This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json) Hash identifier: puiFeAKbbiVmI4H52PIU8voFhXxVV+I11xxJDtEUxfM= Subject key identifier: 39:66:99:81:DA:CF:E4:5A:7E:CA:A1:61:18:6E:45:46:A1:3F:C7:28 Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft Manifest number: 54 Signing time: Tue 23 Dec 2025 06:04:59 +0000 Manifest this update: Tue 23 Dec 2025 06:04:59 +0000 Manifest next update: Tue 30 Dec 2025 06:04:59 +0000 Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: fjoehavyh9IKkYr+O1Yxu4VXeBua/arr5COEUr9CF7k=) 2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: Rsq6/I7qJeC3VPVdtIV32k6eG9/KeOaeWD2g/nms+lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Validity Not Before: Dec 23 06:04:59 2025 GMT Not After : Dec 30 06:04:59 2025 GMT Subject: CN=694a310b-574a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:0a:f4:d5:5b:18:e7:f3:ea:04:b5:32:fc: bc:16:7d:cc:0a:0a:ed:40:c1:91:0c:bc:7b:67:d9: 55:ca:3e:12:bb:9b:39:fe:5a:c6:10:c4:00:6d:9e: 38:ae:d3:c3:ad:0d:19:3d:54:36:64:94:48:09:44: 24:69:3c:83:c7:b0:d1:2f:30:96:4b:f9:b6:06:7a: 09:80:b9:58:b8:be:da:0f:1a:19:6f:c3:f5:db:c7: 56:1e:57:84:32:dd:7d:ba:65:5c:6d:ab:e5:02:c7: c6:d3:1b:69:8c:53:54:c0:d9:f9:f1:65:fc:60:97: 0d:b5:47:9a:70:cd:c1:85:9f:de:64:72:93:ed:b3: 97:f8:70:ad:88:e0:46:01:c7:5c:c7:4f:66:66:3a: ae:41:1f:b3:1d:7d:ed:9a:95:80:1a:50:f8:6a:c6: e2:af:23:0d:cc:fd:0a:23:20:70:c3:e6:ca:f6:28: ff:d1:f9:a2:0a:5e:9f:1f:45:6f:91:f0:51:64:79: 38:b4:d3:6d:9b:b0:63:f4:7a:6f:c9:7e:ce:45:83: 9b:28:63:5a:82:4f:0a:ac:70:fa:27:24:57:b0:ce: ce:a9:b3:93:72:00:3d:21:cc:26:89:6a:8a:5d:64: c5:33:f7:4f:94:84:19:70:00:2e:bd:ea:34:d0:98: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:66:99:81:DA:CF:E4:5A:7E:CA:A1:61:18:6E:45:46:A1:3F:C7:28 X509v3 Authority Key Identifier: keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:46:46:73:7b:c4:67:29:c6:6e:79:f3:29:d1:39:0f:03:16: e4:a8:95:1e:f1:8c:1b:92:c3:a9:0d:7e:25:99:67:c4:79:e9: 4e:ff:9b:5f:ad:1d:52:c8:29:be:2f:63:a0:1f:98:d1:90:92: 68:f0:23:fe:86:13:00:79:90:ec:04:a1:9b:bb:d1:fd:f8:5e: 1b:3d:6d:1e:4e:b3:7d:ba:32:fc:13:f3:e5:b4:b0:26:a9:a3: d6:48:de:a8:14:fa:c6:cc:f4:83:5a:8b:d6:38:c0:11:1e:96: 3e:f5:b6:27:46:50:77:2f:a8:d5:bd:18:25:15:d8:ee:57:c9: e1:48:fd:a3:3b:dd:0b:0f:4d:5a:a7:55:2a:15:4a:2d:a7:6b: 53:ae:19:38:1c:1c:9b:9f:b4:0c:2c:2d:e6:0a:f4:e7:20:3a: 14:00:3a:cc:14:eb:19:53:8d:4b:b9:d8:ca:38:46:3f:cb:27: c3:c3:4a:40:c7:4c:75:ca:0b:cb:f2:c0:83:6c:41:f2:86:60: df:e0:9c:db:42:a6:8b:f2:30:0f:49:5e:40:f4:dc:87:e7:9a: 3d:8c:01:d7:72:3f:93:4f:d9:89:aa:70:6f:03:95:26:d9:d4: 59:42:fc:5a:46:87:39:f7:47:52:56:ed:bc:b9:9c:0b:94:d4: 81:bf:85:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoM0FDRjQ0NUNGQ0VDRkJCMjkxM0IzNDdENjdBODI4RTA0 MEExNUExRDAeFw0yNTEyMjMwNjA0NTlaFw0yNTEyMzAwNjA0NTlaMBgxFjAUBgNV BAMMDTY5NGEzMTBiLTU3NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEowr01VsY5/PqBLUy/LwWfcwKCu1AwZEMvHtn2VXKPhK7mzn+WsYQxABtnjiu 08OtDRk9VDZklEgJRCRpPIPHsNEvMJZL+bYGegmAuVi4vtoPGhlvw/Xbx1YeV4Qy 3X26ZVxtq+UCx8bTG2mMU1TA2fnxZfxglw21R5pwzcGFn95kcpPts5f4cK2I4EYB x1zHT2ZmOq5BH7Mdfe2alYAaUPhqxuKvIw3M/QojIHDD5sr2KP/R+aIKXp8fRW+R 8FFkeTi0022bsGP0em/Jfs5Fg5soY1qCTwqscPonJFewzs6ps5NyAD0hzCaJaopd ZMUz90+UhBlwAC696jTQmLcvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOWaZgdrP 5Fp+yqFhGG5FRqE/xygwHwYDVR0jBBgwFoAUOs9EXPzs+7KROzR9Z6go4EChWh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzVEQjc0QjBBNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdLUk96UjlaNmdvNEVDaFdo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT3M5RVhQenMtN0tST3pSOVo2Z280RUNoV2gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzVEQjc0QjBBNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdL Uk96UjlaNmdvNEVDaFdoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABdGRnN7xGcpxm558ynROQ8DFuSolR7xjBuSw6kNfiWZZ8R56U7/m1+t HVLIKb4vY6AfmNGQkmjwI/6GEwB5kOwEoZu70f34Xhs9bR5Os326MvwT8+W0sCap o9ZI3qgU+sbM9INai9Y4wBEelj71tidGUHcvqNW9GCUV2O5XyeFI/aM73QsPTVqn VSoVSi2na1OuGTgcHJuftAwsLeYK9OcgOhQAOswU6xlTjUu52Mo4Rj/LJ8PDSkDH THXKC8vywINsQfKGYN/gnNtCpovyMA9JXkD03Ifnmj2MAddyP5NP2YmqcG8DlSbZ 1FlC/FpGhzn3R1JW7by5nAuU1IG/hec= -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:32 2025 by rpki-client