This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: OqzMAfno73vtZos3iZemKDqByjNHUAL+Ci8k8Z6+BEg= Subject key identifier: 61:DA:31:C2:B8:64:A0:00:0C:C5:3E:55:A3:BE:86:E0:2B:50:20:0A Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 03A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 03A9 Signing time: Thu 04 Dec 2025 23:07:37 +0000 Manifest this update: Thu 04 Dec 2025 23:07:37 +0000 Manifest next update: Thu 11 Dec 2025 23:07:37 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: yW4yt94Bjd76dhW2E5/fD+DdW1OWPS/kBVSkraSXGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: Dec 4 23:07:37 2025 GMT Not After : Dec 11 23:07:37 2025 GMT Subject: CN=69321439-1b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:cc:72:60:ee:56:b1:3a:ac:9a:d5:c8:92: fc:b9:fc:cd:4a:4f:d9:d2:7a:7a:be:ad:cd:72:83: 0e:04:2c:18:5a:6d:51:5a:64:5c:12:3b:44:c1:bb: 56:56:02:46:8b:a7:1b:15:cc:60:16:3e:77:73:77: 61:cb:98:5d:da:0a:27:6e:2c:1d:44:86:41:0e:9b: 80:bc:06:ab:e4:54:78:0f:d4:4b:15:da:12:bb:56: 94:20:70:28:e5:54:9a:83:34:e1:2f:23:0e:63:fe: ce:34:d8:9b:cb:d8:41:6b:ca:f4:40:f7:07:b1:b1: 6e:de:c5:a3:a7:ce:95:4d:1c:7d:77:34:f3:77:36: c5:5c:b5:3c:ec:cb:a7:15:e7:7f:e5:40:67:97:ab: 11:18:46:fa:b8:65:fe:2c:ae:0b:20:13:97:91:46: 55:6e:be:3b:f3:dd:ee:6d:5e:cf:f2:23:96:0d:f4: 6f:df:06:3e:58:0c:35:ba:36:42:5f:2f:45:a5:23: be:8c:4b:d7:cc:02:7e:7e:bd:a1:6b:77:f9:04:d4: 85:b8:55:32:a3:cc:53:d2:66:26:26:ef:dd:d7:d6: db:6f:5d:e9:b0:a5:cb:a2:0f:0f:c3:c4:b4:72:43: 1f:63:9c:9a:27:90:d1:02:5d:1f:95:b4:89:43:19: e0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DA:31:C2:B8:64:A0:00:0C:C5:3E:55:A3:BE:86:E0:2B:50:20:0A X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:8c:cc:b6:bf:cb:6c:30:5a:49:01:b4:ac:84:08:a3:ba:60: b7:a2:2a:6b:9d:7e:15:d7:e7:45:ff:e1:2c:75:2d:22:cf:6b: 3d:f6:71:57:60:84:12:98:e1:99:e7:c2:85:34:1c:4e:a5:00: d7:da:54:60:bf:a1:05:c9:70:69:4b:63:d9:3d:4c:88:33:0b: 50:f2:5a:ee:65:9a:81:a5:7b:79:a3:98:e6:cb:cd:f1:3e:60: 37:c1:83:8f:7e:87:36:8b:4d:1a:21:5a:02:47:fe:45:6a:bf: 4d:e8:e1:29:78:96:4e:cf:16:68:cb:55:a7:f3:5a:04:a5:fc: 00:e8:d5:86:ca:ad:84:42:8e:c0:da:9b:fd:77:b2:b4:55:ff: 49:75:ba:e7:2a:78:9b:62:8f:86:de:b5:d8:99:c8:92:98:e9: 6f:f7:b4:53:35:c8:29:c9:f6:68:44:1c:6c:7f:2e:05:4f:0e: 5e:63:48:7d:7c:ce:3f:78:02:ae:ed:24:fb:e5:7a:ac:c9:f4: ba:04:9f:e4:5e:86:e7:a8:0e:21:37:22:f9:ac:9e:21:ea:44: 23:ea:0e:99:ac:b8:97:03:10:59:4b:cd:b9:86:3d:a4:f7:e3: ee:f2:d1:e5:38:84:91:af:43:15:0a:8c:06:cf:f6:16:9d:2e: 35:53:f2:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjUxMjA0MjMwNzM3WhcNMjUxMjExMjMwNzM3WjAYMRYwFAYD VQQDEw02OTMyMTQzOS0xYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwB7McmDuVrE6rJrVyJL8ufzNSk/Z0np6vq3NcoMOBCwYWm1RWmRcEjtEwbtW VgJGi6cbFcxgFj53c3dhy5hd2gonbiwdRIZBDpuAvAar5FR4D9RLFdoSu1aUIHAo 5VSagzThLyMOY/7ONNiby9hBa8r0QPcHsbFu3sWjp86VTRx9dzTzdzbFXLU87Mun Fed/5UBnl6sRGEb6uGX+LK4LIBOXkUZVbr47893ubV7P8iOWDfRv3wY+WAw1ujZC Xy9FpSO+jEvXzAJ+fr2ha3f5BNSFuFUyo8xT0mYmJu/d19bbb13psKXLog8Pw8S0 ckMfY5yaJ5DRAl0flbSJQxngKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHaMcK4 ZKAADMU+VaO+huArUCAKMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIjMy2v8tsMFpJAbSshAijumC3oiprnX4V1+dF/+EsdS0iz2s99nFX YIQSmOGZ58KFNBxOpQDX2lRgv6EFyXBpS2PZPUyIMwtQ8lruZZqBpXt5o5jmy83x PmA3wYOPfoc2i00aIVoCR/5Far9N6OEpeJZOzxZoy1Wn81oEpfwA6NWGyq2EQo7A 2pv9d7K0Vf9JdbrnKnibYo+G3rXYmciSmOlv97RTNcgpyfZoRBxsfy4FTw5eY0h9 fM4/eAKu7ST75XqsyfS6BJ/kXobnqA4hNyL5rJ4h6kQj6g6ZrLiXAxBZS825hj2k 9+Pu8tHlOISRr0MVCowGz/YWnS41U/Jy -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:29 2025 by rpki-client