This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json) Hash identifier: YpEepkdnLzzg+9u6fwQxgvg4R+WdaaVSuNRxlrdWzTc= Subject key identifier: 84:8D:7D:66:09:0E:50:C1:A3:7A:CB:B3:C9:4D:D8:4F:49:63:22:17 Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft Manifest number: 06F9 Signing time: Sat 20 Dec 2025 21:17:49 +0000 Manifest this update: Sat 20 Dec 2025 21:17:48 +0000 Manifest next update: Sat 27 Dec 2025 21:17:48 +0000 Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: h6JFw1h3eAzNuUsKhX1eZFJmrpCGNy+xRtO7h/00neQ=) 2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: Y8t05LyVholfuhF0jMVkacpJNMh0Rpp2q0O6araserk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6 Validity Not Before: Dec 20 21:17:48 2025 GMT Not After : Dec 27 21:17:48 2025 GMT Subject: CN=6947127d-8ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d0:64:c9:d6:46:bc:9a:a4:8a:44:67:f9:c5: 98:f9:fb:98:c1:21:37:0f:dd:00:c0:7f:5c:cb:9d: 28:89:48:4e:d6:af:97:b2:6f:01:28:02:0b:d1:07: 98:4f:1f:46:ea:d7:77:e4:ba:96:63:87:03:09:44: f2:00:07:8e:ec:dc:b4:e9:a9:aa:c1:8f:87:18:4a: d8:4d:f2:5e:e7:85:b7:76:db:9f:b3:45:2f:a1:78: 62:e6:d4:02:fb:6a:88:72:58:f1:c5:01:1a:55:2d: f3:74:4f:f6:f9:2b:f4:99:50:6f:d4:a1:93:00:f6: 36:9b:d1:eb:e3:c8:b3:20:ec:55:9d:bc:f6:4b:32: fd:4e:af:a3:a9:00:da:e0:5c:e5:98:fe:6f:0d:e3: 5c:bb:13:ca:ad:20:db:0b:50:42:48:0b:3f:10:02: 7d:d6:c7:ce:b0:5c:13:93:21:07:fe:03:02:2d:be: 1a:7a:0c:9a:ae:c0:d9:81:aa:bd:19:39:d7:ae:eb: 39:a9:57:bb:7b:7e:b2:fe:8b:99:c7:50:5d:a7:52: 17:fa:c2:be:dd:4b:4e:0b:36:01:0d:a4:71:18:ce: 79:e6:28:f9:47:55:c1:4e:eb:9a:b2:e4:7f:98:53: aa:69:29:c1:a3:8e:29:44:0e:aa:d3:36:c4:9e:63: f2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8D:7D:66:09:0E:50:C1:A3:7A:CB:B3:C9:4D:D8:4F:49:63:22:17 X509v3 Authority Key Identifier: keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:40:69:47:88:61:38:9e:14:bb:d7:ef:36:17:86:60:42:5c: 4c:fb:c4:dc:63:d9:b1:1c:c4:35:e3:06:cd:ac:26:24:c0:f3: e6:93:05:23:4a:05:c4:d2:25:f7:e2:24:d2:c1:04:1b:9f:19: 3a:49:96:91:c2:39:e2:7f:ac:b6:d2:9d:23:69:f1:8c:3e:41: 61:41:7c:0d:9b:a5:48:b5:54:8c:dc:ba:48:99:be:24:46:aa: 1f:dc:37:f2:9a:8d:36:ff:d4:73:6c:45:8f:32:03:46:97:90: c1:16:71:ad:fc:b9:98:25:cb:fb:49:07:0d:fc:74:5a:9f:25: a8:1f:67:65:0a:6a:e4:cd:1c:90:64:28:ec:b6:8d:4c:5b:12: 4d:97:55:43:42:9a:d9:f5:ea:33:bf:63:bc:20:f8:2c:f1:2c: ea:c6:18:15:6f:5a:a3:fc:de:18:14:65:49:e9:d7:c0:6e:bd: 36:42:35:57:ea:56:2d:81:1f:39:5d:10:38:aa:25:ae:86:39: 77:55:85:47:f7:46:90:f9:8f:ec:2e:bc:e2:4b:91:39:95:b7: fc:b3:b0:83:2d:14:fa:32:56:1a:b7:5d:02:60:11:4f:ee:44: ed:67:58:ff:e4:de:04:4a:0f:79:ce:9b:a3:97:4a:6b:36:39: d6:6a:e8:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2MUMxMTAvBgNVBAUTKDNBODcyMTZDMTU5MjczQkY1MTkzNDdGQzFGRUU3MDYx OTVDQzJBRTYwHhcNMjUxMjIwMjExNzQ4WhcNMjUxMjI3MjExNzQ4WjAYMRYwFAYD VQQDDA02OTQ3MTI3ZC04YWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dBkydZGvJqkikRn+cWY+fuYwSE3D90AwH9cy50oiUhO1q+Xsm8BKAIL0QeY Tx9G6td35LqWY4cDCUTyAAeO7Ny06amqwY+HGErYTfJe54W3dtufs0UvoXhi5tQC +2qIcljxxQEaVS3zdE/2+Sv0mVBv1KGTAPY2m9Hr48izIOxVnbz2SzL9Tq+jqQDa 4FzlmP5vDeNcuxPKrSDbC1BCSAs/EAJ91sfOsFwTkyEH/gMCLb4aegyarsDZgaq9 GTnXrus5qVe7e36y/ouZx1Bdp1IX+sK+3UtOCzYBDaRxGM555ij5R1XBTuuasuR/ mFOqaSnBo44pRA6q0zbEnmPylwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISNfWYJ DlDBo3rLs8lN2E9JYyIXMB8GA1UdIwQYMBaAFDqHIWwVknO/UZNH/B/ucGGVzCrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjYxQy9GNDU5Mjk5Mjcz NzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3OVJrMGY4SC01d1laWE1L dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vY2hiQldTYzc5UmswZjhILTV3WVpYTUt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjYxQy9GNDU5Mjk5MjczNzIxMUVCOTQ3NUNBNURDNEY5QUUwMi9Pb2NoYkJXU2M3 OVJrMGY4SC01d1laWE1LdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmQGlHiGE4nhS71+82F4ZgQlxM+8TcY9mxHMQ14wbNrCYkwPPmkwUj SgXE0iX34iTSwQQbnxk6SZaRwjnif6y20p0jafGMPkFhQXwNm6VItVSM3LpImb4k Rqof3Dfymo02/9RzbEWPMgNGl5DBFnGt/LmYJcv7SQcN/HRanyWoH2dlCmrkzRyQ ZCjsto1MWxJNl1VDQprZ9eozv2O8IPgs8SzqxhgVb1qj/N4YFGVJ6dfAbr02QjVX 6lYtgR85XRA4qiWuhjl3VYVH90aQ+Y/sLrziS5E5lbf8s7CDLRT6MlYat10CYBFP 7kTtZ1j/5N4ESg95zpujl0prNjnWauhV -----END CERTIFICATE-----Generated at Sun Dec 21 04:10:45 2025 by rpki-client