This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: 8Gj1otNTJT9SfIpaEi+U5FuRIKn5X8ZvMHIGt9lEQGs= Subject key identifier: E1:68:92:EE:E0:3D:34:9B:6C:AD:63:6C:BA:76:00:A0:16:29:43:6A Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 08EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 08E4 Signing time: Mon 22 Dec 2025 19:45:20 +0000 Manifest this update: Mon 22 Dec 2025 19:45:19 +0000 Manifest next update: Mon 29 Dec 2025 19:45:19 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: ATFbnzcK2DNqpDFZmoBIoT/vSxB+hy9+3Q1kVrvkPzw=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: HuFcFo9LZ7JGKc3MlbHoCX/MB3ZM5ld8AKunwUGftyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2283 (0x8eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Dec 22 19:45:19 2025 GMT Not After : Dec 29 19:45:19 2025 GMT Subject: CN=69499fcf-51ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:aa:b8:9e:12:e1:be:01:10:b8:f6:08:f1:52: ac:69:60:1b:a1:03:0c:91:92:38:45:da:1c:4a:02: 7f:2f:c3:3b:81:c1:39:58:ec:4a:c7:7a:be:43:5d: 3d:80:53:ff:96:01:4a:48:d6:43:d9:eb:86:85:e5: c9:da:96:5d:c8:1f:fb:bb:66:c3:07:9e:ef:29:67: f8:ac:8e:ab:32:eb:eb:54:4c:85:8e:05:78:e5:ce: 7e:e8:50:3d:d8:b9:b4:e6:5b:12:fa:4b:56:4a:ad: 68:e6:d4:e7:24:e8:e3:a7:95:3f:b2:6e:73:fe:ce: c7:db:89:40:5d:a5:ee:ac:bd:80:c5:8f:ee:4e:cc: 7b:92:f7:b9:7c:21:55:5b:45:c8:aa:a8:b6:cc:89: 32:5a:1f:9b:83:e4:78:f7:71:44:31:1b:a6:8e:d5: 73:7a:5a:71:58:c7:ff:fe:8c:87:a8:1f:c5:6b:ea: f9:62:56:b1:20:cf:8e:06:16:8b:82:b4:72:66:03: fd:06:49:d3:bd:54:37:0e:72:23:a7:26:00:77:4e: c2:22:3f:dc:1d:9a:b7:c1:9d:17:84:a5:75:e2:aa: 71:85:c0:57:04:8a:14:ca:3e:15:a1:27:2d:55:28: 2d:0f:e4:e3:db:53:21:c0:dd:85:60:6d:28:ca:5e: d4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:68:92:EE:E0:3D:34:9B:6C:AD:63:6C:BA:76:00:A0:16:29:43:6A X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:77:86:6c:e0:de:b5:30:98:f1:c9:8e:e4:b9:a0:f1:38:51: fc:11:f5:54:ea:76:2c:5c:b7:a2:3a:59:0d:0a:3a:1b:69:8f: 93:73:63:80:27:37:6b:63:e3:53:19:78:9c:3b:e4:14:f5:15: 58:20:b2:03:ed:cc:f2:ff:89:da:c7:25:5f:a9:2c:7f:68:44: db:7d:86:8b:a3:14:c8:43:35:86:ed:0c:f2:e6:be:6b:f5:08: 38:38:c3:78:cb:86:c6:a9:df:65:0c:eb:c5:e6:5a:2c:d9:7c: 8b:0d:9e:83:a6:31:79:68:5d:43:08:6f:7d:73:2c:df:5a:b0: 5d:a9:3f:8f:c2:63:1d:f7:5c:e0:b2:73:ad:56:b5:3a:ec:9c: e0:a9:7a:66:fe:1d:2b:10:f2:32:25:8c:b6:08:86:8a:a5:39: e5:d6:6e:52:f9:3d:8f:c7:58:ee:95:a6:71:58:08:2d:5e:c6: 52:4e:eb:93:df:bb:ae:49:c4:47:27:54:c8:b1:53:ec:f5:ad: 03:6d:b1:09:05:a9:9b:2b:15:2a:4b:ab:7d:6e:ad:de:cd:c1: 66:aa:a5:6e:7c:c6:13:81:09:cd:30:d5:02:80:8d:71:a1:0a: b9:4b:7b:ac:e5:71:bb:d8:36:7b:2f:b8:fb:bf:5f:30:b2:a3: b1:26:a0:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUxMjIyMTk0NTE5WhcNMjUxMjI5MTk0NTE5WjAYMRYwFAYD VQQDDA02OTQ5OWZjZi01MWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aq4nhLhvgEQuPYI8VKsaWAboQMMkZI4RdocSgJ/L8M7gcE5WOxKx3q+Q109 gFP/lgFKSNZD2euGheXJ2pZdyB/7u2bDB57vKWf4rI6rMuvrVEyFjgV45c5+6FA9 2Lm05lsS+ktWSq1o5tTnJOjjp5U/sm5z/s7H24lAXaXurL2AxY/uTsx7kve5fCFV W0XIqqi2zIkyWh+bg+R493FEMRumjtVzelpxWMf//oyHqB/Fa+r5YlaxIM+OBhaL grRyZgP9BknTvVQ3DnIjpyYAd07CIj/cHZq3wZ0XhKV14qpxhcBXBIoUyj4VoSct VSgtD+Tj21MhwN2FYG0oyl7UmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFoku7g PTSbbK1jbLp2AKAWKUNqMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCed4Zs4N61MJjxyY7kuaDxOFH8EfVU6nYsXLeiOlkNCjobaY+Tc2OA JzdrY+NTGXicO+QU9RVYILID7czy/4naxyVfqSx/aETbfYaLoxTIQzWG7Qzy5r5r 9Qg4OMN4y4bGqd9lDOvF5los2XyLDZ6DpjF5aF1DCG99cyzfWrBdqT+PwmMd91zg snOtVrU67JzgqXpm/h0rEPIyJYy2CIaKpTnl1m5S+T2Px1julaZxWAgtXsZSTuuT 37uuScRHJ1TIsVPs9a0DbbEJBambKxUqS6t9bq3ezcFmqqVufMYTgQnNMNUCgI1x oQq5S3us5XG72DZ7L7j7v18wsqOxJqDc -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:33 2025 by rpki-client