This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: 9mNQt+xN84nUGHWiplS7X54v2M4pGij8BcL9P9zuYv4= Subject key identifier: 91:0A:30:BA:2E:87:5E:6B:F2:2A:37:B9:61:6A:57:67:D0:C4:98:5B Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: 013A Signing time: Fri 19 Dec 2025 03:42:12 +0000 Manifest this update: Fri 19 Dec 2025 03:42:12 +0000 Manifest next update: Fri 26 Dec 2025 03:42:12 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: JRUranpTzK9f2l4WSRxHKaDJLW9vzwwlXezl8UZP4PA=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: sT0cMmz3LwTY9msFrBTT0GIkbrL7Fs7LTvjg3aLQ9/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Dec 19 03:42:12 2025 GMT Not After : Dec 26 03:42:12 2025 GMT Subject: CN=6944c994-76e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:3c:7f:7c:e6:30:e9:b1:56:52:3e:1c:2d: 6b:6c:3f:ee:94:90:d0:02:33:2e:d0:d1:8a:55:f7: b0:e7:08:c4:0d:8b:74:49:71:78:cd:5a:97:6b:5e: dd:d4:82:f2:12:ca:93:82:91:f7:d9:b7:4a:2e:bc: fb:29:49:21:a5:d0:44:46:20:91:b4:6b:00:f8:d3: 71:17:26:0c:89:67:a1:8f:be:58:d6:c2:e9:fa:6c: 16:b3:11:ee:5a:be:c5:e5:a3:a4:5f:14:be:f0:b1: 7b:20:21:12:d1:d6:8e:5d:18:5d:a7:b0:c4:b7:77: 86:a4:93:1f:9c:45:aa:43:e3:9b:11:40:8e:69:61: 8f:fc:99:28:4e:a9:7d:03:8d:51:c6:7e:a7:d9:be: 4d:33:c5:0e:2d:f1:9b:e4:52:87:35:3d:17:09:51: 59:31:d9:14:df:91:3a:11:0c:94:ab:47:14:2e:fb: 08:59:cd:84:3f:79:17:07:d5:4d:fa:61:97:6a:19: 00:63:2b:f7:93:44:07:8c:5f:9a:f6:58:f1:62:53: fd:7f:58:28:b2:e4:a9:e0:4c:1c:05:27:7b:55:93: ee:df:99:5f:de:8a:3e:dc:17:c9:65:ed:3f:ac:89: 9c:d6:4d:18:af:9a:4c:1c:fb:b8:43:e0:e3:b4:c9: b4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0A:30:BA:2E:87:5E:6B:F2:2A:37:B9:61:6A:57:67:D0:C4:98:5B X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:7b:a3:56:a8:96:3b:2b:09:88:72:09:0c:f8:a4:4e:52:81: ca:75:f0:c5:23:ca:b2:60:6b:78:84:fc:9b:b2:77:f8:db:95: 0a:e6:96:24:fc:d6:5e:41:49:2d:4e:eb:95:b5:ea:3c:28:6b: 4b:99:26:d1:e5:a5:eb:cc:63:ea:d4:cf:bd:34:0c:08:3c:18: e9:11:7c:dd:86:15:5a:77:8f:5a:00:32:76:a1:b4:be:be:15: 6c:34:21:0e:aa:d9:36:e3:ca:22:f8:dc:43:a8:bd:29:9b:7a: 1d:f1:14:74:06:a8:cf:af:ac:a1:ea:7d:7c:47:3a:c0:d7:4c: 32:15:d9:a5:03:16:52:cb:c8:54:92:98:ca:f2:cf:6a:24:4a: 94:aa:e5:22:78:1c:29:06:4d:28:b9:fe:64:b3:4b:12:4a:fb: 5a:a0:7b:7d:17:78:2b:37:07:66:18:ef:59:ab:f5:d2:41:0c: 04:ff:8a:81:7e:fb:38:e1:f6:d4:5c:00:aa:fc:b8:3d:4e:a1: e9:f1:c8:34:df:24:ea:75:1d:bd:f2:70:51:81:7a:82:28:87: 3d:c1:d5:a0:f0:4d:b4:e3:f7:1c:25:7b:d4:04:04:40:67:ac: 83:e4:8f:0b:b1:1b:24:1c:b1:14:89:71:36:4a:df:50:1f:76: 03:70:12:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjUxMjE5MDM0MjEyWhcNMjUxMjI2MDM0MjEyWjAYMRYwFAYD VQQDDA02OTQ0Yzk5NC03NmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Rk8f3zmMOmxVlI+HC1rbD/ulJDQAjMu0NGKVfew5wjEDYt0SXF4zVqXa17d 1ILyEsqTgpH32bdKLrz7KUkhpdBERiCRtGsA+NNxFyYMiWehj75Y1sLp+mwWsxHu Wr7F5aOkXxS+8LF7ICES0daOXRhdp7DEt3eGpJMfnEWqQ+ObEUCOaWGP/JkoTql9 A41Rxn6n2b5NM8UOLfGb5FKHNT0XCVFZMdkU35E6EQyUq0cULvsIWc2EP3kXB9VN +mGXahkAYyv3k0QHjF+a9ljxYlP9f1gosuSp4EwcBSd7VZPu35lf3oo+3BfJZe0/ rImc1k0Yr5pMHPu4Q+DjtMm0+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEKMLou h15r8io3uWFqV2fQxJhbMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJe6NWqJY7KwmIcgkM+KROUoHKdfDFI8qyYGt4hPybsnf425UK5pYk /NZeQUktTuuVteo8KGtLmSbR5aXrzGPq1M+9NAwIPBjpEXzdhhVad49aADJ2obS+ vhVsNCEOqtk248oi+NxDqL0pm3od8RR0BqjPr6yh6n18RzrA10wyFdmlAxZSy8hU kpjK8s9qJEqUquUieBwpBk0ouf5ks0sSSvtaoHt9F3grNwdmGO9Zq/XSQQwE/4qB fvs44fbUXACq/Lg9TqHp8cg03yTqdR298nBRgXqCKIc9wdWg8E204/ccJXvUBARA Z6yD5I8LsRskHLEUiXE2St9QH3YDcBK6 -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:33 2025 by rpki-client