This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: 1yuNUJ2L+SjW11CFIUB/uoNdajJHx0kbqQUMz6H4Fh8= Subject key identifier: 1E:D6:01:FC:28:D6:0D:AF:B8:D3:7F:9D:F6:09:5F:52:7E:73:E2:79 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: 4E Signing time: Fri 19 Dec 2025 06:18:10 +0000 Manifest this update: Fri 19 Dec 2025 06:18:10 +0000 Manifest next update: Fri 26 Dec 2025 06:18:10 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: ao/anjnx6SnV6llYS0+PH0b5i1/kZaZiXJjHFo7PldA=) 2: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: J6NfxVye//wKbH6luOaipzXoE8gflP1Zb4ROZKBwOvw=) 3: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: Jiabvy3OMisNM5GgqkjfS6kn/xGNTzgJB34Y1DjTY/g=) 4: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: nDBN8ofBQzSuZlFacB02+d4KlQaWiR4DsWaWORqlM1w=) 5: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: KEMH/vKSPcAkV3P1pUdnSj1om5WSjvDW91I/czL5aFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Dec 19 06:18:10 2025 GMT Not After : Dec 26 06:18:10 2025 GMT Subject: CN=6944ee22-48f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:c7:e0:52:da:ae:dd:97:18:ef:ae:75:b8: 3b:c6:99:f8:99:03:8b:19:e3:e8:95:c4:4a:77:93: 2a:4e:bd:27:e9:53:97:6e:2f:e5:bd:f7:c0:ac:7a: e7:00:c8:70:af:c2:06:cd:c3:c2:95:c5:11:5e:68: 58:04:22:3f:fd:8f:67:1c:7a:d6:15:dc:8c:4e:08: 87:48:c6:89:a1:19:d1:2b:4a:d9:87:a8:19:f0:c9: 5d:17:ae:98:49:41:a2:ff:da:76:9e:d8:ce:d6:3d: 1e:8c:27:96:af:3a:ce:07:43:4d:a7:39:3b:d9:d1: 9b:cd:99:17:25:29:1b:f3:bd:af:de:53:49:7f:14: 18:4b:c4:13:26:39:68:cc:51:68:2e:f3:6c:0b:8d: d6:59:2b:46:33:05:9d:13:66:58:8c:52:9a:07:5c: 99:ac:94:7c:5a:8b:67:1c:33:8e:39:6a:62:0a:73: 13:f5:b1:78:89:d6:24:e0:d5:d7:6a:22:73:97:fb: 01:0c:3a:a9:90:6f:3a:e5:59:e9:5a:e7:c9:b9:c6: ce:c4:32:99:64:b7:f5:df:d2:45:be:1e:b0:e5:2e: 93:38:fb:f6:5d:fd:be:8d:ba:57:54:20:d2:d5:09: 69:fc:74:22:f6:30:fe:bc:7c:d6:e5:b5:33:a4:1c: 6a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D6:01:FC:28:D6:0D:AF:B8:D3:7F:9D:F6:09:5F:52:7E:73:E2:79 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:99:af:8d:d1:e7:87:65:5b:5b:4d:23:52:03:b5:c7:46:e4: e8:8e:26:5a:6a:f1:9a:25:a6:d1:d5:a3:75:3e:4b:f7:77:d7: aa:c3:c7:1d:84:72:47:30:4d:8c:41:3e:2c:b5:4c:6f:b8:ff: a3:bf:76:be:8d:e2:eb:19:4f:16:e4:17:97:8c:92:25:69:fd: be:61:44:82:03:d6:2b:78:4e:bc:3d:ce:c5:78:1f:f6:3d:50: 26:11:5c:d8:6d:65:52:f9:38:0e:81:d5:b9:e1:9b:7c:5c:23: 38:d8:bb:70:78:fe:c8:6a:04:a1:6a:82:06:97:52:e0:8f:c1: a8:4d:fb:48:5c:84:57:9c:94:c6:4b:ea:6a:b3:6a:d6:3b:51: 3d:85:ea:46:0b:ae:87:6c:05:47:41:14:24:7f:b4:af:cb:a2: 92:3d:a6:42:fb:22:f8:f2:9f:79:67:cb:4b:bd:e3:d0:32:77: 93:64:48:53:7a:06:50:fa:2b:d1:ae:1c:5b:a2:ec:9f:f6:44: fe:27:c7:37:6d:d6:cb:7b:dc:80:f0:3e:5d:62:15:05:f5:72: 0b:5a:b6:c2:46:3e:e1:13:68:f9:b2:fd:b6:2f:ba:8e:72:b3: ad:a6:18:a3:8d:2f:03:11:5a:80:7b:91:60:01:3c:d8:81:1a: 3d:52:f9:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkE2OTExMC8GA1UEBRMoM0FBNUQ3NEE0OUZFREUwODE3NjZDREFDM0JGN0RERDAz NkJCRjkwMTAeFw0yNTEyMTkwNjE4MTBaFw0yNTEyMjYwNjE4MTBaMBgxFjAUBgNV BAMMDTY5NDRlZTIyLTQ4ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5RsfgUtqu3ZcY7651uDvGmfiZA4sZ4+iVxEp3kypOvSfpU5duL+W998CseucA yHCvwgbNw8KVxRFeaFgEIj/9j2ccetYV3IxOCIdIxomhGdErStmHqBnwyV0XrphJ QaL/2nae2M7WPR6MJ5avOs4HQ02nOTvZ0ZvNmRclKRvzva/eU0l/FBhLxBMmOWjM UWgu82wLjdZZK0YzBZ0TZliMUpoHXJmslHxai2ccM445amIKcxP1sXiJ1iTg1ddq InOX+wEMOqmQbzrlWela58m5xs7EMplkt/Xf0kW+HrDlLpM4+/Zd/b6NuldUINLV CWn8dCL2MP68fNbltTOkHGrxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHtYB/CjW Da+403+d9glfUn5z4nkwHwYDVR0jBBgwFoAUOqXXSkn+3ggXZs2sO/fd0Da7+QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QTY5L0NCMUNGRTg0NkM0 QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3FYWFNrbi0zZ2dYWnMyc09fZmQwRGE3LVFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QTY5L0NCMUNGRTg0NkM0QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dn WFpzMnNPX2ZkMERhNy1RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAGZr43R54dlW1tNI1IDtcdG5OiOJlpq8ZolptHVo3U+S/d316rDxx2E ckcwTYxBPiy1TG+4/6O/dr6N4usZTxbkF5eMkiVp/b5hRIID1it4Trw9zsV4H/Y9 UCYRXNhtZVL5OA6B1bnhm3xcIzjYu3B4/shqBKFqggaXUuCPwahN+0hchFeclMZL 6mqzatY7UT2F6kYLrodsBUdBFCR/tK/LopI9pkL7Ivjyn3lny0u949Ayd5NkSFN6 BlD6K9GuHFui7J/2RP4nxzdt1st73IDwPl1iFQX1cgtatsJGPuETaPmy/bYvuo5y s62mGKONLwMRWoB7kWABPNiBGj1S+cU= -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:57 2025 by rpki-client