This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json) Hash identifier: oElWmrCfoyomwAAXVZAq8twSj1LkDjRyhoxyd14SW+U= Subject key identifier: 80:5D:E3:D6:41:C8:C6:56:19:4C:65:12:F0:C7:68:1C:6F:C5:1D:6E Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft Manifest number: 01D4 Signing time: Fri 05 Dec 2025 01:24:35 +0000 Manifest this update: Fri 05 Dec 2025 01:24:35 +0000 Manifest next update: Fri 12 Dec 2025 01:24:35 +0000 Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: JIoDYwD8X5Y+xGeTKAq5CXl6AnSxhAdr6D8BOZFX53w=) 2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: F8BQEsLxz2XO34zN3GNH3AuMPZU87rOGItPVHiqWabQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: Dec 5 01:24:35 2025 GMT Not After : Dec 12 01:24:35 2025 GMT Subject: CN=69323453-3acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:2a:a3:2e:f0:4b:67:39:37:77:f1:ce:44: 92:42:b4:c3:75:a2:2c:3e:b3:c2:4e:e7:29:c0:b8: 82:a8:f7:cf:5a:90:b0:80:54:2f:f8:9d:0d:fe:1d: 73:5c:a5:47:f1:d3:4c:b3:45:96:32:4a:60:09:c8: 5b:06:db:6a:24:a4:e2:48:16:ef:12:22:e5:a6:c4: e8:4a:76:05:52:8f:e1:df:0c:3f:62:66:2d:57:e3: 31:2f:72:45:db:3e:16:58:6e:ed:16:44:15:b1:3c: 9c:8a:33:40:b0:43:16:82:e2:5a:0a:43:ed:27:65: 18:89:36:60:cd:e8:bc:ea:b1:4e:7d:3f:a9:60:4d: c8:6d:c0:a4:10:1a:20:e5:12:d4:df:24:f8:0c:88: a1:51:fb:f3:0f:8e:ee:fb:54:c4:15:99:c2:f4:32: 65:4f:7f:43:49:ea:df:e3:95:90:0c:d0:8d:27:02: d7:f5:75:ab:09:3b:a8:63:63:de:42:46:da:ad:f3: d2:b4:67:65:bb:8a:1b:31:d6:3b:79:cc:15:fd:31: 5c:d8:cd:23:96:65:f4:f5:de:a7:21:1b:8a:53:3f: ed:c0:79:8f:65:aa:49:c3:2f:34:af:28:e7:73:ef: 0f:7d:af:14:a6:f5:56:20:91:ed:2c:8a:01:14:17: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:E3:D6:41:C8:C6:56:19:4C:65:12:F0:C7:68:1C:6F:C5:1D:6E X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:86:44:9b:89:48:e7:89:a7:9a:3e:e9:58:56:7a:e8:3a:3a: c1:b8:59:49:08:d8:d4:84:26:85:18:56:ea:93:c2:52:e8:cb: a1:14:a2:42:81:75:8a:d4:12:b4:81:9e:65:35:12:2d:fb:82: c4:b9:74:4b:a5:d3:61:37:0e:e2:1f:b5:de:65:d5:66:ae:f9: 62:6c:2d:f9:ae:a2:62:20:a6:98:39:fb:65:c8:91:04:31:37: 3f:76:72:ea:90:4c:48:c0:d2:30:15:0a:75:0e:9c:58:f4:76: 7b:14:c6:e5:9f:aa:7b:01:e9:d0:46:a1:70:0e:ef:87:5f:82: ee:5a:1c:2a:93:82:f9:fd:4c:29:95:52:23:22:92:c3:78:35: 8d:0d:67:dd:a1:98:dc:9c:c8:4f:96:09:da:6c:3b:5a:01:1a: f5:a7:6f:9b:79:23:3c:32:a1:cb:e4:4f:09:18:fc:06:b6:52: 4c:7e:9f:56:ab:10:28:11:60:d2:98:f5:87:1f:23:54:e4:8b: 68:30:9a:29:54:37:55:2c:58:27:61:96:d4:8d:2c:fd:ad:34: 33:83:c5:69:d4:17:78:96:f6:7c:ba:6d:a5:92:67:d4:c0:b7: ed:82:ed:42:cd:b9:b1:6d:c5:97:66:82:9f:b7:86:72:8e:b1: f2:ba:7f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjUxMjA1MDEyNDM1WhcNMjUxMjEyMDEyNDM1WjAYMRYwFAYD VQQDEw02OTMyMzQ1My0zYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6Aqoy7wS2c5N3fxzkSSQrTDdaIsPrPCTucpwLiCqPfPWpCwgFQv+J0N/h1z XKVH8dNMs0WWMkpgCchbBttqJKTiSBbvEiLlpsToSnYFUo/h3ww/YmYtV+MxL3JF 2z4WWG7tFkQVsTycijNAsEMWguJaCkPtJ2UYiTZgzei86rFOfT+pYE3IbcCkEBog 5RLU3yT4DIihUfvzD47u+1TEFZnC9DJlT39DSerf45WQDNCNJwLX9XWrCTuoY2Pe QkbarfPStGdlu4obMdY7ecwV/TFc2M0jlmX09d6nIRuKUz/twHmPZapJwy80ryjn c+8Pfa8UpvVWIJHtLIoBFBdFJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBd49ZB yMZWGUxlEvDHaBxvxR1uMB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9Ickhp ZkpXWDd0TG9Jb1ZKTU5QODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXhkSbiUjniaeaPulYVnroOjrBuFlJCNjUhCaFGFbqk8JS6MuhFKJC gXWK1BK0gZ5lNRIt+4LEuXRLpdNhNw7iH7XeZdVmrvlibC35rqJiIKaYOftlyJEE MTc/dnLqkExIwNIwFQp1DpxY9HZ7FMbln6p7AenQRqFwDu+HX4LuWhwqk4L5/Uwp lVIjIpLDeDWNDWfdoZjcnMhPlgnabDtaARr1p2+beSM8MqHL5E8JGPwGtlJMfp9W qxAoEWDSmPWHHyNU5ItoMJopVDdVLFgnYZbUjSz9rTQzg8Vp1Bd4lvZ8um2lkmfU wLftgu1CzbmxbcWXZoKft4ZyjrHyun9o -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:26 2025 by rpki-client