This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: IvJ4L0C+SY6i75Z3Prl8jMzn65C/L2MGGjTVQRKcjNo= Subject key identifier: C1:84:FC:FF:3D:E0:10:7E:3C:06:E2:D0:DA:A4:F4:A3:14:56:1F:9B Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 049C Signing time: Mon 22 Dec 2025 23:05:20 +0000 Manifest this update: Mon 22 Dec 2025 23:05:20 +0000 Manifest next update: Mon 29 Dec 2025 23:05:20 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: lu00rEIv9WXUMM1ZehGtDmg3+FOQ0mmlO0YTskHxe84=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: bL21RN87VLUZ42gx2+jC72By39LghzvwcJOZaJQ9FMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: Dec 22 23:05:20 2025 GMT Not After : Dec 29 23:05:20 2025 GMT Subject: CN=6949ceb0-88e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:5c:53:e2:2a:44:1b:72:5a:97:28:01:24: cb:7c:31:4b:c7:b7:c4:96:21:1e:10:72:ae:8f:b0: a5:21:29:8d:3a:46:87:eb:58:7d:76:b8:d7:d2:5d: f1:26:73:87:3a:a3:8a:cc:77:93:5b:9f:32:4c:58: e0:94:03:81:d4:66:54:a2:60:f7:a8:a3:99:cf:4c: 6e:53:a9:c4:c5:11:92:a5:57:e5:85:1e:d0:90:ec: f9:e8:83:a5:af:36:f1:33:f2:cd:d6:b4:8a:de:d3: 02:48:19:ee:01:40:41:9b:06:5f:bb:17:82:e8:d9: f0:89:3c:32:ac:fe:d8:f9:1b:7e:44:b3:49:85:b5: e0:01:7c:a2:b7:1f:68:ca:0d:5b:06:58:0b:03:69: fa:6d:6c:3d:16:23:0f:b4:7d:aa:9d:34:78:76:fd: 5e:33:7a:07:a9:88:90:81:fa:df:2c:e3:c0:2c:08: 35:d4:06:98:31:d3:e4:63:de:8e:1b:cb:76:8c:22: 45:6f:4d:ae:bd:c2:49:4f:91:74:53:82:7a:0d:07: da:a9:95:65:74:21:1a:25:4c:7b:a5:c4:22:2e:91: 7c:9b:8a:6f:b3:44:fd:c3:fa:91:d5:19:27:78:3b: 82:63:5b:94:22:dc:df:99:bb:00:24:19:e4:37:c4: 0d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:84:FC:FF:3D:E0:10:7E:3C:06:E2:D0:DA:A4:F4:A3:14:56:1F:9B X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b8:8b:ab:36:5d:bb:d8:8b:0c:70:14:8f:67:9f:b3:95:29: 84:47:b8:90:c0:b9:1f:b6:ea:ae:61:41:04:0d:38:ad:99:4a: 37:9b:3c:e8:58:bd:8c:cb:6a:5f:3e:79:16:25:fa:e1:b9:7a: 36:02:b8:da:47:a8:0e:37:4f:17:a0:fa:a7:64:0d:b9:17:83: 4d:e9:09:fd:a3:81:f4:97:40:52:44:5a:12:d0:84:a8:20:c4: 2b:19:cf:08:c8:e7:7a:9b:2c:93:02:9a:d2:ef:7e:17:be:3a: 2a:8e:7a:a1:1c:8b:db:c9:5b:c3:0f:cb:5e:8c:6e:97:02:3b: f8:28:e6:c2:41:bb:f0:8b:3f:c1:0d:7c:7b:8a:ae:d5:e2:0b: 0f:08:a9:33:92:68:0d:0c:b3:0d:5b:cd:e9:57:0e:4f:ea:17: da:c6:6a:f4:46:d9:42:5f:73:9e:c7:87:e2:23:3d:a5:e8:af: 08:90:9e:42:9e:10:02:af:e8:79:eb:52:af:23:87:c4:6d:09: 6d:54:48:fd:04:07:02:4c:9c:36:68:b9:a3:33:ba:ef:e6:3d: 9c:11:74:22:c6:27:7c:d2:f7:01:81:f1:f0:56:f8:f3:c3:68: 72:56:58:67:7d:6d:b8:86:fa:89:fc:3f:d1:f1:b8:da:ba:5c: bc:e9:3a:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjUxMjIyMjMwNTIwWhcNMjUxMjI5MjMwNTIwWjAYMRYwFAYD VQQDDA02OTQ5Y2ViMC04OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5hcU+IqRBtyWpcoASTLfDFLx7fEliEeEHKuj7ClISmNOkaH61h9drjX0l3x JnOHOqOKzHeTW58yTFjglAOB1GZUomD3qKOZz0xuU6nExRGSpVflhR7QkOz56IOl rzbxM/LN1rSK3tMCSBnuAUBBmwZfuxeC6NnwiTwyrP7Y+Rt+RLNJhbXgAXyitx9o yg1bBlgLA2n6bWw9FiMPtH2qnTR4dv1eM3oHqYiQgfrfLOPALAg11AaYMdPkY96O G8t2jCJFb02uvcJJT5F0U4J6DQfaqZVldCEaJUx7pcQiLpF8m4pvs0T9w/qR1Rkn eDuCY1uUItzfmbsAJBnkN8QNYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGE/P89 4BB+PAbi0Nqk9KMUVh+bMB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWuIurNl272IsMcBSPZ5+zlSmER7iQwLkftuquYUEEDTitmUo3mzzo WL2My2pfPnkWJfrhuXo2ArjaR6gON08XoPqnZA25F4NN6Qn9o4H0l0BSRFoS0ISo IMQrGc8IyOd6myyTAprS734XvjoqjnqhHIvbyVvDD8tejG6XAjv4KObCQbvwiz/B DXx7iq7V4gsPCKkzkmgNDLMNW83pVw5P6hfaxmr0RtlCX3Oex4fiIz2l6K8IkJ5C nhACr+h561KvI4fEbQltVEj9BAcCTJw2aLmjM7rv5j2cEXQixid80vcBgfHwVvjz w2hyVlhnfW24hvqJ/D/R8bjauly86ToG -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:43 2025 by rpki-client