This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: JvzjPCbrfkOpJmLYNebrhjs7ToBxrId0TGVhsHv94lk= Subject key identifier: 17:F0:0C:90:B2:EA:FB:20:99:DF:95:97:BF:24:78:83:7B:36:94:6D Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: 44 Signing time: Sat 29 Nov 2025 05:20:10 +0000 Manifest this update: Sat 29 Nov 2025 05:20:10 +0000 Manifest next update: Sat 06 Dec 2025 05:20:10 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: /PEriRmdn8GEyBVgl23sw3UYINmjsEmQDT92w8m4F/U=) 2: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: J6NfxVye//wKbH6luOaipzXoE8gflP1Zb4ROZKBwOvw=) 3: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: nDBN8ofBQzSuZlFacB02+d4KlQaWiR4DsWaWORqlM1w=) 4: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: Jiabvy3OMisNM5GgqkjfS6kn/xGNTzgJB34Y1DjTY/g=) 5: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: KEMH/vKSPcAkV3P1pUdnSj1om5WSjvDW91I/czL5aFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Nov 29 05:20:10 2025 GMT Not After : Dec 6 05:20:10 2025 GMT Subject: CN=692a828a-bdb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:10:26:b9:63:76:c1:9a:d8:d0:c8:fc:e4: dd:ec:7b:38:66:67:96:44:85:0c:43:21:fd:4e:89: 79:dc:43:b2:07:96:6a:7d:37:2c:2b:b9:50:fd:5f: 7b:8a:b1:df:90:c8:67:d2:aa:ed:ed:df:03:d6:ed: e3:48:c7:3f:fc:57:7e:89:42:54:ca:db:e3:03:03: 64:f4:61:44:75:33:18:cf:99:11:66:0b:45:5d:46: 4a:f0:f6:3f:6b:ec:98:ba:cc:18:76:6a:34:44:c2: 6b:f2:17:88:31:f5:96:32:4b:c9:ef:27:57:19:c7: 50:70:fc:3c:31:dd:00:6e:48:d8:8c:f2:98:84:ab: b4:86:2d:b0:2f:c9:cc:c6:c6:db:6b:e2:1f:7d:f2: 6e:11:8b:5e:ed:b3:c6:de:33:58:c5:43:9b:ce:16: 93:c9:70:72:f8:9e:50:e0:76:6c:b5:62:ef:fc:62: 15:e7:de:33:3a:d3:38:19:89:46:64:07:f3:26:75: a9:d5:45:df:b2:ab:19:a9:29:49:88:15:f5:ba:4d: a0:cd:9d:c8:79:0f:eb:64:7d:d5:35:e8:b9:48:d7: 77:87:85:b5:c8:7a:b2:47:5d:c1:8d:2a:fd:bd:a7: ac:9e:05:aa:07:ee:f9:33:08:48:54:33:f2:0d:d0: e4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F0:0C:90:B2:EA:FB:20:99:DF:95:97:BF:24:78:83:7B:36:94:6D X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0c:ba:ba:60:0b:62:c0:d3:80:e0:4c:ff:8b:c3:17:69:c4: 2e:fa:05:be:f3:87:c4:fe:1e:f6:c1:aa:8a:71:eb:9a:0a:74: d3:4d:1a:32:41:f4:85:f1:79:da:53:76:86:b2:7f:1c:30:bd: 2d:64:8a:0e:40:98:cb:79:1a:29:d3:e3:dc:11:4e:da:56:79: ea:52:fa:b3:1a:ba:e4:3a:4f:d5:f1:60:60:f1:bd:9b:cd:2c: 21:85:6b:59:6e:c8:bc:54:25:2d:10:24:c1:7b:a6:d4:9d:d3: e3:13:e3:fb:2e:88:c8:ec:d9:3a:b6:dd:d3:ef:e1:aa:fa:0c: cd:b8:cf:58:3c:ce:9f:bb:c8:3b:9d:db:0c:ae:9d:d1:5b:91: e1:fe:7a:fd:7b:f5:43:da:94:63:6c:30:92:7e:cf:88:83:ee: 1d:4a:45:91:ef:cf:24:3b:86:92:77:b0:0a:29:b8:03:66:f8: d0:cf:9e:1b:55:81:81:ac:ce:ad:ac:d0:da:3f:22:00:de:c2: 60:49:3d:bf:cc:d4:9b:fa:c4:7c:9d:31:2a:23:19:6f:89:30: bb:9e:1f:18:0c:e9:77:c3:19:04:78:be:c1:44:c4:de:be:ee: 16:44:6f:60:29:cb:ea:ac:6e:9a:5e:02:af:53:fe:fe:48:37: ec:ab:c2:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkE2OTExMC8GA1UEBRMoM0FBNUQ3NEE0OUZFREUwODE3NjZDREFDM0JGN0RERDAz NkJCRjkwMTAeFw0yNTExMjkwNTIwMTBaFw0yNTEyMDYwNTIwMTBaMBgxFjAUBgNV BAMTDTY5MmE4MjhhLWJkYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcMBAmuWN2wZrY0Mj85N3sezhmZ5ZEhQxDIf1OiXncQ7IHlmp9NywruVD9X3uK sd+QyGfSqu3t3wPW7eNIxz/8V36JQlTK2+MDA2T0YUR1MxjPmRFmC0VdRkrw9j9r 7Ji6zBh2ajREwmvyF4gx9ZYyS8nvJ1cZx1Bw/Dwx3QBuSNiM8piEq7SGLbAvyczG xttr4h998m4Ri17ts8beM1jFQ5vOFpPJcHL4nlDgdmy1Yu/8YhXn3jM60zgZiUZk B/MmdanVRd+yqxmpKUmIFfW6TaDNnch5D+tkfdU16LlI13eHhbXIerJHXcGNKv29 p6yeBaoH7vkzCEhUM/IN0ORlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF/AMkLLq +yCZ35WXvyR4g3s2lG0wHwYDVR0jBBgwFoAUOqXXSkn+3ggXZs2sO/fd0Da7+QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QTY5L0NCMUNGRTg0NkM0 QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3FYWFNrbi0zZ2dYWnMyc09fZmQwRGE3LVFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QTY5L0NCMUNGRTg0NkM0QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dn WFpzMnNPX2ZkMERhNy1RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGEMurpgC2LA04DgTP+LwxdpxC76Bb7zh8T+HvbBqopx65oKdNNNGjJB 9IXxedpTdoayfxwwvS1kig5AmMt5GinT49wRTtpWeepS+rMauuQ6T9XxYGDxvZvN LCGFa1luyLxUJS0QJMF7ptSd0+MT4/suiMjs2Tq23dPv4ar6DM24z1g8zp+7yDud 2wyundFbkeH+ev179UPalGNsMJJ+z4iD7h1KRZHvzyQ7hpJ3sAopuANm+NDPnhtV gYGszq2s0No/IgDewmBJPb/M1Jv6xHydMSojGW+JMLueHxgM6XfDGQR4vsFExN6+ 7hZEb2Apy+qsbppeAq9T/v5IN+yrwps= -----END CERTIFICATE-----Generated at Sat Nov 29 09:38:55 2025 by rpki-client