This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: mAN3w+RwL9XnexP1ufoCoVh3MG36P+VfGIyewr6F0HA= Subject key identifier: 37:E8:AE:31:2A:B5:09:85:37:96:3D:F5:6C:4E:40:83:CE:B4:95:A9 Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: E3 Signing time: Fri 19 Dec 2025 04:38:02 +0000 Manifest this update: Fri 19 Dec 2025 04:38:02 +0000 Manifest next update: Fri 26 Dec 2025 04:38:02 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: v5aBFzmdlVCrVe1syxxw9ktAEKuvy/4jg9B2WW/c3E8=) 2: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: jJmFWeK8DxzcyCmNzQTOimZpBnvjDB61t5aPUy56grE=) 3: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: q2PsmBaPUlGvEput/dvI1P9mbtnk1siucrhRcpQcM5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Dec 19 04:38:02 2025 GMT Not After : Dec 26 04:38:02 2025 GMT Subject: CN=6944d6aa-251d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:a3:32:00:c9:66:3d:df:e9:8c:a3:5b:f4: e9:23:cb:b2:43:2b:95:cf:f7:28:bc:a1:63:89:09: cd:8e:45:08:af:d2:cf:cd:c8:f2:ab:20:34:97:00: eb:26:3f:13:09:86:fc:15:c4:e7:9c:97:90:25:c7: a6:92:ae:e2:c4:06:49:d9:07:6c:60:2c:25:83:b5: 17:c9:38:78:0c:93:04:94:50:85:c6:f7:51:ff:8e: 5f:ac:93:cb:7c:4d:0b:80:5c:08:e9:01:7b:bb:c6: bd:41:4e:32:04:1e:67:99:ce:a8:0e:db:99:d1:1d: 05:09:da:a4:ea:7b:7a:4b:f9:c8:a0:3b:cb:39:86: fe:01:60:6c:35:19:e1:bd:db:6e:36:0e:8c:a2:70: c5:7b:12:ed:90:a9:36:03:3d:01:1c:1c:e3:fc:da: d6:92:3a:5c:2e:a0:59:9e:12:66:89:c8:3f:37:a1: de:fc:c3:46:16:11:79:1c:c5:e5:21:00:16:63:a1: 5c:f1:ce:f3:8a:b6:ff:bc:14:51:7f:44:96:33:7e: 8a:e3:f5:20:f6:ab:ae:50:08:68:fe:1e:a1:b2:94: 08:70:d2:52:cf:d8:e2:d0:b7:21:36:c6:41:0e:2b: 15:07:40:67:a2:2f:86:25:f8:cc:59:56:c7:ce:90: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E8:AE:31:2A:B5:09:85:37:96:3D:F5:6C:4E:40:83:CE:B4:95:A9 X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:8e:4d:c7:4c:b9:43:25:84:7e:e1:3d:29:27:b5:5b:85:53: c2:08:1b:d9:98:54:68:2c:e7:aa:27:d9:2d:e4:12:57:f7:e0: c2:f2:bf:5f:57:bf:69:ad:c4:fc:05:70:82:c5:d6:d2:4e:cb: 66:ba:ac:d4:c2:e1:da:be:32:2d:9d:6d:60:3e:9d:88:a3:b8: 03:33:11:36:ba:45:98:7f:23:58:88:1d:12:19:46:f8:bf:53: 9b:7e:f3:ea:2b:23:f2:c5:47:38:8f:64:7d:5a:c5:22:9e:e2: f4:af:2d:50:16:ea:c5:2b:23:69:65:0d:96:f2:fd:84:bf:02: c4:ed:03:3f:53:af:13:22:7c:58:c8:19:30:e0:b9:e2:f9:06: 52:00:7b:61:30:d6:17:74:22:e5:ec:dc:93:61:c8:eb:c9:a7: f7:9a:95:cc:5e:63:d3:0f:14:84:40:98:32:7b:e8:60:e6:9e: 9b:47:c6:49:de:55:aa:ca:05:47:d2:e2:39:b3:10:75:a9:ee: c6:0d:08:06:13:8d:46:a6:be:b7:e6:65:77:bd:34:47:52:db: 28:0b:42:dd:10:f2:c3:2f:16:9f:22:21:cd:7c:e7:4f:1a:72: a8:e5:f8:6a:c2:21:5b:2c:64:86:64:7a:0f:46:3d:ef:f1:e3: b1:7b:b7:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKDNBODc4NzFFM0JBRTY1RURFMkYzMUJCMUFENUM1OUJC N0E3NEFCREQwHhcNMjUxMjE5MDQzODAyWhcNMjUxMjI2MDQzODAyWjAYMRYwFAYD VQQDDA02OTQ0ZDZhYS0yNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GGjMgDJZj3f6YyjW/TpI8uyQyuVz/covKFjiQnNjkUIr9LPzcjyqyA0lwDr Jj8TCYb8FcTnnJeQJcemkq7ixAZJ2QdsYCwlg7UXyTh4DJMElFCFxvdR/45frJPL fE0LgFwI6QF7u8a9QU4yBB5nmc6oDtuZ0R0FCdqk6nt6S/nIoDvLOYb+AWBsNRnh vdtuNg6MonDFexLtkKk2Az0BHBzj/NrWkjpcLqBZnhJmicg/N6He/MNGFhF5HMXl IQAWY6Fc8c7zirb/vBRRf0SWM36K4/Ug9quuUAho/h6hspQIcNJSz9ji0LchNsZB DisVB0Bnoi+GJfjMWVbHzpCyRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDforjEq tQmFN5Y99WxOQIPOtJWpMB8GA1UdIwQYMBaAFDqHhx47rmXt4vMbsa1cWbt6dKvd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy8zOTc4RTMxNjg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVplM2k4eHV4clZ4WnUzcDBx OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy8zOTc4RTMxNjg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVpl M2k4eHV4clZ4WnUzcDBxOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSjk3HTLlDJYR+4T0pJ7VbhVPCCBvZmFRoLOeqJ9kt5BJX9+DC8r9f V79prcT8BXCCxdbSTstmuqzUwuHavjItnW1gPp2Io7gDMxE2ukWYfyNYiB0SGUb4 v1ObfvPqKyPyxUc4j2R9WsUinuL0ry1QFurFKyNpZQ2W8v2EvwLE7QM/U68TInxY yBkw4Lni+QZSAHthMNYXdCLl7NyTYcjryaf3mpXMXmPTDxSEQJgye+hg5p6bR8ZJ 3lWqygVH0uI5sxB1qe7GDQgGE41Gpr635mV3vTRHUtsoC0LdEPLDLxafIiHNfOdP GnKo5fhqwiFbLGSGZHoPRj3v8eOxe7di -----END CERTIFICATE-----Generated at Fri Dec 19 13:53:41 2025 by rpki-client