This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: Ebt8hP+N1mmM9hWWsB+ycWO+8VY64dKbqd9MqUsH3SU= Subject key identifier: BC:8E:81:23:15:88:6C:44:C2:3B:46:0C:4B:04:C6:0D:F1:B3:A8:06 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 014D Signing time: Sun 21 Dec 2025 03:37:57 +0000 Manifest this update: Sun 21 Dec 2025 03:37:57 +0000 Manifest next update: Sun 28 Dec 2025 03:37:57 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: dX+e4lNqtZvvMIcg26hcyUxgmwzqPSOUJ80QYWW9baI=) 2: B7B28B24B29611F091864D65C4F9AE02.roa (hash: R+HTfU3ExQBNMZ+axibvvpKJt+DXstKCKz/X+iou2Bc=) 3: 1E5C2C5AB29611F09FBA3C5FC4F9AE02.roa (hash: HO455dnGSFFv71vVWjqwuOo42txHTtv1EfogsEGoJTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Dec 21 03:37:57 2025 GMT Not After : Dec 28 03:37:57 2025 GMT Subject: CN=69476b95-f58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:3b:ca:dd:8d:2e:b1:b6:b9:a8:cc:97:37: 25:f5:97:c5:fa:94:f0:5a:6f:ce:7c:00:ad:dd:34: f5:72:5b:17:1b:9d:01:ce:63:c6:82:d5:62:07:bd: 3b:c3:5f:3c:df:28:02:14:f6:42:55:c8:07:0a:01: 1c:48:26:7a:82:76:c9:5d:97:e9:98:37:f3:fa:29: 12:68:44:f0:52:86:0c:27:c3:b0:58:14:9f:b4:75: 85:65:5e:ed:85:cc:61:3a:c6:9a:1d:24:ea:95:a9: 08:65:d3:e9:75:57:55:e7:9b:cf:29:d8:82:7b:8f: 5e:c5:ce:db:cc:1c:1d:0c:da:bb:6c:20:56:1d:80: 79:34:3d:8d:c7:9d:86:22:c8:bc:c9:3e:30:e1:39: 4b:5e:b7:2d:0a:dc:6d:60:72:56:7b:dc:73:8b:12: 2b:c0:4b:d0:68:9f:47:1b:8d:3c:67:01:98:07:ed: 66:7b:ee:4f:0b:ec:69:56:ab:16:9d:b3:7f:78:5b: 2b:f6:bf:9e:4d:c5:a2:80:31:a2:bc:0e:fb:09:59: fd:9b:ed:a7:ff:80:13:88:38:e4:3b:4f:17:8c:9a: 41:20:53:d6:d3:bb:20:61:ea:d8:df:fa:aa:74:50: 55:e9:60:4a:81:84:72:33:5e:10:d1:2c:42:2a:48: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8E:81:23:15:88:6C:44:C2:3B:46:0C:4B:04:C6:0D:F1:B3:A8:06 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f3:dc:26:52:10:c6:bc:61:d5:2c:c8:3f:f9:54:98:0d:ee: f6:61:f5:6b:0b:9a:37:88:b8:2b:53:5d:63:b3:e7:d3:4d:80: c3:90:1f:d0:d2:32:6a:b8:76:6d:ce:6b:ec:19:70:7f:47:4d: 64:cf:f3:cf:8a:9f:c9:6e:1b:cd:d4:bf:3e:e4:97:f6:64:ee: c1:81:57:f8:26:7e:a7:82:75:51:b4:db:e4:30:90:db:e9:64: f0:2a:9e:bc:20:5b:33:c5:85:1d:5a:02:d8:3a:2d:19:8f:cf: ad:b7:38:b2:d7:6b:ef:52:17:24:a8:29:9f:ba:b9:23:2c:73: cf:68:c3:00:09:ed:83:c2:98:63:0a:e7:da:9e:84:46:71:c3: b9:e9:da:2e:53:1f:1b:5b:a4:b9:a4:60:f7:4a:23:8f:cc:f8: 31:5e:79:34:6f:bc:c7:ef:a5:f2:c0:34:25:0c:29:a5:28:e3: 2a:55:ec:f5:0a:8a:c7:df:c7:90:be:6a:85:0b:6d:70:b7:d6: de:85:97:10:b2:fc:d9:6e:28:b9:45:54:9c:7d:a4:2e:7f:e3: c9:01:44:4c:71:6f:4e:91:71:86:33:6c:12:43:11:9b:9f:e2: 6d:58:a0:56:3e:fd:4a:a8:92:1a:48:a5:a0:76:32:0c:3f:68: 49:2d:c5:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjUxMjIxMDMzNzU3WhcNMjUxMjI4MDMzNzU3WjAYMRYwFAYD VQQDDA02OTQ3NmI5NS1mNThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH07yt2NLrG2uajMlzcl9ZfF+pTwWm/OfACt3TT1clsXG50BzmPGgtViB707 w1883ygCFPZCVcgHCgEcSCZ6gnbJXZfpmDfz+ikSaETwUoYMJ8OwWBSftHWFZV7t hcxhOsaaHSTqlakIZdPpdVdV55vPKdiCe49exc7bzBwdDNq7bCBWHYB5ND2Nx52G Isi8yT4w4TlLXrctCtxtYHJWe9xzixIrwEvQaJ9HG408ZwGYB+1me+5PC+xpVqsW nbN/eFsr9r+eTcWigDGivA77CVn9m+2n/4ATiDjkO08XjJpBIFPW07sgYerY3/qq dFBV6WBKgYRyM14Q0SxCKkgFFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyOgSMV iGxEwjtGDEsExg3xs6gGMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP89wmUhDGvGHVLMg/+VSYDe72YfVrC5o3iLgrU11js+fTTYDDkB/Q 0jJquHZtzmvsGXB/R01kz/PPip/JbhvN1L8+5Jf2ZO7BgVf4Jn6ngnVRtNvkMJDb 6WTwKp68IFszxYUdWgLYOi0Zj8+ttziy12vvUhckqCmfurkjLHPPaMMACe2Dwphj CufanoRGccO56douUx8bW6S5pGD3SiOPzPgxXnk0b7zH76XywDQlDCmlKOMqVez1 CorH38eQvmqFC21wt9behZcQsvzZbii5RVScfaQuf+PJAURMcW9OkXGGM2wSQxGb n+JtWKBWPv1KqJIaSKWgdjIMP2hJLcUZ -----END CERTIFICATE-----Generated at Sun Dec 21 08:18:28 2025 by rpki-client