This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft File: OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json) Hash identifier: cr/5055aGmktcC1X+/Tsj9+IIRVyOe6jMOO5gPhGIlk= Subject key identifier: 00:53:34:81:55:59:C1:EC:32:4C:46:49:DD:4C:0B:35:A0:41:33:AA Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B Certificate issuer: /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft Manifest number: 09 Signing time: Tue 23 Dec 2025 06:58:47 +0000 Manifest this update: Tue 23 Dec 2025 06:58:46 +0000 Manifest next update: Tue 30 Dec 2025 06:58:46 +0000 Files and hashes: 1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: naaWoEYSBja+mQQJ5/5qg1HnAUNGvqG0XsQPLQi3ZUU=) 2: 73261D50DBF311F0B2CAB720556F56BC.roa (hash: ywJMDcoKtldr4HOdsn13LtO6Zc7isr0wzrZeQ+VLd08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B Validity Not Before: Dec 23 06:58:46 2025 GMT Not After : Dec 30 06:58:46 2025 GMT Subject: CN=694a3da7-419e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:7c:eb:f7:53:ad:2b:16:17:09:9f:72:e5: 9a:72:4b:c7:88:24:bb:48:3f:30:4b:2a:7f:80:a1: 42:41:62:11:09:ae:93:e4:75:05:3e:21:dc:35:7d: 41:1c:53:7a:9f:3c:6e:4b:74:a0:75:cf:1a:5e:61: de:f0:43:32:9b:37:d2:83:aa:19:1e:5e:5a:63:21: 17:70:09:12:17:cd:7f:66:af:6d:1b:5e:48:14:25: cd:db:65:a6:5c:01:d4:14:a5:69:b7:cd:6b:b5:93: ad:88:a9:6d:0a:d2:4f:9c:3c:81:b7:33:86:aa:14: a9:91:11:44:48:50:08:f0:eb:98:f5:c0:08:c7:2a: 61:21:cf:0d:af:42:f2:be:52:a6:d8:c9:a1:1f:d4: be:18:0d:cb:12:33:6b:68:c7:24:8b:14:ab:97:ac: 32:03:9b:e4:45:a4:6b:ca:06:e3:80:39:5f:1e:a3: 31:bd:45:38:b4:37:a8:bb:a9:4e:85:81:db:8c:7c: af:7d:49:1c:0c:9f:4d:2f:02:5d:f1:05:6e:be:92: 10:c1:a9:7e:4d:50:76:23:91:78:62:d0:b3:9e:9c: 2c:73:f9:8d:61:dd:2e:bb:32:87:5d:51:64:d5:fe: be:1a:fe:ba:07:8d:21:18:c4:bb:2f:a3:84:15:1f: f5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:53:34:81:55:59:C1:EC:32:4C:46:49:DD:4C:0B:35:A0:41:33:AA X509v3 Authority Key Identifier: keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:dd:22:47:5c:1d:81:f3:d5:9b:c9:b1:01:3e:dd:e2:9e:f6: 21:40:1d:36:f5:c0:1b:c8:6d:c1:09:0d:2f:e9:e6:21:bb:1a: 0b:c2:3f:9c:70:81:bd:6f:cb:25:c5:15:28:3a:4e:a3:31:a3: 3d:3a:cc:87:12:77:ce:ca:f0:7f:c0:56:49:e7:61:ff:d0:32: 1c:a3:b0:e7:52:c0:6c:c6:28:aa:be:eb:87:7e:56:59:a9:e7: cf:bf:33:a3:9b:5b:09:a8:32:8c:59:90:a0:a0:6b:95:2b:d4: 7f:1a:f8:5e:e1:32:c3:2c:5b:e8:26:25:94:4b:c7:63:52:66: 8f:71:f5:08:92:43:be:8c:8e:2e:e1:9e:f6:49:88:4b:23:af: fa:b5:73:bb:43:b1:7e:63:89:4e:27:3a:1f:15:0d:d3:06:ee: 58:d0:0e:6c:ca:25:aa:a7:23:55:7d:77:05:7e:0b:32:08:9a: cb:7a:36:73:25:e8:b9:b5:21:2e:3f:fe:5c:8d:5c:fb:fe:d1: 54:42:9d:f2:88:6b:da:46:a7:79:88:23:c7:71:3f:34:9f:70: f4:5f:8e:6d:10:16:f4:e1:a2:1c:ac:e7:d5:ca:45:7f:e4:fe: 58:99:3a:4d:eb:79:52:bb:1a:8b:8a:05:b2:63:bb:98:13:10: 5a:2a:7c:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4 QzQyNTExMC8GA1UEBRMoM0ExQjA5NDE5MUZFMzQ3NTM3MTlDMUQ0ODFGMjA4ODVB ODA4QzE2QjAeFw0yNTEyMjMwNjU4NDZaFw0yNTEyMzAwNjU4NDZaMBgxFjAUBgNV BAMMDTY5NGEzZGE3LTQxOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTFXzr91OtKxYXCZ9y5ZpyS8eIJLtIPzBLKn+AoUJBYhEJrpPkdQU+Idw1fUEc U3qfPG5LdKB1zxpeYd7wQzKbN9KDqhkeXlpjIRdwCRIXzX9mr20bXkgUJc3bZaZc AdQUpWm3zWu1k62IqW0K0k+cPIG3M4aqFKmREURIUAjw65j1wAjHKmEhzw2vQvK+ UqbYyaEf1L4YDcsSM2toxySLFKuXrDIDm+RFpGvKBuOAOV8eozG9RTi0N6i7qU6F gduMfK99SRwMn00vAl3xBW6+khDBqX5NUHYjkXhi0LOenCxz+Y1h3S67ModdUWTV /r4a/roHjSEYxLsvo4QVH/X3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAFM0gVVZ wewyTEZJ3UwLNaBBM6owHwYDVR0jBBgwFoAUOhsJQZH+NHU3GcHUgfIIhagIwWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDNDI1L0RGQkFFRTE0REJF NDExRjBBOEI1QkY2NDM2NkY1NkJDL09oc0pRWkgtTkhVM0djSFVnZklJaGFnSXdX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2hzSlFaSC1OSFUzR2NIVWdmSUloYWdJd1dzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD NDI1L0RGQkFFRTE0REJFNDExRjBBOEI1QkY2NDM2NkY1NkJDL09oc0pRWkgtTkhV M0djSFVnZklJaGFnSXdXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjdIkdcHYHz1ZvJsQE+3eKe9iFAHTb1wBvIbcEJDS/p5iG7GgvCP5xw gb1vyyXFFSg6TqMxoz06zIcSd87K8H/AVknnYf/QMhyjsOdSwGzGKKq+64d+Vlmp 58+/M6ObWwmoMoxZkKCga5Ur1H8a+F7hMsMsW+gmJZRLx2NSZo9x9QiSQ76Mji7h nvZJiEsjr/q1c7tDsX5jiU4nOh8VDdMG7ljQDmzKJaqnI1V9dwV+CzIImst6NnMl 6Lm1IS4//lyNXPv+0VRCnfKIa9pGp3mII8dxPzSfcPRfjm0QFvThohys59XKRX/k /liZOk3reVK7GouKBbJju5gTEFoqfEQ= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:27 2025 by rpki-client