This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: KIThXGmK7Sjf4NCn1gZ6OtoRaJr3Fc9mvHyMVSJN2DQ= Subject key identifier: 55:89:73:FB:67:1D:E3:13:D4:19:C1:10:C3:73:7B:D6:EA:29:B3:B8 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 0300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 02F5 Signing time: Thu 04 Dec 2025 23:37:11 +0000 Manifest this update: Thu 04 Dec 2025 23:37:10 +0000 Manifest next update: Thu 11 Dec 2025 23:37:10 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: 6iuLKM0faovYo5ojWimTHBjtGgV7f15x4UxpPxdZcrg=) 2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: Sw/iVVZQKRk2IehEH8KSZSL+WBhl3LKTM/sZZ2FNR28=) 3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: bOo49vshLt+uwGwclaQ/vUkNjrTzsnBMVbUbDnocL6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 768 (0x300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: Dec 4 23:37:10 2025 GMT Not After : Dec 11 23:37:10 2025 GMT Subject: CN=69321b26-5527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:df:52:73:fe:1c:91:69:3e:09:29:cf:b1: dd:65:75:a8:7a:77:7f:46:d4:b7:01:f4:12:0b:10: 11:3c:20:e8:0d:7f:72:1f:72:7c:30:05:a5:f4:3b: 49:1c:00:16:1c:d5:ab:11:06:63:c5:65:4f:1e:ce: 10:a8:d8:fd:dc:14:3f:29:ab:7a:9a:95:1c:05:9f: d0:b0:17:bf:c5:a5:38:1e:ea:d6:46:82:c9:02:8c: 3f:16:7e:2d:5b:3c:07:98:e7:62:1b:68:70:fa:a1: 84:2f:6e:cf:bf:3d:20:d3:e9:9a:56:82:60:ad:04: 80:bf:b2:db:9c:4c:da:01:00:ee:e7:e8:da:05:dc: 75:b2:73:f9:0a:e2:05:58:8a:c6:94:83:be:a7:bb: df:0d:ea:50:b8:e2:28:dd:cf:72:ac:61:2e:a7:e4: 72:4e:78:e8:a3:9b:0f:57:38:1f:3d:7e:22:e5:6b: 41:51:26:95:57:9f:14:ac:8c:f4:f2:68:51:9a:04: da:9f:57:44:8b:c8:dd:dc:5d:94:0e:8d:86:d9:a1: c6:23:ab:d2:d4:f1:6d:77:45:88:24:12:91:bc:02: 9e:b7:71:2e:42:b7:6d:99:1b:83:10:b8:e7:0b:9a: b9:a6:97:3c:ce:2e:93:9a:0c:a1:de:57:9f:22:e1: af:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:89:73:FB:67:1D:E3:13:D4:19:C1:10:C3:73:7B:D6:EA:29:B3:B8 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:31:0e:99:d1:78:db:56:98:49:24:ca:f2:a8:41:c8:05:bf: c8:9f:08:b4:f5:1f:69:e9:82:5b:87:51:8d:90:61:6e:10:37: 10:a5:97:c8:59:3c:22:e3:f1:1a:b0:e1:4c:17:32:67:6f:68: ab:4f:d0:76:7a:ba:a7:72:5b:f2:c6:4b:1c:df:21:f8:e9:ae: 98:6d:cc:75:23:4c:f1:2b:89:57:3e:7e:30:70:f4:1f:66:ea: 5f:dc:3e:91:ec:a4:e4:bc:3f:1a:22:5c:7f:ca:72:75:65:ac: 33:b0:7c:bd:2c:4d:e5:04:c4:b9:4d:64:9f:09:64:54:f3:fe: be:4d:7d:65:2c:78:c8:6c:68:b4:1b:17:f0:ee:4c:d4:86:2e: 89:e7:e8:c7:9b:72:51:6a:af:db:08:ad:ff:c3:fd:dc:b8:30: bc:4b:72:72:64:81:bd:1e:aa:62:d9:79:d6:2b:c6:1a:7a:d1: 3e:0a:33:df:d5:8d:8f:d1:43:63:18:8b:73:e5:1a:05:17:cc: e1:6b:e5:2c:d1:3a:96:d6:c9:eb:11:f8:04:db:8c:e6:ff:71: 67:8d:0b:70:57:ec:06:ad:cb:e6:b3:ab:9a:16:28:c6:57:63: 2f:5e:99:26:cb:03:cd:07:aa:2a:e6:5c:f5:d3:06:fb:db:f7: 0a:6c:a5:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjUxMjA0MjMzNzEwWhcNMjUxMjExMjMzNzEwWjAYMRYwFAYD VQQDEw02OTMyMWIyNi01NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg/fUnP+HJFpPgkpz7HdZXWoend/RtS3AfQSCxARPCDoDX9yH3J8MAWl9DtJ HAAWHNWrEQZjxWVPHs4QqNj93BQ/Kat6mpUcBZ/QsBe/xaU4HurWRoLJAow/Fn4t WzwHmOdiG2hw+qGEL27Pvz0g0+maVoJgrQSAv7LbnEzaAQDu5+jaBdx1snP5CuIF WIrGlIO+p7vfDepQuOIo3c9yrGEup+RyTnjoo5sPVzgfPX4i5WtBUSaVV58UrIz0 8mhRmgTan1dEi8jd3F2UDo2G2aHGI6vS1PFtd0WIJBKRvAKet3EuQrdtmRuDELjn C5q5ppc8zi6Tmgyh3lefIuGv7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWJc/tn HeMT1BnBEMNze9bqKbO4MB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1MQ6Z0XjbVphJJMryqEHIBb/Inwi09R9p6YJbh1GNkGFuEDcQpZfI WTwi4/EasOFMFzJnb2irT9B2erqnclvyxksc3yH46a6Ybcx1I0zxK4lXPn4wcPQf Zupf3D6R7KTkvD8aIlx/ynJ1ZawzsHy9LE3lBMS5TWSfCWRU8/6+TX1lLHjIbGi0 Gxfw7kzUhi6J5+jHm3JRaq/bCK3/w/3cuDC8S3JyZIG9Hqpi2XnWK8YaetE+CjPf 1Y2P0UNjGItz5RoFF8zha+Us0TqW1snrEfgE24zm/3FnjQtwV+wGrcvms6uaFijG V2MvXpkmywPNB6oq5lz10wb72/cKbKXS -----END CERTIFICATE-----Generated at Sat Dec 6 17:36:46 2025 by rpki-client