This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: kqSGQtnsZ14eNkZqUCZO74knPSQfSgF5cnzb2JcrbuE= Subject key identifier: B8:58:2B:11:13:76:B8:39:B5:24:93:D6:D0:CE:28:2D:86:9E:FA:32 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0DE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0DDC Signing time: Mon 22 Dec 2025 17:30:16 +0000 Manifest this update: Mon 22 Dec 2025 17:30:15 +0000 Manifest next update: Mon 29 Dec 2025 17:30:15 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: HyLPcak6YbUEJFflszwzxMFf3JpyCCHOCFAKR8ovDBU=) 2: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: bubDAyNTv3SrURQ57IlrP+BsnMnB0ZguwTBhf+r4Z54=) 3: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: M//W1UwKYdpgfzirMsSYlccdpo+EbdrSiaWLAUJYdus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3558 (0xde6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Dec 22 17:30:15 2025 GMT Not After : Dec 29 17:30:15 2025 GMT Subject: CN=69498028-bc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:05:52:6a:42:8e:04:72:dd:c9:25:f5:a8:29: 7c:c1:c4:80:c4:18:46:93:24:ba:0b:18:79:d2:72: b3:b7:1f:95:80:eb:2e:03:10:5c:5d:2f:6b:0c:4c: b4:80:a0:c5:fb:5c:e1:ad:b7:ae:25:a1:57:fc:3d: 66:8a:4a:e6:1c:3c:d1:cc:00:77:dc:a2:99:4c:4d: 91:52:37:58:2b:09:13:cb:16:42:4c:df:b6:a4:12: ea:b6:b5:ec:1e:68:1a:30:61:7e:38:fb:5d:ae:3f: f4:d2:7b:ee:33:1d:ab:07:38:78:5c:9f:ff:58:4e: 66:0b:95:d1:b2:99:dc:ea:73:ac:36:62:aa:be:80: a3:50:e6:bf:c0:e4:8e:18:00:0d:19:8a:b6:b3:ba: 6f:a1:64:65:ef:04:00:d9:bf:b6:c3:b1:2d:6c:de: 5c:4e:93:87:54:96:2b:8c:28:98:91:49:9a:57:a2: 6b:5b:c4:a9:4d:a5:57:52:7c:be:b0:ce:b3:03:83: c0:4d:86:ab:05:cb:6d:33:db:2d:8f:55:e5:d5:83: d8:11:58:99:0d:cc:96:2c:00:e9:60:e1:cc:92:f0: 19:f2:b4:fc:6f:08:ae:a0:c5:b3:20:c5:03:68:a3: 5f:17:5f:6c:b0:d3:17:c0:25:e1:58:71:b6:ad:b7: b6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:58:2B:11:13:76:B8:39:B5:24:93:D6:D0:CE:28:2D:86:9E:FA:32 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:98:50:4a:df:ad:de:7e:75:bf:03:ab:be:c2:03:95:1a:48: ac:52:2c:bb:5f:92:6d:0b:0e:5d:7e:35:8b:3b:8c:11:e1:9f: 99:06:b8:ba:bb:1d:39:e9:86:bf:26:fd:ec:41:33:5a:ff:9e: 24:66:ee:f8:8e:ba:51:d0:32:d1:ff:6c:bf:a6:4c:a2:e5:54: 8a:3d:01:4d:68:b5:15:b7:e6:34:8a:f6:c7:b0:0f:b5:09:5d: 19:d1:e8:0c:02:a1:de:7d:d6:63:be:68:17:bd:45:07:79:ba: 2d:6a:20:cd:db:93:2f:49:e6:8c:28:85:d3:f1:04:b8:fe:ae: 99:dc:93:ae:ce:f4:06:5c:c7:39:55:b2:9a:e3:9c:1e:7d:53: 92:be:2f:a4:28:f7:7c:05:82:3b:89:f4:f3:86:e4:83:54:c6: cb:6e:60:9c:aa:cd:79:5b:a2:f9:eb:87:c9:f0:ef:bf:65:74: df:6a:40:86:07:0f:37:eb:29:19:dc:0d:fa:fd:f8:c2:f9:82: 61:f7:97:79:87:56:c9:f9:2a:3a:2f:a2:b7:b0:39:17:ed:53: 0f:cd:4d:6e:68:99:77:82:ed:74:c2:fc:45:c8:30:61:3a:78: d1:b9:f0:f7:8c:de:e1:41:f9:42:2c:8a:f3:7b:96:95:b4:f6: 67:f5:4a:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjUxMjIyMTczMDE1WhcNMjUxMjI5MTczMDE1WjAYMRYwFAYD VQQDDA02OTQ5ODAyOC1iYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AVSakKOBHLdySX1qCl8wcSAxBhGkyS6Cxh50nKztx+VgOsuAxBcXS9rDEy0 gKDF+1zhrbeuJaFX/D1mikrmHDzRzAB33KKZTE2RUjdYKwkTyxZCTN+2pBLqtrXs HmgaMGF+OPtdrj/00nvuMx2rBzh4XJ//WE5mC5XRspnc6nOsNmKqvoCjUOa/wOSO GAANGYq2s7pvoWRl7wQA2b+2w7EtbN5cTpOHVJYrjCiYkUmaV6JrW8SpTaVXUny+ sM6zA4PATYarBcttM9stj1Xl1YPYEViZDcyWLADpYOHMkvAZ8rT8bwiuoMWzIMUD aKNfF19ssNMXwCXhWHG2rbe28wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhYKxET drg5tSST1tDOKC2GnvoyMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHmFBK363efnW/A6u+wgOVGkisUiy7X5JtCw5dfjWLO4wR4Z+ZBri6 ux056Ya/Jv3sQTNa/54kZu74jrpR0DLR/2y/pkyi5VSKPQFNaLUVt+Y0ivbHsA+1 CV0Z0egMAqHefdZjvmgXvUUHebotaiDN25MvSeaMKIXT8QS4/q6Z3JOuzvQGXMc5 VbKa45wefVOSvi+kKPd8BYI7ifTzhuSDVMbLbmCcqs15W6L564fJ8O+/ZXTfakCG Bw836ykZ3A36/fjC+YJh95d5h1bJ+So6L6K3sDkX7VMPzU1uaJl3gu10wvxFyDBh OnjRufD3jN7hQflCLIrze5aVtPZn9UoH -----END CERTIFICATE-----Generated at Tue Dec 23 19:24:37 2025 by rpki-client