This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json) Hash identifier: h0jdgs8KsxNkNXsokyXyYFq/aZ7ZLmtmpDsS3Ta+YJA= Subject key identifier: AA:C4:00:24:F5:59:AD:56:53:03:1A:CD:04:C5:5D:CF:C8:5D:43:B4 Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft Manifest number: 63 Signing time: Fri 19 Dec 2025 06:02:13 +0000 Manifest this update: Fri 19 Dec 2025 06:02:13 +0000 Manifest next update: Fri 26 Dec 2025 06:02:13 +0000 Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: CIMNtIIzxSxJYiqOh7zDJkUdTPlnONp90+VGC4oTuUA=) 2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: RqRFm0koAI1zOC0qjZBwbHn7EgeV9Uebi2RR1Lc++cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Validity Not Before: Dec 19 06:02:13 2025 GMT Not After : Dec 26 06:02:13 2025 GMT Subject: CN=6944ea65-fbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:00:aa:fa:6c:3a:96:9e:3a:81:29:c9:43: 0a:8c:9e:ee:41:90:27:bc:29:94:5a:76:c8:83:2e: af:b1:74:56:53:98:e5:a7:fc:43:69:2f:ea:89:4d: 2b:06:ee:c1:9d:8b:52:3c:73:cd:69:b4:a3:f2:12: e2:d5:3c:94:21:9d:de:df:39:3d:df:c7:14:29:af: 1d:a5:79:51:b7:05:20:55:31:c9:8f:5d:83:4e:b3: 1b:55:23:9a:bc:c2:11:82:37:e9:2f:09:ba:70:3e: 5f:47:e6:52:fc:68:50:6c:e2:99:68:3e:cb:f5:40: 50:06:9e:51:e7:10:63:f2:d6:b9:99:6d:ee:b1:12: 2c:f7:86:4e:e0:69:31:07:00:1c:40:e2:0c:42:13: d2:5b:48:4e:21:2d:e7:95:a8:af:17:f8:ed:72:55: 72:67:65:37:97:67:8e:57:05:61:60:41:5f:ab:81: 1f:c1:36:53:34:a1:8e:bb:80:c4:c0:ce:6a:04:ae: 2e:01:1c:72:cc:0e:1e:b2:a8:60:81:59:80:3b:70: 35:db:a0:6a:47:5e:bb:cd:33:38:d2:c3:ff:56:cf: 56:b6:9a:87:d4:e4:8d:3a:a4:d4:dc:2c:90:0d:22: bc:d7:d9:34:b1:39:a0:ba:0e:a0:cf:cc:70:3b:99: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C4:00:24:F5:59:AD:56:53:03:1A:CD:04:C5:5D:CF:C8:5D:43:B4 X509v3 Authority Key Identifier: keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2b:8c:81:a5:f6:09:0a:70:2b:57:58:7c:df:be:95:5b:fc: 98:fa:28:0a:30:6e:48:18:5d:82:5a:34:ab:12:83:96:84:66: 83:83:5e:12:c0:27:16:2a:a0:25:14:4c:3e:bf:43:65:97:5e: 0d:ff:60:02:b1:74:a2:5b:c2:eb:02:80:8a:ef:70:de:02:ad: 93:ba:3e:8f:13:b8:f3:b1:05:bc:18:63:b4:fa:75:b2:77:4c: af:5c:8f:3e:fe:ae:c1:2f:e4:40:2e:20:9b:79:e7:46:2a:73: df:ba:b1:70:7b:21:f7:52:8f:63:85:75:9c:23:51:c1:75:41: 78:bf:d1:99:f6:98:6d:e7:ff:73:50:29:8b:56:eb:b8:7b:21: 06:db:dc:25:40:b0:9e:c5:79:2d:65:a3:92:ec:cd:95:38:4d: 26:9a:bc:aa:01:f5:fb:da:dd:00:0e:3a:e5:60:d8:92:aa:cc: a8:d1:ce:d1:6a:ce:f4:5d:07:26:ad:5a:b2:32:48:db:30:97: 0a:2e:2f:1a:eb:c8:e3:c7:38:12:e0:66:fa:d7:10:5d:84:b8: 39:e6:d6:af:9d:cd:bf:40:73:61:1e:63:8d:36:96:c5:e4:0a: 56:2f:1e:42:d2:83:dd:41:13:01:22:ee:61:c6:b1:d5:a8:3b: 5e:ac:e8:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoM0I4MzU4NTM1QkM2Mjg1NjRBRjU2RjMxRDg3NTg2NDhF MUQwNDMwNDAeFw0yNTEyMTkwNjAyMTNaFw0yNTEyMjYwNjAyMTNaMBgxFjAUBgNV BAMMDTY5NDRlYTY1LWZiY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJGgCq+mw6lp46gSnJQwqMnu5BkCe8KZRadsiDLq+xdFZTmOWn/ENpL+qJTSsG 7sGdi1I8c81ptKPyEuLVPJQhnd7fOT3fxxQprx2leVG3BSBVMcmPXYNOsxtVI5q8 whGCN+kvCbpwPl9H5lL8aFBs4ploPsv1QFAGnlHnEGPy1rmZbe6xEiz3hk7gaTEH ABxA4gxCE9JbSE4hLeeVqK8X+O1yVXJnZTeXZ45XBWFgQV+rgR/BNlM0oY67gMTA zmoEri4BHHLMDh6yqGCBWYA7cDXboGpHXrvNMzjSw/9Wz1a2mofU5I06pNTcLJAN IrzX2TSxOaC6DqDPzHA7maoNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqsQAJPVZ rVZTAxrNBMVdz8hdQ7QwHwYDVR0jBBgwFoAUO4NYU1vGKFZK9W8x2HWGSOHQQwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzY0RDA3NzQ4NDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTzROWVUxdkdLRlpLOVc4eDJIV0dTT0hRUXdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzY0RDA3NzQ4NDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0Za SzlXOHgySFdHU09IUVF3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAorjIGl9gkKcCtXWHzfvpVb/Jj6KAowbkgYXYJaNKsSg5aEZoODXhLA JxYqoCUUTD6/Q2WXXg3/YAKxdKJbwusCgIrvcN4CrZO6Po8TuPOxBbwYY7T6dbJ3 TK9cjz7+rsEv5EAuIJt550Yqc9+6sXB7IfdSj2OFdZwjUcF1QXi/0Zn2mG3n/3NQ KYtW67h7IQbb3CVAsJ7FeS1lo5LszZU4TSaavKoB9fva3QAOOuVg2JKqzKjRztFq zvRdByatWrIySNswlwouLxrryOPHOBLgZvrXEF2EuDnm1q+dzb9Ac2EeY402lsXk ClYvHkLSg91BEwEi7mHGsdWoO16s6OM= -----END CERTIFICATE-----Generated at Sat Dec 20 00:26:22 2025 by rpki-client