This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: EhLB8TGNo52XqaougajRf1gmYmU0BVJkQzbbDpUqb+E= Subject key identifier: C2:FB:03:E0:3F:7D:24:5F:81:2D:A6:F0:18:BB:E6:75:F4:60:AF:7E Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 36BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 35E6 Signing time: Mon 08 Dec 2025 14:23:10 +0000 Manifest this update: Mon 08 Dec 2025 14:23:09 +0000 Manifest next update: Mon 15 Dec 2025 14:23:09 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: 7+UZEJHdFGsRbvspBHcrK9QTU09TnG2Hjg6cnzkMfJU=) 2: 55A8B282BB0111F0A0BF8F7AC4F9AE02.roa (hash: hW+D8qPNugPqQOX8LJeRy7gd8q00PV+ZVrYKAk9P5sM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 14:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14012 (0x36bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Dec 8 14:23:09 2025 GMT Not After : Dec 15 14:23:09 2025 GMT Subject: CN=6936df4e-43dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:94:f8:0c:ef:95:a0:ab:89:29:68:0e:51: de:41:1d:ac:08:eb:1b:50:76:dd:23:40:44:2c:f3: 5c:30:bd:ea:4f:9a:9d:8c:6a:32:03:7b:74:4b:6c: ff:cc:69:cd:e7:89:43:18:50:67:3a:25:f2:27:eb: be:14:40:ac:64:60:74:0f:a9:46:9a:13:96:50:53: 50:05:a7:ee:05:41:d5:41:05:c5:10:79:b8:70:4a: 4b:65:d5:c5:a2:0a:1f:6e:88:11:4c:a1:1f:75:83: 78:1c:f9:df:bc:ed:22:f4:7c:7a:92:1c:41:4a:ed: d2:a4:4c:69:98:8d:33:1c:45:8c:3b:bd:1b:84:92: 37:fe:ff:99:8e:89:3b:87:bf:38:83:d7:a1:98:b1: b9:7b:c8:6a:80:d6:da:58:fa:9e:7e:d5:dd:d3:ca: 1f:4e:a5:c3:f7:9b:8f:db:d0:a5:82:08:49:99:ff: c7:d7:13:76:53:f9:03:d7:c2:7b:a9:b0:ce:a8:01: 21:af:de:0f:c7:d8:9f:84:5e:a2:01:11:48:fc:1c: 71:62:da:0d:b1:d7:59:b4:e6:6a:8e:27:e3:cd:3f: 78:08:77:e9:fd:66:2c:b7:f3:ac:95:22:4f:e4:c7: d0:7f:1e:11:90:b2:e8:ec:26:7e:ce:43:0c:3c:a7: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FB:03:E0:3F:7D:24:5F:81:2D:A6:F0:18:BB:E6:75:F4:60:AF:7E X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:b9:da:7b:2d:69:60:61:d5:24:f2:86:7f:1f:97:d9:50:3f: b2:5e:3b:a1:5b:41:1a:94:54:e2:8e:f7:9d:8f:2f:10:f8:29: 92:57:4a:e7:ea:a0:39:bc:5d:a9:58:f5:12:0d:9f:9a:b1:67: dc:86:91:10:15:91:c6:1b:89:5e:df:93:d1:e6:f3:25:a5:68: 1a:1d:c6:0c:1f:a5:af:47:05:a2:7c:bc:2d:69:58:6c:a1:95: 2b:fc:3a:fb:d1:9a:c2:04:d6:c8:d9:1c:cf:dd:16:5f:cb:fa: 5d:48:63:c5:1a:23:01:f1:25:b1:32:6a:86:25:59:4e:88:29: 9c:cf:78:b6:53:fb:04:67:b7:d0:c0:e4:d6:8d:56:10:a0:d6: e3:c1:56:e1:26:12:29:04:c2:3a:2e:27:58:58:d4:c3:b7:23: de:ac:e4:c4:d6:fa:a2:28:cd:26:44:a6:7f:5b:28:16:d8:a7: 2e:72:1a:bb:67:0f:cd:3a:82:06:3b:e2:95:9f:63:0b:9f:0c: af:ce:3a:10:1f:18:42:fd:85:e4:96:61:c2:e0:67:7b:43:99: 18:c5:31:d7:fd:7f:cf:2d:57:81:25:af:d6:db:6f:8f:98:2e: 26:35:17:b9:1f:15:39:7e:0a:7a:20:8a:55:ee:9b:1e:da:5e: a7:91:3a:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjUxMjA4MTQyMzA5WhcNMjUxMjE1MTQyMzA5WjAYMRYwFAYD VQQDEw02OTM2ZGY0ZS00M2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0KU+AzvlaCriSloDlHeQR2sCOsbUHbdI0BELPNcML3qT5qdjGoyA3t0S2z/ zGnN54lDGFBnOiXyJ+u+FECsZGB0D6lGmhOWUFNQBafuBUHVQQXFEHm4cEpLZdXF ogofbogRTKEfdYN4HPnfvO0i9Hx6khxBSu3SpExpmI0zHEWMO70bhJI3/v+Zjok7 h784g9ehmLG5e8hqgNbaWPqeftXd08ofTqXD95uP29ClgghJmf/H1xN2U/kD18J7 qbDOqAEhr94Px9ifhF6iARFI/BxxYtoNsddZtOZqjifjzT94CHfp/WYst/OslSJP 5MfQfx4RkLLo7CZ+zkMMPKeP8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFML7A+A/ fSRfgS2m8Bi75nX0YK9+MB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0udp7LWlgYdUk8oZ/H5fZUD+yXjuhW0EalFTijvedjy8Q+CmSV0rn 6qA5vF2pWPUSDZ+asWfchpEQFZHGG4le35PR5vMlpWgaHcYMH6WvRwWifLwtaVhs oZUr/Dr70ZrCBNbI2RzP3RZfy/pdSGPFGiMB8SWxMmqGJVlOiCmcz3i2U/sEZ7fQ wOTWjVYQoNbjwVbhJhIpBMI6LidYWNTDtyPerOTE1vqiKM0mRKZ/WygW2Kcuchq7 Zw/NOoIGO+KVn2MLnwyvzjoQHxhC/YXklmHC4Gd7Q5kYxTHX/X/PLVeBJa/W22+P mC4mNRe5HxU5fgp6IIpV7pse2l6nkTqs -----END CERTIFICATE-----Generated at Tue Dec 9 02:32:23 2025 by rpki-client