This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: DH2VvyS2he5CeRTYU5e7JsxcoTtd1MntrlhmE6Ez+fg= Subject key identifier: 18:0B:2D:11:88:A6:D2:5A:7C:FC:08:6B:07:0A:A7:2E:A4:9A:C3:1F Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0C73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0C72 Signing time: Sat 06 Dec 2025 17:52:00 +0000 Manifest this update: Sat 06 Dec 2025 17:51:59 +0000 Manifest next update: Sat 13 Dec 2025 17:51:59 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: 7dMn451pDjFRSVSSRLOloRnPdtTQT4XiFKmlvnRVPp0=) 2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: 6z4IvdKelJy7fw7SK3RJpHNkKU/zaX8zdMWrochmqvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3187 (0xc73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Dec 6 17:51:59 2025 GMT Not After : Dec 13 17:51:59 2025 GMT Subject: CN=69346d40-cd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:83:82:04:d7:17:37:ed:1f:dc:40:ce:66: dd:38:df:a7:cd:e8:7a:52:71:bd:7a:3c:5a:7e:d6: 1d:bf:9b:96:02:e1:50:78:28:6c:e1:2c:e1:98:7a: 03:94:55:58:4c:8d:26:a4:a3:66:e9:f0:ee:81:f4: b2:6c:6e:69:de:06:57:55:48:93:9a:5d:2e:f1:97: 55:00:0f:a5:72:29:9a:72:17:04:55:b9:af:ab:86: 7f:25:ad:7a:aa:ce:25:e0:30:5d:5a:d6:79:e5:07: bd:fb:72:bb:cc:92:13:84:a1:c5:38:f2:5d:c6:d5: d1:ff:30:c8:52:3b:92:76:c8:8d:38:c3:68:13:78: dc:18:93:2d:5f:2c:02:83:2e:7f:32:bd:6d:f7:e6: 3c:97:39:2a:3f:bb:03:4c:10:7d:79:10:c0:0e:35: 0d:21:ea:39:f0:2e:98:14:ad:b8:ad:0d:ad:10:c6: e6:f8:76:32:25:88:da:a7:72:55:af:d8:b2:3a:3c: 01:11:48:c5:35:60:43:19:34:de:f2:b4:71:8a:18: 6b:5e:85:e1:c6:a3:ed:24:b1:2d:eb:95:8c:b0:18: 4d:0a:c4:c5:7e:3b:3b:9c:57:9c:32:d9:d9:ac:26: 48:3e:86:f9:0b:77:d2:12:3b:a2:08:33:08:99:a2: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0B:2D:11:88:A6:D2:5A:7C:FC:08:6B:07:0A:A7:2E:A4:9A:C3:1F X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9c:de:57:b5:65:c2:b8:79:4c:60:8a:29:49:e5:a5:ad:d0: 26:6f:eb:23:39:ba:64:fd:4b:ad:13:ba:b7:74:38:32:31:c0: aa:e7:05:ee:ee:26:75:3e:70:2c:ab:c9:25:86:30:45:dd:c8: bf:c0:a3:c6:00:59:06:c6:e8:fc:25:26:6c:6d:2a:eb:78:f4: 9d:e1:de:be:81:f9:0c:92:c3:23:bd:4c:77:24:a3:cb:73:db: 05:06:75:cb:a9:bd:84:bf:45:dc:f8:8b:e4:c2:3d:81:44:71: 13:9f:69:d7:1a:41:9e:29:87:67:1b:9f:0c:a3:66:88:a0:b7: 58:4c:ca:db:99:0b:b8:86:52:4d:31:88:66:13:8b:65:a6:aa: b4:ce:2e:41:3e:ea:cd:08:2f:94:b5:b2:0a:11:68:6d:d6:f7: ed:3f:56:51:89:86:a8:91:18:35:4b:59:f9:97:2c:c9:f0:8d: b9:8b:ad:de:ea:88:47:04:f7:c4:24:cc:d8:9f:44:f4:8a:c4: b7:35:7d:7c:e8:00:b6:00:87:52:26:b8:15:86:af:31:72:c3: 19:1b:a9:71:d7:6e:08:dc:99:66:3b:cc:91:e6:c9:ef:1f:5c: 5c:87:03:c6:1f:d7:44:41:fb:7a:43:0d:0e:d8:e8:77:bd:74: 21:59:fa:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjUxMjA2MTc1MTU5WhcNMjUxMjEzMTc1MTU5WjAYMRYwFAYD VQQDEw02OTM0NmQ0MC1jZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3+DggTXFzftH9xAzmbdON+nzeh6UnG9ejxaftYdv5uWAuFQeChs4SzhmHoD lFVYTI0mpKNm6fDugfSybG5p3gZXVUiTml0u8ZdVAA+lcimachcEVbmvq4Z/Ja16 qs4l4DBdWtZ55Qe9+3K7zJIThKHFOPJdxtXR/zDIUjuSdsiNOMNoE3jcGJMtXywC gy5/Mr1t9+Y8lzkqP7sDTBB9eRDADjUNIeo58C6YFK24rQ2tEMbm+HYyJYjap3JV r9iyOjwBEUjFNWBDGTTe8rRxihhrXoXhxqPtJLEt65WMsBhNCsTFfjs7nFecMtnZ rCZIPob5C3fSEjuiCDMImaIojQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgLLRGI ptJafPwIawcKpy6kmsMfMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfnN5XtWXCuHlMYIopSeWlrdAmb+sjObpk/UutE7q3dDgyMcCq5wXu 7iZ1PnAsq8klhjBF3ci/wKPGAFkGxuj8JSZsbSrrePSd4d6+gfkMksMjvUx3JKPL c9sFBnXLqb2Ev0Xc+Ivkwj2BRHETn2nXGkGeKYdnG58Mo2aIoLdYTMrbmQu4hlJN MYhmE4tlpqq0zi5BPurNCC+UtbIKEWht1vftP1ZRiYaokRg1S1n5lyzJ8I25i63e 6ohHBPfEJMzYn0T0isS3NX186AC2AIdSJrgVhq8xcsMZG6lx124I3JlmO8yR5snv H1xchwPGH9dEQft6Qw0O2Oh3vXQhWfq7 -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:16 2025 by rpki-client