This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: Re3n2ldNqiqYBhkU15VeK8NrgFxLSUA2B1eAtLAah50= Subject key identifier: 54:E5:D4:3A:7A:6A:7E:B9:F1:AF:7A:00:21:D1:61:00:7D:D6:B8:55 Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: C4 Signing time: Fri 05 Dec 2025 03:51:19 +0000 Manifest this update: Fri 05 Dec 2025 03:51:18 +0000 Manifest next update: Fri 12 Dec 2025 03:51:18 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: JoNhjATHXBvLnbp8fsXWdv7ZnAmIWpHQbiFX+VsA1yM=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Dec 5 03:51:18 2025 GMT Not After : Dec 12 03:51:18 2025 GMT Subject: CN=693256b6-4d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:ca:88:cc:7d:0c:80:41:fa:46:7c:fd:76: d3:c4:75:4b:f0:b4:f5:e3:bf:8c:fb:e1:f0:eb:69: b2:d5:61:c7:68:34:77:e8:99:c5:4e:91:f5:dd:3f: 95:9b:3c:79:52:55:ee:7c:89:53:67:5b:fa:a1:31: 78:93:e9:68:3a:c7:4f:b8:cc:2f:8c:fc:9f:53:67: 69:f2:bc:31:ba:48:1d:7c:3c:08:49:73:45:d2:c4: 80:8b:15:5e:a4:30:48:94:5d:d4:23:8b:a0:1a:7e: 54:05:6a:cd:49:a4:d4:7f:25:88:33:d6:cb:79:4c: 02:f6:ad:fb:f2:70:53:d6:a1:f8:d5:44:8d:88:c1: da:0e:cb:f7:4f:25:8c:09:87:bf:0f:0b:80:dc:be: c0:f2:b5:16:1e:17:02:bd:e4:2e:a8:23:67:c3:66: a1:12:fc:e7:9f:0e:40:a9:6a:84:06:f0:02:49:60: 29:c5:7b:6d:63:05:ac:6e:00:2c:a6:dd:cc:7b:85: a3:0b:c7:7b:ba:2c:f2:8c:e4:54:eb:b5:2e:27:0c: f6:8b:35:c2:b2:38:01:df:bf:c0:11:8b:5e:06:89: a9:73:12:7f:e5:ac:cf:57:39:83:ef:a8:f7:93:ea: 15:39:ed:ae:c1:7c:d4:65:2f:a8:a1:c4:f7:5d:17: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E5:D4:3A:7A:6A:7E:B9:F1:AF:7A:00:21:D1:61:00:7D:D6:B8:55 X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:bd:8e:ec:72:cb:06:fb:49:23:73:2b:90:18:a7:04:ce:2e: fe:62:06:0a:9b:5c:79:73:af:98:81:6a:a4:5b:d7:80:36:69: ba:0b:98:f7:43:65:37:6e:f6:a6:8c:62:9e:d0:49:7f:74:ab: 30:c5:0f:dd:51:11:e9:c0:87:aa:7c:6a:35:a3:ec:9c:a7:d4: 52:25:95:fe:07:05:64:f7:a2:9e:3d:59:b5:cd:f1:7d:35:f7: 12:d1:ff:45:76:9f:a8:e6:63:a1:39:0e:c2:7e:50:46:de:40: 95:9d:8d:ec:c9:8f:02:2a:d4:05:83:8c:62:70:70:a6:89:f6: 5e:08:df:ad:cc:76:eb:f6:a3:0e:03:ee:44:07:4d:1f:71:fe: 4b:25:6e:45:e4:d4:19:b6:ce:61:e2:a6:cd:f4:ff:f7:4e:e4: ed:9c:d0:6d:7c:c5:6f:a0:7a:75:06:ce:bc:f3:49:0b:e8:5a: af:96:c6:e0:91:d1:aa:04:8a:87:ba:54:c0:5b:8e:15:36:ee: fb:89:5c:c5:3e:8b:9d:70:b1:f6:55:13:5e:27:c5:3e:5b:f8: f9:dc:37:67:db:e9:e9:7a:07:7c:82:9d:4c:cb:52:d8:03:6c: 46:8b:f1:8b:50:03:f7:8e:a1:0d:28:7d:ad:56:fd:77:64:7a: 38:67:60:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5 NjFDNDQxRTcwHhcNMjUxMjA1MDM1MTE4WhcNMjUxMjEyMDM1MTE4WjAYMRYwFAYD VQQDEw02OTMyNTZiNi00ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtS7KiMx9DIBB+kZ8/XbTxHVL8LT147+M++Hw62my1WHHaDR36JnFTpH13T+V mzx5UlXufIlTZ1v6oTF4k+loOsdPuMwvjPyfU2dp8rwxukgdfDwISXNF0sSAixVe pDBIlF3UI4ugGn5UBWrNSaTUfyWIM9bLeUwC9q378nBT1qH41USNiMHaDsv3TyWM CYe/DwuA3L7A8rUWHhcCveQuqCNnw2ahEvznnw5AqWqEBvACSWApxXttYwWsbgAs pt3Me4WjC8d7uizyjORU67UuJwz2izXCsjgB37/AEYteBompcxJ/5azPVzmD76j3 k+oVOe2uwXzUZS+oocT3XReZSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTl1Dp6 an658a96ACHRYQB91rhVMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC85RjU5MUU4RUE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFj LVBXV3JiX01OZ0dXSEVRZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRvY7scssG+0kjcyuQGKcEzi7+YgYKm1x5c6+YgWqkW9eANmm6C5j3 Q2U3bvamjGKe0El/dKswxQ/dURHpwIeqfGo1o+ycp9RSJZX+BwVk96KePVm1zfF9 NfcS0f9Fdp+o5mOhOQ7CflBG3kCVnY3syY8CKtQFg4xicHCmifZeCN+tzHbr9qMO A+5EB00fcf5LJW5F5NQZts5h4qbN9P/3TuTtnNBtfMVvoHp1Bs6880kL6Fqvlsbg kdGqBIqHulTAW44VNu77iVzFPoudcLH2VRNeJ8U+W/j53Ddn2+npegd8gp1My1LY A2xGi/GLUAP3jqENKH2tVv13ZHo4Z2DS -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:24 2025 by rpki-client