This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json) Hash identifier: 3nNRKUJ91evLrlC25xvhDJtruF4Db2/fN7X27x6kjHM= Subject key identifier: 79:EB:C2:D4:DA:34:26:64:88:70:2E:BD:2F:D7:6A:2F:7B:88:3F:93 Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Certificate serial: 0977 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft Manifest number: 0971 Signing time: Sat 06 Dec 2025 19:16:49 +0000 Manifest this update: Sat 06 Dec 2025 19:16:48 +0000 Manifest next update: Sat 13 Dec 2025 19:16:48 +0000 Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: TFN6C/ZH5rA54grbh41gRMORqTaS14y36OyjBI9TjLA=) 2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: oh99riu32xDufqLh4s49Z+OfJBlHg4YCfXKo4NVguOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2423 (0x977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Validity Not Before: Dec 6 19:16:48 2025 GMT Not After : Dec 13 19:16:48 2025 GMT Subject: CN=69348120-4cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:73:bb:13:a6:41:f7:b7:45:bc:1c:98:2e: 70:4f:69:51:9d:3f:2f:e8:36:1a:6d:0e:7e:18:14: 84:64:e8:9b:7a:7e:85:58:b0:4e:f4:c6:bb:50:c6: 94:96:7e:4b:03:bb:26:0a:e0:8d:cc:18:16:34:1e: 0f:2d:5c:07:a9:ae:e6:f7:ed:cc:ce:74:ee:5b:fc: 98:76:98:10:52:fa:65:48:7b:89:d6:ac:c2:4d:5d: 2b:3a:95:81:f5:60:41:f8:dd:56:0f:92:96:79:81: 30:bf:f7:fa:47:78:c3:d3:6b:b2:93:a2:81:fa:03: 45:0b:d6:ed:6d:15:a3:f2:a9:11:61:4f:14:7a:36: 86:b6:f7:03:88:aa:05:b4:97:8b:b7:e1:1f:02:c1: 77:4f:81:3b:30:80:0d:d7:17:05:46:f2:10:b2:2d: 59:07:f4:3b:a9:96:ce:76:73:69:a8:58:13:1b:41: 7f:d7:c5:f4:44:10:b8:0b:39:df:70:bb:ac:9e:6d: ad:f0:44:36:8a:38:88:b4:19:d8:77:a4:86:56:22: 26:1c:74:08:12:91:e3:1e:20:7c:43:c7:bc:8f:a2: e8:fb:fe:af:8f:ef:c5:c1:20:42:f9:41:ba:72:85: cd:61:0d:c5:4f:e2:91:11:3e:68:20:2b:44:cd:df: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EB:C2:D4:DA:34:26:64:88:70:2E:BD:2F:D7:6A:2F:7B:88:3F:93 X509v3 Authority Key Identifier: keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:63:11:ac:51:8d:01:6b:8c:34:6d:dd:c8:a0:64:41:f6:4d: 57:2f:a2:43:59:65:4e:51:69:8c:ed:60:a7:47:26:6a:ae:d8: 4a:bb:f7:57:01:62:25:58:9d:fd:58:a5:2e:45:54:44:7d:f7: b7:bf:73:f9:ae:02:e3:9d:1d:a3:66:b7:50:f6:cf:87:fb:f8: f7:59:23:dd:a6:8d:dc:82:90:a1:40:57:b8:cd:65:1c:54:48: 74:e4:e8:e9:f1:16:d3:4b:5a:3b:02:27:d5:59:a8:d1:37:72: e6:89:9d:22:5a:f0:dd:99:71:fd:82:b9:62:11:de:b7:a7:4c: 13:1e:4a:a5:02:79:09:89:b1:b4:bc:94:b8:c2:cf:eb:87:4a: 2a:08:e3:1c:3c:fc:98:07:16:b9:4e:3c:b6:06:4a:86:08:40: a7:e3:e0:b3:a7:2b:50:58:32:4a:87:72:c7:ea:0c:bb:d7:2d: 4e:fe:2d:7f:42:a7:5d:ef:33:93:9c:1e:aa:4d:85:6d:c3:6c: cb:fd:62:8b:08:1b:e5:04:3c:a5:86:3b:12:7b:49:20:54:84: 19:e8:4d:58:69:27:cd:6e:6e:45:46:49:a3:d2:85:53:bd:41: 92:b4:e6:63:a8:a7:30:c4:f6:90:31:03:b6:90:2a:81:f5:a7: 3f:66:42:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2MDQxMTAvBgNVBAUTKEEzREZCRTExQUY4QTc4RTU2MkNGQjQ1NzkwMENDQUI5 MDkwQzJCNTkwHhcNMjUxMjA2MTkxNjQ4WhcNMjUxMjEzMTkxNjQ4WjAYMRYwFAYD VQQDEw02OTM0ODEyMC00Y2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyVzuxOmQfe3RbwcmC5wT2lRnT8v6DYabQ5+GBSEZOiben6FWLBO9Ma7UMaU ln5LA7smCuCNzBgWNB4PLVwHqa7m9+3MznTuW/yYdpgQUvplSHuJ1qzCTV0rOpWB 9WBB+N1WD5KWeYEwv/f6R3jD02uyk6KB+gNFC9btbRWj8qkRYU8UejaGtvcDiKoF tJeLt+EfAsF3T4E7MIAN1xcFRvIQsi1ZB/Q7qZbOdnNpqFgTG0F/18X0RBC4Cznf cLusnm2t8EQ2ijiItBnYd6SGViImHHQIEpHjHiB8Q8e8j6Lo+/6vj+/FwSBC+UG6 coXNYQ3FT+KRET5oICtEzd/XgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnrwtTa NCZkiHAuvS/Xai97iD+TMB8GA1UdIwQYMBaAFKPfvhGvinjlYs+0V5AMyrkJDCtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTYwNC9CQ0VDNkM1RUE0 QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VPVml6N1JYa0F6S3VRa01L MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285LS1FYS1LZU9WaXo3UlhrQXpLdVFrTUsxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTYwNC9CQ0VDNkM1RUE0QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VP Vml6N1JYa0F6S3VRa01LMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCYxGsUY0Ba4w0bd3IoGRB9k1XL6JDWWVOUWmM7WCnRyZqrthKu/dX AWIlWJ39WKUuRVREffe3v3P5rgLjnR2jZrdQ9s+H+/j3WSPdpo3cgpChQFe4zWUc VEh05Ojp8RbTS1o7AifVWajRN3LmiZ0iWvDdmXH9grliEd63p0wTHkqlAnkJibG0 vJS4ws/rh0oqCOMcPPyYBxa5Tjy2BkqGCECn4+CzpytQWDJKh3LH6gy71y1O/i1/ Qqdd7zOTnB6qTYVtw2zL/WKLCBvlBDylhjsSe0kgVIQZ6E1YaSfNbm5FRkmj0oVT vUGStOZjqKcwxPaQMQO2kCqB9ac/ZkI+ -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:17 2025 by rpki-client