This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: NjOX6llVkz9YBCLfXv1flfMmqUgSDhRhufLUvDZChHQ= Subject key identifier: 52:73:B1:8A:88:75:4F:9E:E2:5D:11:6A:B4:5F:DE:CE:D0:F5:F5:C3 Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 0200 Signing time: Fri 19 Dec 2025 01:39:44 +0000 Manifest this update: Fri 19 Dec 2025 01:39:44 +0000 Manifest next update: Fri 26 Dec 2025 01:39:44 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: xhArcQMZ1ALzfz21xScrdesp+eKSfygQEfICMg0PI90=) 2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: b8ZzvlKgDQGk0f2Mf7aPG61cEDCQRJBc44944Geb3Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Dec 19 01:39:44 2025 GMT Not After : Dec 26 01:39:44 2025 GMT Subject: CN=6944ace0-05e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ef:d5:84:84:a0:69:09:35:2d:91:6e:a1:f8: ca:a1:85:3e:8c:fc:92:3e:44:54:49:0e:bb:8b:05: 64:c5:68:13:28:80:9a:b3:cc:5e:64:c7:3f:f4:1e: 5d:80:53:a3:93:8a:70:fe:c6:53:82:b2:b5:55:14: 28:cc:9e:cf:2a:4b:82:3d:3a:f8:a3:12:0f:9f:fa: 7d:62:2a:cf:ba:1c:2b:7d:82:a1:02:fb:06:1d:86: 10:38:ce:51:15:e5:07:34:24:7c:fb:9a:83:67:35: d1:c0:f1:bb:3f:88:d9:91:b0:1a:55:b0:7d:a8:b5: 3f:6e:6b:9d:c3:fb:5f:a2:2d:c4:1c:d7:39:b7:4c: d1:6e:d9:32:fe:68:27:1b:f4:ae:65:73:1e:22:8d: e4:a0:af:c9:83:fc:01:5c:ce:34:be:00:cf:d7:88: 23:b7:9c:49:1a:98:44:68:17:6b:ff:12:43:05:04: 54:88:d2:e3:4a:b5:f0:23:26:c2:68:29:e4:de:ab: 17:b7:a7:b5:48:93:e0:49:9a:56:e5:7a:07:bf:00: 4b:0e:4d:8b:74:d8:48:a6:77:20:25:1b:94:7a:cc: 57:6e:0f:89:0a:f3:97:d1:3c:e2:b3:64:5b:80:9a: 84:f5:17:18:26:4c:30:07:a2:6a:c4:e5:8f:34:05: ee:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:73:B1:8A:88:75:4F:9E:E2:5D:11:6A:B4:5F:DE:CE:D0:F5:F5:C3 X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:30:8b:b8:42:e5:6f:b1:38:06:c6:b2:3b:70:91:e0:cd:94: de:72:9f:b8:20:cf:2a:43:28:a5:d0:16:60:51:5e:08:88:83: a6:7c:ea:31:73:5d:01:6d:a9:13:32:a0:69:a1:ac:97:ca:5c: a2:0b:50:0b:9b:c5:17:33:04:7d:a7:e3:4c:23:cd:bd:bb:1f: 8b:2a:fc:9e:d2:bb:fd:ec:d1:bb:1e:f2:1c:ff:85:da:17:75: 43:16:b7:50:50:24:d1:6d:f9:f0:f9:fa:a4:d7:8c:60:de:ef: c2:eb:83:4f:37:ea:7b:9f:e7:06:77:a7:77:f8:a4:2b:0e:85: 45:c1:f4:73:64:4b:88:c9:5f:b6:58:9a:ca:40:83:7f:f8:db: 8f:9a:a7:02:0d:0b:03:75:3e:88:f5:63:4c:b3:8f:e2:90:2c: 46:ed:cb:af:0b:6f:ec:95:67:a5:84:07:cc:b8:73:16:93:7f: b8:49:8a:8f:72:33:d7:63:9a:dc:6f:4e:21:63:23:8e:bb:77: cf:95:3f:87:ea:8a:2e:1c:7d:7e:3e:1a:26:14:50:0e:b2:c9: 45:a3:06:17:d8:0d:93:a1:b8:88:95:94:da:ee:ef:5e:c2:08: 2f:ca:36:12:96:ff:c4:cf:9f:4b:0e:94:65:78:7d:5e:dd:e1: 61:76:48:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjUxMjE5MDEzOTQ0WhcNMjUxMjI2MDEzOTQ0WjAYMRYwFAYD VQQDDA02OTQ0YWNlMC0wNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA++/VhISgaQk1LZFuofjKoYU+jPySPkRUSQ67iwVkxWgTKICas8xeZMc/9B5d gFOjk4pw/sZTgrK1VRQozJ7PKkuCPTr4oxIPn/p9YirPuhwrfYKhAvsGHYYQOM5R FeUHNCR8+5qDZzXRwPG7P4jZkbAaVbB9qLU/bmudw/tfoi3EHNc5t0zRbtky/mgn G/SuZXMeIo3koK/Jg/wBXM40vgDP14gjt5xJGphEaBdr/xJDBQRUiNLjSrXwIybC aCnk3qsXt6e1SJPgSZpW5XoHvwBLDk2LdNhIpncgJRuUesxXbg+JCvOX0Tzis2Rb gJqE9RcYJkwwB6JqxOWPNAXuEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJzsYqI dU+e4l0RarRf3s7Q9fXDMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQMIu4QuVvsTgGxrI7cJHgzZTecp+4IM8qQyil0BZgUV4IiIOmfOox c10BbakTMqBpoayXylyiC1ALm8UXMwR9p+NMI829ux+LKvye0rv97NG7HvIc/4Xa F3VDFrdQUCTRbfnw+fqk14xg3u/C64NPN+p7n+cGd6d3+KQrDoVFwfRzZEuIyV+2 WJrKQIN/+NuPmqcCDQsDdT6I9WNMs4/ikCxG7cuvC2/slWelhAfMuHMWk3+4SYqP cjPXY5rcb04hYyOOu3fPlT+H6oouHH1+PhomFFAOsslFowYX2A2TobiIlZTa7u9e wggvyjYSlv/Ez59LDpRleH1e3eFhdkic -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:56 2025 by rpki-client