This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft File: OUsE6TpOrJKA9-wejZv_nebApZ8.mft (raw, json) Hash identifier: IBxbkC7t71mQzi1029sBuEejp+TuU58pxVdZfttQXas= Subject key identifier: 56:DC:43:54:23:64:80:FC:82:78:18:8E:EA:62:0C:2E:5F:D7:47:24 Authority key identifier: 39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F Certificate issuer: /CN=A9150F54/serialNumber=394B04E93A4EAC9280F7EC1E8D9BFF9DE6C0A59F Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft Manifest number: 1F Signing time: Tue 23 Dec 2025 06:37:25 +0000 Manifest this update: Tue 23 Dec 2025 06:37:24 +0000 Manifest next update: Tue 30 Dec 2025 06:37:24 +0000 Files and hashes: 1: OUsE6TpOrJKA9-wejZv_nebApZ8.crl (hash: IQ/5d1CDUA9PFVsei/WWJCftGnux/vvRq0Ju8YGDdbI=) 2: 8483134EB3D211F0A8A4D05CC4F9AE02.roa (hash: zZnDo53y65bsfaE1VKEk5cKNAHLKuPLAbEOb+OH2fmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.crl rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F54, serialNumber=394B04E93A4EAC9280F7EC1E8D9BFF9DE6C0A59F Validity Not Before: Dec 23 06:37:24 2025 GMT Not After : Dec 30 06:37:24 2025 GMT Subject: CN=694a38a5-ea88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:39:e7:a5:e5:9c:69:01:f0:0d:c2:d4:74: e2:9f:96:23:65:93:07:84:56:ec:38:14:c8:a1:9e: 01:a8:d5:e9:b6:db:d1:23:4d:fd:ae:bf:32:91:e6: 7e:0e:77:a9:c1:82:4b:a8:6d:7a:4b:71:82:b5:f7: 99:1c:b6:7b:0d:9e:1d:27:cb:9e:22:58:a9:21:69: 82:87:f8:60:4f:dd:7f:4f:81:2c:dd:ae:7a:be:b0: c3:f7:0c:69:04:92:96:d8:67:b1:a7:04:e1:46:12: 2e:9a:02:f6:c0:8d:1d:46:5a:97:0a:f1:bd:8b:3f: ff:58:20:a5:be:53:2f:6e:97:0d:be:07:7b:b2:72: d6:77:46:4f:30:d5:98:74:83:d3:c2:b6:98:83:fb: 8d:18:05:1f:c3:70:fc:be:9c:c3:b0:3e:08:79:ae: ff:29:32:7c:8a:0b:6a:c1:5c:15:19:6f:44:0f:7d: 00:40:9f:cb:2d:4d:05:3b:95:79:bb:92:bf:30:95: 63:27:49:c8:6c:c9:bf:00:e5:26:cb:3c:38:19:ca: 16:88:e4:a8:0d:01:34:5b:a7:bf:7c:70:d3:b6:d5: 6d:b8:86:0f:d8:52:8e:f0:14:c7:89:f3:34:7b:0f: 88:41:7f:c7:4d:6a:fb:a6:26:02:d3:39:e8:86:12: 71:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DC:43:54:23:64:80:FC:82:78:18:8E:EA:62:0C:2E:5F:D7:47:24 X509v3 Authority Key Identifier: keyid:39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a1:e5:88:ba:24:dd:91:70:19:6c:ee:1b:48:91:bd:7d:ff: ae:20:47:fe:5c:05:7c:e9:6f:33:cb:8c:9e:98:b2:bd:11:6a: e7:67:51:bd:2a:ba:45:07:8a:b3:e7:47:d5:69:30:1d:df:40: 01:49:15:3f:dc:eb:cd:3e:7d:61:13:6b:de:fc:5b:f1:96:2f: 07:b4:ac:f1:df:2f:ee:c7:1f:08:7b:ab:e7:ad:14:53:83:08: 90:ab:b1:55:83:77:27:27:07:80:a1:3a:88:9f:8d:49:3b:cd: a5:96:e1:b8:cf:1e:8c:09:94:03:9d:88:5c:08:48:5d:eb:b4: 69:da:76:4a:79:5a:d0:cb:3a:60:37:4d:3c:27:63:41:71:9e: 36:65:ec:27:7b:06:7a:bf:b9:f9:d7:eb:ca:a8:9b:04:a6:17: 40:ca:0d:67:2a:63:a1:cc:f5:c6:cf:c0:10:2e:ee:f0:98:fd: 4d:83:64:d9:30:17:02:8b:d6:f9:03:5c:94:13:90:49:f2:e5: c9:0a:12:88:1b:cd:59:6a:dc:62:a9:29:eb:15:8a:b6:1c:05: f7:73:20:03:95:3d:a4:16:88:e1:d9:05:9e:80:25:a3:a9:9c: d9:c3:56:3d:72:89:8f:13:cb:c6:9e:fe:06:62:65:32:f0:f9: 4f:27:60:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MEY1NDExMC8GA1UEBRMoMzk0QjA0RTkzQTRFQUM5MjgwRjdFQzFFOEQ5QkZGOURF NkMwQTU5RjAeFw0yNTEyMjMwNjM3MjRaFw0yNTEyMzAwNjM3MjRaMBgxFjAUBgNV BAMMDTY5NGEzOGE1LWVhODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+vjnnpeWcaQHwDcLUdOKfliNlkweEVuw4FMihngGo1em229EjTf2uvzKR5n4O d6nBgkuobXpLcYK195kctnsNnh0ny54iWKkhaYKH+GBP3X9PgSzdrnq+sMP3DGkE kpbYZ7GnBOFGEi6aAvbAjR1GWpcK8b2LP/9YIKW+Uy9ulw2+B3uyctZ3Rk8w1Zh0 g9PCtpiD+40YBR/DcPy+nMOwPgh5rv8pMnyKC2rBXBUZb0QPfQBAn8stTQU7lXm7 kr8wlWMnSchsyb8A5SbLPDgZyhaI5KgNATRbp798cNO21W24hg/YUo7wFMeJ8zR7 D4hBf8dNavumJgLTOeiGEnGtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVtxDVCNk gPyCeBiO6mIMLl/XRyQwHwYDVR0jBBgwFoAUOUsE6TpOrJKA9+wejZv/nebApZ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwRjU0L0VBNDRCNkMwQjNE MTExRjA4ODg2QTc1QkM0RjlBRTAyL09Vc0U2VHBPckpLQTktd2VqWnZfbmViQXBa OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1VzRTZUcE9ySktBOS13ZWpadl9uZWJBcFo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw RjU0L0VBNDRCNkMwQjNEMTExRjA4ODg2QTc1QkM0RjlBRTAyL09Vc0U2VHBPckpL QTktd2VqWnZfbmViQXBaOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADOh5Yi6JN2RcBls7htIkb19/64gR/5cBXzpbzPLjJ6Ysr0RaudnUb0q ukUHirPnR9VpMB3fQAFJFT/c680+fWETa978W/GWLwe0rPHfL+7HHwh7q+etFFOD CJCrsVWDdycnB4ChOoifjUk7zaWW4bjPHowJlAOdiFwISF3rtGnadkp5WtDLOmA3 TTwnY0FxnjZl7Cd7Bnq/ufnX68qomwSmF0DKDWcqY6HM9cbPwBAu7vCY/U2DZNkw FwKL1vkDXJQTkEny5ckKEogbzVlq3GKpKesVirYcBfdzIAOVPaQWiOHZBZ6AJaOp nNnDVj1yiY8Ty8ae/gZiZTLw+U8nYJ8= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:15 2025 by rpki-client