This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: 1VQR78sfWBeBF+qshKqo6mRfJFu//JhhZEOmW4HNt14= Subject key identifier: 46:83:71:E0:F6:71:8E:06:F3:01:04:D8:CE:86:A1:F9:4B:09:5E:C8 Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 01FE Signing time: Fri 19 Dec 2025 01:40:44 +0000 Manifest this update: Fri 19 Dec 2025 01:40:43 +0000 Manifest next update: Fri 26 Dec 2025 01:40:43 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: xe35F0MNkq5Q4rFlSP5zf9c6h1dpmLEUZamu0bg66OE=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Dec 19 01:40:43 2025 GMT Not After : Dec 26 01:40:43 2025 GMT Subject: CN=6944ad1c-64f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:bf:2d:c9:15:c3:1c:11:d2:c6:cf:3e:20: b9:d1:a7:a6:d4:a8:05:c0:06:c0:ba:03:c1:2c:ab: e2:9e:c7:03:fb:96:26:42:4e:3b:45:0c:60:56:af: 85:b9:45:5c:2b:60:8e:19:ab:16:ba:c7:10:65:a5: 77:29:2d:56:f3:6d:70:eb:0d:0a:ab:d5:41:80:50: b6:a0:63:6a:67:ba:b7:61:50:53:5b:46:03:6f:e3: 5c:89:6a:7f:f4:cb:82:e3:f7:0c:94:49:7a:2c:41: c1:77:20:bf:97:ab:2e:8b:1e:56:28:95:73:8b:00: 6e:d0:7c:cd:f8:36:d6:6e:39:ce:e1:81:a3:36:fb: a4:57:57:32:31:73:5a:b4:d4:14:5f:bb:7f:20:90: a6:ca:f5:c2:dc:80:a4:d1:b7:73:dd:17:2e:bf:e8: 13:d5:9b:a5:57:22:35:6b:f3:0b:39:80:17:ea:9b: 44:fd:cc:97:6a:58:e5:e0:45:fa:d1:bd:c8:85:68: a7:fb:b8:38:80:04:b5:e0:71:91:51:29:af:11:74: 14:19:3d:6b:c0:9c:e0:88:76:23:c6:a7:a2:79:44: 7d:94:3c:d0:9e:9f:db:0f:9b:71:28:8d:a0:64:56: e7:ed:8d:20:65:16:04:98:ad:0e:dd:b4:ea:2a:da: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:83:71:E0:F6:71:8E:06:F3:01:04:D8:CE:86:A1:F9:4B:09:5E:C8 X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9b:94:a5:74:ef:f2:6d:27:2d:5d:1f:d7:e5:04:74:3a:90: a5:2f:12:24:9b:1b:46:e3:93:44:b3:52:ba:b5:29:b0:82:29: 8a:63:7f:ef:ef:b6:18:8c:fa:1f:b9:ab:b6:40:09:c7:1e:67: 59:5b:86:21:e0:fd:6f:51:df:18:16:06:dc:de:a8:05:74:75: 11:d7:b0:d1:0d:8d:1c:f2:e1:4d:d6:23:3e:57:e9:f1:e8:05: 3a:37:72:36:44:73:4f:2a:73:c4:3b:89:8a:f0:ac:75:ad:72: 83:8f:0a:d5:e0:34:a7:2c:da:2c:af:bb:df:df:4e:24:11:08: db:ea:95:b9:e2:8b:19:fa:8c:ca:2e:01:1d:4b:a7:26:a5:93: 20:1e:63:4e:ac:a5:e5:00:a7:51:00:0f:55:bd:75:bd:ac:31: 55:74:e2:6c:46:8b:90:92:27:78:0c:c6:6b:0d:7c:a7:d6:58: fe:e9:de:48:85:b8:9f:04:f6:c6:ae:25:46:1c:71:71:6c:36: 2f:86:4e:95:6f:22:9a:9a:e0:ab:bd:0d:77:52:a3:d7:87:78: 76:24:68:7b:9d:d5:bf:0b:ad:b0:96:28:14:c2:25:ae:b8:47: 95:7c:f5:f4:92:47:c5:d4:12:3d:c1:7e:d6:22:7d:18:b3:15: 3d:a1:17:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUxMjE5MDE0MDQzWhcNMjUxMjI2MDE0MDQzWjAYMRYwFAYD VQQDDA02OTQ0YWQxYy02NGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmju/LckVwxwR0sbPPiC50aem1KgFwAbAugPBLKvinscD+5YmQk47RQxgVq+F uUVcK2COGasWuscQZaV3KS1W821w6w0Kq9VBgFC2oGNqZ7q3YVBTW0YDb+NciWp/ 9MuC4/cMlEl6LEHBdyC/l6suix5WKJVziwBu0HzN+DbWbjnO4YGjNvukV1cyMXNa tNQUX7t/IJCmyvXC3ICk0bdz3Rcuv+gT1ZulVyI1a/MLOYAX6ptE/cyXaljl4EX6 0b3IhWin+7g4gAS14HGRUSmvEXQUGT1rwJzgiHYjxqeieUR9lDzQnp/bD5txKI2g ZFbn7Y0gZRYEmK0O3bTqKtobYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaDceD2 cY4G8wEE2M6GoflLCV7IMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+m5SldO/ybSctXR/X5QR0OpClLxIkmxtG45NEs1K6tSmwgimKY3/v 77YYjPofuau2QAnHHmdZW4Yh4P1vUd8YFgbc3qgFdHUR17DRDY0c8uFN1iM+V+nx 6AU6N3I2RHNPKnPEO4mK8Kx1rXKDjwrV4DSnLNosr7vf304kEQjb6pW54osZ+ozK LgEdS6cmpZMgHmNOrKXlAKdRAA9VvXW9rDFVdOJsRouQkid4DMZrDXyn1lj+6d5I hbifBPbGriVGHHFxbDYvhk6VbyKamuCrvQ13UqPXh3h2JGh7ndW/C62wligUwiWu uEeVfPX0kkfF1BI9wX7WIn0YsxU9oRe0 -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:54 2025 by rpki-client