This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: lVkcEBzSRgANu2mUk0gm4aK34QWrVVrj/v1AHQieEis= Subject key identifier: CC:2B:00:B8:CC:BC:AE:46:76:E6:79:B2:46:C0:C1:D0:22:5F:E2:4A Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0BDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 0A0F Signing time: Thu 04 Dec 2025 20:35:57 +0000 Manifest this update: Thu 04 Dec 2025 20:35:56 +0000 Manifest next update: Thu 11 Dec 2025 20:35:56 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: E0dQBUmhfZz2viWzqRvTaZeGkg1yqKyCALsChFa7/QE=) 2: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: vQWuHkxNO3W+64VKIpJFVWJTeNRMIc+wKzNHsAhde4Q=) 3: B8D1EFFECFF111F085D0CF76C4F9AE02.roa (hash: O3l12cVrUOS8U9iR93efMuyRPJjx+/kubWNGPD9xecQ=) 4: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: tUqKc58G4NP/ZiNhEE4m52A3vGMH09GTzhVMgnnCe/8=) 5: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: uy/Ya9Uphz8yk5gzFrvw8K92wA25vKbiFTbIY5cp56U=) 6: 61EE2500936E11F091943583C4F9AE02.roa (hash: qQaUk6cquZP7nNyZHTQszjiLtFKFkr+G2zqYs9o1x6o=) 7: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: KHmIhJVDnUN/JIAGOGyBUT9fEQNuIGqQSzduAjkMS7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3037 (0xbdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Dec 4 20:35:56 2025 GMT Not After : Dec 11 20:35:56 2025 GMT Subject: CN=6931f0ad-ff34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:07:4b:53:04:4e:79:43:ba:55:ea:2d:f6: 88:2c:3c:59:38:a7:ee:76:dc:2a:d1:06:6a:be:cb: 89:ff:1b:94:ee:b9:23:fb:26:95:1f:5a:89:79:35: e4:44:b6:c5:30:a3:4c:95:9b:f2:e9:32:a7:f1:c1: 7f:62:5b:ef:93:7d:b4:c5:cc:43:44:ce:b0:0a:34: 30:64:c6:b0:63:bb:1e:67:2b:56:7e:8a:17:4c:05: 22:22:8b:3b:34:4f:76:ba:e7:4f:ad:4c:95:c5:6b: 87:fd:05:91:47:1c:6a:17:d6:56:a6:e1:e9:b4:8a: ee:4b:b2:7a:f0:db:bd:5f:2e:db:fb:ab:6d:a6:e9: 0c:cf:8c:fa:be:8a:a8:e5:cb:c0:1b:a9:17:98:01: 0e:1e:2c:2c:18:a2:10:cf:e5:6f:55:70:ab:67:17: 9c:f8:3a:eb:59:a3:8e:32:cd:2e:5c:cb:71:15:8d: 50:54:2e:c1:2d:03:56:6b:95:35:8d:6b:a3:2a:78: 99:f7:0c:2d:19:63:73:be:e9:39:79:ab:43:a7:04: 61:e4:80:4f:b1:c8:1f:4f:17:ca:e9:93:14:24:db: 4e:1d:98:c3:05:58:ba:54:3f:43:28:5f:49:55:25: fb:e1:bf:26:19:b4:c9:19:1c:7c:fc:5a:fa:90:49: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2B:00:B8:CC:BC:AE:46:76:E6:79:B2:46:C0:C1:D0:22:5F:E2:4A X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:21:d4:07:4c:51:a2:4d:5e:a3:d9:66:7f:4e:bf:af:58:4c: c3:47:23:be:f3:f8:36:d9:6c:6d:c5:24:d2:be:a8:7b:9a:47: f5:07:ba:39:f0:45:b5:bb:d0:d8:ac:cb:65:de:40:a7:63:bf: c0:3d:25:cf:ed:25:07:36:6d:78:f1:8e:2e:e2:a8:8a:23:7b: 55:0d:34:65:63:66:98:5c:64:c5:01:92:c8:81:bf:d0:71:c1: 94:a3:d5:e6:76:39:ed:ec:d7:e4:d7:7e:71:53:c4:f4:b1:64: 4e:fb:59:61:f1:ac:c8:a5:da:26:34:c9:1a:b4:a6:9f:0e:18: 39:54:ed:5e:f4:d6:6b:24:16:a1:a0:cb:43:23:3e:79:c3:d7: ce:ef:27:cf:40:1b:fb:b4:5b:da:79:67:64:b1:f8:83:4a:f2: c7:09:48:15:d1:91:2d:82:77:a2:a9:87:f7:77:39:77:16:fb: ce:00:6b:98:65:ef:1f:d5:8c:f8:60:9e:64:67:2b:b7:d6:41: 6e:49:d5:fa:03:b2:41:6d:bb:cf:eb:f6:cd:5d:7f:86:02:27: c3:37:39:d3:82:66:5c:74:49:74:25:1e:c4:ec:c5:52:91:14: 4a:83:ef:ef:75:7d:da:25:57:af:9f:f7:75:c7:4a:10:b9:8a: 1e:c0:8f:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjUxMjA0MjAzNTU2WhcNMjUxMjExMjAzNTU2WjAYMRYwFAYD VQQDEw02OTMxZjBhZC1mZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZoHS1METnlDulXqLfaILDxZOKfudtwq0QZqvsuJ/xuU7rkj+yaVH1qJeTXk RLbFMKNMlZvy6TKn8cF/Ylvvk320xcxDRM6wCjQwZMawY7seZytWfooXTAUiIos7 NE92uudPrUyVxWuH/QWRRxxqF9ZWpuHptIruS7J68Nu9Xy7b+6ttpukMz4z6voqo 5cvAG6kXmAEOHiwsGKIQz+VvVXCrZxec+DrrWaOOMs0uXMtxFY1QVC7BLQNWa5U1 jWujKniZ9wwtGWNzvuk5eatDpwRh5IBPscgfTxfK6ZMUJNtOHZjDBVi6VD9DKF9J VSX74b8mGbTJGRx8/Fr6kEkiSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwrALjM vK5GduZ5skbAwdAiX+JKMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACIdQHTFGiTV6j2WZ/Tr+vWEzDRyO+8/g22WxtxSTSvqh7mkf1B7o5 8EW1u9DYrMtl3kCnY7/APSXP7SUHNm148Y4u4qiKI3tVDTRlY2aYXGTFAZLIgb/Q ccGUo9Xmdjnt7Nfk135xU8T0sWRO+1lh8azIpdomNMkatKafDhg5VO1e9NZrJBah oMtDIz55w9fO7yfPQBv7tFvaeWdksfiDSvLHCUgV0ZEtgneiqYf3dzl3FvvOAGuY Ze8f1Yz4YJ5kZyu31kFuSdX6A7JBbbvP6/bNXX+GAifDNznTgmZcdEl0JR7E7MVS kRRKg+/vdX3aJVevn/d1x0oQuYoewI/A -----END CERTIFICATE-----Generated at Sat Dec 6 16:11:13 2025 by rpki-client