This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json) Hash identifier: 6tVF+ZG8AS1i8eeMvXQ1MgYxDWpwMCWyicgJSeuQ1VY= Subject key identifier: 43:42:77:1E:86:B1:C7:7D:99:90:FD:2C:54:11:99:7F:B8:33:57:EF Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft Manifest number: 02 Signing time: Wed 03 Dec 2025 05:34:43 +0000 Manifest this update: Wed 03 Dec 2025 05:34:42 +0000 Manifest next update: Wed 10 Dec 2025 05:34:42 +0000 Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: qJTNKrEHT3EAxYqb2HSYIlSaNHJbKlP21bbzuDhy+jE=) 2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: Ohq89QpQ4h6890Ezis7aDeUdxD3YflZSmZSGNInyLts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Dec 3 05:34:42 2025 GMT Not After : Dec 10 05:34:42 2025 GMT Subject: CN=692fcbf3-5a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:45:45:6b:3b:ba:7c:e8:d9:e7:60:13:3e: 99:5d:a4:d9:70:00:5b:8a:60:6e:97:f7:a5:e7:1b: 99:52:fc:41:ad:cb:28:e0:36:2c:be:db:01:8b:d1: 08:da:22:2b:a8:5f:bc:de:18:8b:3c:c9:94:62:77: a4:e9:0a:ab:4a:34:95:fa:2f:44:c4:79:bb:72:7f: 4b:c5:ef:28:d0:6e:d8:60:fb:57:90:e0:14:9d:12: 08:3f:8f:71:62:28:b3:2d:ef:da:2a:2c:08:fb:86: 31:99:d4:b9:0f:62:ab:93:98:bc:f8:d0:17:73:04: 45:78:76:98:b1:f1:6b:b8:ef:9e:35:73:ac:0b:de: 40:cf:1e:bf:1b:c7:e7:e9:fc:3d:14:92:27:4a:ca: 87:a6:7e:5f:47:2a:44:89:6d:df:de:19:20:39:77: 61:97:6e:68:e6:82:db:ac:e0:c5:f1:60:4d:75:33: 79:79:cd:86:60:6b:c0:33:51:04:64:c9:5e:2e:98: 48:2d:2f:c4:da:04:62:a7:e6:3c:59:87:b8:67:5b: a4:7e:4b:0c:e5:07:2a:a8:8e:ff:ab:62:3a:e2:c6: e9:c7:16:16:d1:fd:94:79:f2:11:b2:bf:89:de:bd: 6b:6e:cf:09:34:a6:34:f5:0e:da:2f:86:a8:db:6e: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:42:77:1E:86:B1:C7:7D:99:90:FD:2C:54:11:99:7F:B8:33:57:EF X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:f1:26:a0:37:1c:ce:ce:37:dc:96:39:4f:a3:2e:70:79:78: 2b:cd:43:3d:c2:52:28:45:05:95:af:26:36:61:53:a3:3a:a8: cb:61:93:39:02:b1:6a:fc:ca:1d:86:36:bd:95:6d:fc:92:65: fe:cd:8e:0c:d6:13:ef:8d:b1:64:e2:91:36:ef:a9:76:aa:81: b6:9b:76:cf:b0:b4:7c:22:5e:47:c1:e6:8d:55:a5:b9:4e:45: c3:06:5d:7f:03:2b:2f:63:63:72:62:ab:fc:84:8a:9d:52:49: 7d:d3:23:b0:9b:a0:4d:7c:70:e5:74:40:f9:e2:be:7c:51:88: 22:c1:4d:76:10:c7:27:09:3e:4a:de:53:9d:b4:3b:8a:81:ac: cf:b3:c9:3a:4c:6a:4d:66:01:07:b2:c6:59:59:c5:29:40:71: 54:af:57:d4:69:5f:06:b1:30:d6:df:f8:36:e5:cc:eb:39:84: 18:0d:ba:d9:61:f7:8b:31:d2:38:45:d0:6d:9f:7b:e1:38:03: ff:01:99:67:cc:cb:0d:c0:de:96:75:b2:84:68:42:15:cc:5f: 59:65:ee:8a:e1:17:f5:df:11:2d:85:f9:79:86:57:03:ac:88: 0a:8f:02:de:9f:d8:4f:05:1f:09:7f:89:ee:83:32:37:b2:54: f6:73:9b:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoMzhCQ0Q0RjlGODNBMUFEMDlCNjg4N0RCRUQ4MDRCMTgw QzNBMTZGQzAeFw0yNTEyMDMwNTM0NDJaFw0yNTEyMTAwNTM0NDJaMBgxFjAUBgNV BAMTDTY5MmZjYmYzLTVhOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkxEVFazu6fOjZ52ATPpldpNlwAFuKYG6X96XnG5lS/EGtyyjgNiy+2wGL0Qja IiuoX7zeGIs8yZRid6TpCqtKNJX6L0TEebtyf0vF7yjQbthg+1eQ4BSdEgg/j3Fi KLMt79oqLAj7hjGZ1LkPYquTmLz40BdzBEV4dpix8Wu47541c6wL3kDPHr8bx+fp /D0UkidKyoemfl9HKkSJbd/eGSA5d2GXbmjmgtus4MXxYE11M3l5zYZga8AzUQRk yV4umEgtL8TaBGKn5jxZh7hnW6R+SwzlByqojv+rYjrixunHFhbR/ZR58hGyv4ne vWtuzwk0pjT1DtovhqjbbvmxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ0J3Hoax x32ZkP0sVBGZf7gzV+8wHwYDVR0jBBgwFoAUOLzU+fg6GtCbaIfb7YBLGAw6Fvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzI0N0I1Q0JBRDAw OTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT0x6VS1mZzZHdENiYUlmYjdZQkxHQXc2RnZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RURGLzI0N0I1Q0JBRDAwOTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RD YmFJZmI3WUJMR0F3NkZ2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMbxJqA3HM7ON9yWOU+jLnB5eCvNQz3CUihFBZWvJjZhU6M6qMthkzkC sWr8yh2GNr2VbfySZf7NjgzWE++NsWTikTbvqXaqgbabds+wtHwiXkfB5o1VpblO RcMGXX8DKy9jY3Jiq/yEip1SSX3TI7CboE18cOV0QPnivnxRiCLBTXYQxycJPkre U520O4qBrM+zyTpMak1mAQeyxllZxSlAcVSvV9RpXwaxMNbf+DblzOs5hBgNutlh 94sx0jhF0G2fe+E4A/8BmWfMyw3A3pZ1soRoQhXMX1ll7orhF/XfES2F+XmGVwOs iAqPAt6f2E8FHwl/ie6DMjeyVPZzm2I= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:16 2025 by rpki-client