This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: zAGDEUBYPxbOnP9l5rg/4xXqs60afxHffuboS93AxHs= Subject key identifier: 8C:DB:1A:C6:63:A9:C8:CC:61:3A:6C:44:02:98:05:50:5B:93:A5:13 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 0194 Signing time: Sun 21 Dec 2025 02:42:52 +0000 Manifest this update: Sun 21 Dec 2025 02:42:51 +0000 Manifest next update: Sun 28 Dec 2025 02:42:51 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: wp2ad4bhRictFszg01c1gtLM2p+TjcQSn33/c9KvZ2g=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: OhVSINqRDbYDYzizYPjsSJVDGsqMNV1Hnr1ZKEP7+fs=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: ByB0pCDxwls4ymgVFOzdTJ6/67CPnhKw+rJNXjlR5HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Dec 21 02:42:51 2025 GMT Not After : Dec 28 02:42:51 2025 GMT Subject: CN=69475eac-f1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:e6:a2:e6:4a:41:ee:56:79:f7:5f:fc:9a: fb:d4:52:65:f9:93:0b:1f:4a:98:5f:6c:04:a0:20: 50:59:c8:f5:0d:d8:d7:3b:5b:a9:a2:c0:60:b1:27: bb:ed:70:bb:98:f2:77:0c:2a:6f:aa:25:af:fa:4c: d2:ac:75:3e:cd:8d:45:36:f1:8a:94:c7:bb:77:f1: 90:72:66:e9:30:28:d5:2b:8c:cf:21:28:92:3d:44: 41:06:49:65:ce:02:89:15:c7:93:a7:a5:16:46:60: c0:17:10:2f:65:82:4c:a6:f7:9c:85:ca:02:9e:d2: c1:ff:46:71:cb:e6:be:f2:71:54:bf:bd:a5:2c:38: 56:aa:ff:bb:43:1c:ee:fe:17:42:99:3f:d9:4c:1a: b2:ec:82:28:99:9d:77:bc:dd:7e:8a:c8:21:5d:ac: cb:80:a9:73:0e:dc:f4:b4:03:e5:45:4c:85:30:1c: 6d:94:0d:eb:3e:b7:66:a6:b8:d7:27:2e:81:ae:f1: de:db:41:f6:72:c0:0e:bc:51:aa:48:72:61:97:d1: 8c:71:82:d5:95:cb:1e:e2:dd:b3:4d:bc:5f:23:36: b9:9d:bb:66:34:51:2a:39:5f:81:0f:f8:c0:4d:ae: 7a:bf:b6:ea:c6:ff:dd:e7:aa:d2:92:f9:b6:5b:e7: d7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DB:1A:C6:63:A9:C8:CC:61:3A:6C:44:02:98:05:50:5B:93:A5:13 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:89:d0:8f:06:ed:8a:86:0b:5b:68:75:4b:82:de:1d:62:2b: e7:a5:33:66:76:a4:aa:c4:d0:d3:20:2b:17:ae:96:3f:24:01: 5c:fb:81:59:f8:31:22:b6:79:4e:fc:f9:05:95:f8:f6:17:ed: 8b:a2:47:81:a8:33:e8:a9:c6:d7:d1:cf:53:77:52:63:cc:f4: 4f:91:d8:cd:28:80:75:ed:71:55:7d:e1:b1:80:6f:92:7a:d6: eb:a9:a3:a0:93:f1:8e:db:b7:81:fa:a1:d5:5e:b9:c3:1c:f0: ec:f6:cd:dd:44:d3:31:ee:99:a8:aa:83:1a:7b:32:fa:10:e4: e9:3a:87:fa:ec:b7:b7:8d:93:32:ae:09:62:32:3e:34:59:d0: ca:2f:74:3b:99:45:fa:31:c7:61:41:f0:3f:5b:fe:6a:2a:08: 52:55:9b:82:4d:bf:45:17:a3:cd:d2:22:aa:22:cc:a0:7c:4b: 16:f4:a3:9e:66:1b:c6:94:25:de:ce:36:d1:14:9f:d5:18:59: 10:b5:70:42:98:18:a7:cc:eb:b0:c3:67:33:05:bb:66:34:57: df:17:76:81:cd:4d:6f:31:08:52:09:41:82:17:63:f8:e9:47: 73:21:98:68:56:e4:89:db:ef:ac:3c:e0:cf:ab:1b:33:e0:aa: 5c:2c:d2:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjUxMjIxMDI0MjUxWhcNMjUxMjI4MDI0MjUxWjAYMRYwFAYD VQQDDA02OTQ3NWVhYy1mMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr3mouZKQe5Wefdf/Jr71FJl+ZMLH0qYX2wEoCBQWcj1DdjXO1uposBgsSe7 7XC7mPJ3DCpvqiWv+kzSrHU+zY1FNvGKlMe7d/GQcmbpMCjVK4zPISiSPURBBkll zgKJFceTp6UWRmDAFxAvZYJMpvechcoCntLB/0Zxy+a+8nFUv72lLDhWqv+7Qxzu /hdCmT/ZTBqy7IIomZ13vN1+isghXazLgKlzDtz0tAPlRUyFMBxtlA3rPrdmprjX Jy6BrvHe20H2csAOvFGqSHJhl9GMcYLVlcse4t2zTbxfIza5nbtmNFEqOV+BD/jA Ta56v7bqxv/d56rSkvm2W+fXowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzbGsZj qcjMYTpsRAKYBVBbk6UTMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnidCPBu2KhgtbaHVLgt4dYivnpTNmdqSqxNDTICsXrpY/JAFc+4FZ +DEitnlO/PkFlfj2F+2LokeBqDPoqcbX0c9Td1JjzPRPkdjNKIB17XFVfeGxgG+S etbrqaOgk/GO27eB+qHVXrnDHPDs9s3dRNMx7pmoqoMaezL6EOTpOof67Le3jZMy rgliMj40WdDKL3Q7mUX6McdhQfA/W/5qKghSVZuCTb9FF6PN0iKqIsygfEsW9KOe ZhvGlCXezjbRFJ/VGFkQtXBCmBinzOuww2czBbtmNFffF3aBzU1vMQhSCUGCF2P4 6UdzIZhoVuSJ2++sPODPqxsz4KpcLNJe -----END CERTIFICATE-----Generated at Sun Dec 21 06:57:56 2025 by rpki-client