This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: OUcUbJR22oPGOM4wgTNM1IDCdWbDa/qVIWwplu2a1pg= Subject key identifier: FE:3C:69:5E:7E:41:CA:2C:A4:D0:54:79:9D:B2:7B:26:F2:A1:D3:FE Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 076E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 0765 Signing time: Sat 06 Dec 2025 20:39:28 +0000 Manifest this update: Sat 06 Dec 2025 20:39:27 +0000 Manifest next update: Sat 13 Dec 2025 20:39:27 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: kAfxdUTMTw14NJqhCbnf/VIrHSG3zwcH8qPNmrUdmYs=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: gX+GYBAPGbjqUnHfi91j/NNdMc3SWhzi/7eOCrrQtPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1902 (0x76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: Dec 6 20:39:27 2025 GMT Not After : Dec 13 20:39:27 2025 GMT Subject: CN=6934947f-c0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:4d:b9:d8:01:31:82:5c:42:58:88:34:a0: cd:c7:9e:97:10:a6:a0:22:21:62:8b:01:9d:f2:64: 56:e1:91:e1:ee:ec:d4:c8:94:e9:5f:05:d3:23:49: 61:b4:41:bc:2b:8e:7f:2c:31:75:5a:00:1e:3b:4c: 04:12:9a:2f:09:36:0b:7f:6e:27:ef:c0:39:7a:f3: f4:85:67:db:9b:70:04:3e:6d:71:02:e0:3c:dc:2c: cb:1b:d6:df:2a:37:c7:49:c8:6d:31:55:53:fe:16: e3:9a:d8:a1:3f:4f:e4:15:d8:88:84:49:c9:f4:6f: 9b:62:8b:c5:30:38:03:70:89:f1:da:a7:91:32:c4: 2c:83:fb:78:d1:b0:58:17:df:af:b0:dd:8b:bb:d6: d7:b5:5a:68:55:30:fd:83:6c:80:23:68:c7:a2:b2: 80:5c:fd:ca:e2:29:0b:b8:cd:3e:59:ae:59:21:b4: 0c:1a:8a:e2:af:41:9c:39:fc:c7:4f:16:ac:e4:62: b6:34:5a:4e:42:1d:35:cf:3a:37:2b:e8:81:a3:74: 3a:61:77:8a:ba:ff:53:af:1e:85:12:60:39:60:36: 50:25:6e:1a:73:b4:20:2b:be:2c:de:e0:ae:da:c4: 50:03:e1:ac:43:04:9f:bc:cf:54:56:15:2a:1b:b4: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3C:69:5E:7E:41:CA:2C:A4:D0:54:79:9D:B2:7B:26:F2:A1:D3:FE X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:30:a1:a4:40:cd:d4:03:50:6b:86:ba:13:54:ab:19:4e:66: 19:52:ab:2e:b2:51:57:59:13:10:39:20:23:b4:8f:27:93:1f: 45:ff:83:23:ff:e4:3a:03:7f:e2:9a:d7:d4:16:1b:8a:56:0b: 4b:97:4f:7a:8a:e3:98:88:37:29:57:61:a1:a8:ae:b9:9a:3d: 9b:fb:43:27:29:00:dd:af:db:d6:95:52:fa:b2:e2:b0:f2:08: 4e:d3:0e:73:8e:08:b5:5b:0a:15:e8:1e:74:c7:39:b2:d7:ad: de:bc:35:09:d9:0b:b4:7c:b4:d1:f9:93:91:9b:4f:46:f8:46: b8:a4:74:e3:d3:a2:66:e1:42:a9:33:3a:f8:48:0a:37:95:e1: 96:28:08:da:a2:22:a2:4d:e5:a6:60:ae:cc:28:f6:bb:65:8b: 19:ab:05:47:c6:b3:b2:54:01:f7:26:fc:82:25:1c:22:e9:07: b4:ee:47:b8:b1:3a:9e:bc:f6:06:2e:2f:db:25:09:a8:e0:0f: aa:18:d9:02:a7:5b:2d:87:1f:fe:5b:c7:4f:10:ff:57:86:8d: ac:b4:d4:54:6d:73:7b:dd:81:d2:dd:d0:29:74:c5:f0:91:8d: e6:4a:4d:ff:47:8b:3b:3d:fa:2d:28:17:4e:aa:57:e7:18:2b: f4:5b:9a:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjUxMjA2MjAzOTI3WhcNMjUxMjEzMjAzOTI3WjAYMRYwFAYD VQQDEw02OTM0OTQ3Zi1jMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMhNudgBMYJcQliINKDNx56XEKagIiFiiwGd8mRW4ZHh7uzUyJTpXwXTI0lh tEG8K45/LDF1WgAeO0wEEpovCTYLf24n78A5evP0hWfbm3AEPm1xAuA83CzLG9bf KjfHSchtMVVT/hbjmtihP0/kFdiIhEnJ9G+bYovFMDgDcInx2qeRMsQsg/t40bBY F9+vsN2Lu9bXtVpoVTD9g2yAI2jHorKAXP3K4ikLuM0+Wa5ZIbQMGorir0GcOfzH Txas5GK2NFpOQh01zzo3K+iBo3Q6YXeKuv9Trx6FEmA5YDZQJW4ac7QgK74s3uCu 2sRQA+GsQwSfvM9UVhUqG7S49wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP48aV5+ QcospNBUeZ2yeybyodP+MB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDMKGkQM3UA1BrhroTVKsZTmYZUqsuslFXWRMQOSAjtI8nkx9F/4Mj /+Q6A3/imtfUFhuKVgtLl096iuOYiDcpV2GhqK65mj2b+0MnKQDdr9vWlVL6suKw 8ghO0w5zjgi1WwoV6B50xzmy163evDUJ2Qu0fLTR+ZORm09G+Ea4pHTj06Jm4UKp Mzr4SAo3leGWKAjaoiKiTeWmYK7MKPa7ZYsZqwVHxrOyVAH3JvyCJRwi6Qe07ke4 sTqevPYGLi/bJQmo4A+qGNkCp1sthx/+W8dPEP9Xho2stNRUbXN73YHS3dApdMXw kY3mSk3/R4s7PfotKBdOqlfnGCv0W5pw -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:07 2025 by rpki-client