This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: w2cLViHQpmpZN7RjZlcYeXzAcmmtLoYYXMAU1Hx8B8Y= Subject key identifier: 13:A3:FD:02:81:A1:2C:E1:F7:22:44:4F:79:95:71:77:F0:8D:4B:F1 Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: 0114 Signing time: Tue 23 Dec 2025 03:51:10 +0000 Manifest this update: Tue 23 Dec 2025 03:51:10 +0000 Manifest next update: Tue 30 Dec 2025 03:51:10 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: 4m2HAnXi2P0dukkJwkYaEqZEOmaXRAedC4zXVq+KwcU=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: Xtt+dRvGTSadJPsj0h+bYSdSHUpop3mgErELCN/AU2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Dec 23 03:51:10 2025 GMT Not After : Dec 30 03:51:10 2025 GMT Subject: CN=694a11ae-ec3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:b5:4b:23:9e:9a:36:2b:a9:a7:7b:f6:a6: 12:d9:df:b8:27:ca:8e:fa:45:29:b6:49:40:50:83: db:dd:9f:9b:6f:70:6f:07:58:4a:1f:9d:66:cb:e1: 65:11:45:20:95:a3:2e:18:d9:da:de:b6:27:6a:1a: ba:08:fd:93:9c:18:07:80:35:59:02:7d:35:b3:e0: 71:46:86:d9:b8:75:b0:d0:df:08:29:e4:cf:c3:a0: 86:ad:7b:bf:3e:c6:ef:8e:39:9a:59:3e:75:27:62: d3:d5:b2:fa:f6:b8:37:a1:6d:e1:85:40:08:43:b4: ad:40:30:42:42:cc:47:d0:d1:7a:c6:33:7e:aa:07: c1:2b:12:ac:4f:9c:87:cb:e7:ec:c1:33:d5:c3:f5: 18:89:6e:d7:f0:cf:68:d4:d5:c8:51:a7:e1:ad:79: a7:6a:3d:75:86:96:83:19:c2:30:8f:e1:a9:49:36: ab:72:fa:90:10:0e:9f:bb:22:73:1b:7f:8a:71:ae: a8:a5:a0:ed:e2:41:80:97:99:8b:91:4d:cc:ec:23: af:f9:c3:ec:bb:de:46:6f:1c:09:71:65:9c:b8:ef: bb:68:98:f0:1a:ed:13:e4:e4:de:84:9b:93:ae:7a: 82:53:d8:17:70:42:35:14:cc:b7:c9:40:be:ea:00: 3f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A3:FD:02:81:A1:2C:E1:F7:22:44:4F:79:95:71:77:F0:8D:4B:F1 X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:af:88:90:bd:e1:39:e0:48:47:82:b1:3a:b6:c9:66:70:5b: 4f:d2:3e:e0:74:28:23:8b:c6:8a:1a:9e:35:be:0e:df:f1:86: 6b:9e:a4:c4:0e:c8:29:7f:c0:0a:6e:c1:53:a1:10:e2:f7:21: 05:de:fd:dd:af:81:e4:1e:1e:b6:c3:34:78:39:10:00:66:80: 98:33:d8:c4:a2:71:6e:e5:1b:0f:99:41:aa:48:0d:f8:48:47: 92:d0:89:da:9d:69:5d:90:69:22:58:6c:36:3b:c0:e0:ef:92: c0:81:bb:94:4e:ed:fe:58:15:d1:dc:2c:8e:33:7c:76:db:ed: 14:91:b1:c6:ee:bf:c6:ac:74:7d:15:7e:27:ef:cc:62:19:b9: 2e:11:31:f9:af:2f:ae:cd:cd:0b:a3:b8:a2:f0:47:dd:d0:60: 2f:dc:d5:62:d8:17:d8:54:64:24:14:40:cd:f7:07:94:04:af: 9d:fe:66:ca:c7:e3:af:73:b8:05:34:64:7c:7a:1e:ac:5e:12: 3c:26:43:07:03:d0:95:0e:8f:55:ec:fb:91:0f:b8:65:5d:9b: ce:2b:92:21:be:5d:00:fb:62:d0:b9:39:9c:5d:a9:3b:9d:f1: a2:46:1a:31:a9:cd:82:0e:2c:bb:7a:58:2f:2a:a2:0a:c1:63: e4:79:9b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjUxMjIzMDM1MTEwWhcNMjUxMjMwMDM1MTEwWjAYMRYwFAYD VQQDDA02OTRhMTFhZS1lYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQK1SyOemjYrqad79qYS2d+4J8qO+kUptklAUIPb3Z+bb3BvB1hKH51my+Fl EUUglaMuGNna3rYnahq6CP2TnBgHgDVZAn01s+BxRobZuHWw0N8IKeTPw6CGrXu/ PsbvjjmaWT51J2LT1bL69rg3oW3hhUAIQ7StQDBCQsxH0NF6xjN+qgfBKxKsT5yH y+fswTPVw/UYiW7X8M9o1NXIUafhrXmnaj11hpaDGcIwj+GpSTarcvqQEA6fuyJz G3+Kca6opaDt4kGAl5mLkU3M7COv+cPsu95GbxwJcWWcuO+7aJjwGu0T5OTehJuT rnqCU9gXcEI1FMy3yUC+6gA/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOj/QKB oSzh9yJET3mVcXfwjUvxMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOr4iQveE54EhHgrE6tslmcFtP0j7gdCgji8aKGp41vg7f8YZrnqTE Dsgpf8AKbsFToRDi9yEF3v3dr4HkHh62wzR4ORAAZoCYM9jEonFu5RsPmUGqSA34 SEeS0InanWldkGkiWGw2O8Dg75LAgbuUTu3+WBXR3CyOM3x22+0UkbHG7r/GrHR9 FX4n78xiGbkuETH5ry+uzc0Lo7ii8Efd0GAv3NVi2BfYVGQkFEDN9weUBK+d/mbK x+Ovc7gFNGR8eh6sXhI8JkMHA9CVDo9V7PuRD7hlXZvOK5Ihvl0A+2LQuTmcXak7 nfGiRhoxqc2CDiy7elgvKqIKwWPkeZt1 -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:41 2025 by rpki-client