This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: XBNo0Y7UasRh31c3bZRetoaR/MsTKsM/RzI1dTRB/eE= Subject key identifier: E1:DE:EA:6E:CC:34:58:40:BB:52:02:FA:F4:B3:26:FA:B6:FC:62:EF Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 01FF Signing time: Sun 21 Dec 2025 01:42:30 +0000 Manifest this update: Sun 21 Dec 2025 01:42:29 +0000 Manifest next update: Sun 28 Dec 2025 01:42:29 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: 3SkNQU+GkASKUYVEOOfhN91LI9kf4DbovW8EDt7Csyo=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Dec 21 01:42:29 2025 GMT Not After : Dec 28 01:42:29 2025 GMT Subject: CN=69475086-b1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:61:7d:1c:25:7e:ad:0e:f2:a3:2d:7d:50: 66:b0:09:25:a2:35:2d:86:24:8c:7f:69:f6:99:15: bf:c6:0e:23:9a:9f:83:70:6a:7c:30:f5:f6:78:a3: 9f:dc:58:f3:e7:6c:a2:25:52:2e:32:8c:64:0f:be: 9a:b8:40:2c:60:64:03:c8:0e:2f:c9:7e:2d:95:8b: 41:20:e8:9a:af:26:8e:44:66:49:8d:b4:a1:ce:1b: 19:66:89:47:46:62:85:6d:14:57:4d:65:73:15:4f: be:6b:d9:2b:7c:16:9d:2b:eb:d3:79:9c:6c:7c:c8: 2b:0b:bf:14:cc:cb:42:04:3d:59:4e:7f:98:90:08: 12:21:84:c3:22:ac:19:15:55:99:05:0f:6e:95:0d: 5a:ce:1d:cb:e0:f4:72:ee:a9:2f:79:bd:33:00:46: 10:cb:5c:f6:b7:7e:90:3b:e0:7a:97:04:67:90:17: 9f:d2:5a:ec:33:c3:93:b9:e2:e9:d2:c6:eb:7d:c4: e9:8b:9f:a4:b4:fd:6a:94:47:60:8a:0e:17:0f:15: 60:d8:50:06:34:34:68:29:3b:ae:c0:81:e4:79:ed: 53:01:8f:c6:df:d5:5e:11:c2:65:84:5d:a1:b5:1c: bb:8c:a0:da:85:d3:f2:ff:97:72:5e:c7:cd:9e:21: f7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DE:EA:6E:CC:34:58:40:BB:52:02:FA:F4:B3:26:FA:B6:FC:62:EF X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:3a:72:3c:ff:62:66:ff:b7:67:cb:72:69:a5:47:11:2a:4b: 33:5f:17:af:21:ca:3a:2d:8f:6b:17:53:af:c9:bc:19:73:bf: e6:47:12:d9:27:1d:81:8d:20:8f:6f:84:7a:4a:b8:d1:e2:35: 54:f8:36:4f:2e:97:f1:dd:2f:18:76:ef:b9:78:9a:99:58:83: 5b:91:a6:be:12:cd:85:a9:ba:c9:47:ba:b6:d1:7c:87:e1:21: 3f:64:fd:04:12:d2:0c:71:b6:a4:ca:dc:da:1f:e0:18:bc:5e: 0c:54:fb:85:15:db:71:3f:e6:70:31:23:2a:7a:b4:06:f9:2d: 7b:52:50:3e:ff:bc:bc:c3:38:3f:9d:ac:23:aa:c8:34:a5:c1: 92:b1:c7:22:4c:6d:6e:2a:a4:0f:54:64:7c:5b:e4:9c:b4:2f: 83:02:80:1e:2a:78:7c:c8:06:0e:13:3b:82:91:31:09:75:91: c9:a1:25:9c:aa:5d:a8:87:e3:88:d1:a5:3c:e3:d9:d3:17:fa: 54:6b:8d:46:e5:7d:12:5d:66:21:70:e1:3d:7e:49:e2:8d:7d: 1f:37:b8:f8:c6:3d:63:26:b2:69:f3:1d:cd:7e:6e:1b:b6:61: ad:77:e5:b8:43:e0:e9:bf:dd:c2:6c:50:91:38:1f:c6:4c:c0: 63:25:b9:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUxMjIxMDE0MjI5WhcNMjUxMjI4MDE0MjI5WjAYMRYwFAYD VQQDDA02OTQ3NTA4Ni1iMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T5hfRwlfq0O8qMtfVBmsAklojUthiSMf2n2mRW/xg4jmp+DcGp8MPX2eKOf 3Fjz52yiJVIuMoxkD76auEAsYGQDyA4vyX4tlYtBIOiaryaORGZJjbShzhsZZolH RmKFbRRXTWVzFU++a9krfBadK+vTeZxsfMgrC78UzMtCBD1ZTn+YkAgSIYTDIqwZ FVWZBQ9ulQ1azh3L4PRy7qkveb0zAEYQy1z2t36QO+B6lwRnkBef0lrsM8OTueLp 0sbrfcTpi5+ktP1qlEdgig4XDxVg2FAGNDRoKTuuwIHkee1TAY/G39VeEcJlhF2h tRy7jKDahdPy/5dyXsfNniH3UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHe6m7M NFhAu1IC+vSzJvq2/GLvMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAOnI8/2Jm/7dny3JppUcRKkszXxevIco6LY9rF1OvybwZc7/mRxLZ Jx2BjSCPb4R6SrjR4jVU+DZPLpfx3S8Ydu+5eJqZWINbkaa+Es2FqbrJR7q20XyH 4SE/ZP0EEtIMcbakytzaH+AYvF4MVPuFFdtxP+ZwMSMqerQG+S17UlA+/7y8wzg/ nawjqsg0pcGSscciTG1uKqQPVGR8W+SctC+DAoAeKnh8yAYOEzuCkTEJdZHJoSWc ql2oh+OI0aU849nTF/pUa41G5X0SXWYhcOE9fknijX0fN7j4xj1jJrJp8x3Nfm4b tmGtd+W4Q+Dpv93CbFCROB/GTMBjJbk4 -----END CERTIFICATE-----Generated at Sun Dec 21 05:25:19 2025 by rpki-client