This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json) Hash identifier: Nt/DuiZRpR9Ms2Rjj/2Qm71xP6wN46ffL83dR5le9RU= Subject key identifier: 5D:58:11:BE:90:9D:84:57:81:CF:40:CD:8B:42:84:6C:5E:2A:58:F7 Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 0829 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft Manifest number: 080D Signing time: Thu 18 Dec 2025 20:30:59 +0000 Manifest this update: Thu 18 Dec 2025 20:30:58 +0000 Manifest next update: Thu 25 Dec 2025 20:30:58 +0000 Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: PvX6qQEVYzxhKj983H7WPmaD4RJ+ghiCqso4IiaoYB0=) 2: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: O2jis8H/LjOcx4S7CbvRkc2kU/tbO3dAf3gniLEQHkI=) 3: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: eZNeXm4nQEQxR4xjyKWddfWZzO4YMno8B7hOjNNuzA4=) 4: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: 4m4gcDBDEGLhIqThmo+gOWnFoA1rBH2fxZa2WsNnbcQ=) 5: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: M6qmfQhNqaFBZk6GUbAn8MkOvEVJ93hzUV5R5uLKCj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Validity Not Before: Dec 18 20:30:58 2025 GMT Not After : Dec 25 20:30:58 2025 GMT Subject: CN=69446483-3cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:ee:78:2e:40:d7:ac:db:b2:88:6b:60:6d: b7:55:0f:26:27:c9:13:be:e9:c9:f0:67:2c:34:e3: a1:7b:52:0a:05:8a:0f:19:64:96:09:a2:09:6c:42: 20:a8:88:c8:ec:ed:b0:52:07:de:e2:1c:a8:9e:95: e7:88:d7:cc:93:1d:a5:84:21:38:5b:6c:9d:d1:14: 2f:50:a7:c2:ba:15:c6:f6:fb:43:e9:64:13:8e:b1: 3a:27:74:38:51:08:84:a6:f2:4a:7b:be:23:3e:da: d1:ee:68:7d:85:a5:52:44:14:3c:46:d7:9a:db:da: f8:5c:d3:3e:b0:ee:ca:16:95:11:b1:75:9f:86:a0: 93:f5:8b:e9:f1:8a:94:08:6f:23:eb:2e:3d:b3:79: c3:b8:3f:35:d0:b4:da:22:5e:77:39:11:0e:c2:3d: 46:99:f0:cd:5e:50:8d:ed:d3:ad:ce:5c:c0:04:ab: 38:4c:e4:0c:17:f7:95:a2:33:81:a8:a4:fc:99:a4: 7d:56:19:00:38:bb:bf:f1:02:df:38:2f:0c:d9:ee: 4a:25:31:37:d0:19:f8:15:83:96:cb:7d:72:30:b1: 1f:40:df:66:8f:4b:94:c9:7d:7c:7f:37:33:49:8e: 1e:25:20:43:41:da:fd:35:21:b5:d7:8d:cc:40:36: d8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:58:11:BE:90:9D:84:57:81:CF:40:CD:8B:42:84:6C:5E:2A:58:F7 X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:30:fb:ce:21:91:4f:6e:7c:af:46:47:98:3d:c9:5e:26:c0: 2f:46:1b:62:f4:fd:98:7a:83:6c:51:36:1e:26:d8:70:38:43: a0:03:20:97:a0:3d:eb:aa:da:e2:d4:0f:88:48:2a:23:c2:b9: 9c:2b:1d:13:3a:a1:5e:fb:07:21:3d:03:3b:2b:c1:32:7d:38: 8b:55:29:ad:5e:4f:94:38:67:5f:f3:a0:44:a2:4e:7c:d2:d1: 33:f8:68:72:fd:28:c1:66:33:33:ab:06:93:66:5c:4c:59:d3: bc:a0:50:bd:04:36:35:a8:f2:94:05:74:fe:5b:64:a7:09:84: 90:0b:e4:06:d3:80:c0:eb:aa:ed:89:77:fa:8f:23:63:bc:db: 09:3f:16:14:bf:32:59:5e:b3:03:8b:e7:82:51:8f:62:18:21: 40:7a:5e:79:32:54:17:c2:01:9a:57:ba:c0:d0:b8:4e:33:ae: 90:1b:c5:2d:c8:df:f6:3e:16:c5:d0:8f:9e:1e:e0:52:97:69: 24:12:07:9d:e2:25:4e:3a:4b:2b:70:41:e5:78:da:dc:9c:e2: 6d:47:47:00:ed:43:bf:9d:a1:26:35:42:7b:8c:04:f2:81:cd: 4a:22:a1:c4:35:70:3c:1f:4c:76:ab:db:76:37:c3:5e:68:0a: 3b:e7:1b:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjUxMjE4MjAzMDU4WhcNMjUxMjI1MjAzMDU4WjAYMRYwFAYD VQQDDA02OTQ0NjQ4My0zY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmjueC5A16zbsohrYG23VQ8mJ8kTvunJ8GcsNOOhe1IKBYoPGWSWCaIJbEIg qIjI7O2wUgfe4hyonpXniNfMkx2lhCE4W2yd0RQvUKfCuhXG9vtD6WQTjrE6J3Q4 UQiEpvJKe74jPtrR7mh9haVSRBQ8Rtea29r4XNM+sO7KFpURsXWfhqCT9Yvp8YqU CG8j6y49s3nDuD810LTaIl53OREOwj1GmfDNXlCN7dOtzlzABKs4TOQMF/eVojOB qKT8maR9VhkAOLu/8QLfOC8M2e5KJTE30Bn4FYOWy31yMLEfQN9mj0uUyX18fzcz SY4eJSBDQdr9NSG1143MQDbYUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1YEb6Q nYRXgc9AzYtChGxeKlj3MB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2Rm N1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgMPvOIZFPbnyvRkeYPcleJsAvRhti9P2YeoNsUTYeJthwOEOgAyCX oD3rqtri1A+ISCojwrmcKx0TOqFe+wchPQM7K8EyfTiLVSmtXk+UOGdf86BEok58 0tEz+Ghy/SjBZjMzqwaTZlxMWdO8oFC9BDY1qPKUBXT+W2SnCYSQC+QG04DA66rt iXf6jyNjvNsJPxYUvzJZXrMDi+eCUY9iGCFAel55MlQXwgGaV7rA0LhOM66QG8Ut yN/2PhbF0I+eHuBSl2kkEged4iVOOksrcEHleNrcnOJtR0cA7UO/naEmNUJ7jATy gc1KIqHENXA8H0x2q9t2N8NeaAo75xuv -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:29 2025 by rpki-client