This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: dCFo+MA4i45V8OBOVJIiLVuXyNTDO5NdLDU/UVfHp5s= Subject key identifier: 43:32:A0:60:76:BE:B7:D8:F0:F0:7F:46:F8:36:45:EF:A2:A0:A5:9A Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 18E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1671 Signing time: Sat 06 Dec 2025 16:39:50 +0000 Manifest this update: Sat 06 Dec 2025 16:39:50 +0000 Manifest next update: Sat 13 Dec 2025 16:39:50 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: 2eW5kAZ0N8P7hh0qTD8CFlq8ywrlyrNF4BBCxwP1F9w=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: XdNJgDmkOAWh0JRm8SzUVD6J0pIjuQDztKGWx3vGffA=) 3: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 5: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: dKYtICER5+Vrv6r3o9V0PfpxWh5ROGS5ONF+u9Xmzy4=) 6: 8580D066931A11F0BE28F434C4F9AE02.roa (hash: yho6WmWoLE3U88ZEJ/rJC95F8CccO1JBYgT22LPL+rc=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: WYDCqDuulWCdD1pOQetSANFplU4pw6zj/hLKUky4NMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6370 (0x18e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Dec 6 16:39:50 2025 GMT Not After : Dec 13 16:39:50 2025 GMT Subject: CN=69345c56-df59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:20:1c:bc:7e:ca:32:f7:44:7a:50:be:75:36: 7e:6c:8a:c7:5d:e0:2e:9c:4d:63:e8:b2:c6:2e:2f: 05:1e:1a:7c:3d:4c:01:df:82:80:91:c9:5d:db:b7: 24:9a:d0:58:a4:bd:0c:09:da:89:48:7a:d5:3b:98: 08:31:f1:ce:f6:d0:a0:f5:a2:0c:de:9f:76:ec:aa: 21:d9:5c:4d:15:bb:38:b2:a7:e8:b9:3b:79:7f:a6: de:3c:80:b5:84:0f:e4:73:d0:db:59:84:b2:95:db: 44:6c:50:98:89:98:12:78:68:5a:5e:0e:f3:d5:e8: 7a:15:09:6b:ee:32:0e:a3:5a:75:e3:22:25:e0:01: ac:db:a8:63:a7:52:ac:a5:d0:d8:0f:72:94:b6:41: 52:12:a3:e1:8b:a4:be:23:9f:cb:c4:f6:28:bb:3b: 2d:27:c6:0d:2e:85:21:86:9d:d3:fc:bb:85:ee:4a: 1a:a6:f0:a0:e0:e6:41:34:de:eb:98:27:82:48:35: 3a:86:a0:d4:51:b7:cc:73:ae:e6:52:e3:be:ff:80: da:32:f2:b6:c5:5e:67:b8:99:7f:9b:d2:d0:92:60: a4:93:3c:f5:31:be:6c:22:bc:10:2e:76:03:c8:d1: f9:33:a2:92:e8:1b:f1:9b:87:42:c1:ec:3c:aa:9f: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:32:A0:60:76:BE:B7:D8:F0:F0:7F:46:F8:36:45:EF:A2:A0:A5:9A X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:a5:22:2d:49:82:fc:1a:41:f6:ef:c7:b6:11:e4:fd:85:d6: e6:0c:93:a8:19:70:6e:99:aa:f6:1a:21:4c:8d:60:96:86:68: 00:26:06:e4:4f:fb:72:38:19:34:c8:f5:5d:98:cd:4a:55:53: 54:c6:3d:2b:9b:3e:15:4c:0c:da:55:dd:42:8d:71:c7:60:66: bb:11:ee:d7:94:97:ca:a6:09:54:88:98:a9:d3:bd:ad:7f:b4: 19:76:52:cc:1d:cb:22:10:a0:41:87:e9:c9:ab:6d:01:df:06: 54:26:6e:23:71:b3:03:d6:c3:0c:e7:69:e2:0c:ee:a5:39:c5: 98:22:f8:14:0d:ba:8c:d3:6d:e0:4c:a8:2c:b9:7f:ef:cf:dd: 76:18:91:f8:d6:9b:d3:08:38:e0:76:c2:56:e5:c5:e5:52:b4: 9a:18:c4:72:87:ac:6c:e7:09:9a:c2:29:70:e4:aa:7e:99:d6: 90:f4:94:40:fa:dc:cb:a5:32:21:65:07:50:e6:25:51:e2:fe: 4c:ac:27:90:45:cd:67:02:71:35:ba:d5:d3:a7:48:9f:f1:cd: 8b:fa:f1:0f:eb:53:d1:a6:c2:13:bd:c9:c2:02:8e:e8:a0:ee: 0a:0d:9c:7a:25:02:69:9d:84:66:de:f5:3e:a6:4b:f0:38:ce: cf:48:02:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUxMjA2MTYzOTUwWhcNMjUxMjEzMTYzOTUwWjAYMRYwFAYD VQQDEw02OTM0NWM1Ni1kZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCAcvH7KMvdEelC+dTZ+bIrHXeAunE1j6LLGLi8FHhp8PUwB34KAkcld27ck mtBYpL0MCdqJSHrVO5gIMfHO9tCg9aIM3p927Koh2VxNFbs4sqfouTt5f6bePIC1 hA/kc9DbWYSyldtEbFCYiZgSeGhaXg7z1eh6FQlr7jIOo1p14yIl4AGs26hjp1Ks pdDYD3KUtkFSEqPhi6S+I5/LxPYouzstJ8YNLoUhhp3T/LuF7koapvCg4OZBNN7r mCeCSDU6hqDUUbfMc67mUuO+/4DaMvK2xV5nuJl/m9LQkmCkkzz1Mb5sIrwQLnYD yNH5M6KS6Bvxm4dCwew8qp9OpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMyoGB2 vrfY8PB/Rvg2Re+ioKWaMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDipSItSYL8GkH278e2EeT9hdbmDJOoGXBumar2GiFMjWCWhmgAJgbk T/tyOBk0yPVdmM1KVVNUxj0rmz4VTAzaVd1CjXHHYGa7Ee7XlJfKpglUiJip072t f7QZdlLMHcsiEKBBh+nJq20B3wZUJm4jcbMD1sMM52niDO6lOcWYIvgUDbqM023g TKgsuX/vz912GJH41pvTCDjgdsJW5cXlUrSaGMRyh6xs5wmawilw5Kp+mdaQ9JRA +tzLpTIhZQdQ5iVR4v5MrCeQRc1nAnE1utXTp0if8c2L+vEP61PRpsITvcnCAo7o oO4KDZx6JQJpnYRm3vU+pkvwOM7PSAJE -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:00 2025 by rpki-client