This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: lWjP1Xt9YIIsUW5+L48HLUpcYcSLTYXDMm2y8KPrO/E= Subject key identifier: A3:5C:4E:38:F8:81:D7:05:2D:51:13:42:EE:55:88:C1:9B:7A:AC:1B Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 0328 Signing time: Fri 19 Dec 2025 02:05:46 +0000 Manifest this update: Fri 19 Dec 2025 02:05:45 +0000 Manifest next update: Fri 26 Dec 2025 02:05:45 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: QPD5wNVJ/qD3AgIypOOQiGn/pEvn/IIm+AYuShNW+IM=) 2: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=) 3: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Dec 19 02:05:45 2025 GMT Not After : Dec 26 02:05:45 2025 GMT Subject: CN=6944b2f9-dbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:40:40:48:b1:39:4d:e8:cb:99:61:94:c5:2f: bf:f0:3b:22:c3:42:e8:0d:62:ae:ed:4c:5d:af:57: 15:09:03:f2:ba:10:5b:eb:95:4b:81:16:cd:44:8f: bb:d9:09:76:e3:38:46:f5:34:c1:f6:27:71:f5:20: f6:d1:80:ee:49:e7:0f:ae:4b:09:24:31:b6:ec:98: 7e:4f:40:72:dc:40:02:ce:37:8c:c1:47:47:5a:74: e4:04:dd:f2:c7:6c:72:82:3f:3b:c1:2b:bf:f3:72: 65:2d:46:ca:9c:f3:4f:02:2f:5a:0f:52:53:14:15: 09:c9:4f:0b:f7:55:0e:93:c9:03:c2:a8:27:30:d1: c5:94:a1:be:eb:cd:c3:07:c2:92:8f:34:1c:01:16: c3:09:6b:02:af:87:70:2f:0a:24:b3:f6:40:4a:5d: 2d:e0:15:b4:94:bb:7a:35:39:40:00:6c:14:e6:3a: 01:3d:b7:9c:0a:98:88:42:95:b3:8b:ed:3d:0f:5b: 9f:e8:5b:67:1d:1d:d1:5e:2b:03:38:62:45:5b:27: dc:3c:4d:c3:2d:55:27:7b:73:7f:a4:03:27:1e:3f: d2:2c:c4:54:c4:26:40:e7:01:4d:c9:12:83:2a:eb: 57:07:aa:55:ed:a9:54:4c:8c:2c:e3:da:d2:79:53: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5C:4E:38:F8:81:D7:05:2D:51:13:42:EE:55:88:C1:9B:7A:AC:1B X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:16:2b:d7:36:70:d4:6f:b1:1d:fa:08:0f:00:47:60:2b:89: 23:f7:de:11:d6:42:e9:1b:1c:5f:e7:c4:66:6d:e6:5c:12:60: 1c:f1:2a:b9:ef:fc:56:86:7c:79:58:9b:fe:77:dd:32:5e:8f: 9a:3e:b3:69:9c:f5:2a:81:68:69:d6:b7:6e:36:0c:77:48:e5: 22:0a:27:1f:a0:fb:e6:b1:79:49:48:92:b5:79:ba:48:ad:63: 43:9e:11:a1:37:20:6c:79:a2:e8:ff:83:21:d5:10:f1:25:95: a7:87:2c:e7:f1:83:53:55:33:60:70:dc:13:3f:18:53:b2:07: d7:d0:3d:e6:da:67:dd:ed:2c:9f:07:69:fb:86:2f:95:b5:3f: c6:86:8f:91:5e:c1:9a:59:b6:8c:0c:de:e2:26:d6:36:4f:1e: 97:15:82:d3:7d:6e:22:9b:2f:a4:65:7a:e5:91:87:c8:ef:8d: 66:96:12:3c:6b:ea:4a:47:36:c3:03:31:4c:53:71:88:a9:49: 1d:76:9b:00:b9:aa:b7:b9:8e:e6:a1:2d:d5:21:ec:64:ff:3c: e0:7b:2a:ec:ff:d1:dd:8e:ec:ec:4e:a0:8f:d0:35:ff:fe:09: fa:96:de:b5:6b:99:a5:d5:b3:a0:3b:2f:ea:d9:ca:ca:f8:66: 37:ee:c7:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjUxMjE5MDIwNTQ1WhcNMjUxMjI2MDIwNTQ1WjAYMRYwFAYD VQQDDA02OTQ0YjJmOS1kYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EBASLE5TejLmWGUxS+/8Dsiw0LoDWKu7Uxdr1cVCQPyuhBb65VLgRbNRI+7 2Ql24zhG9TTB9idx9SD20YDuSecPrksJJDG27Jh+T0By3EACzjeMwUdHWnTkBN3y x2xygj87wSu/83JlLUbKnPNPAi9aD1JTFBUJyU8L91UOk8kDwqgnMNHFlKG+683D B8KSjzQcARbDCWsCr4dwLwoks/ZASl0t4BW0lLt6NTlAAGwU5joBPbecCpiIQpWz i+09D1uf6FtnHR3RXisDOGJFWyfcPE3DLVUne3N/pAMnHj/SLMRUxCZA5wFNyRKD KutXB6pV7alUTIws49rSeVN9rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNcTjj4 gdcFLVETQu5ViMGbeqwbMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQFivXNnDUb7Ed+ggPAEdgK4kj994R1kLpGxxf58RmbeZcEmAc8Sq5 7/xWhnx5WJv+d90yXo+aPrNpnPUqgWhp1rduNgx3SOUiCicfoPvmsXlJSJK1ebpI rWNDnhGhNyBseaLo/4Mh1RDxJZWnhyzn8YNTVTNgcNwTPxhTsgfX0D3m2mfd7Syf B2n7hi+VtT/Gho+RXsGaWbaMDN7iJtY2Tx6XFYLTfW4imy+kZXrlkYfI741mlhI8 a+pKRzbDAzFMU3GIqUkddpsAuaq3uY7moS3VIexk/zzgeyrs/9HdjuzsTqCP0DX/ /gn6lt61a5ml1bOgOy/q2crK+GY37scn -----END CERTIFICATE-----Generated at Fri Dec 19 18:58:11 2025 by rpki-client