This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json) Hash identifier: OI3615/FJVxGIkTpz6MJLZEat74kCEduYmNCUkH+z2g= Subject key identifier: D9:D9:21:5D:DA:2D:C4:83:78:C8:57:28:6E:D5:99:95:0A:5D:F8:69 Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Certificate serial: 097E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft Manifest number: 0978 Signing time: Sat 20 Dec 2025 19:31:01 +0000 Manifest this update: Sat 20 Dec 2025 19:31:01 +0000 Manifest next update: Sat 27 Dec 2025 19:31:01 +0000 Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: Hprsujh1CJFACF6p0Unj+MtqHfU4OE8/Yz3zfRjU/FY=) 2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: oh99riu32xDufqLh4s49Z+OfJBlHg4YCfXKo4NVguOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2430 (0x97e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Validity Not Before: Dec 20 19:31:01 2025 GMT Not After : Dec 27 19:31:01 2025 GMT Subject: CN=6946f975-fa80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:52:6c:8c:fd:c1:b2:16:b5:a3:a0:6c:70: 5a:6c:1a:99:2d:51:16:d6:f3:46:40:3b:42:96:89: 18:7d:f8:81:46:5d:71:67:8c:9d:f6:fd:70:2f:7b: be:67:c7:5a:d6:bc:d6:0f:47:84:49:38:33:96:b6: b0:9b:0e:b2:e9:fc:eb:aa:7b:0b:a2:e3:14:6e:f6: 2d:a1:dd:84:33:0a:8d:f8:16:65:f2:e5:52:15:ea: ed:20:40:32:b6:c2:4d:c6:22:e0:14:3d:7e:39:bc: 90:3e:d4:be:2b:2f:02:66:9c:4d:5f:ea:13:14:da: fb:a1:94:e5:14:55:02:13:3d:f8:1e:d4:80:76:df: 6f:b2:8a:ee:ba:49:0b:b0:fb:4a:01:69:62:cb:0a: f4:9e:5c:5c:dd:4a:fb:57:ae:43:54:dc:b9:21:02: c3:bd:8b:e0:9b:24:a7:7a:91:df:07:c0:ca:d0:e8: 0c:57:68:23:13:8b:f1:e0:9b:12:ba:2e:cd:c1:29: 20:19:2e:80:4f:e7:a5:e1:b0:80:ec:03:e8:99:10: 4d:46:c2:64:0c:4b:f3:ec:8e:54:3b:8f:92:bc:3e: 49:bd:18:39:74:0b:ed:4c:65:fe:4a:22:e9:df:ed: b6:83:e9:99:1e:f5:b0:19:ef:c8:83:27:76:75:42: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D9:21:5D:DA:2D:C4:83:78:C8:57:28:6E:D5:99:95:0A:5D:F8:69 X509v3 Authority Key Identifier: keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c9:7f:56:59:98:95:be:a8:87:09:d7:19:53:b8:57:3a:9b: 94:2f:ba:0c:09:6b:be:08:54:14:9c:93:bc:4b:b4:94:70:26: af:b0:ac:91:9b:be:b1:dd:af:03:f9:0a:8f:09:8e:4d:cf:93: 56:5a:c1:5d:18:5f:d5:fd:ae:93:17:d0:e5:70:20:01:50:95: 8a:53:6b:cd:13:c6:5b:7a:6c:29:25:fc:d9:ae:a7:e4:36:c1: cf:94:bf:ef:f2:6a:e9:aa:75:1c:5f:42:49:2b:9f:5f:ac:cd: 85:d4:46:ac:6d:3d:c3:ae:04:f5:7e:b3:f6:29:fc:6f:0e:68: 1d:0e:26:8c:a1:28:6f:bb:89:87:0d:89:15:5b:72:6a:e8:f9: 55:18:01:4e:23:d4:5f:e8:b4:79:ea:5b:0e:c9:d8:a3:0c:1b: ba:4b:43:b1:6c:ce:1f:9b:0d:91:3f:88:6c:32:74:60:73:5a: b1:a5:6d:70:95:74:94:b0:ad:50:d2:1f:3f:13:27:1d:45:bb: ab:03:0e:34:34:b6:e0:ad:07:25:75:01:44:2a:62:3e:3d:ce: c6:4c:4c:4d:c6:19:e3:59:01:e2:f9:b1:c2:bb:91:45:35:24: 13:21:e5:4f:a8:12:14:3e:27:34:0d:20:ab:76:69:91:d2:e5: 53:10:ae:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2MDQxMTAvBgNVBAUTKEEzREZCRTExQUY4QTc4RTU2MkNGQjQ1NzkwMENDQUI5 MDkwQzJCNTkwHhcNMjUxMjIwMTkzMTAxWhcNMjUxMjI3MTkzMTAxWjAYMRYwFAYD VQQDDA02OTQ2Zjk3NS1mYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VlSbIz9wbIWtaOgbHBabBqZLVEW1vNGQDtClokYffiBRl1xZ4yd9v1wL3u+ Z8da1rzWD0eESTgzlrawmw6y6fzrqnsLouMUbvYtod2EMwqN+BZl8uVSFertIEAy tsJNxiLgFD1+ObyQPtS+Ky8CZpxNX+oTFNr7oZTlFFUCEz34HtSAdt9vsoruukkL sPtKAWliywr0nlxc3Ur7V65DVNy5IQLDvYvgmySnepHfB8DK0OgMV2gjE4vx4JsS ui7NwSkgGS6AT+el4bCA7APomRBNRsJkDEvz7I5UO4+SvD5JvRg5dAvtTGX+SiLp 3+22g+mZHvWwGe/Igyd2dUIs1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnZIV3a LcSDeMhXKG7VmZUKXfhpMB8GA1UdIwQYMBaAFKPfvhGvinjlYs+0V5AMyrkJDCtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTYwNC9CQ0VDNkM1RUE0 QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VPVml6N1JYa0F6S3VRa01L MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285LS1FYS1LZU9WaXo3UlhrQXpLdVFrTUsxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTYwNC9CQ0VDNkM1RUE0QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VP Vml6N1JYa0F6S3VRa01LMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4yX9WWZiVvqiHCdcZU7hXOpuUL7oMCWu+CFQUnJO8S7SUcCavsKyR m76x3a8D+QqPCY5Nz5NWWsFdGF/V/a6TF9DlcCABUJWKU2vNE8ZbemwpJfzZrqfk NsHPlL/v8mrpqnUcX0JJK59frM2F1EasbT3DrgT1frP2KfxvDmgdDiaMoShvu4mH DYkVW3Jq6PlVGAFOI9Rf6LR56lsOydijDBu6S0OxbM4fmw2RP4hsMnRgc1qxpW1w lXSUsK1Q0h8/EycdRburAw40NLbgrQcldQFEKmI+Pc7GTExNxhnjWQHi+bHCu5FF NSQTIeVPqBIUPic0DSCrdmmR0uVTEK4I -----END CERTIFICATE-----Generated at Sun Dec 21 13:43:04 2025 by rpki-client