This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: 3X0wsl9J3h1iERyNSQkhBzyXJHKney8+Hfd4V9sWTpA= Subject key identifier: 08:D7:44:45:C4:31:BD:4C:89:93:A1:D4:36:E5:0B:5D:D8:EB:3F:0B Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1DA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1D95 Signing time: Sat 06 Dec 2025 15:48:29 +0000 Manifest this update: Sat 06 Dec 2025 15:48:28 +0000 Manifest next update: Sat 13 Dec 2025 15:48:28 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: We8A+kL8o4C72XC+SihePSINA0zMcxFLvReinTBCEX4=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: GTYplA3+/oqNyhCsSIMGIT62xAe/H3EJbhvf29oZLZM=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: KcmqJfHxUpDuc0ECvYHJhDG4s7ZruYPj6RgZ3nxOtpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7588 (0x1da4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Dec 6 15:48:28 2025 GMT Not After : Dec 13 15:48:28 2025 GMT Subject: CN=6934504d-3562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:4f:6c:3a:5a:c9:86:dc:4a:43:f5:d2:c4: e0:c6:69:42:39:04:18:4f:23:94:2a:c3:19:72:7b: 14:03:dd:c4:ed:10:a9:25:12:c8:65:60:6b:f2:96: 2a:68:b9:e4:e5:cb:61:1f:b0:d0:f9:73:6e:14:57: a4:05:ee:51:2f:d1:06:c2:df:46:b4:bd:e7:e5:b1: a3:ee:2f:7b:f1:b8:33:76:ab:25:4d:57:4f:8a:b0: f2:99:fe:1e:22:35:47:fc:31:cb:8f:c3:a0:7e:29: 9e:ff:88:2c:f3:4c:7b:a5:ab:72:f9:81:81:a4:74: 4d:3c:ee:64:bf:cc:ed:a1:4c:1c:28:d8:3e:ee:07: ad:d1:0e:29:77:04:a5:d2:26:1d:c5:2a:2c:7b:3d: c0:0f:22:8a:a4:7c:8a:c6:4d:61:d1:8f:c4:a1:69: 3f:a6:7f:6c:f9:7e:bd:fb:33:d9:df:71:3b:7e:6b: 75:55:0d:87:0a:b7:43:c7:60:2c:a2:11:14:75:2d: ae:ff:46:ed:66:a1:24:f0:45:8e:38:78:26:b0:be: b9:c3:85:55:f6:6c:ac:99:2b:98:d9:6d:01:03:15: ad:a6:85:a6:16:ef:2d:e1:eb:c5:37:02:52:29:5a: a7:2d:c4:42:c0:bc:da:35:ae:9f:fd:d4:08:17:1a: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D7:44:45:C4:31:BD:4C:89:93:A1:D4:36:E5:0B:5D:D8:EB:3F:0B X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:43:90:d1:36:8f:98:fa:dd:c9:31:86:ad:44:6c:16:36:f2: 86:2d:ac:d3:d9:de:a9:af:44:c0:f8:d1:2f:cc:d8:bb:fa:7d: 5f:ba:50:3f:9e:10:ad:86:70:4c:df:e4:72:51:f0:5f:58:cd: ad:60:77:9a:ba:52:c3:df:9e:77:55:ee:b8:45:05:0f:52:32: f0:17:d1:a6:d1:3c:76:0d:e1:4f:19:29:33:6a:cd:b5:64:66: 3a:90:9d:f1:c1:1f:76:8f:cd:b8:ec:6b:6a:78:fe:6f:58:91: 1e:5d:02:c2:87:dc:77:e5:0f:94:a8:43:a3:04:ad:49:b9:b5: 42:f5:cb:00:0f:3d:25:ba:2d:74:19:02:a1:60:3b:20:62:4c: 56:bc:5c:bf:9a:4e:2f:82:98:20:b1:35:2d:29:f7:da:7c:79: 98:7e:ff:ee:29:fb:c0:9a:7f:04:1c:4d:ba:95:63:e9:62:f4: 50:78:76:b2:b4:42:56:1f:7c:30:6a:e0:7c:ca:01:43:27:c1: 7c:0c:80:ee:d2:48:36:80:0b:65:a7:f6:42:56:27:0f:44:8a: 6d:35:89:8b:2a:e7:74:29:36:fc:95:d6:7c:8d:ab:85:81:f5: 57:bf:6d:93:f4:b7:01:9f:12:87:99:4f:2d:b9:88:28:28:f0: 69:24:f8:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUxMjA2MTU0ODI4WhcNMjUxMjEzMTU0ODI4WjAYMRYwFAYD VQQDEw02OTM0NTA0ZC0zNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvexPbDpayYbcSkP10sTgxmlCOQQYTyOUKsMZcnsUA93E7RCpJRLIZWBr8pYq aLnk5cthH7DQ+XNuFFekBe5RL9EGwt9GtL3n5bGj7i978bgzdqslTVdPirDymf4e IjVH/DHLj8Ogfime/4gs80x7paty+YGBpHRNPO5kv8ztoUwcKNg+7get0Q4pdwSl 0iYdxSosez3ADyKKpHyKxk1h0Y/EoWk/pn9s+X69+zPZ33E7fmt1VQ2HCrdDx2As ohEUdS2u/0btZqEk8EWOOHgmsL65w4VV9mysmSuY2W0BAxWtpoWmFu8t4evFNwJS KVqnLcRCwLzaNa6f/dQIFxpFDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjXREXE Mb1MiZOh1DblC13Y6z8LMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUQ5DRNo+Y+t3JMYatRGwWNvKGLazT2d6pr0TA+NEvzNi7+n1fulA/ nhCthnBM3+RyUfBfWM2tYHeaulLD3553Ve64RQUPUjLwF9Gm0Tx2DeFPGSkzas21 ZGY6kJ3xwR92j8247GtqeP5vWJEeXQLCh9x35Q+UqEOjBK1JubVC9csADz0lui10 GQKhYDsgYkxWvFy/mk4vgpggsTUtKffafHmYfv/uKfvAmn8EHE26lWPpYvRQeHay tEJWH3wwauB8ygFDJ8F8DIDu0kg2gAtlp/ZCVicPRIptNYmLKud0KTb8ldZ8jauF gfVXv22T9LcBnxKHmU8tuYgoKPBpJPgH -----END CERTIFICATE-----Generated at Sun Dec 7 07:26:06 2025 by rpki-client