This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft File: tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json) Hash identifier: O35vyT4ED0NKRtoHW3x8NRWQ8UIDGMVRT+p7OBSvSiw= Subject key identifier: 81:07:DF:E2:2E:5E:50:9A:24:37:FF:CA:94:52:CF:25:0F:5C:94:B9 Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Certificate serial: 0CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft Manifest number: 0CD1 Signing time: Sun 28 Dec 2025 17:53:57 +0000 Manifest this update: Sun 28 Dec 2025 17:53:57 +0000 Manifest next update: Sun 04 Jan 2026 17:53:57 +0000 Files and hashes: 1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: NJ0NRtZAFjEm2mMa4dkZAAqWzqGgEPE94flB2Yok+Fc=) 2: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: f8gwOWP+gzIc1sTbccPzYVASHXUhpL4+AZoO9s0gnOY=) 3: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: mSkIgywOU9dhooivn2x5OXxcwDybzq+7lQQROc67tvc=) 4: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: tEULMfLQG1uBT4oJ7DeARVbztIuEbjp8uzJOUISud6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 17:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Validity Not Before: Dec 28 17:53:57 2025 GMT Not After : Jan 4 17:53:57 2026 GMT Subject: CN=69516eb5-7356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ca:74:df:d9:44:bf:53:e9:a4:3d:eb:b1:6c: 90:1e:0b:30:f4:ae:2e:ce:6e:7b:0f:e9:f1:d9:09: 7a:8a:36:e7:df:22:9e:d8:b2:ee:9d:c1:3c:b0:8f: fd:99:c9:3a:12:cb:f3:53:e9:a9:03:60:95:10:ef: 3f:68:ab:4c:de:86:7a:3c:c7:fc:c6:8b:2c:89:e3: 83:44:57:8b:07:85:23:62:90:a3:d2:47:e9:5f:47: 00:32:44:c3:1f:1a:a9:6d:42:95:ff:28:78:13:a3: c7:81:6e:30:1d:fd:c6:fd:0c:5e:bf:62:8e:1e:5a: a8:fc:2b:fd:5d:19:74:8a:99:4d:6d:aa:0c:fb:ee: 17:64:91:30:c7:9a:70:90:3e:95:38:f9:56:da:4b: e1:14:d2:f3:56:d2:29:92:30:da:9e:15:c3:19:89: eb:fb:4a:dc:8e:1d:73:6a:78:99:68:e8:75:a3:57: 81:a5:3a:86:bf:96:19:66:ab:e6:21:ae:9f:52:12: 1d:df:f0:10:5b:ee:f1:79:ec:f7:c7:d4:b2:39:ef: f5:8f:ec:5d:04:74:0c:60:85:40:e6:08:7d:8a:6c: f6:7a:43:d5:27:41:d4:36:1b:09:38:77:32:53:47: 29:c5:59:a1:2a:0a:54:8c:8d:94:45:c5:2f:b9:86: 4e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:07:DF:E2:2E:5E:50:9A:24:37:FF:CA:94:52:CF:25:0F:5C:94:B9 X509v3 Authority Key Identifier: keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:12:d9:98:38:74:d7:e0:8d:7f:58:32:2e:50:15:42:b7:f2: 6a:76:55:7b:7c:30:58:c2:e1:b4:c4:86:9c:7d:56:88:af:22: d1:72:83:35:18:04:e1:80:e7:b8:1f:3e:ec:04:25:be:33:2a: 82:c0:41:7b:2b:ea:f9:f3:54:7e:44:a0:16:f9:9f:50:ec:1b: 77:3d:f1:50:22:86:23:6e:a2:35:b5:ba:83:f6:3e:c3:d9:3e: 60:24:1b:c9:6f:bf:91:5c:68:4c:59:28:7d:df:b7:db:f9:87: b7:e0:c0:e4:90:44:d9:99:98:f8:62:c0:f3:d7:2b:79:22:8b: af:98:f8:ef:91:40:6f:6d:07:a1:23:aa:2a:82:6f:22:17:72: 29:15:b6:b9:98:86:ae:8d:46:90:87:ad:d7:33:a2:dd:56:8f: 50:f4:ad:3e:a5:92:bf:fd:64:4a:96:9f:e0:ec:dd:9c:5a:4d: 78:ba:92:ac:09:6e:44:89:50:d1:a8:6a:a3:9b:55:ea:2b:1f: cc:b8:fd:2d:b0:31:c5:6e:a0:98:4e:bb:ff:f9:50:cd:41:85: 75:33:46:a9:a9:18:62:51:12:fb:36:1d:10:be:8f:cf:a7:ba: 04:74:42:ca:fc:fb:88:c3:52:d6:32:84:46:3e:74:1d:c1:5d: 68:c3:53:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKEI0QjEwRTZDQjM4RDUzNjVEMDU0RThEQkU5MEYzNEYy QzM4OEIxMEMwHhcNMjUxMjI4MTc1MzU3WhcNMjYwMTA0MTc1MzU3WjAYMRYwFAYD VQQDDA02OTUxNmViNS03MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsp039lEv1PppD3rsWyQHgsw9K4uzm57D+nx2Ql6ijbn3yKe2LLuncE8sI/9 mck6EsvzU+mpA2CVEO8/aKtM3oZ6PMf8xossieODRFeLB4UjYpCj0kfpX0cAMkTD HxqpbUKV/yh4E6PHgW4wHf3G/Qxev2KOHlqo/Cv9XRl0iplNbaoM++4XZJEwx5pw kD6VOPlW2kvhFNLzVtIpkjDanhXDGYnr+0rcjh1zaniZaOh1o1eBpTqGv5YZZqvm Ia6fUhId3/AQW+7xeez3x9SyOe/1j+xdBHQMYIVA5gh9imz2ekPVJ0HUNhsJOHcy U0cpxVmhKgpUjI2URcUvuYZO2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEH3+Iu XlCaJDf/ypRSzyUPXJS5MB8GA1UdIwQYMBaAFLSxDmyzjVNl0FTo2+kPNPLDiLEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8yMDkxREM4RTA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUyWFFWT2piNlE4MDhzT0lz UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMRU9iTE9OVTJYUVZPamI2UTgwOHNPSXNRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8yMDkxREM4RTA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUy WFFWT2piNlE4MDhzT0lzUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeEtmYOHTX4I1/WDIuUBVCt/JqdlV7fDBYwuG0xIacfVaIryLRcoM1 GAThgOe4Hz7sBCW+MyqCwEF7K+r581R+RKAW+Z9Q7Bt3PfFQIoYjbqI1tbqD9j7D 2T5gJBvJb7+RXGhMWSh937fb+Ye34MDkkETZmZj4YsDz1yt5IouvmPjvkUBvbQeh I6oqgm8iF3IpFba5mIaujUaQh63XM6LdVo9Q9K0+pZK//WRKlp/g7N2cWk14upKs CW5EiVDRqGqjm1XqKx/MuP0tsDHFbqCYTrv/+VDNQYV1M0apqRhiURL7Nh0Qvo/P p7oEdELK/PuIw1LWMoRGPnQdwV1ow1MX -----END CERTIFICATE-----Generated at Mon Dec 29 04:17:33 2025 by rpki-client