This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: hQIjxaqfsB6muC0E+0ECfqyLKACcumAs0wsHfqjsFj0= Subject key identifier: E2:56:3C:47:04:4E:9F:08:01:CC:C9:2C:6D:EE:BD:91:EC:A5:AE:13 Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 021C Signing time: Fri 05 Dec 2025 00:29:43 +0000 Manifest this update: Fri 05 Dec 2025 00:29:43 +0000 Manifest next update: Fri 12 Dec 2025 00:29:43 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: hr1Wm4U5kN5q1OpKxVFs1YW8lQ1ZTsyYttN4Lq1IYyQ=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: Ll4yg/VXe6ptCubyWYXaO265ePb/yR1xqd8fLdCSjr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: Dec 5 00:29:43 2025 GMT Not After : Dec 12 00:29:43 2025 GMT Subject: CN=69322777-770e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:6d:84:7d:e0:cb:39:14:4b:3c:79:30:8b: fe:42:50:07:ae:3e:e6:87:7d:15:f3:f5:ac:c1:ae: c2:98:93:2b:0a:bc:20:d9:c9:7f:01:3c:3c:4a:e2: 76:98:7e:1a:c6:cc:67:82:2e:42:e4:57:63:d6:af: ee:34:68:df:2a:44:fc:c2:09:18:d3:55:8d:13:ed: 54:b6:47:70:ee:28:78:de:ee:92:a4:31:4e:04:a7: 08:b3:e0:fe:23:01:e1:2b:69:6f:3f:d5:74:5f:78: 0d:e0:6e:f5:f8:58:bf:6f:3f:11:d0:f6:13:ad:ef: 3d:0a:4d:46:47:9b:c0:fd:5e:4c:2d:d5:2d:2a:47: 53:09:d9:3d:50:3c:03:c6:40:14:cd:30:14:8d:81: ec:61:a0:ad:0f:37:59:01:4c:0c:c5:e5:f5:d9:b1: 36:23:49:56:0b:92:36:f9:14:12:d5:c7:f7:79:3c: 2b:30:24:a1:a1:76:73:d7:7b:cc:b9:fa:b5:bb:7e: 0d:b7:b5:94:0b:31:32:38:2e:15:b1:02:81:d0:a3: 85:cf:23:14:74:61:d9:b6:d7:37:f5:e2:9f:24:73: af:9f:3e:b6:bf:61:26:66:f1:a6:6a:fd:c5:1a:59: 9d:99:77:35:d2:53:8e:4b:4f:44:e6:55:1b:76:94: 9f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:56:3C:47:04:4E:9F:08:01:CC:C9:2C:6D:EE:BD:91:EC:A5:AE:13 X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8f:5c:43:e3:10:4a:b4:23:12:1b:19:e6:6b:bd:f9:a4:2f: 34:9a:ff:51:a4:c9:ba:ca:4c:be:3c:26:72:36:d3:6c:22:f0: 78:f8:76:6d:19:39:31:f7:3b:cf:64:0b:65:81:72:60:e1:ce: 25:09:57:90:07:5e:b1:7e:ce:75:c8:d1:a4:3a:15:01:ef:2b: f6:03:73:84:8e:1e:6a:9d:ce:14:06:df:17:30:d3:e9:a0:63: 0d:aa:3e:0f:af:71:cc:a6:66:91:ff:7c:29:c7:b3:e2:76:4f: 5b:13:9a:4f:eb:20:0a:90:c3:9b:9e:28:4d:b7:0b:7e:37:d5: 0d:6a:e4:4c:5f:7b:2d:1c:e4:24:92:9a:99:a1:9e:cd:39:96: 2c:da:c4:b9:81:49:43:d2:d8:77:da:ce:63:f4:16:04:97:7c: f1:db:3a:e7:74:20:c1:01:60:68:73:2c:47:f9:29:8f:c3:d5: 0d:bd:3f:36:d2:6d:e5:10:28:83:17:4c:8e:3a:5c:04:c9:22: e1:6c:10:f9:b1:34:7e:bb:82:4e:d8:7d:87:a9:f2:6c:c2:24: ac:e5:27:8f:fd:40:df:5e:f2:15:0c:1e:7e:fa:5c:c9:c0:3e: d8:34:44:7e:c8:17:8a:9c:bb:0f:d1:c7:5d:d5:95:2d:19:ed: b2:54:c6:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUxMjA1MDAyOTQzWhcNMjUxMjEyMDAyOTQzWjAYMRYwFAYD VQQDEw02OTMyMjc3Ny03NzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvldthH3gyzkUSzx5MIv+QlAHrj7mh30V8/Wswa7CmJMrCrwg2cl/ATw8SuJ2 mH4axsxngi5C5Fdj1q/uNGjfKkT8wgkY01WNE+1Utkdw7ih43u6SpDFOBKcIs+D+ IwHhK2lvP9V0X3gN4G71+Fi/bz8R0PYTre89Ck1GR5vA/V5MLdUtKkdTCdk9UDwD xkAUzTAUjYHsYaCtDzdZAUwMxeX12bE2I0lWC5I2+RQS1cf3eTwrMCShoXZz13vM ufq1u34Nt7WUCzEyOC4VsQKB0KOFzyMUdGHZttc39eKfJHOvnz62v2EmZvGmav3F GlmdmXc10lOOS09E5lUbdpSfvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJWPEcE Tp8IAczJLG3uvZHspa4TMB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqj1xD4xBKtCMSGxnma735pC80mv9RpMm6yky+PCZyNtNsIvB4+HZt GTkx9zvPZAtlgXJg4c4lCVeQB16xfs51yNGkOhUB7yv2A3OEjh5qnc4UBt8XMNPp oGMNqj4Pr3HMpmaR/3wpx7Pidk9bE5pP6yAKkMObnihNtwt+N9UNauRMX3stHOQk kpqZoZ7NOZYs2sS5gUlD0th32s5j9BYEl3zx2zrndCDBAWBocyxH+SmPw9UNvT82 0m3lECiDF0yOOlwEySLhbBD5sTR+u4JO2H2HqfJswiSs5SeP/UDfXvIVDB5++lzJ wD7YNER+yBeKnLsP0cdd1ZUtGe2yVMaF -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:38 2025 by rpki-client