLF0QJDAalrgQqS2Cg8ylhVU= Subject key identifier: 4F:3C:46:63:51:54:5B:D4:97:DD:7C:05:00:87:BB:53:46:30:F4:25 Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft Manifest number: 64 Signing time: Fri 19 Dec 2025 06:09:29 +0000 Manifest this update: Fri 19 Dec 2025 06:09:29 +0000 Manifest next update: Fri 26 Dec 2025 06:09:29 +0000 Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: KGx2fSF858ENfqZAvpcwqs8Gao6zgD37stkfJ7sJ7/Q=) 2: C24679DC741211F0808A8240C4F9AE02.roa (hash: 0sz+kpmtwGElJIZS+dbC02B4JWfvDxu2J1QwiI80uIU=) 3: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: 1ZtqCzNNxWxSJ7uFzzu6FWZe/QSQ6qrzF6WDQCLLHuM=) 4: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: BBZhX9HK3NBq65o9RCyGDdGBDo4hsR5Etdc6G3lRbjc=) 5: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: ciBVXi3NuZ9007zCdd3QAQNC4sYFdA5GkfUuea4GHXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Validity Not Before: Dec 19 06:09:29 2025 GMT Not After : Dec 26 06:09:29 2025 GMT Subject: CN=6944ec19-ed23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:41:79:c4:63:3c:b5:08:d8:bf:c9:cf:56: 63:6a:55:87:66:2c:5d:8e:f6:6f:2f:82:5a:73:9a: d0:7b:ec:71:5b:6d:f7:b4:c9:88:d3:76:45:2f:bf: b7:f7:59:df:b0:3a:4f:55:e0:e8:f6:71:df:f4:11: d5:e3:22:4e:7e:d4:c0:da:af:b6:02:84:26:ac:1d: 44:19:41:f1:c4:97:c6:8c:85:f4:ca:94:27:f8:9a: 32:c4:e1:9f:87:72:62:a3:f6:47:23:1a:95:1b:0a: 6e:79:fb:45:32:90:40:68:d5:4c:c2:fb:0b:78:3f: 93:33:57:cf:2f:85:52:b2:21:8f:2d:ec:28:5b:cf: 3c:57:8b:2a:15:12:c5:3b:67:46:32:9a:56:7d:da: d5:7f:7a:b9:bf:38:0b:9b:0a:f4:5d:e9:69:33:e6: 8b:ee:47:d6:12:e2:e0:0b:a8:27:d4:4d:c6:04:bb: d2:ad:3b:1a:05:6c:0a:38:6b:2d:f1:8e:35:c8:3e: 47:4e:85:c0:1f:9b:b5:b2:61:7a:ed:66:8d:3a:2f: d3:00:1f:89:e9:59:b9:4f:a1:7a:42:29:a9:26:20: ed:f0:1f:a8:a8:37:0f:e9:50:aa:04:09:44:e4:4c: 74:bd:6b:1d:3e:48:e8:a0:fc:f8:58:70:c2:dc:46: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3C:46:63:51:54:5B:D4:97:DD:7C:05:00:87:BB:53:46:30:F4:25 X509v3 Authority Key Identifier: keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f4:32:12:68:fa:bf:58:bd:67:1b:84:ac:e0:54:e3:f8:85: 47:5c:3b:35:cc:3d:87:7b:f7:a0:e0:08:66:b4:11:72:70:a7: 6f:b1:de:37:b9:c8:f0:f0:15:1b:c8:91:e5:ce:62:19:c1:7b: 08:90:41:c9:91:98:c4:b5:bd:dc:88:df:2a:40:c9:e5:ad:c7: 66:aa:e1:9f:99:7f:1c:6e:08:60:ae:2f:c3:1b:4f:cb:22:3b: 5e:cc:e0:bb:2d:8d:a2:72:4c:e8:b1:1f:fe:34:64:c1:56:c2: f0:77:77:be:bc:75:99:29:c5:c1:98:f1:d9:3b:53:e4:10:06: 4a:9c:72:45:51:ff:49:1d:27:9b:bd:9d:eb:01:aa:43:2b:ed: ca:00:f9:a8:94:ee:d9:77:32:db:8d:87:28:03:fc:2d:05:7e: 10:96:19:46:92:cd:34:64:b5:b3:fe:ef:f0:d2:1c:fa:87:79: 47:a1:b5:82:87:37:a0:5c:76:87:7a:fe:3d:a0:c8:92:71:86: 53:81:c5:fe:92:3c:2b:31:03:cb:35:9d:1a:ee:cc:be:61:b3: fe:86:06:50:5d:a5:e0:93:e5:94:14:35:ba:c2:0d:5c:51:3d: ca:03:3c:23:b5:36:26:0b:4d:83:be:b6:e3:6c:07:c3:48:0a: 96:08:61:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzVCQzExMC8GA1UEBRMoQTE0NTI0MUQ5ODMwQUYyNEE3MTU2NzM1MTI1NUVDOEU3 RUQ1M0VGRTAeFw0yNTEyMTkwNjA5MjlaFw0yNTEyMjYwNjA5MjlaMBgxFjAUBgNV BAMMDTY5NDRlYzE5LWVkMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUGEF5xGM8tQjYv8nPVmNqVYdmLF2O9m8vglpzmtB77HFbbfe0yYjTdkUvv7f3 Wd+wOk9V4Oj2cd/0EdXjIk5+1MDar7YChCasHUQZQfHEl8aMhfTKlCf4mjLE4Z+H cmKj9kcjGpUbCm55+0UykEBo1UzC+wt4P5MzV88vhVKyIY8t7ChbzzxXiyoVEsU7 Z0YymlZ92tV/erm/OAubCvRd6Wkz5ovuR9YS4uALqCfUTcYEu9KtOxoFbAo4ay3x jjXIPkdOhcAfm7WyYXrtZo06L9MAH4npWblPoXpCKakmIO3wH6ioNw/pUKoECUTk THS9ax0+SOig/PhYcMLcRg8PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTzxGY1FU W9SX3XwFAIe7U0Yw9CUwHwYDVR0jBBgwFoAUoUUkHZgwrySnFWc1ElXsjn7VPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNUJDLzcxRTVEOEJFNTlG MjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1VVa0haZ3dyeVNuRldjMUVsWHNqbjdWUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NUJDLzcxRTVEOEJFNTlGMjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlT bkZXYzFFbFhzam43VlB2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFz0MhJo+r9YvWcbhKzgVOP4hUdcOzXMPYd796DgCGa0EXJwp2+x3je5 yPDwFRvIkeXOYhnBewiQQcmRmMS1vdyI3ypAyeWtx2aq4Z+ZfxxuCGCuL8MbT8si O17M4LstjaJyTOixH/40ZMFWwvB3d768dZkpxcGY8dk7U+QQBkqcckVR/0kdJ5u9 nesBqkMr7coA+aiU7tl3MtuNhygD/C0FfhCWGUaSzTRktbP+7/DSHPqHeUehtYKH N6Bcdod6/j2gyJJxhlOBxf6SPCsxA8s1nRruzL5hs/6GBlBdpeCT5ZQUNbrCDVxR PcoDPCO1NiYLTYO+tuNsB8NICpYIYcU= -----END CERTIFICATE-----Generated at Sat Dec 20 12:26:28 2025 by rpki-client