This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft File: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft (raw, json) Hash identifier: D6oVUUdnTHX15qTle3WOrWvqT0YqsD1K1IBl2Jn/jJM= Subject key identifier: A0:1D:25:79:C0:D4:AE:FA:9A:F5:57:27:03:84:BE:C0:D2:48:7D:D6 Authority key identifier: A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED Certificate issuer: /CN=A918EF94/serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft Manifest number: 017F Signing time: Sat 06 Dec 2025 17:10:08 +0000 Manifest this update: Sat 06 Dec 2025 17:10:08 +0000 Manifest next update: Sat 13 Dec 2025 17:10:08 +0000 Files and hashes: 1: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl (hash: quvfEv8vCc9lLiDm4Unt6EYgVk2hO+fy5wY5my9BRGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94, serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED Validity Not Before: Dec 6 17:10:08 2025 GMT Not After : Dec 13 17:10:08 2025 GMT Subject: CN=69346370-0484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:15:9e:f1:f9:2a:93:fb:26:5e:84:18:b6: c7:f1:c6:0b:0c:ca:28:f7:ea:7d:d4:e8:5e:63:9f: 39:ca:c0:73:c3:4d:72:a8:21:34:41:60:a0:64:ec: d7:79:06:22:1d:79:8d:2b:09:02:c6:72:f1:9d:a4: 8a:57:d1:62:4c:4e:fc:e5:38:27:2f:39:dc:b7:c0: 67:7a:c5:6e:87:b9:23:08:7a:05:b7:30:2e:d1:58: fb:43:5f:9c:f8:6d:fe:ae:17:8b:33:3f:c5:eb:e0: 50:9a:f0:06:98:1c:e1:2a:a0:cf:45:c5:4c:10:2b: 08:62:31:d7:75:eb:21:7f:7e:de:55:c6:f7:97:c8: a1:b0:16:54:21:b4:56:c6:26:73:1d:f3:43:44:b7: 65:a1:01:85:83:24:c1:78:a4:dc:1c:44:b5:91:b9: 74:f5:7a:e2:75:e4:57:40:50:e6:7d:25:f9:b9:8e: 53:5e:5a:97:81:d9:52:97:7b:ec:ee:62:1b:46:e6: 4b:fb:d8:b1:c0:64:cc:2d:e5:7c:80:c7:3a:19:c4: 27:47:f9:9a:84:5b:7d:29:5e:0a:c2:ba:54:ce:2b: 87:1b:dd:a5:a0:32:6c:39:c2:bd:f3:cd:14:0b:10: 2a:ae:c5:2d:35:01:90:bb:81:f6:5d:2c:fa:5f:91: 31:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1D:25:79:C0:D4:AE:FA:9A:F5:57:27:03:84:BE:C0:D2:48:7D:D6 X509v3 Authority Key Identifier: keyid:A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0f:3c:4a:27:90:99:b8:47:01:ef:77:a2:3d:9c:5d:34:2b: 35:7a:9f:6b:89:ff:00:0f:c1:72:5f:d6:8f:d2:50:c7:90:4a: 1e:95:b2:38:68:21:0a:12:3d:79:82:a4:49:d2:8f:37:49:d5: 13:4c:bb:1b:5b:61:fd:28:3f:ab:38:ad:07:42:19:09:db:ed: ad:35:45:52:f9:92:4d:c7:4e:e2:18:e3:cf:d0:4b:42:24:18: 59:33:5c:7d:46:b4:11:af:54:6e:8f:fa:50:d9:2a:65:5a:af: 8d:0d:41:bf:d5:60:c4:3c:d0:34:ce:80:4b:ad:ea:1e:33:56: 66:c4:29:2c:54:e8:65:95:8a:4e:d8:86:5e:4b:3c:9d:e9:4e: a3:39:32:fd:5d:b4:99:db:0e:8a:82:25:9e:4c:0f:5a:31:72: ea:d7:43:22:dc:1e:3c:3c:e7:d2:40:54:79:69:48:db:e2:5a: 10:35:7b:5d:06:dd:48:03:87:9f:a9:33:78:a0:a9:f7:5d:cf: 16:96:bd:5e:b1:12:fe:91:b6:3c:3a:4f:0c:be:8a:29:3a:56: e4:08:50:ba:71:b1:c3:fb:bd:db:33:8a:46:60:ac:d8:16:7b: 59:75:dc:44:06:ad:ed:b1:24:a7:db:01:d4:5a:1d:1d:ff:a4: c7:6b:33:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEExRTRGMDlEMkY0NzA3ODY3Q0ZBRTI3RThGMTMyMzY5 RkI5N0QwRUQwHhcNMjUxMjA2MTcxMDA4WhcNMjUxMjEzMTcxMDA4WjAYMRYwFAYD VQQDEw02OTM0NjM3MC0wNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskwVnvH5KpP7Jl6EGLbH8cYLDMoo9+p91OheY585ysBzw01yqCE0QWCgZOzX eQYiHXmNKwkCxnLxnaSKV9FiTE785TgnLznct8BnesVuh7kjCHoFtzAu0Vj7Q1+c +G3+rheLMz/F6+BQmvAGmBzhKqDPRcVMECsIYjHXdeshf37eVcb3l8ihsBZUIbRW xiZzHfNDRLdloQGFgyTBeKTcHES1kbl09XrideRXQFDmfSX5uY5TXlqXgdlSl3vs 7mIbRuZL+9ixwGTMLeV8gMc6GcQnR/mahFt9KV4KwrpUziuHG92loDJsOcK9880U CxAqrsUtNQGQu4H2XSz6X5ExEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAdJXnA 1K76mvVXJwOEvsDSSH3WMB8GA1UdIwQYMBaAFKHk8J0vRweGfPrifo8TI2n7l9Dt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81MDI5NTU0QzhB NzkxMUVFODU0NDE5MThDNEY5QUUwMi9vZVR3blM5SEI0WjgtdUotanhNamFmdVgw TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29lVHduUzlIQjRaOC11Si1qeE1qYWZ1WDBPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81MDI5NTU0QzhBNzkxMUVFODU0NDE5MThDNEY5QUUwMi9vZVR3blM5SEI0 WjgtdUotanhNamFmdVgwTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8DzxKJ5CZuEcB73eiPZxdNCs1ep9rif8AD8FyX9aP0lDHkEoelbI4 aCEKEj15gqRJ0o83SdUTTLsbW2H9KD+rOK0HQhkJ2+2tNUVS+ZJNx07iGOPP0EtC JBhZM1x9RrQRr1Ruj/pQ2SplWq+NDUG/1WDEPNA0zoBLreoeM1ZmxCksVOhllYpO 2IZeSzyd6U6jOTL9XbSZ2w6KgiWeTA9aMXLq10Mi3B48POfSQFR5aUjb4loQNXtd Bt1IA4efqTN4oKn3Xc8Wlr1esRL+kbY8Ok8MvoopOlbkCFC6cbHD+73bM4pGYKzY FntZddxEBq3tsSSn2wHUWh0d/6THazPt -----END CERTIFICATE-----Generated at Sun Dec 7 04:18:18 2025 by rpki-client