This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: wnborjGXLmkp37TF7Z1izGv0qa5B9TXBNmA1/ibVJ/E= Subject key identifier: CD:90:FA:6B:BE:AA:35:59:18:BD:DB:7C:62:D1:EA:C5:13:69:4B:42 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0CE6 Signing time: Sat 06 Dec 2025 17:35:52 +0000 Manifest this update: Sat 06 Dec 2025 17:35:51 +0000 Manifest next update: Sat 13 Dec 2025 17:35:51 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: F2T5aB3YdgAGn9ABvgk9SFMKtG241R3VR8/ACCCI3Zw=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 6avRjwNItYCzxG+yq5MB2LMVNEbgrnYskEIlXomTLWc=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: whIj4TZ+yyw/VbL0wLVNZHdMGGpE4Mabv0G6g01cTLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Dec 6 17:35:51 2025 GMT Not After : Dec 13 17:35:51 2025 GMT Subject: CN=69346978-40e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:87:9a:70:38:8e:c8:3f:45:5a:35:11:30:9e: cb:10:9b:e7:c6:d9:90:76:8e:e1:65:e5:d9:7f:7b: 02:28:0c:1d:b2:a1:a7:7a:77:bc:ef:74:ea:54:dd: fe:e4:25:ac:09:ae:aa:83:7d:ba:e9:d8:50:26:25: 95:a7:94:aa:48:da:84:9e:20:f9:18:f7:97:9b:2a: 7e:16:65:8a:c8:31:aa:18:bb:5e:35:70:4d:a8:d7: 09:12:5e:27:5c:66:cb:88:be:89:cd:02:63:66:94: 1f:39:88:01:95:81:26:29:82:27:c5:2c:81:3d:ef: 92:49:c4:b4:7f:7a:63:cc:1e:35:ca:3e:18:95:93: c4:2b:7c:2a:cf:ee:1a:42:8e:55:7d:ad:49:42:5a: 15:11:42:c8:b5:ab:67:e6:69:c3:2e:30:ae:8b:93: 44:07:73:50:28:d6:7d:4d:21:83:c3:4e:fc:e8:69: d2:8a:f2:af:15:e6:6c:ac:10:d3:fe:d5:d0:21:ad: 75:79:39:84:e0:78:4d:f3:21:03:23:56:52:92:4d: e2:4f:40:c0:54:bc:6e:98:de:dd:c6:5a:0f:4e:86: db:3b:e2:90:a6:f4:ca:7f:72:c4:a3:25:7a:fd:15: 76:5f:6e:76:57:b7:70:f4:81:6d:65:07:cd:2d:9b: 44:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:90:FA:6B:BE:AA:35:59:18:BD:DB:7C:62:D1:EA:C5:13:69:4B:42 X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a0:66:9d:10:ae:fb:fc:be:7f:e7:fb:13:b2:db:23:ea:a3: 98:cb:ae:5d:b1:07:45:34:0f:58:7f:12:4b:87:2b:c0:9d:a0: d0:8d:c7:b8:80:fb:fb:d9:c6:1b:e9:1c:01:10:d7:b0:07:96: fd:48:05:43:35:d7:46:35:86:ce:38:bb:02:6e:09:9e:5e:75: dc:ac:94:87:d8:f3:43:57:42:41:f3:a6:d1:65:c3:6e:fa:04: 62:74:02:21:28:41:8e:be:1d:d8:c9:91:54:0c:5c:f4:5b:52: 85:82:c4:94:66:9a:41:58:ab:05:6f:2e:52:93:81:d0:0d:2b: f4:14:d0:33:dd:89:f4:0b:d7:00:e6:06:33:70:3b:c0:34:ef: c3:5b:d6:d6:89:e5:dc:03:42:20:df:19:d8:bc:2c:60:23:67: ea:bf:5e:01:65:26:b9:f4:22:94:81:14:9e:a8:13:1f:86:d7: 46:61:c7:ff:25:88:f9:c8:02:4b:6d:e8:46:06:83:e2:55:8f: 61:27:3a:5a:5e:be:a5:f2:2e:e8:1a:c2:01:27:76:d4:31:a6: 33:25:da:c9:43:63:d2:4c:2a:aa:90:d3:b6:19:36:25:08:7e: af:92:0b:f4:c0:79:23:8b:f9:dd:2b:e0:7d:64:72:d1:4f:ac: 75:49:37:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjUxMjA2MTczNTUxWhcNMjUxMjEzMTczNTUxWjAYMRYwFAYD VQQDEw02OTM0Njk3OC00MGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oeacDiOyD9FWjURMJ7LEJvnxtmQdo7hZeXZf3sCKAwdsqGnene873TqVN3+ 5CWsCa6qg3266dhQJiWVp5SqSNqEniD5GPeXmyp+FmWKyDGqGLteNXBNqNcJEl4n XGbLiL6JzQJjZpQfOYgBlYEmKYInxSyBPe+SScS0f3pjzB41yj4YlZPEK3wqz+4a Qo5Vfa1JQloVEULItatn5mnDLjCui5NEB3NQKNZ9TSGDw0786GnSivKvFeZsrBDT /tXQIa11eTmE4HhN8yEDI1ZSkk3iT0DAVLxumN7dxloPTobbO+KQpvTKf3LEoyV6 /RV2X252V7dw9IFtZQfNLZtEGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2Q+mu+ qjVZGL3bfGLR6sUTaUtCMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuoGadEK77/L5/5/sTstsj6qOYy65dsQdFNA9YfxJLhyvAnaDQjce4 gPv72cYb6RwBENewB5b9SAVDNddGNYbOOLsCbgmeXnXcrJSH2PNDV0JB86bRZcNu +gRidAIhKEGOvh3YyZFUDFz0W1KFgsSUZppBWKsFby5Sk4HQDSv0FNAz3Yn0C9cA 5gYzcDvANO/DW9bWieXcA0Ig3xnYvCxgI2fqv14BZSa59CKUgRSeqBMfhtdGYcf/ JYj5yAJLbehGBoPiVY9hJzpaXr6l8i7oGsIBJ3bUMaYzJdrJQ2PSTCqqkNO2GTYl CH6vkgv0wHkji/ndK+B9ZHLRT6x1STft -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:18 2025 by rpki-client