This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: NG3ZC1H13voCX4akIjqyARcF+TIbxmheTEXZrRa2k3g= Subject key identifier: 69:81:84:2B:36:66:83:80:7B:F1:E9:46:4E:71:40:8F:EB:7B:A0:67 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 032C Signing time: Tue 23 Dec 2025 01:54:13 +0000 Manifest this update: Tue 23 Dec 2025 01:54:12 +0000 Manifest next update: Tue 30 Dec 2025 01:54:12 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: 3+OVGSLiTKbBXcGz8qJbCdEvcsYlxT3vSv8bctaIO8c=) 2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=) 3: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Dec 23 01:54:12 2025 GMT Not After : Dec 30 01:54:12 2025 GMT Subject: CN=6949f645-6516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:04:e1:00:37:ad:fa:cf:84:11:30:ef:84:29: 12:98:ec:d7:6b:0c:3c:db:c8:8d:f7:67:db:8d:ec: 60:28:23:70:65:5a:af:42:56:96:ce:75:cd:21:e7: 22:ec:9e:a0:f8:00:fd:68:d8:90:9b:40:d5:c3:98: 89:02:89:e4:26:f2:56:9a:de:c4:a4:de:d7:c4:40: 6d:5f:11:ac:98:69:f6:2b:24:61:4a:d0:96:26:a3: ac:43:18:04:c0:74:0c:ca:51:8a:de:46:4a:09:d8: 29:1e:ed:70:b7:9e:37:b2:0f:b5:ce:d7:ff:26:67: 49:9c:63:f3:8e:6c:6a:a9:4a:77:6f:f2:65:54:9a: dd:05:6a:80:af:c9:03:75:61:43:f5:ec:e1:75:10: 0f:b9:81:e0:46:47:f9:52:b9:a0:ce:83:9d:c4:ae: 30:05:89:ae:c4:98:f1:d0:04:7c:80:df:a4:03:38: 57:d6:eb:e0:ab:2a:ca:8e:e1:af:31:e5:a1:31:8f: 94:0f:34:59:89:63:c8:f0:8e:d0:82:27:6d:0e:5c: d6:bc:93:80:d3:6e:13:6a:da:d8:0e:2b:26:0a:c5: e2:15:72:20:c5:6c:14:79:d8:8a:9b:e8:a0:db:89: be:6a:51:a0:68:ce:8a:19:f1:ed:f0:fa:a1:16:18: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:81:84:2B:36:66:83:80:7B:F1:E9:46:4E:71:40:8F:EB:7B:A0:67 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:55:37:c8:be:ed:49:67:2a:fc:25:53:40:33:0c:c2:dc:d9: b7:02:d2:64:ec:4c:15:5b:73:68:29:e9:42:fa:e8:c1:54:2c: 53:75:70:56:63:13:ad:57:ae:1f:0c:a5:db:02:50:d1:12:60: 50:a3:01:bb:72:bc:ac:07:ee:cb:00:fd:0c:ac:20:70:5a:c2: bf:ba:5f:bf:d3:7a:9c:1d:bf:fd:b0:80:9b:0f:09:ed:1f:0c: 7a:42:f5:00:de:70:c1:02:7f:b5:f8:22:a7:b8:c6:d1:10:51: 00:0a:b7:83:09:09:0a:ab:27:21:b6:ae:37:94:17:a0:a7:4d: ec:72:bd:ce:e6:db:d7:1d:c1:c3:9b:69:f0:68:be:79:0e:69: e2:2e:ba:77:e8:ad:ef:39:ce:9c:27:0f:4d:d7:ac:8d:35:9a: 69:5b:3f:46:c2:3f:0c:3f:51:2c:8c:1a:dc:78:61:b7:a6:39: c5:6c:d8:72:16:03:be:5e:82:10:6c:db:e6:11:af:51:d0:ba: 76:89:d0:6c:8e:c9:28:36:a8:41:54:a3:02:d8:f7:70:40:0c: bd:79:9a:09:5e:dd:22:7e:d2:f9:d5:0a:8c:6f:7e:9c:6d:1e: a6:a1:1d:a6:a9:32:af:48:96:3a:bd:4b:a4:6c:f5:e5:5c:22: 05:32:da:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjUxMjIzMDE1NDEyWhcNMjUxMjMwMDE1NDEyWjAYMRYwFAYD VQQDDA02OTQ5ZjY0NS02NTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AThADet+s+EETDvhCkSmOzXaww828iN92fbjexgKCNwZVqvQlaWznXNIeci 7J6g+AD9aNiQm0DVw5iJAonkJvJWmt7EpN7XxEBtXxGsmGn2KyRhStCWJqOsQxgE wHQMylGK3kZKCdgpHu1wt543sg+1ztf/JmdJnGPzjmxqqUp3b/JlVJrdBWqAr8kD dWFD9ezhdRAPuYHgRkf5UrmgzoOdxK4wBYmuxJjx0AR8gN+kAzhX1uvgqyrKjuGv MeWhMY+UDzRZiWPI8I7QgidtDlzWvJOA024TatrYDismCsXiFXIgxWwUediKm+ig 24m+alGgaM6KGfHt8PqhFhgbRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmBhCs2 ZoOAe/HpRk5xQI/re6BnMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbVTfIvu1JZyr8JVNAMwzC3Nm3AtJk7EwVW3NoKelC+ujBVCxTdXBW YxOtV64fDKXbAlDREmBQowG7crysB+7LAP0MrCBwWsK/ul+/03qcHb/9sICbDwnt Hwx6QvUA3nDBAn+1+CKnuMbREFEACreDCQkKqychtq43lBegp03scr3O5tvXHcHD m2nwaL55DmniLrp36K3vOc6cJw9N16yNNZppWz9Gwj8MP1EsjBrceGG3pjnFbNhy FgO+XoIQbNvmEa9R0Lp2idBsjskoNqhBVKMC2PdwQAy9eZoJXt0iftL51QqMb36c bR6moR2mqTKvSJY6vUukbPXlXCIFMtqr -----END CERTIFICATE-----Generated at Tue Dec 23 17:32:28 2025 by rpki-client