This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: Ag0CmZIvZ+dThfqXzn4gfbj5WJYoJQjPzIfE4RegiRU= Subject key identifier: 7B:6E:1F:54:08:18:3C:BB:9C:FD:D6:C2:42:AB:EE:DC:01:8C:9A:C3 Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: 0133 Signing time: Fri 05 Dec 2025 02:43:34 +0000 Manifest this update: Fri 05 Dec 2025 02:43:33 +0000 Manifest next update: Fri 12 Dec 2025 02:43:33 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: o6aqs6f80XiUIdyOh6oAFck7zQrhrx6jvWWWQ20kt4o=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: sT0cMmz3LwTY9msFrBTT0GIkbrL7Fs7LTvjg3aLQ9/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Dec 5 02:43:33 2025 GMT Not After : Dec 12 02:43:33 2025 GMT Subject: CN=693246d6-cbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:7d:70:38:61:4d:e0:31:17:9b:0d:b2:05: 77:fa:2d:a1:3c:75:d3:c0:73:8f:d1:f1:42:ea:55: 46:e4:13:47:69:13:ab:db:ed:10:36:2b:6a:c4:84: e5:1b:1a:bc:94:0f:81:99:ef:93:dc:c9:77:fa:a2: 53:64:7d:8f:3d:47:60:97:5e:08:4a:30:e8:54:a3: d5:3b:7c:36:c3:f9:af:2d:95:05:3f:39:16:e7:04: b3:89:b7:4f:41:b6:ef:72:5c:f0:ae:35:4d:c5:57: ad:5d:72:85:c8:55:56:de:f2:ab:1d:3a:4f:1b:76: a0:bd:a6:5e:b8:07:d2:ee:df:00:90:7e:eb:00:64: ac:da:74:6e:4b:a7:ca:47:cc:87:88:5c:4e:53:35: a4:4a:70:82:a0:41:f2:80:7d:c3:14:a4:b8:ed:b0: 22:c7:a0:2f:53:c8:03:0f:1c:7a:7a:94:01:a7:8b: f0:ff:61:d8:2b:ca:a4:cf:cc:37:90:3e:53:38:08: 1f:ce:81:6b:9c:a0:1d:fe:23:09:dd:3b:da:09:58: f5:0a:e9:b1:28:e4:ca:5a:a5:b8:f5:46:f8:3f:e4: 0d:f6:cd:f5:22:39:be:15:90:5c:66:af:6a:3c:a0: f2:58:23:97:82:1c:f5:47:60:0c:38:14:b2:52:af: ec:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6E:1F:54:08:18:3C:BB:9C:FD:D6:C2:42:AB:EE:DC:01:8C:9A:C3 X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:10:38:27:1c:bc:23:e4:c1:33:ed:f1:b4:f0:2e:b5:aa:ea: 5d:2a:cc:d5:97:66:66:a9:a6:79:89:bc:80:63:c8:f1:6c:60: 60:fd:8f:32:8c:8a:8e:ab:f7:ab:79:1b:d9:ff:ce:17:d8:00: a4:c8:3e:0c:e3:41:8b:fd:fd:35:6f:a7:d2:5f:68:cb:a2:84: cd:02:8b:87:bc:ed:8e:60:d2:0d:54:a2:c7:e2:b0:8c:97:06: 1a:a0:f3:bd:df:e2:c6:bd:dd:31:bc:53:fa:a6:99:7b:a7:76: 95:35:f4:c5:97:06:b2:14:f7:bb:4d:01:a7:19:75:73:fd:0b: d4:30:90:65:1a:e0:c4:68:01:cc:6f:9c:5d:c3:b1:37:f2:7b: b1:1e:df:fd:f5:25:0e:de:74:af:ac:f8:0d:14:84:de:be:c2: ab:7f:b6:d5:54:21:70:11:81:b7:ec:0d:4f:4e:6e:ea:23:52: 7b:d7:d5:87:5e:54:1f:96:48:0f:ea:d1:70:3c:df:a7:b1:1d: d3:e6:fd:04:eb:bc:b2:c5:3c:1b:d2:f2:ba:a3:83:a7:ad:58: c7:3d:9a:0f:6e:3a:52:22:2f:d6:e7:11:b2:7a:69:8f:89:10: 36:d4:d0:5a:55:5a:55:3a:f9:6a:cd:f6:c3:33:cd:45:64:2d: 02:26:b2:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjUxMjA1MDI0MzMzWhcNMjUxMjEyMDI0MzMzWjAYMRYwFAYD VQQDEw02OTMyNDZkNi1jYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3Z9cDhhTeAxF5sNsgV3+i2hPHXTwHOP0fFC6lVG5BNHaROr2+0QNitqxITl Gxq8lA+Bme+T3Ml3+qJTZH2PPUdgl14ISjDoVKPVO3w2w/mvLZUFPzkW5wSzibdP QbbvclzwrjVNxVetXXKFyFVW3vKrHTpPG3agvaZeuAfS7t8AkH7rAGSs2nRuS6fK R8yHiFxOUzWkSnCCoEHygH3DFKS47bAix6AvU8gDDxx6epQBp4vw/2HYK8qkz8w3 kD5TOAgfzoFrnKAd/iMJ3TvaCVj1CumxKOTKWqW49Ub4P+QN9s31Ijm+FZBcZq9q PKDyWCOXghz1R2AMOBSyUq/sQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtuH1QI GDy7nP3WwkKr7twBjJrDMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLEDgnHLwj5MEz7fG08C61qupdKszVl2ZmqaZ5ibyAY8jxbGBg/Y8y jIqOq/ereRvZ/84X2ACkyD4M40GL/f01b6fSX2jLooTNAouHvO2OYNINVKLH4rCM lwYaoPO93+LGvd0xvFP6ppl7p3aVNfTFlwayFPe7TQGnGXVz/QvUMJBlGuDEaAHM b5xdw7E38nuxHt/99SUO3nSvrPgNFITevsKrf7bVVCFwEYG37A1PTm7qI1J719WH XlQflkgP6tFwPN+nsR3T5v0E67yyxTwb0vK6o4OnrVjHPZoPbjpSIi/W5xGyemmP iRA21NBaVVpVOvlqzfbDM81FZC0CJrKp -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:28 2025 by rpki-client