This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: 8fqvY0fLnXLhtKGVahTRSShTnV5634NclTISEO8veiM= Subject key identifier: 85:59:3F:D8:8B:9F:BC:19:09:D8:97:ED:AE:E3:4B:54:83:A4:70:FE Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 0358 Signing time: Mon 08 Dec 2025 23:32:13 +0000 Manifest this update: Mon 08 Dec 2025 23:32:13 +0000 Manifest next update: Mon 15 Dec 2025 23:32:13 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: oYT7fr1+SHlU5KEtTRUjjy9ZMgRUMzrr/ZYOqcQnXUc=) 2: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: iyDMS6tOGnY0vV2tRBpkImtDJt2yb1m8IIZ76sEjG28=) 3: AF5AD402224711F0B0CDB07DC4F9AE02.roa (hash: Rd9F0rhnVp5Iq5KfDW7kM6BcAp4B6e5cA4C+HDxhcWk=) 4: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: 2idrkUiE1glbbdM/t25K//0O3gKsqe5+guvE9Yfyva4=) 5: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: emdOoNHeNPd2I/1TXnCpTax46mU70PVq1qcXN4YL9To=) 6: DEBDCC60BC4111F0A8ADE55FC4F9AE02.roa (hash: 4VnIuJJAXk9zSNbCfCN1OPS1QwJcJI5OHrPoyVx0dOg=) 7: B111111288B411EF80480527C4F9AE02.roa (hash: qLIDrHWS/i6A8fwW8H8k+xkymy4Akbi61wq5s13V2Ww=) 8: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: oa1DI9U4A4Nx6Hk3PHDp1mXpYhzRJyPS5jmqfG2Om0Y=) 9: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: dSfere7QhRvtorz+gmreSnCGYZIH1WofndwPCRU2nxo=) 10: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: /HSo5jxbj7peidwO9alg4qXB6CLHjHvT7Exk5bMgxFc=) 11: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: DFlr8Tn/hG96eJuSS2hv0WiijRfajfy1iDPzEugU79I=) 12: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: CJ9YN6FLH2mWQGJEIYwUy4MU0VtOp9beQcxD+Nz5y9o=) 13: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: IpxcD4cHmOeodB8ybIfLf30tVWg9Lc/8x7ghIc66rAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 23:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Dec 8 23:32:13 2025 GMT Not After : Dec 15 23:32:13 2025 GMT Subject: CN=69375ffd-0c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:5a:7d:76:3a:76:6b:34:b0:f2:8e:61:e7: f8:ae:cc:0b:80:2b:0e:82:3c:b3:d8:0a:9c:fe:80: 5e:bd:31:2b:9f:ce:83:67:1e:5b:47:24:3f:fe:fa: 38:92:65:b6:84:1d:1e:af:c9:d4:82:9a:38:da:a7: 26:0b:a9:7c:28:d1:37:13:fe:7f:01:ee:b0:a9:72: 9e:8c:55:44:3e:f3:85:64:ee:ca:27:bc:78:89:fb: 5b:66:3c:5d:a4:ee:af:24:3a:aa:7e:53:e1:b0:92: d1:5b:5c:73:c4:61:5d:57:7f:9a:54:ce:5c:c5:36: 92:10:7e:d0:72:31:a3:11:78:63:66:7e:88:07:38: f8:c3:00:37:de:b6:e8:36:31:39:9d:ab:1f:92:11: f7:68:49:16:e2:2c:b7:8c:3c:5b:7e:71:ad:68:a3: b2:1b:4c:72:0e:d3:99:c3:dc:02:60:e6:1f:ec:ff: d6:0a:f7:f9:32:bb:10:4f:34:4a:70:43:b5:4a:cd: d0:f4:94:53:0e:b6:be:ef:1f:f6:87:3a:bc:ea:1e: 86:32:47:47:7e:c7:28:32:b6:60:14:e8:82:09:5c: d1:7b:ef:a2:ab:46:ab:0e:76:8a:48:27:77:a7:d9: 48:9a:58:fe:bd:e0:95:73:01:f1:7e:73:4c:4d:8c: 14:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:59:3F:D8:8B:9F:BC:19:09:D8:97:ED:AE:E3:4B:54:83:A4:70:FE X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ac:37:ab:dd:3e:d6:e0:91:0e:38:c6:d6:f2:6b:98:13:76: 78:5f:f7:87:24:ac:07:05:7e:50:64:08:a8:26:97:66:cd:c1: 27:81:e2:7c:64:67:43:c1:73:64:e1:2b:43:fe:24:22:f7:27: 1f:cb:5b:e1:bf:5c:d3:be:e9:32:3e:10:81:f1:e1:e4:75:30: af:47:04:f4:04:5d:ab:d6:84:bf:8a:b9:c1:d6:fa:33:38:dc: f8:c3:a9:3a:38:32:14:c5:63:a0:3d:1e:7b:8c:fb:e8:72:74: 4a:7c:27:37:8a:e6:f7:4e:23:40:71:d4:26:cf:fb:b5:1a:0a: 85:d4:4a:d3:bf:52:ae:b2:8d:38:90:f3:ea:dc:92:ea:c6:aa: 11:11:24:76:f9:d1:88:c6:f3:2e:f7:44:13:8e:db:2f:82:f9: 32:95:08:40:7b:be:b1:24:89:6b:52:cc:65:5d:f0:6e:a0:ca: d5:ac:f4:96:61:e2:68:c3:e1:fa:a8:f6:8c:75:d1:3a:2f:28: 72:10:42:a7:be:bd:5e:e8:93:29:b6:ec:3d:ac:be:a6:5a:8c: 9b:2b:5a:dc:59:c3:d1:9e:01:5d:22:54:36:3c:c1:a2:8b:4b: 34:19:94:cb:df:b0:0a:e6:56:73:a2:74:23:2d:f1:bb:ee:ba: cb:a6:75:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUxMjA4MjMzMjEzWhcNMjUxMjE1MjMzMjEzWjAYMRYwFAYD VQQDEw02OTM3NWZmZC0wYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw61afXY6dms0sPKOYef4rswLgCsOgjyz2Aqc/oBevTErn86DZx5bRyQ//vo4 kmW2hB0er8nUgpo42qcmC6l8KNE3E/5/Ae6wqXKejFVEPvOFZO7KJ7x4iftbZjxd pO6vJDqqflPhsJLRW1xzxGFdV3+aVM5cxTaSEH7QcjGjEXhjZn6IBzj4wwA33rbo NjE5nasfkhH3aEkW4iy3jDxbfnGtaKOyG0xyDtOZw9wCYOYf7P/WCvf5MrsQTzRK cEO1Ss3Q9JRTDra+7x/2hzq86h6GMkdHfscoMrZgFOiCCVzRe++iq0arDnaKSCd3 p9lImlj+veCVcwHxfnNMTYwUgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVZP9iL n7wZCdiX7a7jS1SDpHD+MB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkrDer3T7W4JEOOMbW8muYE3Z4X/eHJKwHBX5QZAioJpdmzcEngeJ8 ZGdDwXNk4StD/iQi9ycfy1vhv1zTvukyPhCB8eHkdTCvRwT0BF2r1oS/irnB1voz ONz4w6k6ODIUxWOgPR57jPvocnRKfCc3iub3TiNAcdQmz/u1GgqF1ErTv1Kuso04 kPPq3JLqxqoRESR2+dGIxvMu90QTjtsvgvkylQhAe76xJIlrUsxlXfBuoMrVrPSW YeJow+H6qPaMddE6LyhyEEKnvr1e6JMptuw9rL6mWoybK1rcWcPRngFdIlQ2PMGi i0s0GZTL37AK5lZzonQjLfG77rrLpnVJ -----END CERTIFICATE-----Generated at Wed Dec 10 11:36:51 2025 by rpki-client