This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft File: opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json) Hash identifier: 0DbdXO7JSPElzij8a2GfuTDBWuBW75Fgv0R0xEPqo2M= Subject key identifier: A1:3D:51:0E:51:8D:82:E4:48:B6:00:C8:B3:94:BC:F9:A6:D1:AC:50 Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft Manifest number: 9D Signing time: Fri 05 Dec 2025 04:19:22 +0000 Manifest this update: Fri 05 Dec 2025 04:19:21 +0000 Manifest next update: Fri 12 Dec 2025 04:19:21 +0000 Files and hashes: 1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: m5QP3dyrETEUSpZUye36hUzjO0nQAi+XeIo2j2d8iPE=) 2: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: /ib2O66BEz/+EIpjbYLfsm9ZEc6Tr2GDRN2PvAJwp9o=) 3: 903E0F1652BD11F0A9261F57C4F9AE02.roa (hash: wehugKaizIxEhZtf3yJWa3v9WBxQforOS0s0qf27ViE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Validity Not Before: Dec 5 04:19:21 2025 GMT Not After : Dec 12 04:19:21 2025 GMT Subject: CN=69325d49-0855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:47:d3:29:df:e8:08:3c:d5:bd:7d:a8:ce: 2a:9a:f8:b4:cb:52:c4:ae:72:7e:0a:12:6c:07:eb: 65:1c:d6:bf:97:f3:93:87:ec:85:46:20:01:a5:e6: ff:61:02:6f:cd:09:a2:60:4e:38:55:cc:94:d5:b4: 33:78:f1:65:09:87:23:f4:35:54:f9:d3:cc:ce:1c: 15:01:35:bb:5f:90:51:50:d8:b1:4b:8c:9e:83:fd: c7:85:cf:9f:43:f2:a1:fc:62:68:76:3c:8f:9a:82: dc:d3:77:f6:d8:b2:17:41:99:d0:55:9e:79:b0:38: bf:10:a5:08:ba:f0:53:88:11:1e:90:b4:5a:f6:2e: a2:06:04:55:30:8a:c7:d5:88:a1:50:73:bd:0d:fb: ce:32:f3:64:7d:49:f1:52:80:47:df:6a:7e:65:37: 68:98:0a:1d:72:e4:fc:53:97:3a:7a:e7:27:bc:dc: 45:6d:db:0c:5c:be:89:00:6c:58:15:59:63:6a:44: e8:4a:55:4f:be:69:f2:a0:64:8e:31:0f:e4:b0:85: 01:56:dd:b4:ff:c8:74:ee:be:86:57:ff:c1:9b:53: 46:9a:f7:44:78:f4:b4:03:fa:c4:55:5f:13:9a:6b: bb:20:48:51:09:34:87:21:f7:6d:3a:3d:f6:8f:1d: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3D:51:0E:51:8D:82:E4:48:B6:00:C8:B3:94:BC:F9:A6:D1:AC:50 X509v3 Authority Key Identifier: keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f0:19:5e:82:c3:ac:ea:72:62:99:e9:b4:cf:37:79:2b:29: f3:45:41:64:0a:29:fe:c6:87:09:96:c0:bf:5b:82:cf:8c:ee: 41:b4:75:64:e5:3d:d4:fe:5e:91:9f:8d:e4:7d:b4:44:ec:34: 8f:c5:58:2c:bf:66:21:f5:27:1a:05:28:d2:6a:f0:e4:e9:c7: 85:91:ae:3f:ba:cf:4f:02:9e:75:ef:0e:94:61:cc:53:79:c5: 47:56:e5:e9:88:c3:63:a1:62:57:38:f6:9f:84:48:38:37:f3: e1:f6:73:b3:f1:f6:f8:28:71:e9:c5:51:4e:02:1a:72:87:19: 82:83:18:33:40:4e:70:5a:1e:77:d6:1a:97:04:76:07:ea:89: 9d:b2:61:76:77:83:46:48:ea:21:51:e1:05:18:29:2d:ba:93: c2:d8:71:47:c6:dd:c8:ea:96:24:89:2f:8c:6a:6c:82:4b:3b: 35:ea:c8:c3:d4:25:ae:c1:3a:37:36:11:94:c1:67:f1:6c:74: 80:77:06:9a:2c:28:19:63:ea:7b:51:9e:08:b2:18:61:23:e1: 23:f4:b0:60:05:aa:6e:81:91:9a:af:c6:01:e4:fe:5d:46:ab: 10:8f:30:9f:59:29:d9:d4:be:73:33:03:23:d7:a7:92:76:5c: f3:cc:8d:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDQjcxMTAvBgNVBAUTKEEyOTgwNTlGMDY1MzdERjhDMDhCODkyNTVGNzk1OTQx QTMxQzE4MDAwHhcNMjUxMjA1MDQxOTIxWhcNMjUxMjEyMDQxOTIxWjAYMRYwFAYD VQQDEw02OTMyNWQ0OS0wODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zlH0ynf6Ag81b19qM4qmvi0y1LErnJ+ChJsB+tlHNa/l/OTh+yFRiABpeb/ YQJvzQmiYE44VcyU1bQzePFlCYcj9DVU+dPMzhwVATW7X5BRUNixS4yeg/3Hhc+f Q/Kh/GJodjyPmoLc03f22LIXQZnQVZ55sDi/EKUIuvBTiBEekLRa9i6iBgRVMIrH 1YihUHO9DfvOMvNkfUnxUoBH32p+ZTdomAodcuT8U5c6eucnvNxFbdsMXL6JAGxY FVljakToSlVPvmnyoGSOMQ/ksIUBVt20/8h07r6GV//Bm1NGmvdEePS0A/rEVV8T mmu7IEhRCTSHIfdtOj32jx0pKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKE9UQ5R jYLkSLYAyLOUvPmm0axQMB8GA1UdIwQYMBaAFKKYBZ8GU334wIuJJV95WUGjHBgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENCNy84QzkzRjc2Q0Ux NzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZmakFpNGtsWDNsWlFhTWNH QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NENCNy84QzkzRjc2Q0UxNzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZm akFpNGtsWDNsWlFhTWNHQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS8BlegsOs6nJimem0zzd5KynzRUFkCin+xocJlsC/W4LPjO5BtHVk 5T3U/l6Rn43kfbRE7DSPxVgsv2Yh9ScaBSjSavDk6ceFka4/us9PAp517w6UYcxT ecVHVuXpiMNjoWJXOPafhEg4N/Ph9nOz8fb4KHHpxVFOAhpyhxmCgxgzQE5wWh53 1hqXBHYH6omdsmF2d4NGSOohUeEFGCktupPC2HFHxt3I6pYkiS+MamyCSzs16sjD 1CWuwTo3NhGUwWfxbHSAdwaaLCgZY+p7UZ4IshhhI+Ej9LBgBapugZGar8YB5P5d RqsQjzCfWSnZ1L5zMwMj16eSdlzzzI1q -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:39 2025 by rpki-client