This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft File: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json) Hash identifier: fweXaIqgOXs1d/+RslxSBv5KyvjTaNBLovDyg0+WaHU= Subject key identifier: 6E:20:00:20:B2:B5:70:5A:A3:90:D5:C1:FD:31:CD:74:11:71:13:8F Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft Manifest number: 012D Signing time: Sun 21 Dec 2025 03:49:49 +0000 Manifest this update: Sun 21 Dec 2025 03:49:49 +0000 Manifest next update: Sun 28 Dec 2025 03:49:49 +0000 Files and hashes: 1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: Xk/j5Cz8yPHQNPWwbbIQmeRhc6/QDZmcyFbz/GEkXRk=) 2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: bZZXWh+x6zyd1WkvfmUOQBDbu8rzUDtizJ6UDEgwLU0=) 3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: plwquzGEufYRwcQHYEN82Q8mZBEqW77cccbW7b/Z0qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Validity Not Before: Dec 21 03:49:49 2025 GMT Not After : Dec 28 03:49:49 2025 GMT Subject: CN=69476e5d-3627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d2:2d:ca:7d:3b:2d:fb:3b:76:d0:2f:62:95: 3d:01:11:1d:5d:41:7c:5f:62:93:1b:8c:f0:7b:3d: 57:07:af:bb:3b:bd:29:eb:e3:d1:a1:e8:15:08:d9: 01:80:b9:d6:16:5b:f8:98:d8:1c:d4:5e:24:de:b5: a8:a5:79:2f:32:05:38:f2:20:80:92:dd:3f:6b:af: 78:03:ed:08:ba:e6:aa:8c:62:97:0e:06:5d:b8:46: 96:2d:83:4a:ed:2e:cf:a4:a5:d1:84:ef:83:71:d3: ba:b2:d6:ae:c4:cd:05:2e:69:13:ec:c1:39:14:13: 6b:04:aa:81:de:0b:4a:49:63:69:b7:96:da:ad:bc: 7c:a6:df:fd:6b:28:2c:6e:72:07:db:69:e3:ce:80: dc:e8:a2:38:33:90:a6:6f:4b:b0:ac:e2:9b:03:91: b1:47:d9:cc:d5:78:a5:e5:70:9d:c9:30:98:ee:42: 2b:60:bd:c0:5b:31:f7:17:a5:b7:9a:41:ff:99:7c: d6:75:78:79:d5:3d:6f:98:a7:ff:bd:aa:27:97:0a: 85:e9:a3:bc:51:eb:a3:a0:a1:6c:7c:3c:8d:64:e7: 6a:ae:ee:4d:06:50:55:f3:1a:52:df:ad:ab:6d:07: 66:c2:e1:4d:0a:fb:eb:4c:be:7c:44:7b:96:59:14: 76:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:20:00:20:B2:B5:70:5A:A3:90:D5:C1:FD:31:CD:74:11:71:13:8F X509v3 Authority Key Identifier: keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:04:f0:6b:02:26:6d:2c:39:93:06:80:70:b3:2d:8d:e8:83: dc:58:1d:d5:39:2b:a4:b7:a8:11:48:9a:55:70:2f:36:35:cf: dd:77:e9:73:a5:bd:ba:76:58:5a:55:ae:3a:3c:c3:2f:cb:a3: 80:0f:5f:2a:ae:91:8d:e5:c7:a8:5d:22:56:b8:39:0f:4d:1d: 1c:79:13:ab:38:b0:18:3d:df:f5:08:ab:34:a2:d6:18:87:29: 21:d9:d6:08:33:09:7b:44:de:4d:fb:c8:40:f1:44:49:46:f7: 9c:6a:ee:00:97:a9:db:8a:5e:43:15:28:5b:9e:a0:12:81:a8: 15:5d:4a:a0:5f:3d:5b:e0:fe:6b:ce:77:63:5c:a9:9f:d7:b4: 8f:51:0c:ce:6b:cf:5b:78:e5:9e:eb:2a:1a:16:2d:04:8b:d8: c9:23:5a:99:c9:cf:1a:60:1c:a3:6c:61:09:c2:c4:00:a1:9f: 74:af:3f:02:0d:5c:18:72:61:53:c1:ab:c2:75:ca:9a:e5:cd: 85:31:f6:27:d9:29:b5:32:e7:09:b9:31:af:85:07:f6:61:f9: 4f:33:cd:19:7f:36:7e:63:da:42:70:52:ce:4d:2a:94:d4:cc: b2:04:72:f9:e5:bc:b7:7e:90:c5:42:e1:9d:5c:6e:12:d0:f5: 8b:69:6f:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg3OUExMTAvBgNVBAUTKDM5OUE1RTE3RDlDQTQzQjZDMzNBQzMzMDIwNkRDQkRE OTM1RTc4NzEwHhcNMjUxMjIxMDM0OTQ5WhcNMjUxMjI4MDM0OTQ5WjAYMRYwFAYD VQQDDA02OTQ3NmU1ZC0zNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9tItyn07Lfs7dtAvYpU9AREdXUF8X2KTG4zwez1XB6+7O70p6+PRoegVCNkB gLnWFlv4mNgc1F4k3rWopXkvMgU48iCAkt0/a694A+0IuuaqjGKXDgZduEaWLYNK 7S7PpKXRhO+DcdO6stauxM0FLmkT7ME5FBNrBKqB3gtKSWNpt5barbx8pt/9aygs bnIH22njzoDc6KI4M5Cmb0uwrOKbA5GxR9nM1Xil5XCdyTCY7kIrYL3AWzH3F6W3 mkH/mXzWdXh51T1vmKf/vaonlwqF6aO8UeujoKFsfDyNZOdqru5NBlBV8xpS362r bQdmwuFNCvvrTL58RHuWWRR2+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4gACCy tXBao5DVwf0xzXQRcROPMB8GA1UdIwQYMBaAFDmaXhfZykO2wzrDMCBty92TXnhx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODc5QS9CNjcwMTczQzFD OUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3YkRPc013SUczTDNaTmVl SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09acGVGOW5LUTdiRE9zTXdJRzNMM1pOZWVIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODc5QS9CNjcwMTczQzFDOUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3 YkRPc013SUczTDNaTmVlSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQBPBrAiZtLDmTBoBwsy2N6IPcWB3VOSukt6gRSJpVcC82Nc/dd+lz pb26dlhaVa46PMMvy6OAD18qrpGN5ceoXSJWuDkPTR0ceROrOLAYPd/1CKs0otYY hykh2dYIMwl7RN5N+8hA8URJRvecau4Al6nbil5DFShbnqASgagVXUqgXz1b4P5r zndjXKmf17SPUQzOa89beOWe6yoaFi0Ei9jJI1qZyc8aYByjbGEJwsQAoZ90rz8C DVwYcmFTwavCdcqa5c2FMfYn2Sm1MucJuTGvhQf2YflPM80ZfzZ+Y9pCcFLOTSqU 1MyyBHL55by3fpDFQuGdXG4S0PWLaW9c -----END CERTIFICATE-----Generated at Sun Dec 21 14:40:48 2025 by rpki-client