This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json) Hash identifier: iaGqqIefxVjYd+GHYAQLX+jIMD7f9n5mn0DF617e5PE= Subject key identifier: DE:F8:65:23:9B:83:98:E2:D2:09:69:DC:71:D3:52:FA:30:3D:7F:0F Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft Manifest number: 066E Signing time: Thu 18 Dec 2025 21:55:50 +0000 Manifest this update: Thu 18 Dec 2025 21:55:50 +0000 Manifest next update: Thu 25 Dec 2025 21:55:50 +0000 Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: smH3JQ2uy3rD6t/GKTtOR/VBLdKJjxQZgZIyjJGWfMM=) 2: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: EoEXlCI1GOehyvV1dOn2OebjZ7e0VJ5M5h2oFDhhyXQ=) 3: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: vcP/S0izUQbA7Z/0jbMqfJjGpHZIaNp2jddGsZhjHPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Validity Not Before: Dec 18 21:55:50 2025 GMT Not After : Dec 25 21:55:50 2025 GMT Subject: CN=69447866-b1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:65:f7:a2:fb:12:94:b1:8e:a8:3d:c5:42: f2:fa:0a:50:e0:c1:a3:64:09:5a:88:1d:09:da:ab: ea:32:b2:17:6d:8a:97:f7:31:73:8d:c7:2d:75:22: 47:04:84:f2:7f:05:9a:80:bd:fe:cc:76:95:17:94: 9c:7c:13:bc:d3:20:01:f6:f7:57:d2:18:87:fa:2d: f1:b3:c8:4d:8f:55:49:54:71:78:c4:cd:6f:28:0f: 51:e9:c1:59:4a:94:97:38:38:8d:39:0d:7c:4c:fb: 6d:d3:89:c4:a0:f4:75:3c:b1:87:56:7a:44:17:a7: 5f:56:72:71:1a:7d:c4:78:b3:a4:a2:a7:1f:36:55: ca:29:40:4f:c6:7a:5c:21:82:7f:4f:2f:c1:8b:79: bf:ba:aa:8d:53:31:f1:4a:fe:44:88:e9:63:c6:b6: 1b:8c:99:31:df:1e:99:9d:16:24:f4:78:5e:f3:7a: 13:a9:66:fc:85:34:59:ba:65:ea:98:aa:6e:5f:cf: 51:4f:73:b4:40:12:c2:cc:5c:04:99:89:a5:3d:51: 09:99:dd:e0:81:eb:a3:df:b5:a0:1f:79:d5:ae:16: e4:a0:e8:73:7b:92:62:ad:71:87:28:4a:c1:3d:4a: 42:3a:3e:8f:18:99:87:a7:68:1a:c5:d7:54:76:07: 14:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F8:65:23:9B:83:98:E2:D2:09:69:DC:71:D3:52:FA:30:3D:7F:0F X509v3 Authority Key Identifier: keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ef:e9:72:38:32:dd:6d:a2:ee:4e:56:80:be:66:7a:c1:a2: 96:a4:64:cc:5c:57:6a:b9:24:22:6d:79:8c:d4:99:da:1c:36: 37:55:38:8d:8b:32:94:bf:5a:f2:1d:65:61:fb:06:55:59:26: 3b:81:ed:ff:9b:24:23:71:43:5e:50:cc:fe:cd:7f:1e:80:98: 1e:88:c1:45:75:74:8d:8a:89:75:fc:c3:15:f8:4d:f1:e5:44: 20:d5:7f:f8:72:ec:de:ff:d0:f8:5b:b7:a6:de:d1:08:ec:c5: c4:8d:24:10:a5:4f:ff:c5:83:15:96:fd:84:ce:19:df:10:fc: e8:be:60:c1:8f:55:1b:3d:45:2f:5b:db:08:0d:dc:62:c5:24: 4d:31:af:5f:bd:c6:24:85:bd:d3:8b:bb:b1:8c:81:97:ec:30: c9:2e:69:10:de:98:38:99:1b:9b:f1:d6:a5:99:2a:f2:e0:23: 3b:24:01:cd:2a:11:12:ec:85:63:a9:86:4f:40:8a:50:ae:28: 76:e3:04:92:5c:73:d3:26:14:6e:f4:7e:09:77:63:d9:b7:e8: 1d:5a:c1:53:7f:94:ad:7b:38:f2:d6:52:bc:b9:a8:36:8f:83: d6:4d:01:04:33:5f:be:d1:7d:f0:1a:41:86:4a:e0:e0:e0:cc: 66:7d:5c:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NEQxMTAvBgNVBAUTKDNBRjA5RDI4Q0E0ODdBOTMyNjYzMUE2QkU5QkQ5QkRC QUExOERBNzUwHhcNMjUxMjE4MjE1NTUwWhcNMjUxMjI1MjE1NTUwWjAYMRYwFAYD VQQDDA02OTQ0Nzg2Ni1iMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztll96L7EpSxjqg9xULy+gpQ4MGjZAlaiB0J2qvqMrIXbYqX9zFzjcctdSJH BITyfwWagL3+zHaVF5ScfBO80yAB9vdX0hiH+i3xs8hNj1VJVHF4xM1vKA9R6cFZ SpSXODiNOQ18TPtt04nEoPR1PLGHVnpEF6dfVnJxGn3EeLOkoqcfNlXKKUBPxnpc IYJ/Ty/Bi3m/uqqNUzHxSv5EiOljxrYbjJkx3x6ZnRYk9Hhe83oTqWb8hTRZumXq mKpuX89RT3O0QBLCzFwEmYmlPVEJmd3ggeuj37WgH3nVrhbkoOhze5JirXGHKErB PUpCOj6PGJmHp2gaxddUdgcU1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN74ZSOb g5ji0glp3HHTUvowPX8PMB8GA1UdIwQYMBaAFDrwnSjKSHqTJmMaa+m9m9uqGNp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0RC9EMzU5NTY4Q0E4 REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVwTW1ZeHByNmIyYjI2b1ky blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL092Q2RLTXBJZXBNbVl4cHI2YjJiMjZvWTJuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0RC9EMzU5NTY4Q0E4REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVw TW1ZeHByNmIyYjI2b1kyblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh7+lyODLdbaLuTlaAvmZ6waKWpGTMXFdquSQibXmM1JnaHDY3VTiN izKUv1ryHWVh+wZVWSY7ge3/myQjcUNeUMz+zX8egJgeiMFFdXSNiol1/MMV+E3x 5UQg1X/4cuze/9D4W7em3tEI7MXEjSQQpU//xYMVlv2EzhnfEPzovmDBj1UbPUUv W9sIDdxixSRNMa9fvcYkhb3Ti7uxjIGX7DDJLmkQ3pg4mRub8dalmSry4CM7JAHN KhES7IVjqYZPQIpQrih24wSSXHPTJhRu9H4Jd2PZt+gdWsFTf5Stezjy1lK8uag2 j4PWTQEEM1++0X3wGkGGSuDg4MxmfVxY -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:31 2025 by rpki-client