This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json) Hash identifier: bJOyX73tbooAnSGV6iBfPqRIfYIRqyiPxAvRLnkl7h8= Subject key identifier: 5C:9D:A5:2F:19:55:9C:13:02:21:65:F0:79:74:EE:68:6F:30:E0:43 Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft Manifest number: 04CA Signing time: Mon 22 Dec 2025 23:20:15 +0000 Manifest this update: Mon 22 Dec 2025 23:20:15 +0000 Manifest next update: Mon 29 Dec 2025 23:20:15 +0000 Files and hashes: 1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: 7kHrCQCE+6h/PCQdTD/TtMHyftsBm1phuMg4ZYPzSls=) 2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: tQiNQ7BJOHiZ3SajpZRuZXRtnbaAOtI+d58IgVrjifA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Validity Not Before: Dec 22 23:20:15 2025 GMT Not After : Dec 29 23:20:15 2025 GMT Subject: CN=6949d22f-6744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:69:fb:4d:a0:f2:ba:b1:a7:0a:51:94:d3: 27:a0:6a:cf:a1:be:57:aa:9d:37:9a:f3:27:82:4a: a0:1a:e4:8c:8d:bc:af:88:49:9c:ba:36:2d:70:c3: b7:d9:17:72:6b:be:9a:8e:71:fa:f7:b1:92:5c:d5: 38:b3:3e:ba:05:c9:a7:15:80:66:3d:0a:61:00:d9: 56:22:43:99:df:8c:da:70:9b:c1:e2:5d:6e:9a:6e: 97:11:21:8a:ff:80:c9:19:4c:21:d4:fe:ad:29:af: 49:cf:fc:4a:9d:da:d9:0c:9b:69:61:2f:7a:92:2a: d4:e8:d7:02:5f:dc:c6:8d:c1:c6:8d:f3:b2:c0:80: 73:05:10:93:1b:6a:8b:5f:50:51:37:90:37:0d:6f: f8:08:46:d8:d4:ec:8a:9d:15:33:1e:04:e0:19:d8: 3f:a0:44:bf:4d:5d:b6:be:29:de:f7:22:47:df:ce: ca:d3:69:00:f1:08:b6:09:51:a5:e5:93:42:01:0d: fd:5d:49:fc:f5:32:90:df:c8:1f:62:1e:63:f8:4c: 2b:37:82:08:c2:c6:0e:d7:71:7d:75:25:b1:16:32: c2:ac:58:03:49:ef:8b:3b:f3:c6:9c:22:3e:db:1e: 6a:64:b8:fe:9e:05:da:27:a8:50:c8:c7:77:4b:6d: 95:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9D:A5:2F:19:55:9C:13:02:21:65:F0:79:74:EE:68:6F:30:E0:43 X509v3 Authority Key Identifier: keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:31:90:36:5d:6c:4c:fd:6f:60:ae:00:2c:41:f6:d1:59:56: 0b:01:66:60:dc:55:ce:4b:2e:3e:cd:03:c5:c1:7d:ba:de:da: 4c:f1:c4:d1:fa:2b:9b:e1:24:64:c8:3c:22:c9:3c:a8:2c:76: 8a:6f:dc:e4:14:1a:8d:8f:89:2c:3b:7e:e7:d6:a1:ce:18:66: b9:81:08:ec:ee:d7:22:87:bd:0d:36:9d:29:ed:fb:60:ed:c0: 2d:e7:90:de:9d:75:5e:54:aa:42:32:77:10:ee:52:07:e7:63: bc:35:60:90:2f:df:74:2c:b4:88:3a:3f:9d:e0:b2:94:fe:13: ca:a6:87:eb:f3:4c:b7:24:3d:4b:39:b9:8b:99:76:82:13:6f: b9:7a:34:49:c1:c0:8a:39:28:c5:dd:86:e1:a9:55:cb:e7:bd: 08:18:2a:51:c1:ec:b4:35:dd:be:2b:83:05:a1:c0:94:89:2c: 17:b6:36:0b:16:4e:f5:f4:b4:06:39:aa:a6:3f:24:dd:89:c3: 25:fe:63:b3:14:80:fe:7b:d4:e6:3f:78:c5:ea:2e:5c:3f:05: 73:c6:2b:5b:22:6b:49:db:e1:48:25:6e:31:03:c3:3c:b7:ca: ce:28:c9:df:6f:d6:62:2b:d0:4f:89:66:9e:50:ed:34:3c:6b: b5:95:33:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3RTJDRTY4OEMz RTQ2RkM1MzAwHhcNMjUxMjIyMjMyMDE1WhcNMjUxMjI5MjMyMDE1WjAYMRYwFAYD VQQDDA02OTQ5ZDIyZi02NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37lp+02g8rqxpwpRlNMnoGrPob5Xqp03mvMngkqgGuSMjbyviEmcujYtcMO3 2Rdya76ajnH697GSXNU4sz66BcmnFYBmPQphANlWIkOZ34zacJvB4l1umm6XESGK /4DJGUwh1P6tKa9Jz/xKndrZDJtpYS96kirU6NcCX9zGjcHGjfOywIBzBRCTG2qL X1BRN5A3DW/4CEbY1OyKnRUzHgTgGdg/oES/TV22vine9yJH387K02kA8Qi2CVGl 5ZNCAQ39XUn89TKQ38gfYh5j+EwrN4IIwsYO13F9dSWxFjLCrFgDSe+LO/PGnCI+ 2x5qZLj+ngXaJ6hQyMd3S22VwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFydpS8Z VZwTAiFl8Hl07mhvMOBDMB8GA1UdIwQYMBaAFKM8yoG1XgRlXRtafizmiMPkb8Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREYwMC8zQUUwMDM0QTRF N0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJHVmRHMXAtTE9hSXctUnZ4 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ektnYlZlQkdWZEcxcC1MT2FJdy1SdnhUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REYwMC8zQUUwMDM0QTRFN0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJH VmRHMXAtTE9hSXctUnZ4VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0MZA2XWxM/W9grgAsQfbRWVYLAWZg3FXOSy4+zQPFwX263tpM8cTR +iub4SRkyDwiyTyoLHaKb9zkFBqNj4ksO37n1qHOGGa5gQjs7tcih70NNp0p7ftg 7cAt55DenXVeVKpCMncQ7lIH52O8NWCQL990LLSIOj+d4LKU/hPKpofr80y3JD1L ObmLmXaCE2+5ejRJwcCKOSjF3YbhqVXL570IGCpRwey0Nd2+K4MFocCUiSwXtjYL Fk719LQGOaqmPyTdicMl/mOzFID+e9TmP3jF6i5cPwVzxitbImtJ2+FIJW4xA8M8 t8rOKMnfb9ZiK9BPiWaeUO00PGu1lTNl -----END CERTIFICATE-----Generated at Wed Dec 24 14:08:01 2025 by rpki-client