This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: IEOMXiwKBkU6TX+79n5RKcT/YI5dVbh37r0At1T58K8= Subject key identifier: 8D:B3:57:65:20:38:AB:9B:87:FA:3A:24:CE:87:CB:FB:9E:B8:50:13 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: 47 Signing time: Fri 05 Dec 2025 05:16:13 +0000 Manifest this update: Fri 05 Dec 2025 05:16:13 +0000 Manifest next update: Fri 12 Dec 2025 05:16:13 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: KpiQTQ8i31CibkkC6nKKvWoCB2NR4sEW5Y+ValgI7+A=) 2: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: J6NfxVye//wKbH6luOaipzXoE8gflP1Zb4ROZKBwOvw=) 3: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: nDBN8ofBQzSuZlFacB02+d4KlQaWiR4DsWaWORqlM1w=) 4: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: Jiabvy3OMisNM5GgqkjfS6kn/xGNTzgJB34Y1DjTY/g=) 5: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: KEMH/vKSPcAkV3P1pUdnSj1om5WSjvDW91I/czL5aFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Dec 5 05:16:13 2025 GMT Not After : Dec 12 05:16:13 2025 GMT Subject: CN=69326a9d-f735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:d2:f3:df:73:d1:34:f4:8f:e8:36:a9:85: e6:cf:e6:e1:44:41:92:70:68:14:de:5c:2e:a4:c7: 08:ef:8b:b5:03:d0:42:28:fc:e7:a6:bc:ea:72:f8: e1:df:4a:27:16:3e:e2:4a:2d:ba:ec:9a:30:66:f5: 3b:01:a1:cb:99:9e:59:f7:0b:77:93:b5:a5:70:c8: 5b:0f:e0:10:62:4b:28:f1:b8:b2:0e:ce:64:d3:fe: ca:13:78:98:8f:b6:08:15:8b:6c:fa:a8:9d:93:50: d3:bc:95:35:8e:ae:59:31:19:7b:92:d4:18:8d:4f: 80:28:69:6e:72:a9:41:49:f6:b7:2b:5b:b5:ca:5f: 55:85:c8:b6:7d:a9:66:59:2a:9a:93:aa:e4:72:3d: 4b:a1:e7:16:15:23:4b:d9:c3:f5:c7:73:48:63:b3: af:86:0f:90:e2:96:bc:a1:fb:3a:9b:f2:49:bf:e0: 1c:4a:48:6d:35:48:14:2a:d4:1c:65:3d:46:b8:bb: d7:b4:56:90:41:c5:19:04:20:a0:27:35:f3:b1:6e: b7:b4:15:61:f3:cf:87:c1:1a:5f:a0:1e:05:13:d6: b0:4b:00:c4:80:97:f9:28:11:7e:8a:e1:0f:71:a5: 8a:8e:bf:41:33:31:38:db:5e:d9:54:9e:39:5a:e4: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B3:57:65:20:38:AB:9B:87:FA:3A:24:CE:87:CB:FB:9E:B8:50:13 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a4:b2:0d:7e:70:91:28:17:fd:19:3c:bb:12:b9:03:92:dd: ec:36:b4:e6:49:de:92:b2:d9:97:44:d6:ae:5a:91:06:d9:ca: e8:fc:be:d9:26:f2:96:e5:2c:fc:f2:92:4d:90:d6:53:18:a5: 7d:95:3c:9f:27:a2:1e:2e:2c:25:d9:c9:f9:b3:3c:4d:72:09: ff:e2:91:57:7d:fb:e1:63:ba:8a:fb:77:8a:f5:6d:09:ea:a5: 59:2f:31:5f:00:fe:34:af:51:a5:cc:bd:b5:08:8b:40:69:98: b6:37:74:e9:66:fa:ad:b9:4f:3e:03:1a:83:e7:82:1c:27:7b: 07:3e:c4:a0:00:43:9a:64:f6:49:d9:72:18:47:fe:59:c8:62: 46:78:1a:5a:b8:00:17:30:08:2c:22:d6:f7:bd:c2:23:81:cb: dd:e8:40:27:51:83:a7:ec:e4:8a:41:83:71:2e:b7:01:19:32: f6:91:58:88:17:b5:54:59:53:55:3f:a1:cb:5b:cc:fd:35:5f: ff:79:b9:97:7a:a2:60:9c:99:cd:0b:24:3b:85:60:2c:5b:19: 7e:b9:fc:79:30:f2:c4:68:71:33:96:a0:17:a5:c3:ee:49:c1: 90:62:55:78:79:be:a4:f8:0e:1f:51:b8:ce:69:b5:bb:b0:75: 53:b5:22:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkE2OTExMC8GA1UEBRMoM0FBNUQ3NEE0OUZFREUwODE3NjZDREFDM0JGN0RERDAz NkJCRjkwMTAeFw0yNTEyMDUwNTE2MTNaFw0yNTEyMTIwNTE2MTNaMBgxFjAUBgNV BAMTDTY5MzI2YTlkLWY3MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvN9Lz33PRNPSP6DaphebP5uFEQZJwaBTeXC6kxwjvi7UD0EIo/OemvOpy+OHf SicWPuJKLbrsmjBm9TsBocuZnln3C3eTtaVwyFsP4BBiSyjxuLIOzmTT/soTeJiP tggVi2z6qJ2TUNO8lTWOrlkxGXuS1BiNT4AoaW5yqUFJ9rcrW7XKX1WFyLZ9qWZZ KpqTquRyPUuh5xYVI0vZw/XHc0hjs6+GD5Dilryh+zqb8km/4BxKSG01SBQq1Bxl PUa4u9e0VpBBxRkEIKAnNfOxbre0FWHzz4fBGl+gHgUT1rBLAMSAl/koEX6K4Q9x pYqOv0EzMTjbXtlUnjla5MUdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjbNXZSA4 q5uH+jokzofL+564UBMwHwYDVR0jBBgwFoAUOqXXSkn+3ggXZs2sO/fd0Da7+QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QTY5L0NCMUNGRTg0NkM0 QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3FYWFNrbi0zZ2dYWnMyc09fZmQwRGE3LVFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QTY5L0NCMUNGRTg0NkM0QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dn WFpzMnNPX2ZkMERhNy1RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACuksg1+cJEoF/0ZPLsSuQOS3ew2tOZJ3pKy2ZdE1q5akQbZyuj8vtkm 8pblLPzykk2Q1lMYpX2VPJ8noh4uLCXZyfmzPE1yCf/ikVd9++Fjuor7d4r1bQnq pVkvMV8A/jSvUaXMvbUIi0BpmLY3dOlm+q25Tz4DGoPnghwnewc+xKAAQ5pk9knZ chhH/lnIYkZ4Glq4ABcwCCwi1ve9wiOBy93oQCdRg6fs5IpBg3EutwEZMvaRWIgX tVRZU1U/octbzP01X/95uZd6omCcmc0LJDuFYCxbGX65/Hkw8sRocTOWoBelw+5J wZBiVXh5vqT4Dh9RuM5ptbuwdVO1Igw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:51 2025 by rpki-client