This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: J+2oVV/eZr68LaB8DcAqDobWnQwxsecGD8BAJawR6uo= Subject key identifier: 72:46:C3:AF:44:1C:3A:46:F8:9E:2B:C9:5A:39:52:44:5D:4C:1B:50 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 0307 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 02FC Signing time: Fri 19 Dec 2025 00:26:59 +0000 Manifest this update: Fri 19 Dec 2025 00:26:58 +0000 Manifest next update: Fri 26 Dec 2025 00:26:58 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: OuxHWpCJ4ClqvPq51602Mz7Z9rW+FXQyBH7zaH4DoGQ=) 2: 41F88F22042111ED888BB024C4F9AE02.roa (hash: bOo49vshLt+uwGwclaQ/vUkNjrTzsnBMVbUbDnocL6Q=) 3: 42D236F0042111ED888BB024C4F9AE02.roa (hash: Sw/iVVZQKRk2IehEH8KSZSL+WBhl3LKTM/sZZ2FNR28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 775 (0x307) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: Dec 19 00:26:58 2025 GMT Not After : Dec 26 00:26:58 2025 GMT Subject: CN=69449bd2-1013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:b7:10:eb:2d:15:d2:67:8a:6c:9a:09:7b: 6f:97:43:cb:ed:1e:50:56:f7:64:8e:d0:4d:75:0e: bf:6f:95:bb:21:40:90:11:17:38:05:10:b7:e2:c9: e4:00:c8:d1:4c:00:ec:44:e3:88:97:5c:cf:04:78: 0c:21:aa:ff:13:77:eb:72:e9:6c:25:52:10:f5:dd: e7:70:e2:f5:2f:89:a6:95:e5:e2:21:fc:4e:10:e6: 1b:4f:c0:37:c8:a9:5b:b4:4c:c6:82:ce:2f:2b:31: af:aa:1f:13:0f:5c:77:63:0b:9e:f7:90:e0:78:ac: 0f:f0:7a:2f:17:be:f9:5a:bf:19:83:fa:e9:00:26: 52:d8:2f:44:cd:36:48:5f:a0:73:4e:c8:0b:04:12: 96:1e:dc:7b:df:ea:24:88:c8:a5:d8:52:c6:77:fd: 93:73:c7:ff:ec:f9:2c:d6:6e:0d:e3:47:02:e1:d2: 2d:45:04:67:47:ca:a3:d0:d3:33:7e:34:b5:62:21: 02:1f:ae:c7:d4:0a:f3:61:8b:86:1a:dc:f2:7f:3e: af:cb:a6:cd:04:54:5c:ea:07:16:ea:61:d4:dd:86: 83:5c:bf:6a:69:36:e3:af:53:37:46:b4:27:f4:fd: b9:7c:88:83:7f:ac:d3:16:28:3f:fd:b0:5f:03:34: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:46:C3:AF:44:1C:3A:46:F8:9E:2B:C9:5A:39:52:44:5D:4C:1B:50 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f3:61:5c:ce:6b:d4:cd:40:3e:fd:39:4b:5a:8f:31:be:db: 27:3c:a9:06:87:d5:0d:17:35:6a:e0:73:a6:c3:53:cc:6e:f4: 05:5b:1d:97:47:80:0d:2f:8e:b1:2b:d3:1a:99:44:74:74:29: 8b:e2:5b:d5:bb:6e:9a:66:39:1a:a4:7a:0b:f3:fe:68:cf:29: 6d:cb:58:b9:84:58:80:b0:77:63:bb:55:e3:18:7d:fa:fa:d9: 23:63:48:f9:47:4d:db:a1:8b:45:8d:b6:a3:cb:9d:4d:67:e5: be:17:c1:5b:f5:2c:fd:62:0d:4b:5e:9d:9c:52:47:fd:77:9e: f5:fc:e4:f8:69:51:d8:e6:e8:2a:f4:a1:27:67:5a:f0:b7:1b: eb:7f:82:0c:ce:04:c4:a4:a5:d9:ca:fb:15:14:f3:1c:a0:94: 85:62:ae:dd:77:af:05:1a:7d:8d:b8:73:c2:7b:c1:60:8e:a7: 2f:15:4a:85:fa:70:a2:29:d5:9c:c7:82:4a:0f:de:84:59:cf: 04:fb:d2:8c:49:55:19:5e:dc:b9:0c:e4:3b:f2:77:9b:11:e4: 6f:9f:56:3a:95:f7:2b:6a:aa:97:46:9f:ff:11:12:83:3e:0c: 6a:2a:3d:13:9f:c5:16:6f:ab:51:10:8e:19:2b:23:72:5e:5d: 26:91:e4:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjUxMjE5MDAyNjU4WhcNMjUxMjI2MDAyNjU4WjAYMRYwFAYD VQQDDA02OTQ0OWJkMi0xMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIO3EOstFdJnimyaCXtvl0PL7R5QVvdkjtBNdQ6/b5W7IUCQERc4BRC34snk AMjRTADsROOIl1zPBHgMIar/E3frculsJVIQ9d3ncOL1L4mmleXiIfxOEOYbT8A3 yKlbtEzGgs4vKzGvqh8TD1x3Ywue95DgeKwP8HovF775Wr8Zg/rpACZS2C9EzTZI X6BzTsgLBBKWHtx73+okiMil2FLGd/2Tc8f/7Pks1m4N40cC4dItRQRnR8qj0NMz fjS1YiECH67H1ArzYYuGGtzyfz6vy6bNBFRc6gcW6mHU3YaDXL9qaTbjr1M3RrQn 9P25fIiDf6zTFig//bBfAzSq8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJGw69E HDpG+J4ryVo5UkRdTBtQMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq82FczmvUzUA+/TlLWo8xvtsnPKkGh9UNFzVq4HOmw1PMbvQFWx2X R4ANL46xK9MamUR0dCmL4lvVu26aZjkapHoL8/5ozylty1i5hFiAsHdju1XjGH36 +tkjY0j5R03boYtFjbajy51NZ+W+F8Fb9Sz9Yg1LXp2cUkf9d571/OT4aVHY5ugq 9KEnZ1rwtxvrf4IMzgTEpKXZyvsVFPMcoJSFYq7dd68FGn2NuHPCe8FgjqcvFUqF +nCiKdWcx4JKD96EWc8E+9KMSVUZXty5DOQ78nebEeRvn1Y6lfcraqqXRp//ERKD PgxqKj0Tn8UWb6tREI4ZKyNyXl0mkeTW -----END CERTIFICATE-----Generated at Fri Dec 19 07:34:41 2025 by rpki-client