This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft File: OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json) Hash identifier: 5LmY+E5dpVc8CfkIFRkT7lzIGq95sk12lL0RetGb3D0= Subject key identifier: D3:50:B9:4B:69:F2:C7:BA:A7:FC:27:D6:D6:52:0E:A9:D3:A6:3F:C6 Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1 Certificate issuer: /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1 Certificate serial: 1F01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft Manifest number: 1EF5 Signing time: Sat 06 Dec 2025 15:44:17 +0000 Manifest this update: Sat 06 Dec 2025 15:44:16 +0000 Manifest next update: Sat 13 Dec 2025 15:44:16 +0000 Files and hashes: 1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: 0DQE+U8ln/etI6ZoNzFJf9IkJUgrpe8z3IYNgK2Dang=) 2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7937 (0x1f01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1 Validity Not Before: Dec 6 15:44:16 2025 GMT Not After : Dec 13 15:44:16 2025 GMT Subject: CN=69344f51-813b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:d8:8e:a5:b4:c2:01:a6:a1:0c:02:6a:72: 88:bf:ac:99:af:8a:45:0d:53:66:f9:d5:93:e3:ae: 68:5a:80:bd:52:eb:5b:4b:06:0e:35:b5:11:1a:45: 4f:ee:5a:73:0e:ca:0f:3a:8d:95:b3:06:09:f2:c9: ee:a8:27:57:f4:d6:a7:c2:cb:59:26:b3:cb:49:7c: bc:b1:51:98:47:7b:35:3b:0a:f4:39:9e:30:db:64: 87:77:f3:9e:78:7f:88:93:e4:ef:24:e2:31:03:4d: 13:d7:74:c3:fc:ef:66:3f:2b:05:e9:6d:08:f1:e6: 6c:07:44:8d:3c:be:c7:f8:41:b8:b6:99:8e:5e:b5: 4e:ad:8e:e3:c6:3a:dc:db:28:2a:40:f9:80:f7:9c: 24:a3:b1:d2:ba:46:27:ad:cb:6c:0c:69:7e:25:76: ce:db:0a:02:93:05:ff:a8:8a:46:5f:10:fa:a7:76: 11:39:03:88:bf:55:4c:dc:25:3c:96:db:bc:6a:ec: f2:98:10:a9:f3:1d:e2:15:eb:9f:ab:bf:76:69:4f: 7c:3f:99:77:05:dd:e8:e3:4b:6c:9c:ef:e1:60:49: 0a:39:cc:f4:11:4d:fe:0b:a5:d4:b0:02:7b:ec:4b: 3e:b9:5f:75:52:50:87:34:83:16:20:f2:28:44:f2: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:50:B9:4B:69:F2:C7:BA:A7:FC:27:D6:D6:52:0E:A9:D3:A6:3F:C6 X509v3 Authority Key Identifier: keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:d0:7e:f8:55:21:9a:ea:03:e4:56:d8:ba:82:1f:3e:2e:4a: 02:53:ae:c7:08:d1:b0:19:3e:73:c1:05:30:ce:0b:6d:4b:bb: 55:a4:a0:80:9e:e3:7c:d3:28:95:70:c7:25:1e:2a:d2:7a:70: 7e:57:48:3b:d8:57:56:1f:ed:ed:03:2c:02:90:cc:45:f8:9c: ea:e0:1a:75:4f:f8:cc:b2:97:bd:85:c2:70:47:09:52:91:20: 93:36:3e:87:a2:23:d1:66:ad:9a:fe:72:a9:fc:94:18:aa:54: ca:4f:c1:ee:0a:92:d3:7b:38:fd:4d:4a:46:a6:70:05:31:ea: 01:86:f4:a5:85:9b:3e:94:e7:09:26:92:30:5f:c1:d6:de:a0: 28:a5:1a:aa:d3:68:a7:74:b8:9c:01:1e:d2:ea:4c:bc:f4:eb: 6c:b6:00:aa:5d:ee:34:35:5b:1d:b6:5e:01:80:c2:f5:a5:16: b3:48:e4:4f:c7:49:77:5d:19:0b:3a:09:ba:df:54:04:cb:78: 6f:33:16:93:1c:69:c6:c2:2b:3d:c4:94:82:d1:30:23:1d:c7: d1:19:b1:6a:e0:ed:9a:7f:d3:15:55:28:90:39:67:ea:03:ea: 8c:ad:61:7e:8d:9f:48:4b:48:aa:a4:4e:36:5e:a2:94:dd:8f: 5b:98:a3:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDN0MxMTAvBgNVBAUTKDM5RDFENTk1NTQxODkxMzUzMDk0NTgzNjE4RDZDQzA3 OUM4MzBDRTEwHhcNMjUxMjA2MTU0NDE2WhcNMjUxMjEzMTU0NDE2WjAYMRYwFAYD VQQDEw02OTM0NGY1MS04MTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC3YjqW0wgGmoQwCanKIv6yZr4pFDVNm+dWT465oWoC9UutbSwYONbURGkVP 7lpzDsoPOo2VswYJ8snuqCdX9NanwstZJrPLSXy8sVGYR3s1Owr0OZ4w22SHd/Oe eH+Ik+TvJOIxA00T13TD/O9mPysF6W0I8eZsB0SNPL7H+EG4tpmOXrVOrY7jxjrc 2ygqQPmA95wko7HSukYnrctsDGl+JXbO2woCkwX/qIpGXxD6p3YROQOIv1VM3CU8 ltu8auzymBCp8x3iFeufq792aU98P5l3Bd3o40tsnO/hYEkKOcz0EU3+C6XUsAJ7 7Es+uV91UlCHNIMWIPIoRPIweQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNQuUtp 8se6p/wn1tZSDqnTpj/GMB8GA1UdIwQYMBaAFDnR1ZVUGJE1MJRYNhjWzAecgwzh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM3Qy8yOUY3QTA0MDZF RjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtUVXdsRmcyR05iTUI1eURE T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kSFZsVlFZa1RVd2xGZzJHTmJNQjV5RERPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM3Qy8yOUY3QTA0MDZFRjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtU VXdsRmcyR05iTUI1eURET0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK0H74VSGa6gPkVti6gh8+LkoCU67HCNGwGT5zwQUwzgttS7tVpKCA nuN80yiVcMclHirSenB+V0g72FdWH+3tAywCkMxF+Jzq4Bp1T/jMspe9hcJwRwlS kSCTNj6HoiPRZq2a/nKp/JQYqlTKT8HuCpLTezj9TUpGpnAFMeoBhvSlhZs+lOcJ JpIwX8HW3qAopRqq02indLicAR7S6ky89OtstgCqXe40NVsdtl4BgML1pRazSORP x0l3XRkLOgm631QEy3hvMxaTHGnGwis9xJSC0TAjHcfRGbFq4O2af9MVVSiQOWfq A+qMrWF+jZ9IS0iqpE42XqKU3Y9bmKO3 -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:40 2025 by rpki-client