This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: uNivRW+hAcXDiqWp3cn1R22vpZJGashSSUM+wNm9LcA= Subject key identifier: FE:F5:A0:95:80:03:63:25:5D:0F:E6:2C:D3:B7:0E:18:51:94:A7:18 Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: 0177 Signing time: Fri 05 Dec 2025 01:58:14 +0000 Manifest this update: Fri 05 Dec 2025 01:58:13 +0000 Manifest next update: Fri 12 Dec 2025 01:58:13 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: X8M2qrYcJyJBn0BcphzW8DwKsymFH87sOUu87xAxrTo=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: I77zej0g2IdMx6WMXQdInqyMmRTM3TktU3rYTAd3Uxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Validity Not Before: Dec 5 01:58:13 2025 GMT Not After : Dec 12 01:58:13 2025 GMT Subject: CN=69323c35-622f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a4:d4:f4:99:0c:1c:b1:63:8d:2c:66:c8:4e: 8c:2a:7a:a7:1d:66:8d:e3:99:30:70:cc:78:9d:f6: fb:3e:43:29:7b:33:cf:12:72:d5:a9:1a:6d:9e:4e: 1c:31:41:57:7c:ab:6d:64:52:48:64:aa:52:3e:0f: 59:6b:c3:ce:25:d7:04:93:a6:10:38:65:cd:10:01: eb:70:6b:a4:78:99:40:a6:13:22:50:c0:7d:e7:46: ac:a5:99:5c:cc:bc:d0:e4:7b:77:c6:20:a6:66:ab: 34:89:34:90:6a:5e:01:ee:d8:1b:37:81:fc:db:74: ec:27:59:71:ef:5b:2e:0d:06:e0:48:48:b9:a8:9c: bd:91:c6:6a:05:2f:ba:12:ff:bb:9a:c2:ed:17:40: 45:51:aa:be:b8:28:0a:32:78:30:67:3f:d1:c3:e3: f2:b5:17:b3:03:18:df:95:bc:31:ab:34:12:9f:eb: fb:9d:9e:3f:50:dd:95:45:db:21:ce:26:f7:88:5e: 92:2b:8e:11:18:eb:73:b2:fb:49:20:51:91:df:b3: b0:05:56:68:f9:bc:6f:63:c1:c2:27:15:50:d4:0a: 28:23:bc:f1:e7:66:3e:a1:9d:9a:1b:e5:45:c0:c0: 31:c5:66:7e:6c:c2:77:5a:67:25:4e:77:e9:f6:17: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F5:A0:95:80:03:63:25:5D:0F:E6:2C:D3:B7:0E:18:51:94:A7:18 X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9d:2f:d8:6f:4f:57:30:ee:a4:38:d1:36:74:60:e0:f4:6f: a7:b1:9c:41:02:36:6f:43:a3:9d:61:4f:13:61:f2:5b:fa:71: ee:95:b8:db:60:4c:e6:7c:47:f6:27:21:35:a8:79:cd:69:95: f6:16:0f:72:b0:d3:45:bf:db:ce:d3:6d:14:6b:f9:d4:eb:4b: 50:50:b9:61:ee:53:2b:6b:1b:ab:13:b4:bc:dc:fe:58:47:0a: 9e:9a:22:69:8f:75:19:0d:d2:1c:4a:51:21:74:4a:d1:64:29: 15:e3:e3:15:d7:59:c7:f2:c0:c4:df:7e:6b:12:1c:5d:30:dd: 25:6e:fe:e6:89:71:ae:a1:39:9a:f1:61:d2:c0:f9:65:fe:f9: 32:49:81:e0:52:e2:7b:b2:17:32:27:03:b6:51:bc:56:a5:c0: 42:d7:51:a0:16:2e:33:d2:8f:1f:30:82:e2:33:1c:18:f9:00: 1a:8e:30:77:c0:a1:59:1f:af:bf:83:76:ca:f5:dc:5b:c2:a2: 7b:7d:2d:5e:f5:a4:41:8f:2d:89:65:36:ad:f5:24:c7:a8:2f: 29:c6:33:85:83:b7:02:28:53:e5:76:20:48:5d:ee:c0:0b:94: 0b:b5:b8:bd:f1:38:94:8a:6d:3c:19:e5:5b:4c:18:95:be:2d: 5c:d8:a8:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjUxMjA1MDE1ODEzWhcNMjUxMjEyMDE1ODEzWjAYMRYwFAYD VQQDEw02OTMyM2MzNS02MjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaTU9JkMHLFjjSxmyE6MKnqnHWaN45kwcMx4nfb7PkMpezPPEnLVqRptnk4c MUFXfKttZFJIZKpSPg9Za8POJdcEk6YQOGXNEAHrcGukeJlAphMiUMB950aspZlc zLzQ5Ht3xiCmZqs0iTSQal4B7tgbN4H823TsJ1lx71suDQbgSEi5qJy9kcZqBS+6 Ev+7msLtF0BFUaq+uCgKMngwZz/Rw+PytRezAxjflbwxqzQSn+v7nZ4/UN2VRdsh zib3iF6SK44RGOtzsvtJIFGR37OwBVZo+bxvY8HCJxVQ1AooI7zx52Y+oZ2aG+VF wMAxxWZ+bMJ3WmclTnfp9heh9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP71oJWA A2MlXQ/mLNO3DhhRlKcYMB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPnS/Yb09XMO6kONE2dGDg9G+nsZxBAjZvQ6OdYU8TYfJb+nHulbjb YEzmfEf2JyE1qHnNaZX2Fg9ysNNFv9vO020Ua/nU60tQULlh7lMraxurE7S83P5Y RwqemiJpj3UZDdIcSlEhdErRZCkV4+MV11nH8sDE335rEhxdMN0lbv7miXGuoTma 8WHSwPll/vkySYHgUuJ7shcyJwO2UbxWpcBC11GgFi4z0o8fMILiMxwY+QAajjB3 wKFZH6+/g3bK9dxbwqJ7fS1e9aRBjy2JZTat9STHqC8pxjOFg7cCKFPldiBIXe7A C5QLtbi98TiUim08GeVbTBiVvi1c2KiB -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:26 2025 by rpki-client