This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json) Hash identifier: S6IXigmDdXPYiWKklrxiY3fabJaVnhVPo6WEwoNRA7I= Subject key identifier: 73:FF:8D:0F:15:51:26:48:CF:24:B5:50:D0:78:2D:46:54:31:2E:CB Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft Manifest number: 66 Signing time: Thu 25 Dec 2025 05:57:16 +0000 Manifest this update: Thu 25 Dec 2025 05:57:15 +0000 Manifest next update: Thu 01 Jan 2026 05:57:15 +0000 Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: heHd46REEtHfCDR+ElFirh94prNlTazMUnAukFOAGN0=) 2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: RqRFm0koAI1zOC0qjZBwbHn7EgeV9Uebi2RR1Lc++cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 05:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Validity Not Before: Dec 25 05:57:15 2025 GMT Not After : Jan 1 05:57:15 2026 GMT Subject: CN=694cd23c-52a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:ce:64:ea:df:4b:4f:b9:75:ea:18:05:ee: 65:37:69:cc:04:bc:fb:ca:20:bf:0b:8a:29:6e:59: 87:74:dd:56:97:cf:99:4f:48:b7:2f:2d:6c:53:9f: 8c:38:dc:0e:f5:d8:4d:49:64:1f:6d:7a:4a:de:01: 1f:33:e8:a6:ce:6c:b0:c6:69:7e:36:37:d1:ee:3a: b7:a5:09:31:29:a9:8f:0b:84:3e:3d:d6:5e:7a:8e: 2e:3a:cf:a1:f6:ae:d8:0f:c7:84:d3:94:f8:d5:2f: 08:b5:56:f4:10:bc:4f:27:d1:16:7f:43:93:84:71: 02:53:1b:a4:ac:b3:60:d2:39:8c:59:b6:5b:fd:23: a5:e1:9b:93:cb:d2:8d:10:2a:e8:47:ab:18:4b:9a: 29:0d:93:75:4b:63:40:9e:b2:0a:a7:80:da:ed:e5: 1b:60:de:a3:9d:17:b8:c6:60:fb:c6:60:7e:4f:1c: ab:dc:52:9f:f5:03:08:bd:ad:94:5a:fe:4e:bc:ef: bc:bf:b9:56:12:29:e4:8f:17:8e:58:98:c2:f1:e8: fb:16:a1:6f:ac:4b:97:94:01:9a:30:9d:7e:37:d0: 59:f6:58:4f:76:24:2e:39:2f:7a:2a:ad:29:75:ab: 13:c3:a0:a2:cd:2c:36:fa:b7:de:e2:a6:fa:90:78: 1c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FF:8D:0F:15:51:26:48:CF:24:B5:50:D0:78:2D:46:54:31:2E:CB X509v3 Authority Key Identifier: keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3d:d5:48:3a:91:3f:c4:49:8d:ce:c7:4a:45:c3:d9:f9:35: 3b:38:12:a7:af:8a:40:e4:57:db:11:58:cc:e5:0d:9a:7d:76: 25:8b:9f:39:42:95:e6:8f:51:fc:39:fe:a3:fe:a1:12:78:03: 0f:24:7e:41:85:4d:42:90:a8:57:05:16:8b:6d:6b:d3:1e:d0: 06:21:70:57:a0:de:14:e2:74:74:e0:f9:fd:67:1a:52:f3:36: bf:27:80:b6:c5:31:72:3f:36:27:8f:de:a0:e4:09:b8:66:5c: 10:28:8a:fa:40:d4:20:ca:18:f2:8f:29:ce:95:83:bc:01:ae: fb:87:e7:19:f2:f8:3f:fc:4e:22:47:d1:44:b2:1e:b6:89:05: 07:ce:b6:20:93:01:bf:30:8e:76:57:fb:88:bc:2a:ab:ec:81: 70:15:8b:1b:8a:7d:bf:49:22:ae:62:72:97:e9:e1:a4:9b:ed: 26:1c:6e:a8:bb:9f:59:a2:60:d7:1b:ca:d7:4b:16:b9:97:6a: a3:77:75:10:21:4b:d5:9b:aa:d8:4c:70:93:7c:ce:25:08:07: 5e:4a:30:c1:d7:92:e9:71:bb:f7:b9:6a:c5:3e:56:7e:b3:97: 89:f5:8d:f9:bd:70:86:15:e4:16:0e:77:32:8d:fb:55:b6:12: af:74:49:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoM0I4MzU4NTM1QkM2Mjg1NjRBRjU2RjMxRDg3NTg2NDhF MUQwNDMwNDAeFw0yNTEyMjUwNTU3MTVaFw0yNjAxMDEwNTU3MTVaMBgxFjAUBgNV BAMMDTY5NGNkMjNjLTUyYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt3c5k6t9LT7l16hgF7mU3acwEvPvKIL8LiiluWYd03VaXz5lPSLcvLWxTn4w4 3A712E1JZB9tekreAR8z6KbObLDGaX42N9HuOrelCTEpqY8LhD491l56ji46z6H2 rtgPx4TTlPjVLwi1VvQQvE8n0RZ/Q5OEcQJTG6Sss2DSOYxZtlv9I6Xhm5PL0o0Q KuhHqxhLmikNk3VLY0CesgqngNrt5Rtg3qOdF7jGYPvGYH5PHKvcUp/1Awi9rZRa /k6877y/uVYSKeSPF45YmMLx6PsWoW+sS5eUAZownX430Fn2WE92JC45L3oqrSl1 qxPDoKLNLDb6t97ipvqQeBypAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc/+NDxVR JkjPJLVQ0HgtRlQxLsswHwYDVR0jBBgwFoAUO4NYU1vGKFZK9W8x2HWGSOHQQwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzY0RDA3NzQ4NDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTzROWVUxdkdLRlpLOVc4eDJIV0dTT0hRUXdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzY0RDA3NzQ4NDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0Za SzlXOHgySFdHU09IUVF3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABY91Ug6kT/ESY3Ox0pFw9n5NTs4EqevikDkV9sRWMzlDZp9diWLnzlC leaPUfw5/qP+oRJ4Aw8kfkGFTUKQqFcFFotta9Me0AYhcFeg3hTidHTg+f1nGlLz Nr8ngLbFMXI/NieP3qDkCbhmXBAoivpA1CDKGPKPKc6Vg7wBrvuH5xny+D/8TiJH 0USyHraJBQfOtiCTAb8wjnZX+4i8KqvsgXAVixuKfb9JIq5icpfp4aSb7SYcbqi7 n1miYNcbytdLFrmXaqN3dRAhS9WbqthMcJN8ziUIB15KMMHXkulxu/e5asU+Vn6z l4n1jfm9cIYV5BYOdzKN+1W2Eq90Sc0= -----END CERTIFICATE-----Generated at Sat Dec 27 02:19:11 2025 by rpki-client