This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: bp7CDImSvU/0XB2NPf/6Zue69jhO0+Q/zAcGQ9HFkmE= Subject key identifier: D2:E2:AA:FA:46:C2:40:9C:D8:72:5C:03:06:D8:2A:44:0C:5A:F6:15 Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0CCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0CA0 Signing time: Sat 06 Dec 2025 17:50:57 +0000 Manifest this update: Sat 06 Dec 2025 17:50:57 +0000 Manifest next update: Sat 13 Dec 2025 17:50:57 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: yz4B3sKrUXp0MKoIXGETN3yu5PRh2bwVWJZhQXjyr6E=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: yZZ5GIqY5jMSOPfiLjMhte7hmwyaU/fBGZmXUhYiAw8=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: 3NTPFeEY66/DTbvOuzCF2G8vutj3ESNM2ADes/bFsS4=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: WJkxwP4ag7yvrhduZoEuahlF8E4MGy6zYRuWwLMuPQo=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: X7HKLCMYv+5yO0PXDMAF77ngtZuIkMviUoMFPRXsQKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Dec 6 17:50:57 2025 GMT Not After : Dec 13 17:50:57 2025 GMT Subject: CN=69346d01-1ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:b9:bc:11:03:4e:a4:3e:51:19:76:6c:1d: 4b:60:7f:72:ea:05:38:32:14:4d:b8:d8:c1:d5:de: 0d:65:2d:fb:b0:ef:23:4d:00:84:65:20:87:e7:f0: fc:82:4d:1b:0c:28:75:3b:cb:57:42:f5:2e:7a:fb: 1d:c4:2d:62:5f:5b:a8:6f:2a:ee:b0:4a:2a:72:fa: 20:dd:0e:58:ef:bd:4d:8d:60:47:45:89:d4:ae:5e: 61:0b:61:9e:00:79:df:76:e3:3d:44:b5:f8:80:a4: 74:df:2f:18:b2:89:b4:df:21:f3:17:fc:be:53:65: d9:af:d4:a2:e2:c9:9f:8f:86:59:0f:d5:09:08:c6: dc:d6:8c:23:01:0f:b9:66:95:5c:e9:fd:45:84:d8: fd:e7:e5:a9:20:aa:a0:34:7b:16:9a:ce:71:ca:03: 60:e0:81:85:4b:4a:d0:73:9c:de:59:50:d5:18:7c: fa:6c:58:6b:aa:d6:52:22:55:8c:5e:42:71:39:76: df:e5:cf:15:7b:01:8d:c6:e6:a8:e3:20:81:1f:c4: 42:1f:e5:90:90:d8:f5:82:22:c8:fa:44:c5:e4:32: 43:af:ca:78:7a:e6:3d:22:ff:36:ff:86:59:99:61: 15:3b:27:69:ef:73:13:eb:19:7c:4e:07:da:b5:99: e8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E2:AA:FA:46:C2:40:9C:D8:72:5C:03:06:D8:2A:44:0C:5A:F6:15 X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:6e:30:38:60:49:12:02:ee:d3:49:3b:ac:b9:43:e9:04:34: 5c:71:05:0c:90:c7:d2:d7:d4:80:38:86:f9:10:f0:69:6d:91: 64:60:d2:15:ba:f3:00:51:ce:a9:c5:0e:1d:f0:2e:65:45:66: 20:21:59:df:c4:17:00:a7:5d:70:47:d0:13:9f:b6:73:54:58: 6c:2f:49:08:2f:20:53:6b:a2:75:b6:88:0c:99:76:33:2d:97: d4:d1:9a:22:26:a9:3e:a7:6a:d5:66:c4:f4:12:70:87:e4:60: 53:78:2f:f3:5b:b4:7a:62:3c:62:85:65:b2:31:cb:43:09:36: af:70:13:35:0e:40:c6:ed:b3:43:22:f7:15:13:95:3e:36:6a: 64:40:72:83:a4:ea:aa:37:ee:f1:a8:cc:57:a1:d3:40:6c:3e: 4b:18:00:2a:6d:77:ab:2b:60:f0:15:7e:19:3d:e2:9a:87:6b: bb:0d:ab:55:bb:a1:9e:02:2a:8c:05:0d:af:23:ef:97:fe:de: c8:c2:21:be:2b:63:d3:e3:97:91:d0:a7:cb:95:22:1f:49:5a: 5d:ed:e3:0a:dc:8f:19:cf:dc:6c:c2:7c:37:6e:cf:ae:59:bc: a7:37:73:55:16:d7:da:8e:b3:58:bf:d8:7e:b7:5a:ae:0e:0c: 75:23:77:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUxMjA2MTc1MDU3WhcNMjUxMjEzMTc1MDU3WjAYMRYwFAYD VQQDEw02OTM0NmQwMS0xZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxq5vBEDTqQ+URl2bB1LYH9y6gU4MhRNuNjB1d4NZS37sO8jTQCEZSCH5/D8 gk0bDCh1O8tXQvUuevsdxC1iX1uobyrusEoqcvog3Q5Y771NjWBHRYnUrl5hC2Ge AHnfduM9RLX4gKR03y8Ysom03yHzF/y+U2XZr9Si4smfj4ZZD9UJCMbc1owjAQ+5 ZpVc6f1FhNj95+WpIKqgNHsWms5xygNg4IGFS0rQc5zeWVDVGHz6bFhrqtZSIlWM XkJxOXbf5c8VewGNxuao4yCBH8RCH+WQkNj1giLI+kTF5DJDr8p4euY9Iv82/4ZZ mWEVOydp73MT6xl8TgfatZno1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLiqvpG wkCc2HJcAwbYKkQMWvYVMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAbjA4YEkSAu7TSTusuUPpBDRccQUMkMfS19SAOIb5EPBpbZFkYNIV uvMAUc6pxQ4d8C5lRWYgIVnfxBcAp11wR9ATn7ZzVFhsL0kILyBTa6J1togMmXYz LZfU0ZoiJqk+p2rVZsT0EnCH5GBTeC/zW7R6YjxihWWyMctDCTavcBM1DkDG7bND IvcVE5U+NmpkQHKDpOqqN+7xqMxXodNAbD5LGAAqbXerK2DwFX4ZPeKah2u7DatV u6GeAiqMBQ2vI++X/t7IwiG+K2PT45eR0KfLlSIfSVpd7eMK3I8Zz9xswnw3bs+u WbynN3NVFtfajrNYv9h+t1quDgx1I3cT -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:20 2025 by rpki-client