This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json) Hash identifier: 0Gc3lHm/mL9FT7XVt+WgfqBRKwdyQUZ29WJS+7Iv9gM= Subject key identifier: 65:9A:96:46:36:91:85:88:2B:E1:2F:38:F4:BD:CF:63:A4:52:60:0E Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Certificate serial: 0A36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft Manifest number: 0A24 Signing time: Thu 04 Dec 2025 19:04:38 +0000 Manifest this update: Thu 04 Dec 2025 19:04:37 +0000 Manifest next update: Thu 11 Dec 2025 19:04:37 +0000 Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: u5nHIDpEBef1a9volrcP0P7lSdVz1jomFny7sxJzvj0=) 2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: Cf8bqRacvTWl+UzpH6e1kxekXSzzSxIQ9wSazOTj5Ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2614 (0xa36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Validity Not Before: Dec 4 19:04:37 2025 GMT Not After : Dec 11 19:04:37 2025 GMT Subject: CN=6931db45-fb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:11:87:79:9e:a5:4a:8e:db:95:a0:52:bb: 06:43:f0:7e:f7:b3:9f:c7:b2:74:a2:a9:74:40:bc: c2:6f:78:7d:77:5e:2f:7d:e9:e6:6c:88:18:67:f0: 65:a5:0b:0d:5b:b4:a3:de:ef:d3:a9:28:42:2b:9b: 0f:77:12:10:2d:68:0f:0b:63:89:06:ef:2d:f9:06: 88:5f:df:31:49:5a:3e:10:57:22:bd:45:68:58:7a: 68:62:27:85:5e:a8:31:ab:37:90:c9:91:bf:90:c5: 0c:e6:9a:58:44:e4:b7:7f:9d:e9:61:18:34:b6:a4: 3c:bd:03:b0:4b:c4:af:d7:99:0e:8b:7f:e3:96:a2: 53:87:fe:9f:2c:2c:ec:4d:47:13:b1:9e:29:a2:72: eb:bf:25:b9:59:6f:6b:e6:b9:b8:c0:1c:f4:c8:10: 9f:f0:fa:c2:54:df:d2:29:80:d9:09:41:82:74:44: 56:05:e9:8d:0c:4e:a1:b0:5c:ac:14:9b:d0:61:03: 0a:6c:a0:1b:9b:70:63:1d:e5:c4:f6:71:ab:d9:61: ec:29:b8:6e:83:e5:11:5d:8e:ed:bb:9e:c2:25:38: b7:f2:b9:ee:d3:e9:ed:51:cd:6f:84:01:79:aa:c2: b3:0a:29:ff:7b:b5:f8:86:31:21:b6:e5:ed:47:ed: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9A:96:46:36:91:85:88:2B:E1:2F:38:F4:BD:CF:63:A4:52:60:0E X509v3 Authority Key Identifier: keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:1a:55:26:ba:05:f1:f1:37:19:e2:bc:d7:34:76:bc:43:48: 54:d8:1d:c4:39:9b:bd:d1:74:87:5a:3e:d7:1f:16:a9:fa:0c: 66:c5:5d:43:30:8f:dc:5d:f0:fc:15:5b:fa:fc:e0:d9:0b:d8: ab:d8:2a:d1:cd:12:c2:e0:ef:f4:38:17:ec:24:6b:e9:fc:32: 44:13:34:9d:06:04:cb:f2:39:29:e6:ca:e8:14:99:95:45:13: 97:f2:f7:ed:ec:59:a0:4f:bf:ab:43:e9:37:a9:6b:a1:20:71: 3b:55:05:aa:98:8d:83:70:3a:b3:2b:88:ff:1e:f1:25:fb:35: 0c:29:8e:14:b1:30:8d:46:a6:4c:7f:4c:7a:cc:35:65:8f:e3: aa:57:6a:20:d8:62:e2:ba:4b:de:2b:cf:d1:ce:67:18:11:40: da:88:a4:a8:86:0e:77:3c:b0:49:a1:4b:b6:5c:b4:6c:db:23: 60:d2:07:0c:fa:d4:ab:c3:15:38:11:56:df:56:4c:8d:16:6e: 51:62:f3:c9:36:ea:c3:ba:fa:79:e1:89:f7:32:09:5c:b7:00: f4:99:d7:b0:a4:f0:2b:40:22:dc:32:0d:37:4d:10:e1:e8:68: b9:9b:5c:b4:bf:88:68:75:20:db:4a:40:2b:65:20:d1:16:5c: 2c:38:27:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzQkUxMTAvBgNVBAUTKEExMDYwMzMwMkJGRUM4MkEwN0Y4QzVENDJFNDU4Qjc2 QzVGRjkxQTQwHhcNMjUxMjA0MTkwNDM3WhcNMjUxMjExMTkwNDM3WjAYMRYwFAYD VQQDEw02OTMxZGI0NS1mYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43sRh3mepUqO25WgUrsGQ/B+97Ofx7J0oql0QLzCb3h9d14vfenmbIgYZ/Bl pQsNW7Sj3u/TqShCK5sPdxIQLWgPC2OJBu8t+QaIX98xSVo+EFcivUVoWHpoYieF XqgxqzeQyZG/kMUM5ppYROS3f53pYRg0tqQ8vQOwS8Sv15kOi3/jlqJTh/6fLCzs TUcTsZ4ponLrvyW5WW9r5rm4wBz0yBCf8PrCVN/SKYDZCUGCdERWBemNDE6hsFys FJvQYQMKbKAbm3BjHeXE9nGr2WHsKbhug+URXY7tu57CJTi38rnu0+ntUc1vhAF5 qsKzCin/e7X4hjEhtuXtR+0CQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWalkY2 kYWIK+EvOPS9z2OkUmAOMB8GA1UdIwQYMBaAFKEGAzAr/sgqB/jF1C5Fi3bF/5Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNCRS84OUI0RjY3ODg0 MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlDb0gtTVhVTGtXTGRzWF9r YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29RWURNQ3YteUNvSC1NWFVMa1dMZHNYX2thUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNCRS84OUI0RjY3ODg0MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlD b0gtTVhVTGtXTGRzWF9rYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/GlUmugXx8TcZ4rzXNHa8Q0hU2B3EOZu90XSHWj7XHxap+gxmxV1D MI/cXfD8FVv6/ODZC9ir2CrRzRLC4O/0OBfsJGvp/DJEEzSdBgTL8jkp5sroFJmV RROX8vft7FmgT7+rQ+k3qWuhIHE7VQWqmI2DcDqzK4j/HvEl+zUMKY4UsTCNRqZM f0x6zDVlj+OqV2og2GLiukveK8/RzmcYEUDaiKSohg53PLBJoUu2XLRs2yNg0gcM +tSrwxU4EVbfVkyNFm5RYvPJNurDuvp54Yn3MglctwD0mdewpPArQCLcMg03TRDh 6Gi5m1y0v4hodSDbSkArZSDRFlwsOCdb -----END CERTIFICATE-----Generated at Sat Dec 6 20:10:01 2025 by rpki-client