This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: CcZUWb+dntWi9Wy18xrv7vrRNF2rNwNSpOc1TV9p6JE= Subject key identifier: 8C:DE:67:21:F5:2E:90:D2:FF:22:48:79:09:D4:33:04:92:9D:A0:FD Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 01B0 Signing time: Fri 05 Dec 2025 01:24:06 +0000 Manifest this update: Fri 05 Dec 2025 01:24:05 +0000 Manifest next update: Fri 12 Dec 2025 01:24:05 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: vonkqZctVnBziSB0KiAmUeGeE4u2kBpcNoKrpPkj+K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Dec 5 01:24:05 2025 GMT Not After : Dec 12 01:24:05 2025 GMT Subject: CN=69323435-246c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:5e:8a:e5:a8:95:31:db:42:12:81:e7:17: 14:7e:f3:d7:29:77:c5:67:f1:ea:71:38:6b:9d:a6: dc:c6:bf:43:4b:06:53:48:e5:70:f6:18:b8:25:ce: 4c:34:11:89:70:57:a3:9f:94:c6:0c:3d:b0:00:c5: 94:9b:b4:3e:93:bd:d3:ed:a1:62:47:ab:4c:ee:ce: 37:38:44:c3:86:85:ad:9a:5b:01:da:44:86:ee:4e: 9c:db:a7:de:d7:4a:5f:01:21:8c:c0:18:a2:5e:73: 32:e9:4e:9f:0e:79:e0:c4:1a:6a:67:60:12:29:17: 94:9f:08:dd:e6:79:c6:e9:83:36:33:0f:8d:fc:37: b2:e0:e4:4f:9f:f7:fd:4c:b0:3e:61:b1:b0:78:32: 2c:46:c8:4c:10:d7:39:35:87:1d:e7:31:97:33:ab: 20:ed:50:98:ae:d5:14:f3:9c:e4:05:8d:97:28:fa: 38:fd:df:bd:78:9a:d0:9d:ba:d6:2f:3e:6e:3d:d9: 20:ea:dc:c4:88:c1:3f:66:4a:10:56:5f:3a:a8:85: 9c:e3:2a:b8:d3:e9:b0:ab:c9:af:c3:7b:7c:8a:07: 3b:4a:bf:f1:3a:eb:87:84:4b:29:7b:b9:2a:6d:55: 1b:a4:07:b9:f1:8f:b7:11:a2:23:ca:9f:b7:34:6e: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DE:67:21:F5:2E:90:D2:FF:22:48:79:09:D4:33:04:92:9D:A0:FD X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c3:9e:f8:de:4e:cb:e1:52:8c:c7:67:b5:68:d1:65:d9:15: 99:44:4a:d5:b3:d8:46:49:3e:10:a1:92:a0:79:d7:83:7a:52: 35:6d:2e:57:45:3f:f5:ae:b9:54:2f:00:ff:48:79:24:87:1d: 2e:8f:d4:7f:45:d8:d0:0b:b3:99:09:9c:43:e1:2d:07:90:0c: 12:61:c4:4a:59:91:01:82:bf:f4:ca:97:89:45:38:f0:bd:d1: 44:f7:cb:dd:d1:dc:43:64:0b:42:08:ba:e9:7d:0d:10:b5:85: 98:ce:d1:b3:6e:bc:74:e0:e0:9d:f9:e5:da:f7:ed:2a:6a:a9: ca:e3:87:63:b5:34:3e:42:fb:44:ef:e3:20:7a:08:b0:20:e9: 62:48:10:97:1a:96:33:7e:1b:38:be:4b:f2:91:7f:4e:33:1e: 09:d4:16:f3:58:ae:58:e5:7b:15:4e:aa:ea:49:54:35:f2:49: 70:15:0b:78:ca:35:e2:e8:ba:fb:f4:20:63:ba:50:9e:ce:00: ab:05:ba:fd:19:0f:6d:39:bf:2e:2b:ea:82:13:41:b6:d3:58: 6c:6b:80:76:38:e9:fe:c9:8f:ea:67:82:a0:8d:ee:61:a6:36: b8:9b:20:47:a0:d1:f7:ee:f8:27:ca:0c:f9:57:e1:eb:ca:e7: 50:bb:81:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjUxMjA1MDEyNDA1WhcNMjUxMjEyMDEyNDA1WjAYMRYwFAYD VQQDEw02OTMyMzQzNS0yNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qleiuWolTHbQhKB5xcUfvPXKXfFZ/HqcThrnabcxr9DSwZTSOVw9hi4Jc5M NBGJcFejn5TGDD2wAMWUm7Q+k73T7aFiR6tM7s43OETDhoWtmlsB2kSG7k6c26fe 10pfASGMwBiiXnMy6U6fDnngxBpqZ2ASKReUnwjd5nnG6YM2Mw+N/Dey4ORPn/f9 TLA+YbGweDIsRshMENc5NYcd5zGXM6sg7VCYrtUU85zkBY2XKPo4/d+9eJrQnbrW Lz5uPdkg6tzEiME/ZkoQVl86qIWc4yq40+mwq8mvw3t8igc7Sr/xOuuHhEspe7kq bVUbpAe58Y+3EaIjyp+3NG6dXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzeZyH1 LpDS/yJIeQnUMwSSnaD9MB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtw5743k7L4VKMx2e1aNFl2RWZRErVs9hGST4QoZKgedeDelI1bS5X RT/1rrlULwD/SHkkhx0uj9R/RdjQC7OZCZxD4S0HkAwSYcRKWZEBgr/0ypeJRTjw vdFE98vd0dxDZAtCCLrpfQ0QtYWYztGzbrx04OCd+eXa9+0qaqnK44djtTQ+QvtE 7+MgegiwIOliSBCXGpYzfhs4vkvykX9OMx4J1BbzWK5Y5XsVTqrqSVQ18klwFQt4 yjXi6Lr79CBjulCezgCrBbr9GQ9tOb8uK+qCE0G201hsa4B2OOn+yY/qZ4Kgje5h pja4myBHoNH37vgnygz5V+HryudQu4H5 -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:33 2025 by rpki-client