This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json) Hash identifier: /pjeFloCLg/mBU3NEQ1hL3jLKX4VqZJPcaUgT8XxEGk= Subject key identifier: 52:B4:99:6B:48:E8:D4:A5:C0:A5:72:2D:85:6F:68:BB:B9:AE:87:92 Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft Manifest number: AB Signing time: Sun 21 Dec 2025 05:18:43 +0000 Manifest this update: Sun 21 Dec 2025 05:18:43 +0000 Manifest next update: Sun 28 Dec 2025 05:18:43 +0000 Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: 00HURLM/OqbJ01wTye23YhleKVcdL4DyVIw4KbESftE=) 2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: kx9lWNj7NgSUFsuMfRCJDT7t5wBdkdtWpvVdEqQ2TDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Validity Not Before: Dec 21 05:18:43 2025 GMT Not After : Dec 28 05:18:43 2025 GMT Subject: CN=69478333-9b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:76:70:ac:70:ca:82:2a:5e:b5:cb:2e:a9: 15:74:91:6a:88:87:16:1e:a8:9c:cc:4a:73:fd:96: 44:36:4e:77:da:3d:48:f0:45:98:90:2a:e5:7a:ba: 38:52:2a:67:55:0f:04:e8:dd:16:10:cd:f0:e4:db: de:ee:70:12:63:e9:c5:fd:e7:af:a6:32:40:c9:f8: 9e:fe:46:c2:ad:9e:db:02:6c:91:e3:fe:f1:a9:05: b4:26:d3:c4:20:ba:7a:65:8b:81:65:a3:83:96:f2: c9:cf:0c:1b:11:a2:b8:db:5f:53:9b:0f:88:89:25: 51:fc:05:6a:75:76:56:d9:3a:f9:fe:46:0c:e2:4e: 03:19:75:a9:64:77:47:03:1a:cd:e1:8e:4f:64:8a: 00:36:0c:80:04:90:8f:1d:b3:06:d2:96:48:ed:2a: b2:76:62:d4:9f:96:7c:35:6c:1a:4a:f8:a2:c5:91: be:d2:a2:5b:bb:fe:5c:ad:c5:29:59:73:70:a7:66: 59:87:82:d0:10:d8:f3:dd:c8:d7:4b:7b:ae:14:54: cc:84:b3:2e:f9:df:28:ba:07:e0:a7:ac:24:7d:fb: 62:c9:a3:2b:06:f1:69:28:d1:6f:d0:b2:63:6b:c4: 46:09:65:ce:85:e4:41:89:5b:9e:43:9e:cf:8a:3c: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B4:99:6B:48:E8:D4:A5:C0:A5:72:2D:85:6F:68:BB:B9:AE:87:92 X509v3 Authority Key Identifier: keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5a:52:0f:17:b8:8d:5c:0d:18:3a:68:b7:f9:14:dd:6c:99: 83:58:6e:92:30:7e:10:41:3f:c2:18:c8:14:6a:f3:e4:a8:af: a3:22:1e:fe:b7:f5:dd:4f:ae:56:2e:51:36:11:be:c4:2c:96: 37:00:57:50:37:f2:d8:cc:7c:ae:a8:09:69:d6:ea:95:e6:64: e4:53:ae:3a:80:11:9b:49:2b:a9:f3:27:91:23:4c:50:51:58: 57:e5:4e:90:d2:5d:e9:46:92:73:4b:3c:49:f0:76:33:4c:1f: 33:54:db:f4:63:6f:d6:09:af:89:1a:aa:39:01:db:29:2a:5e: 36:ea:ca:78:98:87:22:bc:2e:fc:b5:9a:1c:e2:05:6f:25:c1: 9f:c3:55:b2:0e:32:04:71:95:51:af:82:a4:b5:cb:3d:2c:32: 16:46:08:1c:6e:3d:05:32:18:af:9c:23:f0:c2:bc:33:a9:75: 70:97:97:4a:7e:d4:d0:81:ba:ea:17:65:ba:57:20:52:f1:1f: e1:b2:1e:d8:86:73:b4:bb:b0:2c:50:82:e5:53:16:fb:84:a8: 61:cb:84:a0:8e:4e:68:23:82:bf:b4:0c:e7:ad:11:82:ac:5d: ab:bb:1e:35:7a:ef:8b:a7:b8:f0:7f:aa:a4:47:f3:f0:ea:f1: df:69:69:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQzUxMTAvBgNVBAUTKDNBNUUxMDI5RTY1QzYzNjgxMjMyREI2N0Q4MDUzREQy RjY5NEU2MUYwHhcNMjUxMjIxMDUxODQzWhcNMjUxMjI4MDUxODQzWjAYMRYwFAYD VQQDDA02OTQ3ODMzMy05YjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZR2cKxwyoIqXrXLLqkVdJFqiIcWHqiczEpz/ZZENk532j1I8EWYkCrlero4 UipnVQ8E6N0WEM3w5Nve7nASY+nF/eevpjJAyfie/kbCrZ7bAmyR4/7xqQW0JtPE ILp6ZYuBZaODlvLJzwwbEaK4219Tmw+IiSVR/AVqdXZW2Tr5/kYM4k4DGXWpZHdH AxrN4Y5PZIoANgyABJCPHbMG0pZI7SqydmLUn5Z8NWwaSviixZG+0qJbu/5crcUp WXNwp2ZZh4LQENjz3cjXS3uuFFTMhLMu+d8ougfgp6wkfftiyaMrBvFpKNFv0LJj a8RGCWXOheRBiVueQ57PijxFeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK0mWtI 6NSlwKVyLYVvaLu5roeSMB8GA1UdIwQYMBaAFDpeECnmXGNoEjLbZ9gFPdL2lOYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVDNS84MjMzNUEyMEQ5 NUExMUVGQTAyRkI0NkZDNEY5QUUwMi9PbDRRS2VaY1kyZ1NNdHRuMkFVOTB2YVU1 aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sNFFLZVpjWTJnU010dG4yQVU5MHZhVTVoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVDNS84MjMzNUEyMEQ5NUExMUVGQTAyRkI0NkZDNEY5QUUwMi9PbDRRS2VaY1ky Z1NNdHRuMkFVOTB2YVU1aDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6WlIPF7iNXA0YOmi3+RTdbJmDWG6SMH4QQT/CGMgUavPkqK+jIh7+ t/XdT65WLlE2Eb7ELJY3AFdQN/LYzHyuqAlp1uqV5mTkU646gBGbSSup8yeRI0xQ UVhX5U6Q0l3pRpJzSzxJ8HYzTB8zVNv0Y2/WCa+JGqo5AdspKl426sp4mIcivC78 tZoc4gVvJcGfw1WyDjIEcZVRr4Kktcs9LDIWRggcbj0FMhivnCPwwrwzqXVwl5dK ftTQgbrqF2W6VyBS8R/hsh7YhnO0u7AsUILlUxb7hKhhy4Sgjk5oI4K/tAznrRGC rF2rux41eu+Lp7jwf6qkR/Pw6vHfaWma -----END CERTIFICATE-----Generated at Sun Dec 21 09:55:36 2025 by rpki-client