This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: gapgeqZLX+Ru1SEbl4ZivF64q1qWLRHiT+4Imi0367g= Subject key identifier: 81:49:7B:FB:03:1B:B6:E0:5A:AE:04:DA:4D:E9:DD:24:AD:44:04:49 Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0CD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0CA8 Signing time: Mon 22 Dec 2025 18:04:06 +0000 Manifest this update: Mon 22 Dec 2025 18:04:06 +0000 Manifest next update: Mon 29 Dec 2025 18:04:06 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: lXSrmHxhY2azvmWBnoQ8covb/FiusZkMYsIImGOJml8=) 2: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: WJkxwP4ag7yvrhduZoEuahlF8E4MGy6zYRuWwLMuPQo=) 3: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: X7HKLCMYv+5yO0PXDMAF77ngtZuIkMviUoMFPRXsQKk=) 4: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: yZZ5GIqY5jMSOPfiLjMhte7hmwyaU/fBGZmXUhYiAw8=) 5: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: 3NTPFeEY66/DTbvOuzCF2G8vutj3ESNM2ADes/bFsS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Dec 22 18:04:06 2025 GMT Not After : Dec 29 18:04:06 2025 GMT Subject: CN=69498816-ef3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:01:c7:55:07:83:e0:87:db:96:9e:9f:4c: d7:0f:26:b6:e2:30:7d:9f:04:71:55:b0:86:56:7d: 50:33:fe:3c:fc:d3:44:51:b4:47:f6:95:c8:ae:41: 05:a4:97:15:a2:da:19:c9:27:a2:b0:17:d8:fc:8f: cf:7a:47:9c:f6:74:b6:4c:de:a5:4b:72:50:85:62: 63:67:f5:15:a0:8a:8a:8d:d4:c5:8b:07:df:8d:64: 77:e1:6c:9f:ed:92:d3:4f:0b:9c:66:9f:61:ac:f2: 1c:5a:7b:bd:00:c3:d4:5e:89:be:81:1a:c1:1e:df: cc:c7:ac:8b:61:ef:60:0d:68:ee:29:35:58:07:f1: 58:28:48:39:3b:c1:6c:06:1b:3f:d4:29:23:bd:ff: ab:3c:df:86:dd:10:f7:58:8d:0b:9d:6b:8a:59:35: 28:2f:6d:87:5b:64:11:e7:58:4f:11:ad:0e:fb:63: 40:ae:cb:28:ce:af:85:b6:28:f8:63:73:85:be:7c: 0a:2b:09:d6:b3:41:c8:b7:8c:92:a7:10:78:68:3f: a9:8d:53:01:90:f2:e3:c5:99:bd:c3:62:1e:4b:cd: c9:aa:90:ad:97:44:a4:42:92:fd:01:86:4b:35:57: 08:96:0c:51:ba:71:3a:ea:5a:3a:73:eb:3f:a3:62: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:49:7B:FB:03:1B:B6:E0:5A:AE:04:DA:4D:E9:DD:24:AD:44:04:49 X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:fb:52:6c:8c:cc:de:40:b2:98:4d:08:e7:7f:32:94:42:21: e1:f6:d5:2d:eb:1a:c6:02:f7:54:86:d9:a1:93:d8:d1:59:ee: 2b:4c:cd:bd:63:23:0d:e9:b6:53:63:0e:d8:ea:78:a3:18:b3: b2:65:44:a5:9c:01:85:c1:e3:db:be:f3:92:55:11:7f:84:ce: 57:f4:3b:2e:39:15:18:27:8f:90:f4:83:75:8c:ed:2a:f0:1d: 07:4a:f8:df:5e:fe:31:fc:6c:29:71:1d:cd:af:64:a1:eb:b1: 49:6a:2a:ad:f5:01:7b:0e:fe:ec:a1:f3:f4:59:40:41:a4:18: cd:bd:6c:bb:15:dc:36:fe:56:32:15:17:0c:60:64:9d:fd:22: b4:9c:b9:ca:68:d8:22:b0:dc:e9:b9:f6:5e:2c:7b:aa:df:9d: 8d:d5:ca:72:5b:4a:9c:af:56:e1:b7:c6:96:3c:f3:3b:25:14: 58:e2:b7:e9:1e:0b:be:d5:07:27:bf:52:d6:11:18:5c:da:a5: b9:1d:15:52:06:8f:1b:70:b9:7b:9d:51:2d:7c:c2:ca:cf:9a: c0:1b:b7:37:ce:72:bd:17:c0:30:66:7a:48:46:23:6e:1c:3e: 8d:02:1d:17:24:d4:61:e6:4e:47:cb:82:ca:d2:0b:11:f1:58: b1:2f:46:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUxMjIyMTgwNDA2WhcNMjUxMjI5MTgwNDA2WjAYMRYwFAYD VQQDDA02OTQ5ODgxNi1lZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnekBx1UHg+CH25aen0zXDya24jB9nwRxVbCGVn1QM/48/NNEUbRH9pXIrkEF pJcVotoZySeisBfY/I/Pekec9nS2TN6lS3JQhWJjZ/UVoIqKjdTFiwffjWR34Wyf 7ZLTTwucZp9hrPIcWnu9AMPUXom+gRrBHt/Mx6yLYe9gDWjuKTVYB/FYKEg5O8Fs Bhs/1Ckjvf+rPN+G3RD3WI0LnWuKWTUoL22HW2QR51hPEa0O+2NArssozq+Ftij4 Y3OFvnwKKwnWs0HIt4ySpxB4aD+pjVMBkPLjxZm9w2IeS83JqpCtl0SkQpL9AYZL NVcIlgxRunE66lo6c+s/o2KvqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFJe/sD G7bgWq4E2k3p3SStRARJMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG+1JsjMzeQLKYTQjnfzKUQiHh9tUt6xrGAvdUhtmhk9jRWe4rTM29 YyMN6bZTYw7Y6nijGLOyZUSlnAGFwePbvvOSVRF/hM5X9DsuORUYJ4+Q9IN1jO0q 8B0HSvjfXv4x/GwpcR3Nr2Sh67FJaiqt9QF7Dv7sofP0WUBBpBjNvWy7Fdw2/lYy FRcMYGSd/SK0nLnKaNgisNzpufZeLHuq352N1cpyW0qcr1bht8aWPPM7JRRY4rfp Hgu+1Qcnv1LWERhc2qW5HRVSBo8bcLl7nVEtfMLKz5rAG7c3znK9F8AwZnpIRiNu HD6NAh0XJNRh5k5Hy4LK0gsR8VixL0ag -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:45 2025 by rpki-client