This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: FxOwITgLBJlim1ZPOY6JUBXB4kjwxh5oPpGjqX6cEFc= Subject key identifier: 8B:2E:EB:43:89:5E:41:6D:28:5D:07:8B:DF:7E:70:80:25:82:E1:29 Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 3500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 34FA Signing time: Mon 22 Dec 2025 14:30:05 +0000 Manifest this update: Mon 22 Dec 2025 14:30:04 +0000 Manifest next update: Mon 29 Dec 2025 14:30:04 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: ZvXYC1D87t5tfks4LAlNw6x2ZJwquuDlCauqm9osA6Q=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: 4I+3xavxeBJbyMnYsMSj2G6sjqqfZ0aCKkQ3nfnxOP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13568 (0x3500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Dec 22 14:30:04 2025 GMT Not After : Dec 29 14:30:04 2025 GMT Subject: CN=694955ed-f7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1f:bf:d9:8c:27:a2:30:09:3b:f2:2d:11:92: b7:65:a5:e9:a2:25:74:03:0d:12:50:4b:b2:dc:42: f2:a0:80:c1:0f:df:01:ec:ff:26:6b:08:44:0c:3d: 90:22:78:be:a2:ca:23:3b:46:ad:b2:79:66:d9:0e: 86:65:d2:c8:ff:37:25:39:85:74:5f:c7:2e:cb:f0: 2d:9d:54:4e:5a:10:da:ed:7c:0c:3c:26:69:11:ad: d5:1e:f4:bc:a7:35:85:dd:3c:6a:d3:3d:09:20:ed: 1b:20:22:9e:2f:31:f6:c2:49:34:9f:05:8a:40:f5: 4a:8b:d4:84:e8:5f:d3:64:d8:24:33:3e:8d:57:bc: 60:1c:1c:26:1b:ca:4f:b6:22:7b:1a:0d:dc:f1:67: 88:4a:87:39:30:a9:d6:21:55:03:4c:13:f3:f8:ac: c8:bc:6f:aa:e6:25:de:58:98:62:c9:c1:d4:ca:d5: 85:2d:bc:e6:0d:ca:a1:8b:99:59:eb:10:5b:3a:1d: 6a:8f:38:bd:51:be:8e:67:99:1b:a7:2e:45:55:02: f2:70:65:c6:84:9d:9f:0b:07:75:95:b4:4e:e3:c8: b0:c6:33:4f:3c:46:c3:41:f2:62:13:67:38:5a:ad: a3:fb:91:dd:f1:67:7c:8d:d2:ab:a4:35:4f:f7:16: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2E:EB:43:89:5E:41:6D:28:5D:07:8B:DF:7E:70:80:25:82:E1:29 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6c:3c:e8:d8:06:5b:f8:e9:9f:2d:aa:6a:c0:f8:4b:16:48: b6:c6:c0:2b:15:7a:40:a3:33:13:43:eb:18:63:c8:87:da:ee: 7b:30:fd:17:24:1a:46:e6:59:f1:ac:90:05:e0:ca:bf:1b:08: 73:a8:c7:38:ac:c8:8b:a8:9c:c3:a7:69:d8:bb:66:56:95:21: ad:88:95:70:1a:3a:7b:14:4a:9b:ba:df:b2:f2:d1:f9:f4:a5: ab:ed:c5:09:5c:da:f3:9e:fe:07:6f:7f:90:f6:9c:a7:68:09: b0:9e:91:ba:a7:9b:63:85:be:27:74:da:1d:11:ed:91:65:0f: 28:ee:d1:1d:6e:d0:47:fe:f3:55:63:58:7c:c4:ad:22:7b:8e: b9:73:96:b9:fa:4b:2f:bb:87:b7:af:6b:be:38:5e:f2:01:e6: 90:41:f0:ef:b6:f1:03:85:c9:06:34:eb:45:2b:8a:de:0e:3f: 2f:a5:20:ce:3f:b0:4b:03:54:33:fb:b3:bd:31:34:ba:b3:38: cf:6f:ba:31:2e:8b:dc:bc:68:70:56:7b:08:5e:87:94:8e:e1: 7e:d9:d6:70:3f:4f:d4:d5:22:d1:de:61:bb:51:26:fb:0a:93: 1a:c1:ed:b9:7b:c5:f7:7e:46:00:e9:f3:10:12:11:ad:48:d2: c0:e6:3f:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjUxMjIyMTQzMDA0WhcNMjUxMjI5MTQzMDA0WjAYMRYwFAYD VQQDDA02OTQ5NTVlZC1mN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1x+/2YwnojAJO/ItEZK3ZaXpoiV0Aw0SUEuy3ELyoIDBD98B7P8mawhEDD2Q Ini+osojO0atsnlm2Q6GZdLI/zclOYV0X8cuy/AtnVROWhDa7XwMPCZpEa3VHvS8 pzWF3Txq0z0JIO0bICKeLzH2wkk0nwWKQPVKi9SE6F/TZNgkMz6NV7xgHBwmG8pP tiJ7Gg3c8WeISoc5MKnWIVUDTBPz+KzIvG+q5iXeWJhiycHUytWFLbzmDcqhi5lZ 6xBbOh1qjzi9Ub6OZ5kbpy5FVQLycGXGhJ2fCwd1lbRO48iwxjNPPEbDQfJiE2c4 Wq2j+5Hd8Wd8jdKrpDVP9xYKuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsu60OJ XkFtKF0Hi99+cIAlguEpMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAebDzo2AZb+OmfLapqwPhLFki2xsArFXpAozMTQ+sYY8iH2u57MP0X JBpG5lnxrJAF4Mq/GwhzqMc4rMiLqJzDp2nYu2ZWlSGtiJVwGjp7FEqbut+y8tH5 9KWr7cUJXNrznv4Hb3+Q9pynaAmwnpG6p5tjhb4ndNodEe2RZQ8o7tEdbtBH/vNV Y1h8xK0ie465c5a5+ksvu4e3r2u+OF7yAeaQQfDvtvEDhckGNOtFK4reDj8vpSDO P7BLA1Qz+7O9MTS6szjPb7oxLovcvGhwVnsIXoeUjuF+2dZwP0/U1SLR3mG7USb7 CpMawe25e8X3fkYA6fMQEhGtSNLA5j/F -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:46 2025 by rpki-client