This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft File: oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json) Hash identifier: CFdjoCSz9ExtZDKgG+3fgWpEpq28L65m0RBBnQOjIns= Subject key identifier: E6:51:1E:36:20:36:82:59:1B:B3:30:78:C4:27:C4:CE:5C:17:74:CC Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC Certificate issuer: /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft Manifest number: 01D8 Signing time: Sun 21 Dec 2025 02:01:01 +0000 Manifest this update: Sun 21 Dec 2025 02:01:00 +0000 Manifest next update: Sun 28 Dec 2025 02:01:00 +0000 Files and hashes: 1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: +eKW/jgkuHU3NIg3T3g3Vzg2HpZrQZJvMsT3mMTpqyw=) 2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: Vb+7f3M9pS78Ueu7sOSJnfqQwVI3CakBS3Vn6Okli7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC Validity Not Before: Dec 21 02:01:00 2025 GMT Not After : Dec 28 02:01:00 2025 GMT Subject: CN=694754dd-7d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4e:f6:5f:cb:32:3b:1c:29:e7:5f:15:77:b7: 8c:a5:df:44:05:6f:56:f6:e2:56:90:8e:2f:8f:eb: 3d:9c:7e:eb:9b:b7:6d:dc:9f:5a:7c:99:b5:32:0a: a9:f4:92:c7:c0:73:1b:04:cb:c9:b3:69:49:84:29: 93:96:d5:c4:cb:f7:db:e6:63:bb:3e:d5:17:ff:64: 9e:29:a5:90:dc:09:d8:dc:b4:49:b4:3a:e7:0e:b3: 41:8c:aa:a4:05:2d:c5:64:16:f0:a4:31:6e:3c:ba: f1:b7:bf:f8:f5:66:e0:50:9c:3f:6b:1b:40:82:b6: 74:72:b7:12:c5:e7:d9:d9:22:16:19:bb:f7:2f:3d: d1:86:c6:73:a9:bc:9f:87:8c:d1:ef:e7:92:c2:bc: 96:37:9b:5b:09:65:0e:40:49:ac:ed:fb:97:be:b0: 05:be:18:dd:76:ad:6b:a1:0a:cf:bf:df:2d:ac:44: 34:bb:70:99:05:75:f3:e8:4f:1b:d2:c7:66:ef:5e: 9f:8e:5c:16:d4:ad:da:60:54:4c:1b:13:7b:fc:7e: 9e:d6:d0:ce:e7:71:d0:2a:c5:e7:c1:3e:f8:05:7a: 59:ab:3a:c4:49:ed:2f:7f:b0:3c:1e:25:64:12:5e: 5e:d6:81:32:fe:5d:98:78:9a:22:44:73:56:9a:55: 46:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:51:1E:36:20:36:82:59:1B:B3:30:78:C4:27:C4:CE:5C:17:74:CC X509v3 Authority Key Identifier: keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f3:7a:0a:a5:e7:eb:81:c6:1d:ba:4b:ee:3f:03:8d:b2:68: aa:1e:68:5b:a5:9c:2b:f6:86:d3:d1:09:30:b7:00:16:04:da: 08:be:f8:8d:06:6d:db:c4:5f:26:25:2b:84:9e:d6:c8:5b:14: b8:d4:a0:71:29:b1:d1:90:63:8b:d1:e0:e3:a2:4e:ed:cb:a0: bb:ee:32:84:3c:1f:7b:72:c6:66:fd:4f:25:13:1c:17:fe:98: c4:bd:66:bb:67:1d:66:20:cd:56:bb:b1:de:b8:e6:a9:b9:89: 6f:ca:80:21:af:35:df:f8:fc:fb:20:3a:fc:fd:ff:b3:bf:45: 1e:24:6a:94:aa:9d:7b:20:43:28:d1:a1:01:ab:c8:66:7d:e4: 04:48:b2:98:e9:f3:3a:48:03:b1:d4:50:99:86:eb:09:ad:6c: a4:ad:7e:27:7d:9a:b9:5c:6b:86:48:a5:15:97:9e:e6:bf:83: 89:c3:d1:f5:0a:f1:f4:c5:d9:92:bd:b7:4e:f3:f0:74:e8:77: 55:71:ba:89:2a:c9:02:0a:58:c2:fe:e4:3e:1f:ac:a7:26:eb: d3:d2:14:33:0a:96:94:2b:bd:80:c3:e9:da:6d:00:a4:45:58: 03:17:ce:da:15:ec:9e:38:d0:eb:10:b0:eb:49:c5:01:c3:a0: fb:1c:9a:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyMEUxMTAvBgNVBAUTKEEyOERBMEJFOTAxRDk4M0E0MzNEODMzNTg5RDE2N0JG NDg2RjY0RkMwHhcNMjUxMjIxMDIwMTAwWhcNMjUxMjI4MDIwMTAwWjAYMRYwFAYD VQQDDA02OTQ3NTRkZC03ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn072X8syOxwp518Vd7eMpd9EBW9W9uJWkI4vj+s9nH7rm7dt3J9afJm1Mgqp 9JLHwHMbBMvJs2lJhCmTltXEy/fb5mO7PtUX/2SeKaWQ3AnY3LRJtDrnDrNBjKqk BS3FZBbwpDFuPLrxt7/49WbgUJw/axtAgrZ0crcSxefZ2SIWGbv3Lz3RhsZzqbyf h4zR7+eSwryWN5tbCWUOQEms7fuXvrAFvhjddq1roQrPv98trEQ0u3CZBXXz6E8b 0sdm716fjlwW1K3aYFRMGxN7/H6e1tDO53HQKsXnwT74BXpZqzrESe0vf7A8HiVk El5e1oEy/l2YeJoiRHNWmlVGAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZRHjYg NoJZG7MweMQnxM5cF3TMMB8GA1UdIwQYMBaAFKKNoL6QHZg6Qz2DNYnRZ79Ib2T8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzIwRS81RTUxRDQ1QzA5 RDUxMUVFQTM4QTc0ODBDNEY5QUUwMi9vbzJndnBBZG1EcERQWU0xaWRGbnYwaHZa UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vMmd2cEFkbURwRFBZTTFpZEZudjBodlpQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzIwRS81RTUxRDQ1QzA5RDUxMUVFQTM4QTc0ODBDNEY5QUUwMi9vbzJndnBBZG1E cERQWU0xaWRGbnYwaHZaUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg83oKpefrgcYdukvuPwONsmiqHmhbpZwr9obT0QkwtwAWBNoIvviN Bm3bxF8mJSuEntbIWxS41KBxKbHRkGOL0eDjok7ty6C77jKEPB97csZm/U8lExwX /pjEvWa7Zx1mIM1Wu7HeuOapuYlvyoAhrzXf+Pz7IDr8/f+zv0UeJGqUqp17IEMo 0aEBq8hmfeQESLKY6fM6SAOx1FCZhusJrWykrX4nfZq5XGuGSKUVl57mv4OJw9H1 CvH0xdmSvbdO8/B06HdVcbqJKskCCljC/uQ+H6ynJuvT0hQzCpaUK72Aw+nabQCk RVgDF87aFeyeONDrELDrScUBw6D7HJrv -----END CERTIFICATE-----Generated at Sun Dec 21 07:13:51 2025 by rpki-client