This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: M6VHZv920vdL0Hki5QE427GE0T55pGSMekvYjMDo6Qc= Subject key identifier: AC:79:C7:94:12:B4:61:62:12:35:D0:74:BE:97:80:CB:D7:5D:01:38 Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 0225 Signing time: Tue 23 Dec 2025 01:08:02 +0000 Manifest this update: Tue 23 Dec 2025 01:08:01 +0000 Manifest next update: Tue 30 Dec 2025 01:08:01 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: 3kCgzlk0zVQWb0iqfoKzozgUYtsU+b/FxdWd5Tf9kSk=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: Ll4yg/VXe6ptCubyWYXaO265ePb/yR1xqd8fLdCSjr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: Dec 23 01:08:01 2025 GMT Not After : Dec 30 01:08:01 2025 GMT Subject: CN=6949eb72-d904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:c9:02:ea:ac:ec:20:9e:b4:a3:6f:1e:25: 92:50:3f:4b:ac:2b:77:23:05:8d:7c:8f:a0:10:84: ef:e3:3e:12:16:49:88:78:46:56:bf:86:c1:d0:99: 66:6a:3e:cb:25:b8:dc:d8:e1:ba:b7:42:64:be:56: 26:1c:a9:a4:36:d8:e2:5e:c3:ca:8f:0e:b3:90:62: 01:20:e1:45:96:06:a6:2a:52:44:4d:32:32:70:db: 03:7a:ee:81:4d:0e:9c:80:49:d4:52:78:a4:0a:6d: af:62:c2:01:bc:42:07:c7:11:60:e2:f7:20:73:6e: b4:da:46:6e:34:44:98:f4:a3:18:a1:b3:f9:5d:fc: 6d:51:8a:8f:d5:95:f4:9d:c2:6d:c8:bf:de:dc:80: e7:be:96:bb:13:e6:db:bd:79:a4:64:2d:f3:a8:1f: d3:30:6b:57:51:0e:fb:42:a2:65:ca:d1:6d:13:cb: 0c:c5:33:4f:ac:d6:68:fd:93:bf:38:61:50:e7:b2: ac:80:34:2f:a7:89:56:55:da:0b:ea:6f:8e:24:88: b1:9a:5f:9c:3f:43:f7:27:36:c3:24:62:a0:5c:86: 6e:b5:a7:b4:cc:74:3b:2a:e8:be:a3:88:bb:44:eb: 20:47:82:d4:d8:09:88:15:d8:94:a1:75:b7:3c:33: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:79:C7:94:12:B4:61:62:12:35:D0:74:BE:97:80:CB:D7:5D:01:38 X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2c:48:04:4f:4c:20:80:c8:ba:b3:e4:f9:d0:f6:e2:7a:0d: c3:56:cd:50:c1:8e:0d:e4:1c:50:8d:97:31:1f:28:40:87:75: 91:88:e2:48:e5:d5:91:f4:a8:44:e1:ae:e1:2a:28:fe:9b:33: 1e:32:2a:44:49:9e:53:65:0a:f4:10:34:4b:73:13:97:c7:de: 48:65:f4:00:0a:18:bc:4c:39:14:22:38:a0:bf:2b:d0:ca:0c: cf:09:63:6c:fd:f4:be:62:ea:6b:ad:14:2f:35:ce:26:03:32: c8:08:7d:c8:47:c7:52:50:21:c6:35:f2:6b:36:22:73:da:2f: 5f:c0:02:0b:40:54:5b:59:e6:ec:db:89:0b:49:ab:df:69:64: 20:3f:09:71:11:c8:bd:96:ab:0d:25:6c:d9:29:04:89:0e:16: 1a:d6:44:d9:58:ba:70:f9:bd:89:da:59:44:8d:90:49:02:c3: 06:f8:f3:97:83:97:b9:60:71:c0:b2:60:fc:4b:9b:07:ed:23: ad:86:5b:62:29:0c:98:77:96:1e:95:fa:89:6e:d3:c9:d2:69: 12:ab:42:7d:56:53:41:47:d5:e6:0a:f5:d0:98:a7:cf:91:21: 87:25:e4:80:41:87:44:f9:a9:f3:73:c5:22:da:d6:7c:34:49: 18:0e:13:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUxMjIzMDEwODAxWhcNMjUxMjMwMDEwODAxWjAYMRYwFAYD VQQDDA02OTQ5ZWI3Mi1kOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAss/JAuqs7CCetKNvHiWSUD9LrCt3IwWNfI+gEITv4z4SFkmIeEZWv4bB0Jlm aj7LJbjc2OG6t0JkvlYmHKmkNtjiXsPKjw6zkGIBIOFFlgamKlJETTIycNsDeu6B TQ6cgEnUUnikCm2vYsIBvEIHxxFg4vcgc2602kZuNESY9KMYobP5XfxtUYqP1ZX0 ncJtyL/e3IDnvpa7E+bbvXmkZC3zqB/TMGtXUQ77QqJlytFtE8sMxTNPrNZo/ZO/ OGFQ57KsgDQvp4lWVdoL6m+OJIixml+cP0P3JzbDJGKgXIZutae0zHQ7Kui+o4i7 ROsgR4LU2AmIFdiUoXW3PDNztQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKx5x5QS tGFiEjXQdL6XgMvXXQE4MB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbLEgET0wggMi6s+T50Pbieg3DVs1QwY4N5BxQjZcxHyhAh3WRiOJI 5dWR9KhE4a7hKij+mzMeMipESZ5TZQr0EDRLcxOXx95IZfQAChi8TDkUIjigvyvQ ygzPCWNs/fS+YuprrRQvNc4mAzLICH3IR8dSUCHGNfJrNiJz2i9fwAILQFRbWebs 24kLSavfaWQgPwlxEci9lqsNJWzZKQSJDhYa1kTZWLpw+b2J2llEjZBJAsMG+POX g5e5YHHAsmD8S5sH7SOthltiKQyYd5YelfqJbtPJ0mkSq0J9VlNBR9XmCvXQmKfP kSGHJeSAQYdE+anzc8Ui2tZ8NEkYDhPG -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:11 2025 by rpki-client