This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft File: OY22Qj_F4Pd3TyozMdfbzErb9TY.mft (raw, json) Hash identifier: 8eBnAqSunOLyFE50ClCayX8a3DCut3shI2JyaLzDHHg= Subject key identifier: C7:13:F0:8F:3F:11:9C:E0:59:01:F4:18:7E:8A:21:B5:F9:9B:E1:54 Authority key identifier: 39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36 Certificate issuer: /CN=A9111E74/serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft Manifest number: 24 Signing time: Tue 23 Dec 2025 06:33:31 +0000 Manifest this update: Tue 23 Dec 2025 06:33:31 +0000 Manifest next update: Tue 30 Dec 2025 06:33:31 +0000 Files and hashes: 1: OY22Qj_F4Pd3TyozMdfbzErb9TY.crl (hash: 4M4/UiR5qE1tX0um5t9rMJ/E+jKo79dfrQ9FIl8xS3c=) 2: 7A55B678AB4511F091F88158C4F9AE02.roa (hash: FoI4HeON78cJuhYbJvTWNmf/HypRelSKwk6lwHyGL/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111E74, serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536 Validity Not Before: Dec 23 06:33:31 2025 GMT Not After : Dec 30 06:33:31 2025 GMT Subject: CN=694a37bb-07d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:71:fa:c4:c4:e9:8b:fd:59:9c:16:72:5e:90: 9b:fd:48:9d:e0:07:0e:9c:71:85:df:b5:bb:5a:09: 25:7f:6d:81:f4:58:5e:a9:33:05:69:50:ce:12:51: e0:52:5a:fa:9c:0f:d2:98:b7:b6:73:1d:3e:92:a3: 9a:d3:d8:7a:98:13:38:90:11:b3:8a:ac:f1:0d:c1: 68:37:2f:89:4a:dc:04:c1:df:93:f2:76:29:b9:5b: 49:c4:f1:36:0b:01:1a:4a:75:3c:0e:26:77:cf:e0: b5:d3:1a:65:2a:50:9d:98:67:0a:3f:88:6b:83:36: 57:dc:be:74:1d:ca:53:86:45:ab:4b:96:9f:28:b7: 18:63:d3:79:a6:96:64:50:48:11:f7:37:a7:05:46: 62:8c:51:ba:c7:10:c6:2d:7d:10:1c:6f:2d:21:46: da:dc:4d:59:bc:cd:b8:cd:ff:cd:3f:72:20:ee:67: 98:71:7a:54:f0:d8:e6:78:13:cb:97:af:5a:95:0f: 1d:1e:51:40:dd:d9:cd:89:5e:f0:7c:43:fb:88:60: 24:7f:d8:f0:99:8c:bf:83:6e:af:1e:a3:66:66:1a: e3:94:df:47:07:36:fe:c6:29:7b:eb:34:db:7e:2f: 9e:11:d9:7f:ec:8f:69:71:df:89:12:e4:d5:8e:9e: 21:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:13:F0:8F:3F:11:9C:E0:59:01:F4:18:7E:8A:21:B5:F9:9B:E1:54 X509v3 Authority Key Identifier: keyid:39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3d:56:67:45:7c:03:33:fe:50:c6:61:71:95:43:b5:7b:9d: 6c:07:7b:d4:4c:e4:20:ed:3e:23:b7:e4:5c:f9:64:75:58:68: 1c:1a:6a:73:ed:52:2e:67:e5:02:97:35:2a:2d:1f:84:5a:0e: d0:dc:6c:8a:bd:18:dc:61:f2:88:4e:11:40:32:05:67:14:aa: 0d:9d:bf:d2:f1:19:e7:2b:0e:d3:24:cd:f8:ee:75:08:d3:95: 30:59:72:97:cf:81:11:11:b2:08:c6:42:6b:99:08:cf:c7:0f: 9a:10:6b:da:12:03:6c:64:46:47:23:68:ea:92:e5:61:49:77: fb:38:44:f2:e6:5f:7d:e0:d5:e8:07:aa:39:3a:64:bc:1e:2f: fd:8b:fa:93:2d:f3:80:1b:13:59:fc:28:27:d9:f1:a2:51:80: 85:90:9e:34:40:99:51:78:41:f6:79:56:4f:b7:27:05:1f:d6: e0:21:0e:85:d1:4d:70:94:09:79:d2:d8:53:04:25:3a:39:c1: 06:4b:0e:5a:0d:28:8f:b5:9c:c5:e3:89:58:ef:ae:76:a1:7b: 01:71:83:2e:b1:ed:e3:0a:5a:34:dc:eb:e7:33:ef:9f:ae:70: fe:25:bb:42:8d:4d:c9:4e:05:b3:71:e2:a5:a1:a7:46:73:96: ca:74:50:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUU3NDExMC8GA1UEBRMoMzk4REI2NDIzRkM1RTBGNzc3NEYyQTMzMzFEN0RCQ0M0 QURCRjUzNjAeFw0yNTEyMjMwNjMzMzFaFw0yNTEyMzAwNjMzMzFaMBgxFjAUBgNV BAMMDTY5NGEzN2JiLTA3ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDocfrExOmL/VmcFnJekJv9SJ3gBw6ccYXftbtaCSV/bYH0WF6pMwVpUM4SUeBS WvqcD9KYt7ZzHT6So5rT2HqYEziQEbOKrPENwWg3L4lK3ATB35Pydim5W0nE8TYL ARpKdTwOJnfP4LXTGmUqUJ2YZwo/iGuDNlfcvnQdylOGRatLlp8otxhj03mmlmRQ SBH3N6cFRmKMUbrHEMYtfRAcby0hRtrcTVm8zbjN/80/ciDuZ5hxelTw2OZ4E8uX r1qVDx0eUUDd2c2JXvB8Q/uIYCR/2PCZjL+Dbq8eo2ZmGuOU30cHNv7GKXvrNNt+ L54R2X/sj2lx34kS5NWOniGbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxxPwjz8R nOBZAfQYfoohtfmb4VQwHwYDVR0jBBgwFoAUOY22Qj/F4Pd3TyozMdfbzErb9TYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRTc0LzM3QjE1OUZFQUIz RjExRjA5NUExQTYzN0M0RjlBRTAyL09ZMjJRal9GNFBkM1R5b3pNZGZiekVyYjlU WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1kyMlFqX0Y0UGQzVHlvek1kZmJ6RXJiOVRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RTc0LzM3QjE1OUZFQUIzRjExRjA5NUExQTYzN0M0RjlBRTAyL09ZMjJRal9GNFBk M1R5b3pNZGZiekVyYjlUWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAU9VmdFfAMz/lDGYXGVQ7V7nWwHe9RM5CDtPiO35Fz5ZHVYaBwaanPt Ui5n5QKXNSotH4RaDtDcbIq9GNxh8ohOEUAyBWcUqg2dv9LxGecrDtMkzfjudQjT lTBZcpfPgRERsgjGQmuZCM/HD5oQa9oSA2xkRkcjaOqS5WFJd/s4RPLmX33g1egH qjk6ZLweL/2L+pMt84AbE1n8KCfZ8aJRgIWQnjRAmVF4QfZ5Vk+3JwUf1uAhDoXR TXCUCXnS2FMEJTo5wQZLDloNKI+1nMXjiVjvrnahewFxgy6x7eMKWjTc6+cz75+u cP4lu0KNTclOBbNx4qWhp0Zzlsp0UNQ= -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:39 2025 by rpki-client