This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json) Hash identifier: 88XN0ILHl+3R9wekUzb+e7k2C01TnBBix7vLpLluez8= Subject key identifier: 24:3A:97:B1:49:60:99:8B:CA:D2:A9:64:97:C5:D4:0C:C7:FD:46:EC Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft Manifest number: 012C Signing time: Fri 05 Dec 2025 02:42:21 +0000 Manifest this update: Fri 05 Dec 2025 02:42:20 +0000 Manifest next update: Fri 12 Dec 2025 02:42:20 +0000 Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: cZMohNMhGQkINIdRGhRh4oW7GfpX6Xrw5AKiqC7CUjk=) 2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: oPEA+euS8au7/G3eWPC6qnxCCEjdK5yKYosNW4PVWb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Validity Not Before: Dec 5 02:42:20 2025 GMT Not After : Dec 12 02:42:20 2025 GMT Subject: CN=6932468d-ac3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:1a:b6:de:22:04:42:c9:67:9c:c1:e9:70: 05:4c:a7:51:9b:ab:21:83:06:39:84:8b:fc:73:d8: 55:f6:55:58:a6:1f:fd:18:b1:18:66:76:65:50:68: 0b:5b:7e:07:d0:dd:81:3d:b7:07:2f:4a:4f:df:19: a0:e2:7b:6c:86:4e:9c:4b:d5:11:2b:a1:ef:e3:5c: ca:be:22:18:8c:aa:47:f2:85:af:32:9c:99:e0:80: d5:35:0e:c7:ab:74:eb:0f:48:48:b5:08:50:01:4e: de:88:c0:e8:27:eb:1a:7f:3d:39:6f:41:e0:fe:7c: 22:d6:84:7e:a3:9c:6f:48:33:12:fb:7e:db:18:6e: f3:9d:8b:73:38:15:b9:f3:e7:b4:f4:a7:b6:55:9f: a9:72:d6:a5:a3:c2:9b:2d:d3:33:e9:75:a8:a0:aa: cf:e7:72:e0:1b:91:cf:eb:63:c6:bd:e0:4a:26:2d: 46:85:8b:b3:55:72:e1:2d:c9:bd:b0:5d:04:1a:5b: 4d:e7:13:20:3a:4b:74:6b:0a:34:75:61:16:51:c7: ce:a9:28:1d:e6:d7:82:35:4e:7e:4a:38:03:3e:2d: d7:8b:66:63:77:7b:7a:f7:8a:a0:ff:1c:cf:51:bd: 63:42:ac:d4:9c:e9:ba:b4:94:51:a1:e9:e2:97:21: ae:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3A:97:B1:49:60:99:8B:CA:D2:A9:64:97:C5:D4:0C:C7:FD:46:EC X509v3 Authority Key Identifier: keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:9d:bc:df:e5:64:57:b9:63:ec:c5:7a:4b:e1:b0:1d:ef:94: eb:7b:94:ca:42:c4:9a:a9:a1:e4:d4:4a:63:0a:20:74:79:6f: d4:b5:1a:2e:94:cd:42:7e:b7:a3:9d:bb:45:fe:0a:ae:f8:a3: 67:1d:73:a6:98:e5:ca:89:f2:5a:c9:1f:cf:9e:e8:89:09:4e: 10:c2:a7:aa:b4:50:a7:cb:82:27:dd:36:74:39:60:94:d1:12: fa:26:c2:df:1d:e7:e3:12:46:55:b0:a8:2f:b6:c8:08:7d:3b: 42:c3:03:d1:2d:f0:ec:ce:27:e8:db:3c:2c:fd:3e:4b:e8:1e: 49:7e:21:81:4f:8a:a2:a1:01:4c:f6:06:0d:b1:9e:01:b6:da: 17:2c:ee:ed:ca:df:43:e8:90:da:e7:b6:77:67:48:15:9a:e8: bc:52:9d:1a:fe:d7:0d:c8:ee:08:85:25:b4:97:83:87:a5:b5: 6c:1c:c3:71:dc:2e:6a:b7:98:37:3c:8c:d7:d8:bb:57:f4:b4: 84:6b:91:65:17:bf:ea:e4:57:d0:8a:21:67:3d:ea:8c:37:b4: 6b:14:f4:6e:66:fd:62:2b:1e:02:f9:f4:ec:e1:ef:19:47:37: 99:3c:b8:d4:d5:26:95:e8:20:a4:57:d0:64:41:c0:32:99:1f: ea:19:f5:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QzIxMTAvBgNVBAUTKDM4ODVGOUQyRkQwODYwMjgzQjU1MzgxRjFDNEY0QTVB M0ExRUVGM0YwHhcNMjUxMjA1MDI0MjIwWhcNMjUxMjEyMDI0MjIwWjAYMRYwFAYD VQQDEw02OTMyNDY4ZC1hYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMgatt4iBELJZ5zB6XAFTKdRm6shgwY5hIv8c9hV9lVYph/9GLEYZnZlUGgL W34H0N2BPbcHL0pP3xmg4ntshk6cS9URK6Hv41zKviIYjKpH8oWvMpyZ4IDVNQ7H q3TrD0hItQhQAU7eiMDoJ+safz05b0Hg/nwi1oR+o5xvSDMS+37bGG7znYtzOBW5 8+e09Ke2VZ+pctalo8KbLdMz6XWooKrP53LgG5HP62PGveBKJi1GhYuzVXLhLcm9 sF0EGltN5xMgOkt0awo0dWEWUcfOqSgd5teCNU5+SjgDPi3Xi2Zjd3t694qg/xzP Ub1jQqzUnOm6tJRRoenilyGubwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQ6l7FJ YJmLytKpZJfF1AzH/UbsMB8GA1UdIwQYMBaAFDiF+dL9CGAoO1U4HxxPSlo6Hu8/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdDMi9COTJCRkFENDA1 RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlDZzdWVGdmSEU5S1dqb2U3 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdDMi9COTJCRkFENDA1RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlD ZzdWVGdmSEU5S1dqb2U3ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEnbzf5WRXuWPsxXpL4bAd75Tre5TKQsSaqaHk1EpjCiB0eW/UtRou lM1CfrejnbtF/gqu+KNnHXOmmOXKifJayR/PnuiJCU4QwqeqtFCny4In3TZ0OWCU 0RL6JsLfHefjEkZVsKgvtsgIfTtCwwPRLfDszifo2zws/T5L6B5JfiGBT4qioQFM 9gYNsZ4BttoXLO7tyt9D6JDa57Z3Z0gVmui8Up0a/tcNyO4IhSW0l4OHpbVsHMNx 3C5qt5g3PIzX2LtX9LSEa5FlF7/q5FfQiiFnPeqMN7RrFPRuZv1iKx4C+fTs4e8Z RzeZPLjU1SaV6CCkV9BkQcAymR/qGfVm -----END CERTIFICATE-----Generated at Sat Dec 6 18:15:49 2025 by rpki-client