This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json) Hash identifier: 0wQ7hZCpw+bcXuKQbOM6HsZY0TFu0E6zYCm5JQRoTUo= Subject key identifier: 4B:2D:E3:DF:20:9F:51:5F:D3:67:CB:1D:47:1B:38:3B:51:86:2D:4F Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 3385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft Manifest number: 332F Signing time: Mon 22 Dec 2025 15:17:21 +0000 Manifest this update: Mon 22 Dec 2025 15:17:20 +0000 Manifest next update: Mon 29 Dec 2025 15:17:20 +0000 Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: 0npTTCels0BTsmjRglCJe/qK9lzzpcxJlgztgPu1K88=) 2: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: TJYAsaduMNFlCfCtpHImQhHzTtlz3kZi3/4L+kmyEYE=) 3: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: eNA7hmO0iaDh6B8QriE+uJJoAJhe22m7Y0RORTwFmBQ=) 4: 844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa (hash: F0EI0pjKdFSXXJaNRIeZAVVcc/1UvTOq8MA6ZbeocbA=) 5: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: qmlGrSLmYcGa18yom8d6PeePfMWIiWVkajsGQGVwEAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13189 (0x3385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Validity Not Before: Dec 22 15:17:20 2025 GMT Not After : Dec 29 15:17:20 2025 GMT Subject: CN=69496101-f2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:bc:18:64:c7:01:c3:36:67:ed:55:b2:4c: f7:8a:4d:31:19:07:92:20:69:d6:b3:97:48:6b:d4: 7a:d3:f6:8d:1c:24:22:33:3b:aa:a0:4e:63:92:f9: ce:2e:df:83:59:6b:28:77:b7:81:74:5f:78:19:35: 7d:4a:08:41:a9:01:02:86:f7:59:68:c2:de:a6:08: 26:93:ff:e2:3e:09:47:21:07:59:a8:3e:9b:30:69: 76:85:4e:da:fe:a4:22:ff:85:26:6c:ea:5e:32:95: 2f:96:0a:30:77:96:22:82:53:0c:be:b3:81:2b:6c: c7:65:7a:dc:87:d2:be:8e:e0:36:da:67:f7:e9:c8: 16:19:ce:46:f4:6f:46:f7:f8:00:0e:09:c4:c1:ca: 9f:e5:63:5f:08:df:4c:ec:ff:cc:3d:4f:cc:e4:72: f7:de:38:72:9f:78:13:ac:1c:64:a9:e6:9f:b3:8c: 58:44:87:26:16:9f:55:cc:97:af:ba:ba:e0:f2:a8: 09:6e:fc:7c:bd:07:d5:42:d7:f9:16:6e:04:2a:38: 6e:7c:41:b6:2f:db:5f:58:21:b2:ca:9e:fd:74:71: fd:a3:e1:11:3c:29:9b:5c:f7:3c:9f:5a:b8:25:47: f3:4e:04:78:15:82:88:24:1d:37:9a:62:fa:d1:6b: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2D:E3:DF:20:9F:51:5F:D3:67:CB:1D:47:1B:38:3B:51:86:2D:4F X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a9:db:e6:3e:d4:f2:2e:66:d1:c5:a7:9c:2a:f8:2e:dc:b8: 80:b1:73:c1:9c:c4:f6:85:c4:3c:ed:7f:37:99:b8:a1:b4:e1: 97:df:88:fa:2f:6f:82:32:c2:ba:19:c0:a3:79:02:af:b9:ec: ac:eb:05:4a:3d:48:0a:bc:9a:25:59:25:54:ad:99:21:61:ed: a7:94:c0:43:50:e8:6c:ce:e5:42:c3:8b:25:f0:cd:a3:17:82: 09:74:f6:25:4f:c8:9b:be:c1:11:e1:e6:6c:b8:b3:e2:ae:bc: 5c:ef:4e:62:a9:7d:7d:08:d5:69:f9:01:e1:e2:02:b6:ce:23: da:3f:1c:8f:2b:66:4f:d6:61:13:cb:16:67:16:d6:45:17:80: 62:bd:51:87:30:0a:db:cd:d3:f3:84:07:f0:3c:93:99:42:27: ee:51:43:18:5e:55:ec:61:d4:27:c7:fc:94:ce:89:ed:b1:d6: ee:2a:8a:bc:35:fa:39:62:b0:de:4f:82:38:0b:da:4b:df:b7: 2b:f3:df:ab:95:49:cb:20:55:c4:a6:52:ab:b9:9f:5d:1a:07: e1:8b:5c:57:e6:6e:a0:dd:f2:6d:90:78:24:bc:ec:71:a2:6c: a3:41:9d:22:9c:78:67:50:59:06:6c:d9:46:85:45:15:6f:3a: cb:e2:01:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjUxMjIyMTUxNzIwWhcNMjUxMjI5MTUxNzIwWjAYMRYwFAYD VQQDDA02OTQ5NjEwMS1mMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3y8GGTHAcM2Z+1Vskz3ik0xGQeSIGnWs5dIa9R60/aNHCQiMzuqoE5jkvnO Lt+DWWsod7eBdF94GTV9SghBqQEChvdZaMLepggmk//iPglHIQdZqD6bMGl2hU7a /qQi/4UmbOpeMpUvlgowd5YiglMMvrOBK2zHZXrch9K+juA22mf36cgWGc5G9G9G 9/gADgnEwcqf5WNfCN9M7P/MPU/M5HL33jhyn3gTrBxkqeafs4xYRIcmFp9VzJev urrg8qgJbvx8vQfVQtf5Fm4EKjhufEG2L9tfWCGyyp79dHH9o+ERPCmbXPc8n1q4 JUfzTgR4FYKIJB03mmL60WvWsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEst498g n1Ff02fLHUcbODtRhi1PMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg2My9CRkU1NEE2ODgxNUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1p TEs3bVRnejR1akgxcHJrMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSqdvmPtTyLmbRxaecKvgu3LiAsXPBnMT2hcQ87X83mbihtOGX34j6 L2+CMsK6GcCjeQKvueys6wVKPUgKvJolWSVUrZkhYe2nlMBDUOhszuVCw4sl8M2j F4IJdPYlT8ibvsER4eZsuLPirrxc705iqX19CNVp+QHh4gK2ziPaPxyPK2ZP1mET yxZnFtZFF4BivVGHMArbzdPzhAfwPJOZQifuUUMYXlXsYdQnx/yUzontsdbuKoq8 Nfo5YrDeT4I4C9pL37cr89+rlUnLIFXEplKruZ9dGgfhi1xX5m6g3fJtkHgkvOxx omyjQZ0inHhnUFkGbNlGhUUVbzrL4gHN -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:21 2025 by rpki-client