This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json) Hash identifier: 0unZcWqEcKXD4gle4OGyP0XEEQsioFk8/wbcDFbvP00= Subject key identifier: B3:88:1E:F6:5C:BD:E4:20:A9:63:8C:3F:86:B4:FC:D8:1F:FC:6D:1B Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft Manifest number: 4B Signing time: Fri 05 Dec 2025 05:10:13 +0000 Manifest this update: Fri 05 Dec 2025 05:10:13 +0000 Manifest next update: Fri 12 Dec 2025 05:10:13 +0000 Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: ZZI9qIyqTyw6pbDX5NP/HW7qpauvTNX7wgJlD8NhQTs=) 2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: Rsq6/I7qJeC3VPVdtIV32k6eG9/KeOaeWD2g/nms+lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Validity Not Before: Dec 5 05:10:13 2025 GMT Not After : Dec 12 05:10:13 2025 GMT Subject: CN=69326935-47ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cd:46:f2:3c:df:79:cc:79:1c:68:f9:8d:cc: 3f:a6:e7:ca:af:fd:ad:3b:76:16:2a:5f:a0:c5:01: e0:5b:7b:db:8a:44:f4:62:7d:df:79:52:32:e7:68: cd:0e:a1:36:a8:3f:39:7e:f8:b5:c0:fb:b8:5f:46: 39:c1:4c:f0:4c:3e:fb:b5:c1:b3:12:78:b3:86:0c: 54:52:9d:06:ae:44:14:e4:af:1b:31:94:09:3f:75: e8:2c:40:01:f9:a7:90:5a:5b:15:a4:a5:c7:ce:29: 5a:2a:eb:db:91:f7:2e:6f:6e:44:91:c3:10:54:68: 03:1f:13:8b:d0:85:d6:81:5b:d4:6e:5c:d8:88:b0: 58:cc:a5:b6:d0:01:5c:67:cf:87:97:9c:2a:4d:16: c0:5b:ab:e0:91:d3:65:98:f3:26:5a:52:dd:39:33: 8e:0d:2c:ed:f0:98:33:43:79:09:8f:d2:19:21:61: 70:26:f0:89:5a:b3:aa:6e:5b:b9:98:9c:eb:07:83: 3c:6c:0d:fe:a6:03:d7:60:01:cb:6c:bd:cf:3b:5c: 0f:bb:2e:da:f6:e5:1b:5d:cd:35:42:ea:34:5b:bb: 65:f2:e0:ba:8b:f6:5d:1d:89:f1:de:2e:19:c6:98: a9:7d:f6:81:7d:2c:99:97:f7:66:68:34:d3:26:0c: 8c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:1E:F6:5C:BD:E4:20:A9:63:8C:3F:86:B4:FC:D8:1F:FC:6D:1B X509v3 Authority Key Identifier: keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:2f:66:f0:6b:d8:c4:1a:bf:a1:26:77:7f:64:af:df:f7:fd: 1a:e2:99:aa:e4:f8:6c:1a:f2:3f:e7:6f:14:c7:0e:19:0f:d3: 0d:6e:79:a6:21:b7:f0:b4:86:45:de:7f:a4:65:e2:69:7b:fd: b5:87:1c:2e:4a:78:49:0d:a0:4d:a0:16:64:a4:8e:70:ef:37: 20:db:af:18:5a:bf:1d:b5:ee:b4:05:a4:80:7b:0d:87:fa:cf: ef:4e:27:21:91:3b:c1:25:a0:db:3c:81:90:9a:02:ba:c3:9e: 96:66:bc:96:52:e9:0a:4c:d4:36:24:52:94:59:fe:51:9f:7c: f2:eb:60:73:6b:dc:19:48:21:c2:8b:bb:ae:c8:d7:b7:3f:08: cf:11:8e:20:b5:6d:f9:db:aa:a7:70:a5:9b:4d:c2:b9:ce:b8: bb:48:66:6c:70:5b:80:56:0c:c3:fd:04:21:8f:d0:2f:51:84: bf:bb:a8:02:68:ec:02:e3:1b:06:ed:b9:dc:0c:33:36:86:66: c4:e0:7a:ac:b1:a6:7b:a8:fb:c8:53:e3:d8:2a:11:46:8a:3e: 29:c3:da:c9:42:7e:de:c7:58:1f:71:28:8a:da:43:b0:59:51: 34:f9:24:2b:30:f3:33:86:93:66:67:c1:48:11:d6:d3:b5:b0: b4:4e:0c:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoM0FDRjQ0NUNGQ0VDRkJCMjkxM0IzNDdENjdBODI4RTA0 MEExNUExRDAeFw0yNTEyMDUwNTEwMTNaFw0yNTEyMTIwNTEwMTNaMBgxFjAUBgNV BAMTDTY5MzI2OTM1LTQ3YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxzUbyPN95zHkcaPmNzD+m58qv/a07dhYqX6DFAeBbe9uKRPRifd95UjLnaM0O oTaoPzl++LXA+7hfRjnBTPBMPvu1wbMSeLOGDFRSnQauRBTkrxsxlAk/degsQAH5 p5BaWxWkpcfOKVoq69uR9y5vbkSRwxBUaAMfE4vQhdaBW9RuXNiIsFjMpbbQAVxn z4eXnCpNFsBbq+CR02WY8yZaUt05M44NLO3wmDNDeQmP0hkhYXAm8Ilas6puW7mY nOsHgzxsDf6mA9dgActsvc87XA+7Ltr25RtdzTVC6jRbu2Xy4LqL9l0difHeLhnG mKl99oF9LJmX92ZoNNMmDIwrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs4ge9ly9 5CCpY4w/hrT82B/8bRswHwYDVR0jBBgwFoAUOs9EXPzs+7KROzR9Z6go4EChWh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzVEQjc0QjBBNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdLUk96UjlaNmdvNEVDaFdo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT3M5RVhQenMtN0tST3pSOVo2Z280RUNoV2gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzVEQjc0QjBBNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdL Uk96UjlaNmdvNEVDaFdoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFQvZvBr2MQav6Emd39kr9/3/Rrimark+Gwa8j/nbxTHDhkP0w1ueaYh t/C0hkXef6Rl4ml7/bWHHC5KeEkNoE2gFmSkjnDvNyDbrxhavx217rQFpIB7DYf6 z+9OJyGRO8EloNs8gZCaArrDnpZmvJZS6QpM1DYkUpRZ/lGffPLrYHNr3BlIIcKL u67I17c/CM8RjiC1bfnbqqdwpZtNwrnOuLtIZmxwW4BWDMP9BCGP0C9RhL+7qAJo 7ALjGwbtudwMMzaGZsTgeqyxpnuo+8hT49gqEUaKPinD2slCft7HWB9xKIraQ7BZ UTT5JCsw8zOGk2ZnwUgR1tO1sLRODCM= -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:34 2025 by rpki-client