This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json) Hash identifier: PsXOiiEM6MlDe0G2ubEWv8GSQdmr3KeZvuYlPgn1mfA= Subject key identifier: A9:5A:8F:B9:7F:ED:11:20:A6:C3:FF:49:80:BD:DB:E4:F6:98:6D:A1 Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 082B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft Manifest number: 080F Signing time: Mon 22 Dec 2025 20:20:50 +0000 Manifest this update: Mon 22 Dec 2025 20:20:50 +0000 Manifest next update: Mon 29 Dec 2025 20:20:50 +0000 Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: mTkHE/DF9D5uzCoCjh5iTzKTiJkoI2Y+b+9xUg1BYL0=) 2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: eZNeXm4nQEQxR4xjyKWddfWZzO4YMno8B7hOjNNuzA4=) 3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: O2jis8H/LjOcx4S7CbvRkc2kU/tbO3dAf3gniLEQHkI=) 4: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: 4m4gcDBDEGLhIqThmo+gOWnFoA1rBH2fxZa2WsNnbcQ=) 5: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: M6qmfQhNqaFBZk6GUbAn8MkOvEVJ93hzUV5R5uLKCj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Validity Not Before: Dec 22 20:20:50 2025 GMT Not After : Dec 29 20:20:50 2025 GMT Subject: CN=6949a822-3215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e2:87:ed:c2:68:a9:58:cc:52:37:11:3d:3e: 03:87:79:0a:d6:42:1a:92:95:b9:df:e5:50:0a:9a: b7:2f:fd:d1:2b:64:9a:71:f2:c7:a6:7b:02:cb:d9: 82:b3:c9:1b:6c:b9:36:6b:ec:84:da:ec:6e:56:13: 32:00:c7:ae:28:3f:09:ca:a7:5f:15:0d:86:92:63: 0a:da:fc:e1:49:b7:76:f6:23:e4:36:a2:0d:9c:a4: e5:78:05:45:59:98:6c:4d:dc:ac:27:da:61:bc:67: a0:c0:6a:e1:19:a6:88:ab:cf:30:73:31:38:3b:2a: 48:e1:51:58:88:cc:cf:4f:c2:95:db:d1:e5:95:0a: 22:91:20:60:36:b4:13:5a:a2:c6:c4:48:15:04:5c: d9:f6:7c:02:02:02:c3:b3:7d:c6:95:73:56:06:aa: 0c:be:98:39:ff:e6:84:a4:1a:ba:bb:5d:c5:5c:20: 34:28:51:53:33:b8:bb:0c:04:3c:3b:62:5b:8c:e3: 3e:95:0d:1f:2f:c6:17:92:cc:9a:2b:17:6f:77:ce: 42:d3:5d:ed:35:de:37:67:74:14:3e:4f:21:b3:75: e1:18:d4:5e:07:34:74:93:8d:47:f0:57:42:5a:1e: 7c:fa:df:ae:39:8e:04:c4:f2:5c:9a:c7:36:c8:69: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5A:8F:B9:7F:ED:11:20:A6:C3:FF:49:80:BD:DB:E4:F6:98:6D:A1 X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:78:e7:55:8e:11:a8:31:e5:ab:46:56:e7:00:26:b8:d8:c7: 8a:02:05:84:d1:17:fc:5e:d3:30:7d:ea:55:db:8d:0c:fb:78: 2e:c3:a6:e5:ae:89:75:59:33:44:43:fb:7e:3e:9e:38:ba:42: c1:96:bc:07:e0:84:21:01:d3:9c:ab:52:cd:ac:e5:d5:8d:80: 9d:dc:32:93:a1:d3:f3:82:c1:3b:11:a9:b7:66:e5:07:53:36: 83:b2:9f:2b:4f:d6:0a:f5:e2:13:a5:a7:4e:82:61:4b:6c:7d: bc:7b:77:8b:9e:11:49:68:45:39:be:52:4b:3c:d1:cf:2f:18: 96:9e:b5:0f:c1:d4:c4:b4:2c:a9:73:c1:ba:26:e4:bb:28:4e: 2f:86:19:89:e7:ce:12:39:64:5d:5f:96:3f:76:83:43:cb:bb: db:33:77:fa:87:6b:7d:f0:ee:ee:34:cf:93:4b:6f:d8:c5:d0: 0d:7f:39:ac:64:64:8a:30:ce:2b:e0:c3:23:24:53:0d:bb:20: e7:ac:b4:fa:62:75:d4:29:b3:98:63:37:34:79:9b:37:c2:a4: 03:01:2f:da:f8:85:1e:67:79:78:00:c3:2e:cc:97:1d:04:44: 99:16:b9:9c:20:39:c8:f3:78:15:6d:67:fb:f6:4e:d2:e4:be: 3a:4c:73:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjUxMjIyMjAyMDUwWhcNMjUxMjI5MjAyMDUwWjAYMRYwFAYD VQQDDA02OTQ5YTgyMi0zMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+KH7cJoqVjMUjcRPT4Dh3kK1kIakpW53+VQCpq3L/3RK2SacfLHpnsCy9mC s8kbbLk2a+yE2uxuVhMyAMeuKD8JyqdfFQ2GkmMK2vzhSbd29iPkNqINnKTleAVF WZhsTdysJ9phvGegwGrhGaaIq88wczE4OypI4VFYiMzPT8KV29HllQoikSBgNrQT WqLGxEgVBFzZ9nwCAgLDs33GlXNWBqoMvpg5/+aEpBq6u13FXCA0KFFTM7i7DAQ8 O2JbjOM+lQ0fL8YXksyaKxdvd85C013tNd43Z3QUPk8hs3XhGNReBzR0k41H8FdC Wh58+t+uOY4ExPJcmsc2yGnpMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlaj7l/ 7REgpsP/SYC92+T2mG2hMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2Rm N1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxeOdVjhGoMeWrRlbnACa42MeKAgWE0Rf8XtMwfepV240M+3guw6bl rol1WTNEQ/t+Pp44ukLBlrwH4IQhAdOcq1LNrOXVjYCd3DKTodPzgsE7Eam3ZuUH UzaDsp8rT9YK9eITpadOgmFLbH28e3eLnhFJaEU5vlJLPNHPLxiWnrUPwdTEtCyp c8G6JuS7KE4vhhmJ584SOWRdX5Y/doNDy7vbM3f6h2t98O7uNM+TS2/YxdANfzms ZGSKMM4r4MMjJFMNuyDnrLT6YnXUKbOYYzc0eZs3wqQDAS/a+IUeZ3l4AMMuzJcd BESZFrmcIDnI83gVbWf79k7S5L46THP/ -----END CERTIFICATE-----Generated at Tue Dec 23 08:26:56 2025 by rpki-client