This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft File: oAM_SUNjDclOLd9fKmuI6GZGGuc.mft (raw, json) Hash identifier: M5vSVhjZdThPlraA0UVaOV/Cy4kDFGG8MxaSc3Iiqow= Subject key identifier: 3F:21:86:1D:32:B5:95:16:F0:2D:A1:19:85:37:DC:48:D1:B8:82:5B Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 Certificate issuer: /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft Manifest number: 0139 Signing time: Wed 17 Dec 2025 03:59:59 +0000 Manifest this update: Wed 17 Dec 2025 03:59:58 +0000 Manifest next update: Wed 24 Dec 2025 03:59:58 +0000 Files and hashes: 1: oAM_SUNjDclOLd9fKmuI6GZGGuc.crl (hash: 0QPDb+SJPU6Ea99EKe3AMDUs7r37hdqI7gPF0cq4Oc0=) 2: EE647C1418A411EFBA690F60C4F9AE02.roa (hash: 1sKQhDe4XE+z/iEwFOdjuVVtLfzSNo7ytvziBnxPEOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0F2, serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Validity Not Before: Dec 17 03:59:58 2025 GMT Not After : Dec 24 03:59:58 2025 GMT Subject: CN=69422abe-1e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:b1:ed:2f:6f:e1:eb:cf:0e:da:2b:82:01: 0f:c3:cf:14:53:23:bd:ed:b4:1e:f9:dc:41:a8:ed: d3:98:3f:05:e3:5b:59:f1:a4:0d:2f:40:11:d4:8f: 0d:be:6e:7d:20:c4:78:76:cb:ae:4d:09:a4:62:51: 95:29:ac:27:64:1b:33:b0:e9:b3:24:77:83:26:6a: f8:c9:a4:54:c8:45:b8:70:e2:32:55:ea:df:70:9d: 8b:dd:55:86:11:86:b2:6d:bc:f1:7c:93:31:de:df: 2a:48:07:02:b3:b7:8e:3b:de:6e:c9:b5:32:60:0b: 1d:cb:d3:24:30:60:94:21:dd:9d:28:34:1f:e2:8a: 7a:fc:71:67:a9:12:cf:14:ce:a9:a4:f2:9f:e6:f8: 1e:0a:ce:43:c7:d5:4c:b5:ed:15:10:10:76:44:ca: 9f:53:4f:73:ac:db:9f:d2:a7:f5:01:4b:fe:be:c9: 45:e4:97:b1:2f:00:ce:10:50:b4:94:bd:62:b1:59: 6d:f0:43:bf:f9:97:a3:7a:39:57:8e:e2:ee:80:2c: 07:d2:2a:6d:91:ed:df:68:d9:a5:ea:f0:2c:75:6d: 48:10:45:92:e6:3b:b9:0d:98:7b:d8:33:09:28:ed: 6c:89:13:9f:30:37:32:f4:94:3f:dd:80:a2:bd:c1: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:21:86:1D:32:B5:95:16:F0:2D:A1:19:85:37:DC:48:D1:B8:82:5B X509v3 Authority Key Identifier: keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:81:57:f7:18:97:fe:87:39:3c:54:28:21:34:74:f6:fc:a0: 97:9c:bb:34:5e:ed:3c:20:63:58:a8:7b:b4:b6:5e:e0:73:8c: 90:c6:12:1e:f1:e0:7b:cc:e7:b3:59:b0:f6:91:c4:d0:f1:94: 0f:f7:85:de:f3:31:ca:55:88:6b:d6:82:33:b8:16:0f:f7:69: 6c:b1:a5:ce:c0:75:80:54:06:01:0e:86:86:92:59:ef:05:dd: 07:3c:72:40:6d:5f:bd:c1:4d:f4:cb:4d:99:8e:14:c6:55:e6: 8c:82:44:04:ca:6c:a0:58:ec:62:91:0b:75:b2:fa:fe:e2:d0: cf:0d:4a:48:fd:1a:90:37:5a:90:c9:64:b3:7f:33:da:61:84: d1:89:96:af:98:d5:cd:71:07:49:eb:17:53:b2:12:3f:c9:36: 14:84:5e:f8:23:a6:86:15:c7:05:a4:97:e2:a8:79:33:45:f5: 3a:8a:32:1c:62:bb:13:dd:c4:23:e0:58:4f:07:2e:df:b9:ba: 24:18:b6:51:54:fa:9e:82:f4:e5:45:6f:ea:b5:38:e4:91:8b: 72:fe:1b:7e:5d:a6:4e:7e:ea:e0:15:94:d8:b4:0c:4b:ab:b7: da:d3:3e:e6:1e:0a:cc:5a:19:f4:9b:18:1d:90:66:56:a5:bb: 9e:77:69:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwRjIxMTAvBgNVBAUTKEEwMDMzRjQ5NDM2MzBEQzk0RTJEREY1RjJBNkI4OEU4 NjY0NjFBRTcwHhcNMjUxMjE3MDM1OTU4WhcNMjUxMjI0MDM1OTU4WjAYMRYwFAYD VQQDDA02OTQyMmFiZS0xZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskux7S9v4evPDtorggEPw88UUyO97bQe+dxBqO3TmD8F41tZ8aQNL0AR1I8N vm59IMR4dsuuTQmkYlGVKawnZBszsOmzJHeDJmr4yaRUyEW4cOIyVerfcJ2L3VWG EYaybbzxfJMx3t8qSAcCs7eOO95uybUyYAsdy9MkMGCUId2dKDQf4op6/HFnqRLP FM6ppPKf5vgeCs5Dx9VMte0VEBB2RMqfU09zrNuf0qf1AUv+vslF5JexLwDOEFC0 lL1isVlt8EO/+ZejejlXjuLugCwH0iptke3faNml6vAsdW1IEEWS5ju5DZh72DMJ KO1siROfMDcy9JQ/3YCivcEOLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8hhh0y tZUW8C2hGYU33EjRuIJbMB8GA1UdIwQYMBaAFKADP0lDYw3JTi3fXypriOhmRhrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBGMi83RjMzRUUyNEZE N0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRjbE9MZDlmS211STZHWkdH dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BTV9TVU5qRGNsT0xkOWZLbXVJNkdaR0d1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBGMi83RjMzRUUyNEZEN0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRj bE9MZDlmS211STZHWkdHdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAugVf3GJf+hzk8VCghNHT2/KCXnLs0Xu08IGNYqHu0tl7gc4yQxhIe 8eB7zOezWbD2kcTQ8ZQP94Xe8zHKVYhr1oIzuBYP92lssaXOwHWAVAYBDoaGklnv Bd0HPHJAbV+9wU30y02ZjhTGVeaMgkQEymygWOxikQt1svr+4tDPDUpI/RqQN1qQ yWSzfzPaYYTRiZavmNXNcQdJ6xdTshI/yTYUhF74I6aGFccFpJfiqHkzRfU6ijIc YrsT3cQj4FhPBy7fubokGLZRVPqegvTlRW/qtTjkkYty/ht+XaZOfurgFZTYtAxL q7fa0z7mHgrMWhn0mxgdkGZWpbued2li -----END CERTIFICATE-----Generated at Wed Dec 17 06:18:03 2025 by rpki-client