This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft File: OpcfQv-wayoGyXkv1PCFE20UK-o.mft (raw, json) Hash identifier: ZAN14A0VFnEbXXAe+yk+TlH4uh7YKs8XnvOP+wIL7ic= Subject key identifier: CC:F8:D3:5D:C2:70:FB:7D:EB:81:73:50:37:89:42:52:FE:CA:AE:A5 Authority key identifier: 3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA Certificate issuer: /CN=A9160AEE/serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft Manifest number: 1F Signing time: Fri 05 Dec 2025 05:36:12 +0000 Manifest this update: Fri 05 Dec 2025 05:36:11 +0000 Manifest next update: Fri 12 Dec 2025 05:36:11 +0000 Files and hashes: 1: OpcfQv-wayoGyXkv1PCFE20UK-o.crl (hash: +hdVfvTnq0/D4g4dxfhzDYbN+sjoceP4Mb5XbtF3Xpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Validity Not Before: Dec 5 05:36:11 2025 GMT Not After : Dec 12 05:36:11 2025 GMT Subject: CN=69326f4c-718a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4a:72:b8:e9:39:9a:3d:86:86:b5:82:53:eb: c4:4f:c4:37:8d:9d:17:58:5e:08:f1:fe:28:08:33: 84:dc:8f:ba:d1:bc:be:59:e1:2b:16:37:0f:5d:df: a9:da:75:2e:b9:a3:5d:15:7c:87:b7:c7:f9:3d:ff: 52:21:43:da:c5:69:8a:91:89:5a:93:f7:40:14:5a: 23:0e:1f:cb:7a:ed:2b:ce:9d:d0:2a:9e:d4:06:64: ce:8a:e1:c3:b4:ae:86:4a:7d:7b:60:72:6e:02:04: b1:aa:34:4d:09:f4:06:df:67:24:19:19:37:b8:32: df:9d:64:c2:89:7c:7f:82:cc:46:2c:9a:e4:5b:56: 65:1a:18:04:ad:4f:05:a8:d3:e8:74:1c:22:46:7e: b5:01:0c:02:a7:03:17:8b:a9:4d:ba:4a:95:60:f5: 25:eb:98:1d:f4:af:ff:02:53:41:8b:12:a7:5c:d3: 2f:92:cc:26:75:76:4c:4a:e1:12:63:ee:bc:65:7f: 5c:49:56:29:16:e4:07:90:43:b8:3b:d1:55:d3:d5: f8:49:6c:87:fb:bd:83:50:6d:82:8b:eb:12:8c:36: 6e:d5:ed:fd:b9:7b:d3:27:8c:b4:9e:46:9b:22:fb: 34:20:2c:52:a1:8b:70:23:d9:6a:2c:96:38:b3:1c: ef:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F8:D3:5D:C2:70:FB:7D:EB:81:73:50:37:89:42:52:FE:CA:AE:A5 X509v3 Authority Key Identifier: keyid:3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:de:e7:3f:e4:fa:2a:6d:ed:83:da:9c:a6:a8:2c:12:3e:34: b0:14:bd:ff:f4:5b:d9:96:9c:b5:fa:5b:e0:85:4b:88:9a:b2: 31:30:ae:f6:48:ff:2b:3e:a0:92:3b:1c:3a:79:b5:7a:37:fe: f3:c8:43:8b:36:86:d5:01:61:a5:a0:5c:02:f8:7f:bb:7f:8d: 0d:92:ab:9f:67:7e:05:05:1d:08:d2:44:6f:db:ab:2a:26:df: 42:4b:93:85:1a:65:24:93:4e:50:3a:e7:6d:4b:f6:4c:06:32: f5:f5:0d:82:2e:65:76:1e:7b:a9:ae:47:25:b5:b1:87:7b:75: 00:c0:ed:38:3d:c2:6e:e8:00:9f:81:04:14:80:7d:9f:c6:15: 82:10:2f:57:a1:54:42:1d:ed:f2:3e:be:7c:0b:0a:f6:d4:76: 36:af:bb:5e:9f:b4:62:e4:1c:e3:b9:c9:6f:35:3a:ec:21:14: 59:f6:60:e3:fa:e4:5a:36:dd:5a:e0:70:bf:89:e4:ae:3e:bc: e0:77:7a:29:c1:ee:5b:1e:35:66:c6:71:c4:b5:b3:cb:f4:2e: ae:bc:08:b8:8b:4e:12:bb:4b:85:57:38:1d:e2:cb:09:94:7f: 85:b8:f6:18:56:f7:34:d8:d7:62:3a:24:54:54:25:92:8a:1f: b0:da:9a:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoM0E5NzFGNDJGRkIwNkIyQTA2Qzk3OTJGRDRGMDg1MTM2 RDE0MkJFQTAeFw0yNTEyMDUwNTM2MTFaFw0yNTEyMTIwNTM2MTFaMBgxFjAUBgNV BAMTDTY5MzI2ZjRjLTcxOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0SnK46TmaPYaGtYJT68RPxDeNnRdYXgjx/igIM4Tcj7rRvL5Z4SsWNw9d36na dS65o10VfIe3x/k9/1IhQ9rFaYqRiVqT90AUWiMOH8t67SvOndAqntQGZM6K4cO0 roZKfXtgcm4CBLGqNE0J9AbfZyQZGTe4Mt+dZMKJfH+CzEYsmuRbVmUaGAStTwWo 0+h0HCJGfrUBDAKnAxeLqU26SpVg9SXrmB30r/8CU0GLEqdc0y+SzCZ1dkxK4RJj 7rxlf1xJVikW5AeQQ7g70VXT1fhJbIf7vYNQbYKL6xKMNm7V7f25e9MnjLSeRpsi +zQgLFKhi3Aj2WosljizHO9VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzPjTXcJw +33rgXNQN4lCUv7KrqUwHwYDVR0jBBgwFoAUOpcfQv+wayoGyXkv1PCFE20UK+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzIxRTNGMzY2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlvR3lYa3YxUENGRTIwVUst by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3BjZlF2LXdheW9HeVhrdjFQQ0ZFMjBVSy1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzIxRTNGMzY2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlv R3lYa3YxUENGRTIwVUstby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEze5z/k+ipt7YPanKaoLBI+NLAUvf/0W9mWnLX6W+CFS4iasjEwrvZI /ys+oJI7HDp5tXo3/vPIQ4s2htUBYaWgXAL4f7t/jQ2Sq59nfgUFHQjSRG/bqyom 30JLk4UaZSSTTlA6521L9kwGMvX1DYIuZXYee6muRyW1sYd7dQDA7Tg9wm7oAJ+B BBSAfZ/GFYIQL1ehVEId7fI+vnwLCvbUdjavu16ftGLkHOO5yW81OuwhFFn2YOP6 5Fo23VrgcL+J5K4+vOB3einB7lseNWbGccS1s8v0Lq68CLiLThK7S4VXOB3iywmU f4W49hhW9zTY12I6JFRUJZKKH7DamnA= -----END CERTIFICATE-----Generated at Sun Dec 7 03:22:06 2025 by rpki-client