This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json) Hash identifier: HSqkhtG64XF61UzA+pqtNkWmd72iqvTqWh593enBQrQ= Subject key identifier: B4:1C:35:B7:F8:5B:BA:BC:1C:07:A3:36:94:D7:8C:88:E1:0F:BB:D9 Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft Manifest number: 0806 Signing time: Thu 04 Dec 2025 20:05:00 +0000 Manifest this update: Thu 04 Dec 2025 20:05:00 +0000 Manifest next update: Thu 11 Dec 2025 20:05:00 +0000 Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: WluWiciQjfbWPB5GS8RX6xRHeHcB1Jx7d1443IpdTZs=) 2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: eZNeXm4nQEQxR4xjyKWddfWZzO4YMno8B7hOjNNuzA4=) 3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: O2jis8H/LjOcx4S7CbvRkc2kU/tbO3dAf3gniLEQHkI=) 4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: M6qmfQhNqaFBZk6GUbAn8MkOvEVJ93hzUV5R5uLKCj4=) 5: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: 4m4gcDBDEGLhIqThmo+gOWnFoA1rBH2fxZa2WsNnbcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Validity Not Before: Dec 4 20:05:00 2025 GMT Not After : Dec 11 20:05:00 2025 GMT Subject: CN=6931e96c-4eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:25:1a:ab:3f:8a:f6:73:37:08:0e:84:39: 3a:96:46:90:69:6e:68:21:30:46:a0:40:6b:b9:f5: 03:cd:01:04:d7:a4:44:2c:95:2d:9b:a7:4f:ac:59: 80:7c:56:72:71:d0:b9:c5:b8:1b:7b:d2:bd:24:b2: ac:8a:a7:42:db:d3:ec:74:6b:d0:60:27:b0:fa:03: 6e:04:16:82:f8:66:ae:32:d3:00:8c:42:64:0b:11: 1a:8a:c1:f7:16:42:c7:9d:47:c7:f4:60:d3:ea:39: 8b:30:12:9c:aa:3a:68:a0:6d:07:ea:ed:de:bf:60: 8a:3b:dc:c7:1f:c9:77:ae:dd:21:08:29:2b:89:cd: ac:0b:60:74:36:cc:22:4e:d1:1d:d4:d0:69:e5:c1: 41:65:ef:45:ca:fa:17:a4:98:11:47:fa:43:0d:61: 49:4d:14:1d:c7:9e:b1:d0:40:b2:17:16:ee:f8:eb: 18:4c:fa:64:27:6c:d8:22:60:6d:ab:43:69:52:da: 28:60:f9:ae:2f:1f:ca:51:59:0c:70:8b:f4:00:e7: 0b:d0:b5:6f:eb:ec:7e:e8:76:b9:f0:63:39:24:f9: eb:6e:80:8e:39:0a:02:27:9c:5b:8c:bc:46:5f:e7: ef:e3:1f:7b:7c:3a:e4:8e:23:c2:f9:83:5e:b5:a0: 8c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1C:35:B7:F8:5B:BA:BC:1C:07:A3:36:94:D7:8C:88:E1:0F:BB:D9 X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:dd:70:3c:19:60:31:2e:1c:12:1c:a0:38:ef:64:01:1a:a3: 99:d9:23:f6:60:ca:53:f5:96:de:ae:7e:2a:60:3b:41:3f:03: bd:34:1c:d4:b8:43:77:fe:64:52:07:15:1d:53:c3:f6:78:e0: a2:ae:e7:ba:08:02:f7:c7:9e:64:fb:c3:f9:c3:24:0d:40:50: 5a:a5:8c:85:f7:9b:ac:1f:de:46:77:db:f8:f1:f0:7b:49:6c: 36:78:55:3a:93:28:b1:28:d2:d4:7c:86:34:1f:5d:a8:be:b0: 38:be:a7:a5:f8:d8:fd:58:4c:9b:d3:03:2d:48:31:cc:11:92: 7e:fd:76:91:f1:af:29:69:7f:75:98:ba:19:e1:d0:28:5d:12: 83:15:3e:2b:6a:a1:a2:00:ed:59:0d:22:37:50:32:c6:61:16: ec:f5:a0:20:e0:e9:66:38:a1:16:32:0f:0a:84:a0:e7:b7:9a: 17:d0:d9:0e:49:06:2a:71:6e:66:cc:fb:17:aa:d2:98:72:cf: 69:38:b8:3c:4e:22:66:a1:ca:b6:f1:89:2e:b2:70:85:fc:d8: ee:c8:6e:9c:f1:03:52:4c:0c:1f:ef:ce:39:82:8c:30:40:ed: c6:9f:f7:41:9f:4e:81:e6:64:ee:8d:71:41:4f:f3:66:28:2b: 6d:05:fe:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjUxMjA0MjAwNTAwWhcNMjUxMjExMjAwNTAwWjAYMRYwFAYD VQQDEw02OTMxZTk2Yy00ZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx78lGqs/ivZzNwgOhDk6lkaQaW5oITBGoEBrufUDzQEE16RELJUtm6dPrFmA fFZycdC5xbgbe9K9JLKsiqdC29PsdGvQYCew+gNuBBaC+GauMtMAjEJkCxEaisH3 FkLHnUfH9GDT6jmLMBKcqjpooG0H6u3ev2CKO9zHH8l3rt0hCCkric2sC2B0Nswi TtEd1NBp5cFBZe9FyvoXpJgRR/pDDWFJTRQdx56x0ECyFxbu+OsYTPpkJ2zYImBt q0NpUtooYPmuLx/KUVkMcIv0AOcL0LVv6+x+6Ha58GM5JPnrboCOOQoCJ5xbjLxG X+fv4x97fDrkjiPC+YNetaCMgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQcNbf4 W7q8HAejNpTXjIjhD7vZMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2Rm N1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV3XA8GWAxLhwSHKA472QBGqOZ2SP2YMpT9Zbern4qYDtBPwO9NBzU uEN3/mRSBxUdU8P2eOCirue6CAL3x55k+8P5wyQNQFBapYyF95usH95Gd9v48fB7 SWw2eFU6kyixKNLUfIY0H12ovrA4vqel+Nj9WEyb0wMtSDHMEZJ+/XaR8a8paX91 mLoZ4dAoXRKDFT4raqGiAO1ZDSI3UDLGYRbs9aAg4OlmOKEWMg8KhKDnt5oX0NkO SQYqcW5mzPsXqtKYcs9pOLg8TiJmocq28YkusnCF/NjuyG6c8QNSTAwf7845goww QO3Gn/dBn06B5mTujXFBT/NmKCttBf6o -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:47 2025 by rpki-client