This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json) Hash identifier: 8ZB4cOHSpG8URQropxvSCwCm7SrO8ytVVcV2L8vo84U= Subject key identifier: 79:D7:52:4E:94:F2:CE:04:4C:E5:6C:F5:DB:64:B1:3B:1D:6A:6E:30 Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft Manifest number: 0162 Signing time: Tue 23 Dec 2025 03:02:58 +0000 Manifest this update: Tue 23 Dec 2025 03:02:57 +0000 Manifest next update: Tue 30 Dec 2025 03:02:57 +0000 Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: v2TRid2ib2l7i0+zV0onFpQEaMDFyw+iq1M+6fFOgKc=) 2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: d2K+InZzs4yuUY7A0gQ/z4AXxA9If9lELXrXKBGG5jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: Dec 23 03:02:57 2025 GMT Not After : Dec 30 03:02:57 2025 GMT Subject: CN=694a0662-5376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:a4:8f:5f:d8:c3:7a:28:4a:4c:21:ed:e4: 88:5e:40:2e:e4:be:39:7d:e7:d0:15:7a:b2:6b:c0: 31:c5:d2:dd:c2:48:59:47:7c:5b:4e:0a:dc:08:7a: ee:37:3a:7d:73:df:70:e7:0a:ee:b5:ba:73:ad:ee: 70:8c:78:eb:5b:22:96:72:66:e1:0a:6b:2b:36:67: 84:5b:64:a6:53:dc:39:92:c3:ea:2c:f7:ed:96:f2: 68:c6:d6:46:e9:04:5c:8d:33:a9:57:08:97:65:8f: a6:73:91:1b:d5:d5:a5:c3:e9:70:08:8c:07:e2:24: 46:f2:96:d0:70:d9:ad:12:7c:ae:70:54:cc:12:7c: dd:8e:fc:3a:e0:12:37:dc:d2:ea:a5:e6:4f:b7:87: 14:62:68:75:e1:d0:ee:4a:41:60:c7:e3:cc:60:75: c2:76:d1:81:0a:2c:e8:cf:81:7f:a5:ad:dc:18:9f: 62:f3:b1:57:fd:cf:1a:c7:76:a9:94:9a:f8:4b:d3: 24:c3:71:48:91:fc:1b:98:4d:6e:af:da:77:78:cc: fb:e3:68:7c:7c:af:ee:85:29:80:91:dc:23:80:f9: 44:ce:7e:6b:d5:e3:72:f0:b1:ca:79:76:2e:ef:32: a5:ef:8c:35:da:35:3e:b9:61:b3:c7:b3:85:a9:ea: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D7:52:4E:94:F2:CE:04:4C:E5:6C:F5:DB:64:B1:3B:1D:6A:6E:30 X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:5b:9e:26:c9:ea:d7:d0:2f:ea:23:ac:58:39:9e:07:4b:09: dd:ed:36:e6:32:27:33:27:59:2b:c3:76:ce:a6:e4:63:e6:54: d3:62:fe:34:82:a4:37:b9:a1:a9:67:c5:02:46:aa:fd:9d:78: 1b:4c:33:d0:2d:ba:ee:0e:18:ba:0d:f7:9f:8d:34:7a:a7:89: c4:50:5a:ca:b8:cc:fb:af:bf:a9:6b:0d:53:13:19:07:0f:e0: 77:4d:c4:ea:62:0f:3e:f2:cd:79:08:ab:78:cc:c6:fd:62:50: b2:69:18:46:6b:95:12:33:3c:77:f0:37:69:5b:aa:4c:b2:e7: 92:8c:52:37:d6:1e:f3:28:97:e9:e3:d8:5e:d6:42:47:d9:14: 44:87:b8:ec:56:3a:7c:cb:94:2a:a0:da:83:4c:28:a8:e7:2c: 59:f2:e2:78:10:47:2d:57:96:20:70:82:6d:9e:df:99:02:50: 8d:70:2b:1a:9e:42:8d:f1:2b:49:07:fe:59:b7:8a:bf:c7:c1: c0:fd:08:73:8a:32:04:72:a5:e1:f2:73:89:5e:ee:d3:2e:55: f2:b8:e7:8d:ad:2f:3e:ac:46:c9:ba:82:b5:c1:c7:d9:93:21: 03:6e:fd:2f:57:ce:3c:26:f8:c4:74:88:11:37:e2:13:98:88: e8:03:82:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD MDU4OUEzRkYwHhcNMjUxMjIzMDMwMjU3WhcNMjUxMjMwMDMwMjU3WjAYMRYwFAYD VQQDDA02OTRhMDY2Mi01Mzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiqukj1/Yw3ooSkwh7eSIXkAu5L45fefQFXqya8AxxdLdwkhZR3xbTgrcCHru Nzp9c99w5wrutbpzre5wjHjrWyKWcmbhCmsrNmeEW2SmU9w5ksPqLPftlvJoxtZG 6QRcjTOpVwiXZY+mc5Eb1dWlw+lwCIwH4iRG8pbQcNmtEnyucFTMEnzdjvw64BI3 3NLqpeZPt4cUYmh14dDuSkFgx+PMYHXCdtGBCizoz4F/pa3cGJ9i87FX/c8ax3ap lJr4S9Mkw3FIkfwbmE1ur9p3eMz742h8fK/uhSmAkdwjgPlEzn5r1eNy8LHKeXYu 7zKl74w12jU+uWGzx7OFqeoxTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnXUk6U 8s4ETOVs9dtksTsdam4wMB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDMS83RkZERkI2NEMwOUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RP dzJqSGx0Slh3Nm5BV0pvXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoW54myerX0C/qI6xYOZ4HSwnd7TbmMiczJ1krw3bOpuRj5lTTYv40 gqQ3uaGpZ8UCRqr9nXgbTDPQLbruDhi6DfefjTR6p4nEUFrKuMz7r7+paw1TExkH D+B3TcTqYg8+8s15CKt4zMb9YlCyaRhGa5USMzx38DdpW6pMsueSjFI31h7zKJfp 49he1kJH2RREh7jsVjp8y5QqoNqDTCio5yxZ8uJ4EEctV5YgcIJtnt+ZAlCNcCsa nkKN8StJB/5Zt4q/x8HA/QhzijIEcqXh8nOJXu7TLlXyuOeNrS8+rEbJuoK1wcfZ kyEDbv0vV848JvjEdIgRN+ITmIjoA4It -----END CERTIFICATE-----Generated at Wed Dec 24 15:44:59 2025 by rpki-client