This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json) Hash identifier: BvIxmweRmmyEui8MKsbks24G0kQ224feXJ6nQFpF6m8= Subject key identifier: 53:A8:21:0A:81:16:DD:AC:EE:4B:12:1E:B4:B9:C7:F8:9F:0A:23:88 Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22 Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft Manifest number: 043C Signing time: Mon 22 Dec 2025 23:19:54 +0000 Manifest this update: Mon 22 Dec 2025 23:19:53 +0000 Manifest next update: Mon 29 Dec 2025 23:19:53 +0000 Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: ifyzTT8L+Ok3DQn3wJF4ZYlZMVqR27+ULn/C1GXzw2Y=) 2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: zIQCvO1cYT9GDGEyMPF0tBOYTt1JAajUXmcBSrFDxrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22 Validity Not Before: Dec 22 23:19:53 2025 GMT Not After : Dec 29 23:19:53 2025 GMT Subject: CN=6949d219-8d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:e4:ae:d5:e8:71:15:3d:9e:64:93:ad:70: 8f:49:e7:5c:0c:94:a5:c9:f2:2f:f3:43:6d:66:57: 74:dd:d2:bd:bc:93:8b:64:c0:52:7f:8e:ba:64:6b: 90:39:0e:47:46:14:f2:be:77:59:60:4d:68:ac:c0: a2:80:e2:ad:d2:7c:44:ba:cd:5b:df:85:93:68:5f: fb:23:39:ee:16:98:ce:1b:17:62:9a:65:74:bf:59: a0:53:7e:38:0b:a9:e6:a9:e8:27:31:b0:bc:a9:59: d8:2d:40:42:92:33:8a:28:c4:bb:44:1d:e4:e8:51: a8:bc:4b:c6:72:33:3f:33:70:eb:35:1d:4d:c5:14: de:db:fc:d3:19:8f:b7:0e:3c:9c:d8:93:f6:cf:62: 49:82:32:90:f5:8b:dd:ca:08:60:e9:9e:d1:bf:e6: 74:71:5f:0a:17:20:e6:fb:0e:ee:ab:fe:cf:37:0d: 6e:af:85:29:9d:10:ce:5b:2b:69:f1:f0:d0:1f:e3: 41:d1:be:4e:2a:26:19:4b:99:13:7b:ed:e9:d1:9d: f0:2c:89:b9:21:4a:a9:4b:a9:02:1d:ab:ae:0e:55: 0c:ed:7b:d4:b0:16:b5:5d:44:e8:f1:53:19:7c:72: db:43:5e:43:4a:f6:a6:df:c3:c8:fb:20:ce:93:bf: 5a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A8:21:0A:81:16:DD:AC:EE:4B:12:1E:B4:B9:C7:F8:9F:0A:23:88 X509v3 Authority Key Identifier: keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0b:cd:ef:15:03:95:c4:21:7d:2d:43:12:3a:64:d1:c8:d5: b4:d1:dc:23:66:ab:69:01:9e:34:ee:3f:24:66:ad:e9:30:a4: b5:e4:71:98:d4:09:37:03:61:e4:4e:55:2f:f0:60:90:2d:c6: 83:e6:23:06:bb:09:34:f6:07:e8:83:30:b6:ab:2e:6b:55:44: 83:df:65:76:af:dd:ab:4d:61:e3:58:dd:84:91:7e:a1:a9:ef: 2f:ae:ef:b1:9e:77:7b:9e:74:04:74:4d:7f:1c:c2:63:dc:3b: b0:e6:8b:4b:09:7a:b5:15:7e:24:8e:50:74:db:b7:82:c8:48: e0:57:c9:31:90:37:1f:98:6b:44:dd:b5:2e:64:55:29:1d:e7: ce:25:78:d2:c7:57:69:a8:0d:7d:56:60:0a:b3:80:1a:c1:a4: 04:4e:13:ac:d0:f2:a5:4c:f8:86:26:99:cd:09:33:67:b8:fc: dc:b8:97:77:11:f6:f3:ae:42:ec:6a:13:3b:1a:71:48:38:39: 4b:fc:93:72:d8:2a:d6:f5:32:62:9e:6f:db:1e:55:8e:61:58: 9c:14:5b:2b:9e:50:9e:7b:2e:a3:f9:21:c3:0e:ac:32:5c:00: eb:77:69:4d:13:ca:c1:9d:8f:21:18:39:4e:75:41:81:88:ff: 9b:2b:1f:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCNkExMTAvBgNVBAUTKEEyMDZBRkM5NjZBNjlFNzBCNDg5QjM4RjEwNDgzREMx RkE1RDNFMjIwHhcNMjUxMjIyMjMxOTUzWhcNMjUxMjI5MjMxOTUzWjAYMRYwFAYD VQQDDA02OTQ5ZDIxOS04ZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAloHkrtXocRU9nmSTrXCPSedcDJSlyfIv80NtZld03dK9vJOLZMBSf466ZGuQ OQ5HRhTyvndZYE1orMCigOKt0nxEus1b34WTaF/7IznuFpjOGxdimmV0v1mgU344 C6nmqegnMbC8qVnYLUBCkjOKKMS7RB3k6FGovEvGcjM/M3DrNR1NxRTe2/zTGY+3 Djyc2JP2z2JJgjKQ9Yvdyghg6Z7Rv+Z0cV8KFyDm+w7uq/7PNw1ur4UpnRDOWytp 8fDQH+NB0b5OKiYZS5kTe+3p0Z3wLIm5IUqpS6kCHauuDlUM7XvUsBa1XUTo8VMZ fHLbQ15DSvam38PI+yDOk79arwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOoIQqB Ft2s7ksSHrS5x/ifCiOIMB8GA1UdIwQYMBaAFKIGr8lmpp5wtImzjxBIPcH6XT4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI2QS9CNDgxMzM0Mjg0 RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5uQzBpYk9QRUVnOXdmcGRQ aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29nYXZ5V2Ftbm5DMGliT1BFRWc5d2ZwZFBpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI2QS9CNDgxMzM0Mjg0RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5u QzBpYk9QRUVnOXdmcGRQaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOC83vFQOVxCF9LUMSOmTRyNW00dwjZqtpAZ407j8kZq3pMKS15HGY 1Ak3A2HkTlUv8GCQLcaD5iMGuwk09gfogzC2qy5rVUSD32V2r92rTWHjWN2EkX6h qe8vru+xnnd7nnQEdE1/HMJj3Duw5otLCXq1FX4kjlB027eCyEjgV8kxkDcfmGtE 3bUuZFUpHefOJXjSx1dpqA19VmAKs4AawaQEThOs0PKlTPiGJpnNCTNnuPzcuJd3 EfbzrkLsahM7GnFIODlL/JNy2CrW9TJinm/bHlWOYVicFFsrnlCeey6j+SHDDqwy XADrd2lNE8rBnY8hGDlOdUGBiP+bKx9H -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:07 2025 by rpki-client