This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft File: oXyIfuladLPXOMFccI_s_Wu4xmo.mft (raw, json) Hash identifier: jBowkNKFUVD8o3YXxk764OYSOQW/kO0Vw0FYvEPUxxg= Subject key identifier: 2D:66:BF:8F:B3:59:E8:DC:57:A9:DB:B1:21:D2:3E:A7:5B:65:45:64 Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A Certificate issuer: /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Certificate serial: 123E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft Manifest number: 1221 Signing time: Sat 06 Dec 2025 16:40:21 +0000 Manifest this update: Sat 06 Dec 2025 16:40:20 +0000 Manifest next update: Sat 13 Dec 2025 16:40:20 +0000 Files and hashes: 1: oXyIfuladLPXOMFccI_s_Wu4xmo.crl (hash: EP63rbj36XSo5sV3W6IMbB08Xkm6YGyl7x0rDIt0JN0=) 2: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (hash: Ty9yOHNci88PkYFwxtboHPq9mv7Uzp9+8kGt6vwUIGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4670 (0x123e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Validity Not Before: Dec 6 16:40:20 2025 GMT Not After : Dec 13 16:40:20 2025 GMT Subject: CN=69345c74-4080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ce:66:c1:64:ca:7f:e8:42:f0:9d:72:cc:65: 58:44:ee:1f:d9:f9:92:e2:73:cd:73:04:55:bf:c0: 5c:ea:91:90:4f:c0:ec:47:f8:83:5a:cf:79:f0:49: 3d:0f:d8:9b:aa:82:0e:89:e2:0f:b5:4f:bd:b8:46: 23:e2:ec:74:c8:17:02:28:18:43:ad:5f:11:a0:98: 56:bf:b4:4c:d7:93:c0:7c:a1:f9:40:84:4a:80:d0: f1:2c:7d:63:9d:7b:3c:1d:42:95:3a:b5:36:2a:86: ae:a5:66:b6:a8:1f:fa:08:fe:32:02:73:bf:2b:a7: c1:3d:e6:bf:d7:7c:f9:13:e3:bd:94:76:58:84:0b: 02:7c:f5:db:2c:ed:bd:6c:29:49:00:71:72:b9:ba: e7:a1:1d:c8:9e:97:6f:e1:e1:32:99:ad:59:8f:ea: 3e:76:80:5f:e0:7d:6a:11:18:50:15:50:1f:1c:15: 6d:d8:7a:3c:d1:ad:b1:81:7d:b3:e6:c4:7a:87:dc: cf:22:5e:70:8e:cc:9e:65:dc:35:b9:9c:75:61:32: 4e:c3:5c:ca:10:e7:59:c6:6f:72:2c:d9:1c:6c:79: 02:be:6f:be:1d:b5:09:4d:19:5c:b9:2c:a5:b3:72: 8d:7b:e4:1a:29:85:86:6a:c5:62:20:85:ea:56:f0: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:66:BF:8F:B3:59:E8:DC:57:A9:DB:B1:21:D2:3E:A7:5B:65:45:64 X509v3 Authority Key Identifier: keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ce:3e:98:ac:52:32:d7:bf:5b:c4:78:e7:26:90:8a:4e:26: c5:81:ca:80:52:fb:37:da:f0:86:e6:50:e4:9c:8f:1a:50:b9: 0d:ef:8f:e8:da:35:dd:fd:45:50:38:7b:e0:7e:9b:1d:ea:35: 35:88:3e:db:52:40:45:dc:78:7a:14:81:5a:c3:e9:71:19:9c: 09:13:0f:07:e8:15:69:30:17:72:f2:c6:10:30:dd:65:cb:13: f5:b9:19:7e:5d:3b:0f:ed:c0:3d:c4:5a:ea:87:b2:7f:2f:6f: 8c:50:3b:5b:88:c3:d5:df:c3:a1:6a:22:e6:99:8e:f4:86:cf: 25:21:ff:02:21:3c:b3:a2:b6:3c:be:96:09:7e:83:79:bb:1e: ed:cb:41:92:f5:75:bd:28:fe:fc:bc:4f:b3:20:2c:83:68:39: e4:d0:88:34:bd:a0:55:9e:60:b2:42:92:29:26:27:19:10:fb: 3c:ce:72:22:bd:d9:4f:3d:42:3b:f3:f2:e5:bd:df:ef:2c:bf: a5:ca:06:c8:75:1f:17:f5:a2:80:01:12:98:a4:11:36:d8:42: f0:30:19:21:bc:8a:d8:3f:03:57:28:97:cf:b8:d4:c9:61:b8: 8d:80:97:da:62:24:ff:a1:4a:e1:c4:2d:f2:44:a3:2d:45:4a: b6:d3:ef:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKEExN0M4ODdFRTk1QTc0QjNENzM4QzE1QzcwOEZFQ0ZE NkJCOEM2NkEwHhcNMjUxMjA2MTY0MDIwWhcNMjUxMjEzMTY0MDIwWjAYMRYwFAYD VQQDEw02OTM0NWM3NC00MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7M5mwWTKf+hC8J1yzGVYRO4f2fmS4nPNcwRVv8Bc6pGQT8DsR/iDWs958Ek9 D9ibqoIOieIPtU+9uEYj4ux0yBcCKBhDrV8RoJhWv7RM15PAfKH5QIRKgNDxLH1j nXs8HUKVOrU2KoaupWa2qB/6CP4yAnO/K6fBPea/13z5E+O9lHZYhAsCfPXbLO29 bClJAHFyubrnoR3Inpdv4eEyma1Zj+o+doBf4H1qERhQFVAfHBVt2Ho80a2xgX2z 5sR6h9zPIl5wjsyeZdw1uZx1YTJOw1zKEOdZxm9yLNkcbHkCvm++HbUJTRlcuSyl s3KNe+QaKYWGasViIIXqVvBf1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1mv4+z WejcV6nbsSHSPqdbZUVkMB8GA1UdIwQYMBaAFKF8iH7pWnSz1zjBXHCP7P1ruMZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9EOTJERDAzOEY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRMUFhPTUZjY0lfc19XdTR4 bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29YeUlmdWxhZExQWE9NRmNjSV9zX1d1NHhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9EOTJERDAzOEY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRM UFhPTUZjY0lfc19XdTR4bW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7zj6YrFIy179bxHjnJpCKTibFgcqAUvs32vCG5lDknI8aULkN74/o 2jXd/UVQOHvgfpsd6jU1iD7bUkBF3Hh6FIFaw+lxGZwJEw8H6BVpMBdy8sYQMN1l yxP1uRl+XTsP7cA9xFrqh7J/L2+MUDtbiMPV38OhaiLmmY70hs8lIf8CITyzorY8 vpYJfoN5ux7ty0GS9XW9KP78vE+zICyDaDnk0Ig0vaBVnmCyQpIpJicZEPs8znIi vdlPPUI78/Llvd/vLL+lygbIdR8X9aKAARKYpBE22ELwMBkhvIrYPwNXKJfPuNTJ YbiNgJfaYiT/oUrhxC3yRKMtRUq20+/1 -----END CERTIFICATE-----Generated at Mon Dec 8 04:33:23 2025 by rpki-client