This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft File: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json) Hash identifier: HeP6ShlKaDhMJnFE8R6/4MLAMTZLLI6TVPsm2XkIl8I= Subject key identifier: 1D:6B:41:21:E0:E3:F0:9D:DA:EA:16:CC:3C:0C:F4:DE:23:C4:A6:28 Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft Manifest number: D7 Signing time: Fri 05 Dec 2025 03:40:00 +0000 Manifest this update: Fri 05 Dec 2025 03:40:00 +0000 Manifest next update: Fri 12 Dec 2025 03:40:00 +0000 Files and hashes: 1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: Kqxa4ufodqQ8vlp4fxhsnzAtIW43aCP1KAR2XBfx264=) 2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: omrZAUzqP7gMHmT5OJsVyadDZTS200Mcd28sOHG7NiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Validity Not Before: Dec 5 03:40:00 2025 GMT Not After : Dec 12 03:40:00 2025 GMT Subject: CN=69325410-19bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:de:d0:99:91:8e:60:95:84:d7:a1:5a:13: c7:5c:4c:1b:ba:d2:29:36:95:9e:76:6d:8c:d6:f6: f3:12:cb:57:47:5d:ef:e8:4a:46:64:5f:4b:c9:b4: 2a:15:3a:8a:15:c4:83:22:48:55:c1:49:71:07:03: 8c:48:0e:c3:67:69:00:c6:7a:00:45:95:6f:83:6b: 4a:06:71:e1:77:41:d3:45:82:ac:49:48:a3:69:a9: 65:89:4b:5e:2e:d9:f4:34:46:5d:5d:87:f4:5b:a3: 03:8a:c7:9a:41:fb:81:79:7c:07:12:bb:9f:af:21: 81:e5:ab:5c:1a:c0:c8:a8:38:b6:a2:e0:9c:8b:0d: 38:d8:00:9e:1e:0e:a3:44:c8:d3:20:7f:e2:7e:32: 75:e6:ab:f0:06:eb:72:af:9d:29:9d:bb:b7:8b:4e: 10:fa:62:0c:1a:eb:23:ec:3c:62:53:ee:5d:8f:2e: 8b:fc:5e:0d:77:f2:1b:c5:be:5d:5b:be:4b:d0:61: b2:f5:21:e6:16:5e:7d:43:01:c8:94:5c:c5:2f:c0: d6:d7:c8:7a:33:d3:16:1c:41:b2:1d:ff:40:d4:43: c3:46:42:d9:54:79:06:4e:be:e3:fb:f5:cc:a4:24: ac:18:7a:1c:2d:c4:bb:bb:d6:96:4c:01:f1:10:a1: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6B:41:21:E0:E3:F0:9D:DA:EA:16:CC:3C:0C:F4:DE:23:C4:A6:28 X509v3 Authority Key Identifier: keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:c9:dc:32:55:07:f6:eb:51:e3:c2:c9:36:33:cb:3d:9d:6c: 7c:43:90:47:dd:5c:e9:55:2f:c4:25:27:be:01:df:f5:ab:7b: c9:cc:df:f6:b8:4f:30:20:f1:39:98:69:3b:5c:34:35:52:99: 69:3b:fd:a7:8a:09:89:50:27:b6:c0:10:2f:5a:d7:61:30:65: f1:21:94:fd:94:76:4a:1c:b3:d2:5d:d8:f8:c8:96:e8:c0:9f: a2:98:3b:de:de:1b:d4:05:9a:7d:d3:16:81:93:29:18:71:02: c9:f3:63:92:61:05:cc:27:e7:a9:b3:45:4d:58:1e:20:29:3a: e0:07:0a:fd:ed:03:f3:65:28:c5:00:a3:f4:44:19:a7:1c:5b: 68:ec:b0:8d:83:ca:b2:b2:4a:6f:51:c2:4f:db:b4:42:89:30: 05:7e:b9:2f:ed:f9:94:e0:ab:47:ce:57:89:ff:36:c1:77:d0: a4:35:fd:42:ca:d4:85:d4:55:99:f7:df:b7:65:d3:61:04:10: 25:eb:0b:24:4b:e2:4d:c4:d3:75:20:8e:c7:02:4a:7b:4a:62: 35:94:06:7f:1f:f4:f5:b0:11:80:c8:42:64:4b:96:23:31:b5: 24:05:94:5a:11:9c:43:95:06:97:69:07:02:08:09:75:67:31: 0c:87:eb:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwRTMxMTAvBgNVBAUTKEUwRTgwODMwNjU5NUZFNjhENUYyODFBOTYyQUY2REY1 MUU4NkY5MzIwHhcNMjUxMjA1MDM0MDAwWhcNMjUxMjEyMDM0MDAwWjAYMRYwFAYD VQQDEw02OTMyNTQxMC0xOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1X/e0JmRjmCVhNehWhPHXEwbutIpNpWedm2M1vbzEstXR13v6EpGZF9LybQq FTqKFcSDIkhVwUlxBwOMSA7DZ2kAxnoARZVvg2tKBnHhd0HTRYKsSUijaalliUte Ltn0NEZdXYf0W6MDiseaQfuBeXwHErufryGB5atcGsDIqDi2ouCciw042ACeHg6j RMjTIH/ifjJ15qvwButyr50pnbu3i04Q+mIMGusj7DxiU+5djy6L/F4Nd/Ibxb5d W75L0GGy9SHmFl59QwHIlFzFL8DW18h6M9MWHEGyHf9A1EPDRkLZVHkGTr7j+/XM pCSsGHocLcS7u9aWTAHxEKFK8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1rQSHg 4/Cd2uoWzDwM9N4jxKYoMB8GA1UdIwQYMBaAFODoCDBllf5o1fKBqWKvbfUehvky MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBFMy9BQTk4NTlGODhD N0UxMUVGOEU5MkU3MUJDNEY5QUUwMi80T2dJTUdXVl9talY4b0dwWXE5dDlSNkct VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPZ0lNR1dWX21qVjhvR3BZcTl0OVI2Ry1USS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBFMy9BQTk4NTlGODhDN0UxMUVGOEU5MkU3MUJDNEY5QUUwMi80T2dJTUdXVl9t alY4b0dwWXE5dDlSNkctVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgydwyVQf261Hjwsk2M8s9nWx8Q5BH3VzpVS/EJSe+Ad/1q3vJzN/2 uE8wIPE5mGk7XDQ1UplpO/2nigmJUCe2wBAvWtdhMGXxIZT9lHZKHLPSXdj4yJbo wJ+imDve3hvUBZp90xaBkykYcQLJ82OSYQXMJ+eps0VNWB4gKTrgBwr97QPzZSjF AKP0RBmnHFto7LCNg8qyskpvUcJP27RCiTAFfrkv7fmU4KtHzleJ/zbBd9CkNf1C ytSF1FWZ99+3ZdNhBBAl6wskS+JNxNN1II7HAkp7SmI1lAZ/H/T1sBGAyEJkS5Yj MbUkBZRaEZxDlQaXaQcCCAl1ZzEMh+uE -----END CERTIFICATE-----Generated at Sat Dec 6 20:08:19 2025 by rpki-client