This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft File: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json) Hash identifier: viJxLkWhVdsbobAjvwWc/ZrMJqN+Sydk4VIyecg9CBo= Subject key identifier: 29:1A:17:52:83:17:79:A7:45:CD:AC:13:C7:B0:3D:44:F0:3E:31:94 Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft Manifest number: 0125 Signing time: Fri 05 Dec 2025 02:49:32 +0000 Manifest this update: Fri 05 Dec 2025 02:49:32 +0000 Manifest next update: Fri 12 Dec 2025 02:49:32 +0000 Files and hashes: 1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: fqFCACl/e6bM9urA9tpGlJ9/x4/CqVESXRv0kiGIC7I=) 2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: bZZXWh+x6zyd1WkvfmUOQBDbu8rzUDtizJ6UDEgwLU0=) 3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: plwquzGEufYRwcQHYEN82Q8mZBEqW77cccbW7b/Z0qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Validity Not Before: Dec 5 02:49:32 2025 GMT Not After : Dec 12 02:49:32 2025 GMT Subject: CN=6932483c-0cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:4d:aa:aa:f8:24:34:99:8e:3d:31:a5:dc: eb:91:c4:59:b0:8b:0b:7c:5b:bd:3c:04:85:87:e5: 1c:d7:00:f4:f3:3f:13:3c:0b:84:55:b6:f2:a3:e0: a6:1e:ba:6e:e1:7a:e8:38:7b:82:8d:f1:0b:9f:df: 14:b2:61:09:55:15:a9:b7:70:8d:b8:5d:44:2b:52: b7:47:b0:b1:60:96:38:c7:52:94:15:3e:09:dc:47: 14:ec:12:1e:de:3a:94:f7:16:7b:ef:89:f8:8f:e0: ce:e6:26:42:16:b0:df:03:a4:14:ad:01:66:de:6d: f0:8e:4b:b9:4e:58:75:be:2c:cc:3e:4a:9d:0d:5e: 2b:cc:dc:e7:7d:53:4d:2d:31:d8:02:57:9d:2f:92: 7a:7a:35:1f:10:74:45:a1:df:07:95:d8:54:12:12: a1:77:35:f4:05:7f:d0:e7:1d:9c:55:17:41:d5:47: af:84:4b:9b:f3:96:b5:d8:6e:b7:7e:2c:9a:ea:3e: 08:5b:29:ff:d9:70:b1:2d:f8:60:9a:1a:db:18:b6: 63:f2:01:55:37:b8:81:5f:13:9b:7a:c5:92:b9:11: b4:7e:c0:93:96:f4:9f:56:ea:45:a9:8b:47:be:90: 96:62:2f:41:16:99:d8:5c:85:fa:81:71:f7:86:b0: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:17:52:83:17:79:A7:45:CD:AC:13:C7:B0:3D:44:F0:3E:31:94 X509v3 Authority Key Identifier: keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:cb:2e:f1:f0:6c:c5:da:e4:29:5f:c5:2b:4c:d8:2f:c6:81: 69:85:9b:8a:fd:fa:e4:38:30:64:78:65:d9:54:75:0e:e5:b8: 28:aa:21:5e:8c:62:e2:b6:20:77:50:72:0a:e7:ee:4c:c5:42: 40:3e:9e:f6:86:19:97:0b:64:01:dd:55:90:2c:fb:bd:0b:12: 37:0c:52:07:f6:37:5d:59:bf:8a:30:2f:b0:ea:25:d4:84:33: 27:13:76:93:7b:81:46:5b:6f:ef:bf:94:a2:a1:33:0a:39:9b: bb:4a:2f:7b:f6:5e:1e:df:77:8a:95:99:4d:bf:57:34:c7:3a: 5d:78:5d:6e:d0:af:42:b9:c9:73:9b:53:fc:6d:33:7a:52:96: 86:e4:05:c3:e7:c7:34:ce:f3:6d:77:66:97:5f:a2:95:a0:90: 96:94:25:64:3d:f9:62:6d:94:27:77:6a:58:60:fe:2c:a2:77: 93:d1:63:9f:5e:56:e9:43:ca:eb:d0:28:40:91:3f:0f:7d:37: 37:a5:51:7d:28:6f:b5:35:cb:1c:96:5f:0d:d7:1d:ce:3c:3c: eb:6f:d8:c1:2f:c6:e2:e9:69:4e:d7:b7:7b:2b:af:53:d8:6c: f6:df:dc:ae:61:bb:38:5e:d1:f7:92:88:86:f7:bb:7d:31:ed: c0:fd:ae:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg3OUExMTAvBgNVBAUTKDM5OUE1RTE3RDlDQTQzQjZDMzNBQzMzMDIwNkRDQkRE OTM1RTc4NzEwHhcNMjUxMjA1MDI0OTMyWhcNMjUxMjEyMDI0OTMyWjAYMRYwFAYD VQQDEw02OTMyNDgzYy0wY2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CZNqqr4JDSZjj0xpdzrkcRZsIsLfFu9PASFh+Uc1wD08z8TPAuEVbbyo+Cm Hrpu4XroOHuCjfELn98UsmEJVRWpt3CNuF1EK1K3R7CxYJY4x1KUFT4J3EcU7BIe 3jqU9xZ774n4j+DO5iZCFrDfA6QUrQFm3m3wjku5Tlh1vizMPkqdDV4rzNznfVNN LTHYAledL5J6ejUfEHRFod8HldhUEhKhdzX0BX/Q5x2cVRdB1UevhEub85a12G63 fiya6j4IWyn/2XCxLfhgmhrbGLZj8gFVN7iBXxObesWSuRG0fsCTlvSfVupFqYtH vpCWYi9BFpnYXIX6gXH3hrA7PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkaF1KD F3mnRc2sE8ewPUTwPjGUMB8GA1UdIwQYMBaAFDmaXhfZykO2wzrDMCBty92TXnhx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODc5QS9CNjcwMTczQzFD OUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3YkRPc013SUczTDNaTmVl SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09acGVGOW5LUTdiRE9zTXdJRzNMM1pOZWVIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODc5QS9CNjcwMTczQzFDOUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3 YkRPc013SUczTDNaTmVlSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHyy7x8GzF2uQpX8UrTNgvxoFphZuK/frkODBkeGXZVHUO5bgoqiFe jGLitiB3UHIK5+5MxUJAPp72hhmXC2QB3VWQLPu9CxI3DFIH9jddWb+KMC+w6iXU hDMnE3aTe4FGW2/vv5SioTMKOZu7Si979l4e33eKlZlNv1c0xzpdeF1u0K9Cuclz m1P8bTN6UpaG5AXD58c0zvNtd2aXX6KVoJCWlCVkPflibZQnd2pYYP4soneT0WOf XlbpQ8rr0ChAkT8PfTc3pVF9KG+1Ncscll8N1x3OPDzrb9jBL8bi6WlO17d7K69T 2Gz239yuYbs4XtH3koiG97t9Me3A/a48 -----END CERTIFICATE-----Generated at Sat Dec 6 17:44:33 2025 by rpki-client