This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft File: OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json) Hash identifier: JAOc9P+Qcp5k1Pvz/zr+H6m4YrfkPMLrc8emr/H+Y4s= Subject key identifier: BA:E6:F9:66:48:4B:48:37:F2:C1:BB:C6:FD:49:A9:E4:E1:E0:48:D3 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0EF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft Manifest number: 0CB1 Signing time: Fri 05 Dec 2025 08:00:23 +0000 Manifest this update: Fri 05 Dec 2025 08:00:23 +0000 Manifest next update: Fri 12 Dec 2025 08:00:23 +0000 Files and hashes: 1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: L1yZiuNdyo8oNGP+ls39Jq0uoVEMSY71HeqLlCm8lkU=) 2: 0892A6CECB6911F0A6572E71C4F9AE02.roa (hash: 1dTM2p5MzGPMxeHwaBFGmA/fKjn4vqSairi9+/DITAs=) 3: 8FF3B806B0D411F0955C2A4DC4F9AE02.roa (hash: LZ0pNikl+GOc3SHl1zJlXg3qSuepoZ3LIiuO7cdJ5ss=) 4: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: s5N2TyQ76d6xMdXE61yLpof0IVsz9xlEvKQDUIYT3lc=) 5: CE96CCA2B6FF11F09F680173C4F9AE02.roa (hash: J2RQb3BBIURRwX2BLX2xvqyl9v+nDrLbXlV8YCOhG4U=) 6: 111D54B0CB6911F0B09B4C71C4F9AE02.roa (hash: ZzuVhfzZfYJkPh9aqzrXyo5zgphPaufXf+2qsMMO4PU=) 7: E99DA38ED1AF11F09C93820EC4F9AE02.roa (hash: sHXVVfVXGBK6lESfXtXozO54EkcIzdN0jwwGK90ydTs=) 8: 1D5C6E6CA0FA11F0B026D133C4F9AE02.roa (hash: C2XpgyfnYYZHApkuumNQPttPRBeBZUCBK2LL1AJJb7g=) 9: 4E2D252A699811F0B3E6984EC4F9AE02.roa (hash: QSoFsbrgjFW6Q9mEy4RafdhOrYTNfIv5s2+VFrUWtlk=) 10: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: IULXHhlu5uT6Tg9jL/yk50UFaDGDqG8EJ1WnwAnbvbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 08:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3833 (0xef9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Dec 5 08:00:23 2025 GMT Not After : Dec 12 08:00:23 2025 GMT Subject: CN=69329117-b63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:0c:c0:d7:2a:06:ea:77:b3:b9:c4:0a:dc: d8:a7:14:f7:88:72:10:8b:71:12:c7:cb:2a:8f:34: fb:f1:94:84:94:f3:f1:2d:8b:a1:67:a0:97:fb:90: b7:2a:00:b5:6f:f7:11:c3:c3:b5:d8:31:10:14:db: 3b:b7:8b:80:08:29:e5:df:a7:19:b3:60:bf:9c:83: 2d:de:ef:ca:9f:0c:38:1f:ee:f0:69:81:ec:13:56: 45:ea:23:9f:a0:8f:8a:bd:65:67:ca:d9:b2:ce:a0: 32:67:15:19:ea:88:f2:00:02:84:2b:97:fe:03:95: c9:5d:fe:8d:eb:75:cd:e6:bc:65:23:f5:e3:26:a1: 3f:31:e0:9c:46:d6:92:49:9f:49:e0:37:9a:32:83: 3e:e7:e6:62:96:14:fd:a5:c7:77:01:9f:9a:5b:76: d5:20:2e:6e:77:26:a1:c2:f9:a9:94:d4:9b:ab:46: 2d:e7:1d:5c:70:4e:e6:f8:62:b0:f2:03:38:e4:45: 1e:03:21:46:0d:1a:b5:0e:4e:f7:2c:6e:1d:51:e9: 88:64:86:43:e2:ac:f6:d7:38:7f:ed:0b:5c:d4:63: 7d:15:d4:cd:b9:96:75:b0:d4:2f:f2:8e:5a:dd:ea: ab:6f:e7:3d:55:a6:1b:7e:de:d8:65:a9:94:29:5c: db:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E6:F9:66:48:4B:48:37:F2:C1:BB:C6:FD:49:A9:E4:E1:E0:48:D3 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ba:75:5c:3e:93:22:3c:bb:22:c7:fc:3d:66:15:15:c9:dc: 0a:23:8d:3d:23:55:7f:7a:3d:9a:bb:32:27:1c:c9:52:11:f3: 1f:b8:dc:88:f3:f1:aa:5a:e5:88:64:11:e3:07:1a:18:a4:d2: 22:fa:19:b0:43:cc:5c:ff:4e:9e:87:58:bf:5a:e7:d6:7b:0f: 1e:6a:10:e8:c3:cb:c5:f4:f9:d1:5d:a6:44:b2:a5:1b:b4:c2: e6:08:a3:b3:41:60:03:ff:b7:ca:61:75:69:12:00:aa:9a:75: 0a:9b:af:b4:8d:b0:d6:10:c5:76:99:ee:7b:ed:07:8c:bc:ca: b9:17:33:cb:f7:d7:02:b1:65:90:d6:8c:0e:b8:94:f9:ee:14: f3:e0:85:48:f1:fe:f2:ee:8c:2f:8c:a9:5c:29:b4:3b:ed:ec: 1a:cf:0b:df:01:a2:48:a8:d2:30:68:30:05:ea:64:25:80:b9: ee:15:0f:7d:66:81:5b:b2:7f:e4:87:07:b7:1c:92:1e:cf:be: df:54:64:1b:0f:7d:e0:e2:69:9a:30:42:1b:ce:60:c3:d0:d2: 76:56:42:3e:80:ec:56:7e:1a:08:bd:67:e7:74:e8:3e:62:4e: d9:73:c8:6a:14:85:d0:97:2c:67:7b:9b:83:8f:95:bc:40:bd: e6:56:29:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMjA1MDgwMDIzWhcNMjUxMjEyMDgwMDIzWjAYMRYwFAYD VQQDEw02OTMyOTExNy1iNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3QMwNcqBup3s7nECtzYpxT3iHIQi3ESx8sqjzT78ZSElPPxLYuhZ6CX+5C3 KgC1b/cRw8O12DEQFNs7t4uACCnl36cZs2C/nIMt3u/Knww4H+7waYHsE1ZF6iOf oI+KvWVnytmyzqAyZxUZ6ojyAAKEK5f+A5XJXf6N63XN5rxlI/XjJqE/MeCcRtaS SZ9J4DeaMoM+5+ZilhT9pcd3AZ+aW3bVIC5udyahwvmplNSbq0Yt5x1ccE7m+GKw 8gM45EUeAyFGDRq1Dk73LG4dUemIZIZD4qz21zh/7Qtc1GN9FdTNuZZ1sNQv8o5a 3eqrb+c9VaYbft7YZamUKVzbAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrm+WZI S0g38sG7xv1JqeTh4EjTMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5 YVJqanA1LS1DQ1BHY3k0bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1unVcPpMiPLsix/w9ZhUVydwKI409I1V/ej2auzInHMlSEfMfuNyI 8/GqWuWIZBHjBxoYpNIi+hmwQ8xc/06eh1i/WufWew8eahDow8vF9PnRXaZEsqUb tMLmCKOzQWAD/7fKYXVpEgCqmnUKm6+0jbDWEMV2me577QeMvMq5FzPL99cCsWWQ 1owOuJT57hTz4IVI8f7y7owvjKlcKbQ77ewazwvfAaJIqNIwaDAF6mQlgLnuFQ99 ZoFbsn/khwe3HJIez77fVGQbD33g4mmaMEIbzmDD0NJ2VkI+gOxWfhoIvWfndOg+ Yk7Zc8hqFIXQlyxne5uDj5W8QL3mVin3 -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:21 2025 by rpki-client