This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json) Hash identifier: /D/pxLDmmS946qqMkjUuhVkQTkucgNMQCq0nqj0Bti8= Subject key identifier: 24:EA:7E:01:A4:E0:D6:E3:D4:B9:E3:0D:08:F1:F4:61:AF:9D:24:3F Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft Manifest number: DC Signing time: Fri 19 Dec 2025 04:43:26 +0000 Manifest this update: Fri 19 Dec 2025 04:43:26 +0000 Manifest next update: Fri 26 Dec 2025 04:43:26 +0000 Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: Yy1b94gTI5t9qINg6NYRu4PNKxuE00uXRSYNNzWn/Jw=) 2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: AM8YczbuSDMrPGJYvj82lh85hv7XnwSEndBgiNbOMeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Dec 19 04:43:26 2025 GMT Not After : Dec 26 04:43:26 2025 GMT Subject: CN=6944d7ee-66db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:6c:f3:6f:f2:6d:bc:cc:8a:d8:86:4c:b2: 62:a2:fa:86:c7:78:11:c9:ba:d4:4a:82:03:5e:70: 6c:d2:c1:04:60:cf:a8:9c:7a:d1:d8:0f:4d:0f:dd: 04:61:b5:7f:af:23:88:f1:5f:b6:22:b9:02:66:1e: 6e:0f:b2:40:b2:d2:50:3b:75:9a:25:e0:16:f1:a1: f1:3b:bd:be:32:5f:a5:07:42:85:30:b5:0b:30:5c: f9:62:76:51:e8:f2:c2:98:56:a7:05:b0:8e:ec:8e: 63:dd:d4:5e:45:0f:ee:78:b0:8a:fd:34:26:50:64: 77:c1:f2:07:f4:dd:ab:f8:d4:ba:31:f2:56:0a:1d: 24:9c:89:06:05:cf:03:69:ac:c3:aa:fb:82:c9:5c: f1:ae:96:5e:43:3b:fa:a5:48:83:35:cd:6a:c5:38: 91:b5:f5:10:03:8b:00:da:c5:f6:79:c1:e6:3c:ef: d9:e1:68:00:8f:19:6c:ed:03:7b:d2:b5:70:a1:d3: 9a:d4:fc:d5:64:fc:d4:3f:52:76:1e:50:35:a7:05: 13:0e:5a:1d:61:96:9d:5d:c3:84:46:dd:ed:5d:8f: 49:11:e9:15:3f:5c:4d:ac:03:e8:8b:ba:4c:a7:55: 51:15:be:3c:11:27:71:d5:af:39:cf:0c:25:da:19: 2f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EA:7E:01:A4:E0:D6:E3:D4:B9:E3:0D:08:F1:F4:61:AF:9D:24:3F X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:79:e0:4d:7c:33:df:4e:ff:38:a5:4b:8d:f5:54:4e:d4:ac: 44:d8:1c:14:52:fa:d5:fb:a9:61:41:96:c0:2e:9b:e0:54:53: e8:8c:b6:86:53:9a:2b:83:cb:20:ca:ad:a7:eb:a5:c5:a1:f1: 29:34:05:ba:e1:94:91:e5:f3:52:3d:46:ce:a4:d2:4f:af:c3: e5:2d:19:67:53:d7:d1:b6:d9:61:4a:e8:3d:90:58:e4:34:11: c0:e2:b1:9b:aa:02:38:0e:6d:bb:43:af:50:31:4c:de:4a:ba: 13:ca:7d:95:e6:96:d9:bb:64:38:32:51:94:c8:8c:c4:fb:a6: 35:42:94:91:32:dc:1b:07:ef:68:80:8e:7c:0d:73:1b:2f:eb: c9:c1:2e:36:6b:2e:d6:1a:a2:74:e8:e3:a9:14:b8:be:39:67: 53:12:62:b8:3e:e4:d1:49:26:88:5f:c2:9d:29:0a:48:9f:75: 60:89:92:da:da:36:9e:60:ab:65:f5:1a:e7:62:62:d3:54:64: c8:3f:9d:01:1a:4f:e8:c6:2f:fe:22:a0:69:af:0c:94:f8:e8: 4d:e4:f3:15:6a:a7:49:ab:ad:6d:7f:f6:62:ad:c6:4e:9d:5d: 83:d6:9f:42:4c:82:f9:bf:20:43:31:69:75:82:08:8d:92:a5: 75:a6:ef:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ4OEYxMTAvBgNVBAUTKDM5NDNENDI2MTU3OUNERTBFODJBMDVDQTJBQjU0QjM4 N0JBNTE5MzMwHhcNMjUxMjE5MDQ0MzI2WhcNMjUxMjI2MDQ0MzI2WjAYMRYwFAYD VQQDDA02OTQ0ZDdlZS02NmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCNs82/ybbzMitiGTLJiovqGx3gRybrUSoIDXnBs0sEEYM+onHrR2A9ND90E YbV/ryOI8V+2IrkCZh5uD7JAstJQO3WaJeAW8aHxO72+Ml+lB0KFMLULMFz5YnZR 6PLCmFanBbCO7I5j3dReRQ/ueLCK/TQmUGR3wfIH9N2r+NS6MfJWCh0knIkGBc8D aazDqvuCyVzxrpZeQzv6pUiDNc1qxTiRtfUQA4sA2sX2ecHmPO/Z4WgAjxls7QN7 0rVwodOa1PzVZPzUP1J2HlA1pwUTDlodYZadXcOERt3tXY9JEekVP1xNrAPoi7pM p1VRFb48ESdx1a85zwwl2hkvIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTqfgGk 4Nbj1LnjDQjx9GGvnSQ/MB8GA1UdIwQYMBaAFDlD1CYVec3g6CoFyiq1Szh7pRkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri84NEE1QkM4MDkw NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXplRG9LZ1hLS3JWTE9IdWxH VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDg4Ri84NEE1QkM4MDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXpl RG9LZ1hLS3JWTE9IdWxHVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKeeBNfDPfTv84pUuN9VRO1KxE2BwUUvrV+6lhQZbALpvgVFPojLaG U5org8sgyq2n66XFofEpNAW64ZSR5fNSPUbOpNJPr8PlLRlnU9fRttlhSug9kFjk NBHA4rGbqgI4Dm27Q69QMUzeSroTyn2V5pbZu2Q4MlGUyIzE+6Y1QpSRMtwbB+9o gI58DXMbL+vJwS42ay7WGqJ06OOpFLi+OWdTEmK4PuTRSSaIX8KdKQpIn3VgiZLa 2jaeYKtl9RrnYmLTVGTIP50BGk/oxi/+IqBprwyU+OhN5PMVaqdJq61tf/ZircZO nV2D1p9CTIL5vyBDMWl1ggiNkqV1pu8d -----END CERTIFICATE-----Generated at Sun Dec 21 06:08:06 2025 by rpki-client