This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json) Hash identifier: h7MXO56lu0LeIUeYdyW98C3mPlmaykpmr+h2EY1VGks= Subject key identifier: 75:1B:2A:A8:A8:9B:5F:E4:34:70:E9:25:C7:B3:47:23:C0:55:0B:06 Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft Manifest number: 0698 Signing time: Mon 22 Dec 2025 21:38:37 +0000 Manifest this update: Mon 22 Dec 2025 21:38:37 +0000 Manifest next update: Mon 29 Dec 2025 21:38:37 +0000 Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: s04Dx+ULxLbfeNo9pBBys9nhoNRp1KaTwpUDFBwMDMg=) 2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: sdbnkMVypf4sBW84IBpLOAa+Rd3ZV2UqRLClbIWsTfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Validity Not Before: Dec 22 21:38:37 2025 GMT Not After : Dec 29 21:38:37 2025 GMT Subject: CN=6949ba5d-62c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:92:4b:e2:e1:31:32:b4:d3:a0:92:04:4c: 85:f2:56:a8:3c:e9:ca:76:8c:58:6a:3f:ab:b6:f7: 28:16:aa:47:94:eb:6b:66:51:49:a2:d4:9a:e8:40: cc:a6:9c:aa:19:ab:41:ce:18:2b:01:81:d6:73:88: 26:9c:77:dc:85:5e:b5:c7:f5:5d:5c:43:df:59:5b: 85:34:4f:fd:57:7d:15:cb:61:91:cc:a2:e1:8a:63: 79:49:d5:54:a8:d1:20:d4:52:a3:40:2b:01:11:ec: 98:b3:ef:ed:d0:3a:9c:6e:6b:f6:a2:76:ac:11:b9: e5:5b:72:a6:c8:83:8a:53:40:5d:d3:90:9a:2e:78: ac:40:09:a3:ef:4e:11:cc:cb:08:8a:a8:99:dd:9a: dd:70:c7:44:10:a2:a7:6e:c4:b8:05:cb:2b:6a:a6: 69:21:2a:94:cd:62:26:ab:1e:db:4a:7b:fa:6c:41: 66:ef:50:69:fc:70:dc:65:51:d2:e6:9f:57:8a:80: 09:48:9d:0a:16:60:06:90:32:da:6b:51:77:0f:99: 5f:ae:8c:e9:32:8c:2a:7e:c6:1f:e1:a0:24:7c:03: 87:d5:b8:51:f2:f1:58:37:3c:e1:a8:b0:ee:ed:f9: aa:0b:3a:f4:ed:12:14:64:c1:7f:32:44:d4:a4:12: 1e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1B:2A:A8:A8:9B:5F:E4:34:70:E9:25:C7:B3:47:23:C0:55:0B:06 X509v3 Authority Key Identifier: keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f9:86:9b:06:01:5e:72:29:8e:e9:52:81:0b:59:ab:cf:e2: d4:ce:c6:96:1c:86:5b:b1:99:c7:c4:1e:66:77:f1:46:1b:c8: 57:b2:f7:50:a9:0b:64:df:c1:68:24:df:f4:f8:e7:bd:f2:10: ac:8c:29:3f:4f:82:2a:42:6c:9d:3d:19:ce:74:9c:55:f4:74: ec:d5:30:63:d5:8f:c0:48:76:44:f9:40:23:79:f7:07:d4:c2: bd:37:63:3f:d2:08:94:59:ca:24:4b:5c:8f:f0:94:3f:77:f5: 92:9b:ed:5d:f1:93:a1:3d:16:1a:e5:e8:9c:b5:96:bd:87:93: 51:d6:06:9c:84:7d:64:5b:62:ac:11:7f:9b:08:49:f7:5a:fa: b7:0d:8b:06:e3:f2:44:87:d8:82:9e:ee:b6:70:8a:4b:c1:66: 20:18:3b:fa:ed:ba:cf:7f:a9:aa:1f:1a:ef:ae:9e:84:f0:d4: 00:93:6d:7a:23:bc:bc:3e:af:af:94:64:d4:d1:53:da:ed:77: 76:ad:93:77:21:7a:f7:99:35:e3:44:b0:af:f0:45:66:a3:0d: 84:a4:75:b4:e5:64:28:a4:73:56:c9:eb:b4:56:7d:28:9c:8b: 1a:ee:31:37:08:da:60:c7:3c:49:d7:ea:32:43:eb:10:37:d0: dc:7a:39:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE RkRFNThGOEMwHhcNMjUxMjIyMjEzODM3WhcNMjUxMjI5MjEzODM3WjAYMRYwFAYD VQQDDA02OTQ5YmE1ZC02MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEWSS+LhMTK006CSBEyF8laoPOnKdoxYaj+rtvcoFqpHlOtrZlFJotSa6EDM ppyqGatBzhgrAYHWc4gmnHfchV61x/VdXEPfWVuFNE/9V30Vy2GRzKLhimN5SdVU qNEg1FKjQCsBEeyYs+/t0Dqcbmv2onasEbnlW3KmyIOKU0Bd05CaLnisQAmj704R zMsIiqiZ3ZrdcMdEEKKnbsS4BcsraqZpISqUzWImqx7bSnv6bEFm71Bp/HDcZVHS 5p9XioAJSJ0KFmAGkDLaa1F3D5lfrozpMowqfsYf4aAkfAOH1bhR8vFYNzzhqLDu 7fmqCzr07RIUZMF/MkTUpBIe1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUbKqio m1/kNHDpJcezRyPAVQsGMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4 NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb+YabBgFecimO6VKBC1mrz+LUzsaWHIZbsZnHxB5md/FGG8hXsvdQ qQtk38FoJN/0+Oe98hCsjCk/T4IqQmydPRnOdJxV9HTs1TBj1Y/ASHZE+UAjefcH 1MK9N2M/0giUWcokS1yP8JQ/d/WSm+1d8ZOhPRYa5eictZa9h5NR1gachH1kW2Ks EX+bCEn3Wvq3DYsG4/JEh9iCnu62cIpLwWYgGDv67brPf6mqHxrvrp6E8NQAk216 I7y8Pq+vlGTU0VPa7Xd2rZN3IXr3mTXjRLCv8EVmow2EpHW05WQopHNWyeu0Vn0o nIsa7jE3CNpgxzxJ1+oyQ+sQN9DcejkF -----END CERTIFICATE-----Generated at Tue Dec 23 16:12:57 2025 by rpki-client