This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json) Hash identifier: 8I7QaGjzuTeNvaIFqMFQR7DwtQ3eKF1RleZZbW5gvwg= Subject key identifier: C0:2C:75:EF:D1:1B:A8:40:11:41:C0:14:A3:40:01:79:45:7C:F5:25 Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 0A69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft Manifest number: 0A5A Signing time: Sat 06 Dec 2025 18:54:13 +0000 Manifest this update: Sat 06 Dec 2025 18:54:13 +0000 Manifest next update: Sat 13 Dec 2025 18:54:13 +0000 Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: bNZWlW6PHVFnRZ3XKAmcryGSd4aQGc28uZJ1heH6/zw=) 2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: vryPQgJZ9HPQvb4c/vnzkdnAafqVRFouOd+j23S6sMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2665 (0xa69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: Dec 6 18:54:13 2025 GMT Not After : Dec 13 18:54:13 2025 GMT Subject: CN=69347bd5-7519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:04:c2:ad:f3:1a:ff:f5:74:32:7d:8a:22: ab:2d:9f:b0:65:75:3c:33:db:28:d2:24:a8:ed:6c: e2:b6:81:1d:09:a8:5b:c7:c8:ed:9d:91:84:dc:76: 97:2e:28:ef:d4:fb:96:51:35:d5:d3:f6:7f:68:14: 2f:40:72:b5:7d:81:c0:8e:dc:2f:b9:4c:19:a8:48: 63:b8:7e:e3:1c:91:0f:df:cc:3b:a0:3d:5b:7d:b1: 02:5c:02:64:29:12:9e:54:83:3f:be:e6:e5:ba:ff: 51:b8:09:1a:b1:29:07:41:28:1f:cc:cf:6a:9a:bc: fe:06:2c:33:d1:38:65:9c:5f:fb:ac:76:e3:94:a6: 12:16:c6:92:a7:82:b1:1f:84:a9:98:9c:c3:37:52: bc:f4:7b:47:04:fc:dc:d7:71:ed:5c:5c:c3:0f:43: b0:d5:01:69:d9:98:bc:79:0e:62:54:05:6d:d8:91: 0b:b8:78:cc:e6:7d:f0:27:fc:09:68:03:2b:7b:47: c3:71:d1:5c:00:8d:49:72:bf:fb:d0:04:28:84:bc: 45:f6:64:27:93:8f:f3:4a:c7:3d:31:62:8f:99:76: 32:37:94:0e:d4:21:4f:61:1b:20:97:d2:12:01:5e: 13:a3:9c:b2:fc:05:72:f1:8b:77:b7:31:d4:16:80: e4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2C:75:EF:D1:1B:A8:40:11:41:C0:14:A3:40:01:79:45:7C:F5:25 X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:13:ea:d4:3b:65:74:ab:e2:51:10:bd:d0:24:fd:75:67:f7: 50:bd:62:46:94:54:55:71:2e:41:3b:37:21:1b:ad:36:8c:27: be:ce:5c:b2:2b:1e:6c:85:fd:4c:e3:d6:c8:6e:39:ae:b3:3d: 89:84:ab:35:cd:b2:f0:25:47:d8:b3:1d:20:3d:6f:ac:f9:97: f8:a9:90:07:9e:6e:67:9e:fb:12:79:70:3b:43:9c:a2:f0:f4: 8a:99:2e:b2:42:65:12:76:20:1e:a6:5b:32:83:1c:26:6f:31: 38:36:d0:87:a8:93:8a:ac:ab:0a:c4:54:b3:de:ae:68:57:37: 1e:4f:f1:81:41:95:77:1b:32:69:9a:32:a7:14:25:0f:cc:7c: c1:a1:7b:3d:fe:7a:05:80:82:52:79:93:60:79:ac:67:74:a8: 76:a1:24:83:c4:68:1b:06:b1:b5:66:98:fa:ca:83:5f:d7:98: 0f:fb:5a:3a:df:8b:b2:1a:3f:5e:c2:47:98:e1:93:a5:56:19: 99:48:ad:1e:47:f4:a9:ab:bd:73:33:92:27:1b:90:4d:36:a2: 9e:ad:3c:80:bb:6d:ff:4d:57:e9:7f:5e:fd:9b:07:27:08:d6: e1:0d:5b:dd:5e:f2:c4:93:73:88:39:bd:54:4f:26:da:8f:5b: 3b:22:a6:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjUxMjA2MTg1NDEzWhcNMjUxMjEzMTg1NDEzWjAYMRYwFAYD VQQDEw02OTM0N2JkNS03NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq0Ewq3zGv/1dDJ9iiKrLZ+wZXU8M9so0iSo7WzitoEdCahbx8jtnZGE3HaX Lijv1PuWUTXV0/Z/aBQvQHK1fYHAjtwvuUwZqEhjuH7jHJEP38w7oD1bfbECXAJk KRKeVIM/vubluv9RuAkasSkHQSgfzM9qmrz+Biwz0ThlnF/7rHbjlKYSFsaSp4Kx H4SpmJzDN1K89HtHBPzc13HtXFzDD0Ow1QFp2Zi8eQ5iVAVt2JELuHjM5n3wJ/wJ aAMre0fDcdFcAI1Jcr/70AQohLxF9mQnk4/zSsc9MWKPmXYyN5QO1CFPYRsgl9IS AV4To5yy/AVy8Yt3tzHUFoDkzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAsde/R G6hAEUHAFKNAAXlFfPUlMB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODI2Ny8wMkM4NkVBQTc4Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFB OVJPWlNUVy0zMzVKSnd5S28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALE+rUO2V0q+JREL3QJP11Z/dQvWJGlFRVcS5BOzchG602jCe+zlyy Kx5shf1M49bIbjmusz2JhKs1zbLwJUfYsx0gPW+s+Zf4qZAHnm5nnvsSeXA7Q5yi 8PSKmS6yQmUSdiAeplsygxwmbzE4NtCHqJOKrKsKxFSz3q5oVzceT/GBQZV3GzJp mjKnFCUPzHzBoXs9/noFgIJSeZNgeaxndKh2oSSDxGgbBrG1Zpj6yoNf15gP+1o6 34uyGj9ewkeY4ZOlVhmZSK0eR/Spq71zM5InG5BNNqKerTyAu23/TVfpf179mwcn CNbhDVvdXvLEk3OIOb1UTybaj1s7IqZl -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:30 2025 by rpki-client