This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json) Hash identifier: mFBzeysqHQVsBUReUYwhoQwqn2OHUIrK3f+xpNu8lWk= Subject key identifier: 8E:39:49:CE:C4:ED:AC:B7:39:51:B3:07:19:F6:D5:AC:BC:BC:78:D4 Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft Manifest number: 8E Signing time: Fri 05 Dec 2025 04:30:24 +0000 Manifest this update: Fri 05 Dec 2025 04:30:23 +0000 Manifest next update: Fri 12 Dec 2025 04:30:23 +0000 Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: J3SZKxVpo2sJFRD6rY7XLWMxGX5ri/OGvWH989F/srM=) 2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=) 3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=) 4: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=) 5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C Validity Not Before: Dec 5 04:30:23 2025 GMT Not After : Dec 12 04:30:23 2025 GMT Subject: CN=69325fe0-548b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:32:2c:75:85:a5:bb:4a:0c:53:d9:cc:34:58: 56:b4:22:fa:8c:1f:4d:52:40:9c:d4:f7:d1:15:5d: e7:9d:06:a8:7d:a5:4f:76:a9:d0:01:01:86:ce:68: 48:7c:df:a3:77:fa:ed:38:27:f2:ec:bb:a3:5b:e7: 12:e9:17:15:8d:6e:05:ea:d8:06:4a:e4:e4:5c:c1: 53:d9:da:4a:52:c3:fc:2e:24:53:57:31:7f:11:f2: d4:5c:a9:7b:2a:cd:ac:2b:3c:03:f4:7c:b3:a1:09: b1:c8:ec:fc:5f:c7:f9:0e:37:55:b7:c1:28:44:63: 15:76:af:55:de:e9:cb:7b:64:17:95:b9:75:e0:5b: 17:7c:46:4c:51:71:c9:63:ef:13:a8:06:2e:04:54: 01:ec:a7:03:a5:8a:2a:e3:ca:bb:20:18:5d:ee:5a: 1d:82:9c:80:af:5a:c0:a3:92:8a:ab:0b:6e:89:61: 10:69:7f:c2:54:ab:a5:8a:7d:6b:88:1d:0d:7d:51: 9c:e3:21:7a:54:2b:cb:fe:5c:7a:d8:90:ff:c3:cf: 41:3e:36:55:90:ad:6a:b9:b9:f2:67:ff:a1:5a:62: f2:ad:46:17:ca:4d:19:46:46:fc:75:74:a3:db:fb: 0a:1e:57:4a:bc:d0:8e:b8:f7:43:d1:c0:72:6d:92: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:39:49:CE:C4:ED:AC:B7:39:51:B3:07:19:F6:D5:AC:BC:BC:78:D4 X509v3 Authority Key Identifier: keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ec:41:1d:bc:54:c4:04:66:12:9f:bd:75:75:ef:05:30:a6: a3:fb:6b:e7:03:d7:30:b4:06:4a:23:df:a9:e1:23:2c:79:0e: 39:92:6c:2e:3f:cb:5b:cb:3b:d7:bc:6d:1b:9d:dd:d1:49:36: 50:9e:f1:52:26:6c:f0:e2:d0:05:2b:ac:ba:eb:45:0c:0e:a8: 84:6f:cb:91:ca:93:e3:df:55:86:f0:00:ba:13:83:2e:38:a4: 17:2a:da:63:0e:52:fb:ae:8a:45:96:a7:74:c6:47:95:e0:16: 6b:b0:00:1e:9f:20:8b:a8:ab:cb:05:f7:ab:dd:1d:46:de:44: 6c:90:dd:c7:1e:45:8a:ba:d3:65:5a:3d:bc:66:9e:be:93:7c: e2:fa:9f:2b:bb:fb:63:db:45:b7:aa:cb:5a:a4:9a:41:31:d1: 99:f2:27:c7:e5:48:b7:e8:e3:5f:13:4a:e8:e9:35:51:35:b1: 36:6e:01:6e:dd:64:77:99:7e:21:9b:b0:75:aa:29:df:ca:74: bf:6c:12:7a:66:45:43:a8:13:fc:37:a4:8d:be:c3:70:e9:13: a0:c7:42:04:d0:4d:a7:a5:d2:b6:87:09:86:da:69:52:68:80: 8a:34:eb:92:3d:e4:21:a5:0d:3b:57:40:f7:21:9b:14:eb:3b: 99:10:d3:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDIxMTAvBgNVBAUTKDM4NkMzMDBFRDcyRjEyQjkwNTQ3OEEzM0NFRjI3Nzk5 MjU0QTY5MUMwHhcNMjUxMjA1MDQzMDIzWhcNMjUxMjEyMDQzMDIzWjAYMRYwFAYD VQQDEw02OTMyNWZlMC01NDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8DIsdYWlu0oMU9nMNFhWtCL6jB9NUkCc1PfRFV3nnQaofaVPdqnQAQGGzmhI fN+jd/rtOCfy7LujW+cS6RcVjW4F6tgGSuTkXMFT2dpKUsP8LiRTVzF/EfLUXKl7 Ks2sKzwD9HyzoQmxyOz8X8f5DjdVt8EoRGMVdq9V3unLe2QXlbl14FsXfEZMUXHJ Y+8TqAYuBFQB7KcDpYoq48q7IBhd7lodgpyAr1rAo5KKqwtuiWEQaX/CVKulin1r iB0NfVGc4yF6VCvL/lx62JD/w89BPjZVkK1qubnyZ/+hWmLyrUYXyk0ZRkb8dXSj 2/sKHldKvNCOuPdD0cBybZKPmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI45Sc7E 7ay3OVGzBxn21ay8vHjUMB8GA1UdIwQYMBaAFDhsMA7XLxK5BUeKM87yd5klSmkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwMi84N0MzRkQwQUZC MjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVya0ZSNG96enZKM21TVkth UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwMi84N0MzRkQwQUZCMjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVy a0ZSNG96enZKM21TVkthUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp7EEdvFTEBGYSn711de8FMKaj+2vnA9cwtAZKI9+p4SMseQ45kmwu P8tbyzvXvG0bnd3RSTZQnvFSJmzw4tAFK6y660UMDqiEb8uRypPj31WG8AC6E4Mu OKQXKtpjDlL7ropFlqd0xkeV4BZrsAAenyCLqKvLBfer3R1G3kRskN3HHkWKutNl Wj28Zp6+k3zi+p8ru/tj20W3qstapJpBMdGZ8ifH5Ui36ONfE0ro6TVRNbE2bgFu 3WR3mX4hm7B1qinfynS/bBJ6ZkVDqBP8N6SNvsNw6ROgx0IE0E2npdK2hwmG2mlS aICKNOuSPeQhpQ07V0D3IZsU6zuZENMv -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:53 2025 by rpki-client