This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json) Hash identifier: SNV9PDnVSsPcGXheSpjLd2Wexp4ere4ZoD7NpdBR82I= Subject key identifier: 41:61:21:06:02:9F:CF:15:AE:DA:CB:79:ED:CB:38:26:C9:B7:1B:0F Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft Manifest number: CD Signing time: Fri 05 Dec 2025 03:47:46 +0000 Manifest this update: Fri 05 Dec 2025 03:47:45 +0000 Manifest next update: Fri 12 Dec 2025 03:47:45 +0000 Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: q2z4LXtNFMOihKiRkwv6BvVScxIj54z9rAEczNgBL80=) 2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: X6VArMN74z4tgeDbEQQzHaT88BAEASciUle7rIza6xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Dec 5 03:47:45 2025 GMT Not After : Dec 12 03:47:45 2025 GMT Subject: CN=693255e2-a431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:69:43:21:77:7b:74:65:67:a5:93:f9:d8: c5:f8:12:e1:f3:7e:30:c4:eb:ae:60:7a:74:9d:de: f0:46:50:eb:ee:09:d4:9e:24:97:b5:a6:44:01:3d: fc:b7:b5:6b:2a:1b:c1:49:b8:a5:25:08:f6:d8:30: 3f:94:cb:89:b0:4a:92:93:77:f6:09:4e:7c:72:38: 12:c1:4d:44:15:ad:52:84:69:73:9b:44:91:37:69: f7:38:3c:2f:a4:4d:93:bd:82:62:fa:69:77:4e:3e: 4c:89:8c:ba:79:31:f2:76:4e:4f:31:d8:0b:2e:2b: 73:d5:6f:fc:4c:47:df:5b:b5:ac:5a:3b:96:d1:3a: c6:3c:a7:4c:69:d0:18:e3:cf:96:56:db:8f:9b:be: 2c:be:0d:dc:37:3c:88:cb:5a:37:61:ce:32:c3:4b: 1e:88:35:a7:bc:3b:f1:a4:24:df:d8:ad:86:36:3a: b1:7a:e0:3b:ea:c6:1c:29:a2:7d:14:b3:62:d6:51: f0:e1:90:13:33:30:57:11:ad:5e:83:5f:ca:cf:e6: 77:59:00:9e:3b:73:80:ca:44:ba:3a:b8:c9:97:c0: 2a:ef:f3:21:41:cf:2c:d6:d8:1a:a6:71:29:a8:79: b0:5b:d2:4b:e5:3e:43:c5:83:41:93:c2:56:ab:90: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:61:21:06:02:9F:CF:15:AE:DA:CB:79:ED:CB:38:26:C9:B7:1B:0F X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:4a:62:60:c1:e3:d3:df:06:75:d0:d0:69:ca:58:bf:17:bc: 08:62:ac:fc:c7:de:df:06:ab:48:3a:c7:36:e9:12:f9:9d:1e: 6b:04:a4:52:78:ab:f9:78:8a:1a:18:a0:41:2f:10:01:e3:d3: 88:77:81:95:36:3f:b8:84:f4:e5:cd:98:63:cf:7c:68:a1:93: cb:7a:cd:29:11:c5:1f:5c:e6:18:e0:4b:7e:f8:ea:dc:1d:c7: 94:3b:8e:4c:30:fb:35:2d:74:f0:4e:b1:38:ef:79:01:a4:f9: c3:f9:f5:42:75:98:88:58:f5:84:0f:04:c3:08:95:c4:88:6e: 8d:fa:db:ad:11:de:13:de:28:72:10:f0:f0:08:0e:50:87:85: b2:17:36:26:e5:64:e3:6e:a9:76:15:70:2b:a9:76:b6:40:c2: 0c:80:e9:a3:1f:f7:44:26:18:38:08:57:12:f2:c0:7c:37:b1: 8a:ae:fb:0a:f3:81:d2:bc:b5:53:0e:ce:00:da:bd:a6:b0:cc: 96:a6:84:78:f8:91:39:be:eb:ae:e6:e6:55:bb:2f:b1:90:2b: 6d:3b:51:6e:ba:05:4e:32:98:c2:f9:57:eb:6d:a1:fb:3a:ca: 1a:2b:64:38:c2:5a:01:a8:4a:d3:e7:98:7a:b7:d1:56:15:22: c1:a1:3c:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjUxMjA1MDM0NzQ1WhcNMjUxMjEyMDM0NzQ1WjAYMRYwFAYD VQQDEw02OTMyNTVlMi1hNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9dpQyF3e3RlZ6WT+djF+BLh834wxOuuYHp0nd7wRlDr7gnUniSXtaZEAT38 t7VrKhvBSbilJQj22DA/lMuJsEqSk3f2CU58cjgSwU1EFa1ShGlzm0SRN2n3ODwv pE2TvYJi+ml3Tj5MiYy6eTHydk5PMdgLLitz1W/8TEffW7WsWjuW0TrGPKdMadAY 48+WVtuPm74svg3cNzyIy1o3Yc4yw0seiDWnvDvxpCTf2K2GNjqxeuA76sYcKaJ9 FLNi1lHw4ZATMzBXEa1eg1/Kz+Z3WQCeO3OAykS6OrjJl8Aq7/MhQc8s1tgapnEp qHmwW9JL5T5DxYNBk8JWq5AijQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFhIQYC n88VrtrLee3LOCbJtxsPMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS84RDdCOUJGMjlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zy b0hCNmhSVVpYTWFPZzJxX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5SmJgwePT3wZ10NBpyli/F7wIYqz8x97fBqtIOsc26RL5nR5rBKRS eKv5eIoaGKBBLxAB49OId4GVNj+4hPTlzZhjz3xooZPLes0pEcUfXOYY4Et++Orc HceUO45MMPs1LXTwTrE473kBpPnD+fVCdZiIWPWEDwTDCJXEiG6N+tutEd4T3ihy EPDwCA5Qh4WyFzYm5WTjbql2FXArqXa2QMIMgOmjH/dEJhg4CFcS8sB8N7GKrvsK 84HSvLVTDs4A2r2msMyWpoR4+JE5vuuu5uZVuy+xkCttO1FuugVOMpjC+VfrbaH7 OsoaK2Q4wloBqErT55h6t9FWFSLBoTz9 -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:03 2025 by rpki-client