This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft File: OY22Qj_F4Pd3TyozMdfbzErb9TY.mft (raw, json) Hash identifier: YdpxwXxbPHmJAdZn/Q6a/M1pdiFi3f2Z3Fzh7f/G3aU= Subject key identifier: 53:C3:3C:CE:63:FF:3E:9E:4D:0A:29:9F:09:32:88:74:60:0A:D0:1F Authority key identifier: 39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36 Certificate issuer: /CN=A9111E74/serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft Manifest number: 1B Signing time: Fri 05 Dec 2025 05:38:40 +0000 Manifest this update: Fri 05 Dec 2025 05:38:39 +0000 Manifest next update: Fri 12 Dec 2025 05:38:39 +0000 Files and hashes: 1: OY22Qj_F4Pd3TyozMdfbzErb9TY.crl (hash: ttDi/HJew7PrCLBRR27cJzZ+Lg9juFcdL8OLGeSEobc=) 2: 7A55B678AB4511F091F88158C4F9AE02.roa (hash: FoI4HeON78cJuhYbJvTWNmf/HypRelSKwk6lwHyGL/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111E74, serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536 Validity Not Before: Dec 5 05:38:39 2025 GMT Not After : Dec 12 05:38:39 2025 GMT Subject: CN=69326fe0-d4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:46:d4:05:bf:b4:d9:62:91:b7:b7:41:4e:d4: fc:48:80:d2:ca:62:05:80:64:fe:51:a4:6a:58:43: 4d:30:34:f2:f3:8e:0f:df:c6:86:e0:0e:0a:02:4a: 91:93:c4:62:0c:9e:d9:cc:64:65:5a:05:b3:42:2a: 56:2b:03:e9:14:c0:a0:cc:72:79:34:d8:5e:f9:0f: 6d:97:29:3a:2d:c2:ac:6a:0b:13:a0:6b:a9:b7:12: fd:90:f6:12:b4:94:5c:2f:de:26:d9:67:60:6b:0b: 3b:33:5e:2b:a4:c6:88:d8:58:89:a0:8f:74:83:70: 6b:31:cf:0c:4f:f8:57:16:81:72:b9:52:3c:6a:74: 96:50:88:35:3b:d4:d9:c2:d9:1e:d4:92:e4:16:f1: e1:a8:81:9f:41:18:3b:ed:0d:7b:70:6e:7d:b7:ce: 7f:cd:24:7e:9c:fc:56:91:4c:33:24:19:0c:7b:db: 54:99:bc:6a:64:a0:4b:d0:db:d1:ff:15:99:12:71: a3:61:37:9c:c2:33:96:4b:d2:b4:4e:2c:45:e3:e1: ca:4e:26:56:43:bc:85:ac:c8:a4:bc:20:de:65:d6: d1:3e:86:9b:5b:ad:21:69:b7:c5:4c:c6:6c:37:a9: 3b:93:0b:d4:cf:28:62:81:8f:4b:fc:bf:85:8e:93: 4a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:3C:CE:63:FF:3E:9E:4D:0A:29:9F:09:32:88:74:60:0A:D0:1F X509v3 Authority Key Identifier: keyid:39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a6:af:1b:45:df:88:f7:1f:b9:f5:5a:2b:11:45:8e:96:08: 45:fc:31:12:f8:53:27:d3:72:81:03:68:54:b8:f1:88:d2:42: ee:d5:50:61:ae:ac:53:9c:d4:c1:03:40:0e:c9:f5:a1:6a:89: 20:89:ff:d6:ca:bd:8f:43:3c:48:33:e6:4d:4d:82:45:2b:46: 48:35:b0:cf:53:22:2b:b8:12:d2:c3:f6:0d:7a:a6:f0:73:68: 9d:f8:c1:ef:b7:a7:70:ef:53:e6:2b:77:eb:6b:9a:44:86:1a: b6:b7:fd:a0:7e:7e:91:ee:44:6f:7f:8e:a9:20:5f:29:bc:a8: 6d:e4:a3:eb:0a:b6:29:e2:bb:04:7e:cf:bc:ad:50:ba:8f:c4: 06:cc:c6:f2:31:a2:7a:1b:6a:74:15:a8:fd:b0:b9:f1:6e:b4: 09:22:cc:9b:3f:ab:b5:59:bb:a8:ab:8c:75:b8:17:bc:a0:ab: 23:e8:e1:63:e9:1f:f4:67:80:2e:cb:9b:42:04:ae:df:c0:b4: da:01:11:b0:17:b4:35:41:33:7c:b0:a3:06:84:99:ea:ed:92: b5:98:a1:b0:cb:dc:e5:20:f0:79:47:ed:ef:78:1d:dc:39:5e: 73:64:81:18:26:17:18:91:31:02:2c:c9:f5:53:ae:34:99:62: f3:20:ea:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUU3NDExMC8GA1UEBRMoMzk4REI2NDIzRkM1RTBGNzc3NEYyQTMzMzFEN0RCQ0M0 QURCRjUzNjAeFw0yNTEyMDUwNTM4MzlaFw0yNTEyMTIwNTM4MzlaMBgxFjAUBgNV BAMTDTY5MzI2ZmUwLWQ0ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4RtQFv7TZYpG3t0FO1PxIgNLKYgWAZP5RpGpYQ00wNPLzjg/fxobgDgoCSpGT xGIMntnMZGVaBbNCKlYrA+kUwKDMcnk02F75D22XKTotwqxqCxOga6m3Ev2Q9hK0 lFwv3ibZZ2BrCzszXiukxojYWImgj3SDcGsxzwxP+FcWgXK5UjxqdJZQiDU71NnC 2R7UkuQW8eGogZ9BGDvtDXtwbn23zn/NJH6c/FaRTDMkGQx721SZvGpkoEvQ29H/ FZkScaNhN5zCM5ZL0rROLEXj4cpOJlZDvIWsyKS8IN5l1tE+hptbrSFpt8VMxmw3 qTuTC9TPKGKBj0v8v4WOk0pVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU8M8zmP/ Pp5NCimfCTKIdGAK0B8wHwYDVR0jBBgwFoAUOY22Qj/F4Pd3TyozMdfbzErb9TYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRTc0LzM3QjE1OUZFQUIz RjExRjA5NUExQTYzN0M0RjlBRTAyL09ZMjJRal9GNFBkM1R5b3pNZGZiekVyYjlU WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1kyMlFqX0Y0UGQzVHlvek1kZmJ6RXJiOVRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RTc0LzM3QjE1OUZFQUIzRjExRjA5NUExQTYzN0M0RjlBRTAyL09ZMjJRal9GNFBk M1R5b3pNZGZiekVyYjlUWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+mrxtF34j3H7n1WisRRY6WCEX8MRL4UyfTcoEDaFS48YjSQu7VUGGu rFOc1MEDQA7J9aFqiSCJ/9bKvY9DPEgz5k1NgkUrRkg1sM9TIiu4EtLD9g16pvBz aJ34we+3p3DvU+Yrd+trmkSGGra3/aB+fpHuRG9/jqkgXym8qG3ko+sKtiniuwR+ z7ytULqPxAbMxvIxonobanQVqP2wufFutAkizJs/q7VZu6irjHW4F7ygqyPo4WPp H/RngC7Lm0IErt/AtNoBEbAXtDVBM3ywowaEmertkrWYobDL3OUg8HlH7e94Hdw5 XnNkgRgmFxiRMQIsyfVTrjSZYvMg6go= -----END CERTIFICATE-----Generated at Sun Dec 7 02:42:55 2025 by rpki-client