This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: JwF3O9wsk8COzYJKwmrEy7KW/AbPkt1+D11JVj0wpnA= Subject key identifier: F4:C3:B5:D5:CC:D8:60:DE:0D:81:24:54:B6:A1:48:B6:83:FB:E9:3B Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: 012C Signing time: Thu 25 Dec 2025 03:45:51 +0000 Manifest this update: Thu 25 Dec 2025 03:45:51 +0000 Manifest next update: Thu 01 Jan 2026 03:45:51 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: NB/Z7THCrOYmx+8g0B1YvAyv19tAEk2sYpK+q6d/Y4M=) 2: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: zHkwstjBU9okILb/X+WL5mE12pvjEZDjhxeOKIBOBNY=) 3: A074721624CA11EF93486579C4F9AE02.roa (hash: rhkmKm24Z3LGwUDn9U8wPN9PfTD6fV18fMcA/oDsqYQ=) 4: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: 4xCjhLIdX51ri4H5JFEDOXxLAoM3aQzhavfN2qSp8lM=) 5: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: 4rxa1nn9pIW4f6C2tqJ4BWqQLDcGWeXHub2QF8i41eo=) 6: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: d8hqa3VZK4uOVZ2NvSviBU2tKSi94lw2kqJ0YIkiOVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 03:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Dec 25 03:45:51 2025 GMT Not After : Jan 1 03:45:51 2026 GMT Subject: CN=694cb36f-bcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:39:93:08:e2:ea:86:6c:03:a8:07:63:52: 99:aa:a3:eb:6f:22:8b:66:ad:3b:b7:01:9b:b0:d1: 49:b9:1c:f8:1a:8a:71:e0:e4:8c:88:b2:d6:62:bc: 66:40:cc:82:67:8d:88:d1:d2:d5:67:62:4b:57:01: 67:b1:5a:57:9a:da:e8:36:37:6f:7d:46:5f:50:dd: 4b:ad:62:d0:75:75:52:bc:c8:8f:89:29:b2:51:83: d0:00:64:88:69:ab:a6:77:60:c5:c9:c9:5f:ff:84: cc:2c:21:64:3b:67:ee:84:9e:b5:6b:d2:f8:fd:bd: 27:80:4d:0f:1d:ad:f1:49:ce:f6:a5:7a:71:52:07: 60:90:58:2a:ca:ba:3d:c3:39:b2:87:72:2a:d1:a7: df:61:6f:9f:a9:dd:14:ea:24:1e:92:7b:61:96:fe: 24:5c:1d:c3:9e:7d:46:a6:2a:33:a4:71:59:a1:04: ac:b4:b6:ac:df:13:8b:d6:42:b8:f7:db:3a:c2:52: fa:0e:6c:50:b2:43:0e:0c:69:4a:f2:42:fe:66:59: 33:86:18:1e:1e:8f:f4:a8:ec:31:86:74:33:8d:7e: d0:51:42:8e:6b:b8:87:4b:c2:bf:6b:b3:bd:01:e1: 6c:84:e3:60:de:91:0f:49:99:99:8e:37:55:b5:ad: bb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C3:B5:D5:CC:D8:60:DE:0D:81:24:54:B6:A1:48:B6:83:FB:E9:3B X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:56:7a:bc:45:84:37:4d:ba:91:83:30:a8:54:0b:6c:ce:0f: d9:1b:84:04:4e:93:2c:b8:c2:15:82:a0:a5:21:94:cf:3c:cf: 96:f1:d9:ee:fc:60:98:88:1c:50:a7:77:38:15:fe:ae:b0:89: 6d:97:18:ab:3f:c4:86:94:83:c9:fb:dd:03:2d:bf:25:1f:9b: 8f:a8:b1:49:6a:40:26:5e:50:5d:06:a4:98:93:71:5c:b3:db: 13:ac:bc:03:9e:03:e3:94:f0:4a:ee:20:4e:3d:2f:4c:cf:c8: 8d:2d:d7:45:c4:70:16:f4:fe:81:6d:3b:a5:3e:02:98:b0:fc: f5:fd:aa:06:70:17:d3:f8:ac:f7:ca:66:a6:96:89:62:0d:82: 95:62:cc:9c:fb:df:ce:da:93:1b:83:4b:74:cc:66:2f:b2:28: 55:23:c3:8c:47:54:39:3e:c3:12:3c:a6:16:57:e8:ae:f1:79: 49:32:83:c2:61:a7:52:fc:1c:7b:a7:38:d6:66:d8:08:42:3a: 66:84:b8:3d:b2:d9:7a:8b:07:4e:e0:9b:9c:66:c2:73:d0:39: f9:ad:f2:db:d0:fb:46:89:43:17:50:91:64:48:a5:96:03:fc: 6a:dd:dc:52:a7:9d:68:66:7b:56:78:da:6b:9b:eb:8e:49:04: 45:3f:71:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUxMjI1MDM0NTUxWhcNMjYwMTAxMDM0NTUxWjAYMRYwFAYD VQQDDA02OTRjYjM2Zi1iY2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymw5kwji6oZsA6gHY1KZqqPrbyKLZq07twGbsNFJuRz4Gopx4OSMiLLWYrxm QMyCZ42I0dLVZ2JLVwFnsVpXmtroNjdvfUZfUN1LrWLQdXVSvMiPiSmyUYPQAGSI aaumd2DFyclf/4TMLCFkO2fuhJ61a9L4/b0ngE0PHa3xSc72pXpxUgdgkFgqyro9 wzmyh3Iq0affYW+fqd0U6iQeknthlv4kXB3Dnn1GpiozpHFZoQSstLas3xOL1kK4 99s6wlL6DmxQskMODGlK8kL+ZlkzhhgeHo/0qOwxhnQzjX7QUUKOa7iHS8K/a7O9 AeFshONg3pEPSZmZjjdVta27WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTDtdXM 2GDeDYEkVLahSLaD++k7MB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8Vnq8RYQ3TbqRgzCoVAtszg/ZG4QETpMsuMIVgqClIZTPPM+W8dnu /GCYiBxQp3c4Ff6usIltlxirP8SGlIPJ+90DLb8lH5uPqLFJakAmXlBdBqSYk3Fc s9sTrLwDngPjlPBK7iBOPS9Mz8iNLddFxHAW9P6BbTulPgKYsPz1/aoGcBfT+Kz3 ymamloliDYKVYsyc+9/O2pMbg0t0zGYvsihVI8OMR1Q5PsMSPKYWV+iu8XlJMoPC YadS/Bx7pzjWZtgIQjpmhLg9stl6iwdO4JucZsJz0Dn5rfLb0PtGiUMXUJFkSKWW A/xq3dxSp51oZntWeNprm+uOSQRFP3Gn -----END CERTIFICATE-----Generated at Thu Dec 25 17:11:51 2025 by rpki-client