This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: x7G3P1fQ7rNlPGk8u/h36h8YknNOOE7y0FfXHJgypng= Subject key identifier: BE:91:64:3D:BF:02:64:8E:D4:A4:0E:D8:82:F1:0A:65:4E:AD:67:1C Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0C33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0C1C Signing time: Sat 20 Dec 2025 18:23:48 +0000 Manifest this update: Sat 20 Dec 2025 18:23:48 +0000 Manifest next update: Sat 27 Dec 2025 18:23:48 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: WxP1siELxMjgg29Lo+ILrH/qNDs579V4A6LM5DdaqC4=) 2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: OwW86qMJFwbNjXHq+OTRD7Vzx3peXb6YxQieVHGeMos=) 3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: DWCg5lL0mEzrArVCwICSW9aYx94oeCmf91vXy2qE580=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Dec 20 18:23:48 2025 GMT Not After : Dec 27 18:23:48 2025 GMT Subject: CN=6946e9b4-0a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:fd:aa:b8:dd:61:9c:39:9d:1b:94:5f:b7: 4c:a9:a6:81:95:b8:53:e6:90:ab:10:69:94:17:a9: a5:3e:90:b2:3e:26:88:69:e4:46:2d:46:a2:8f:32: 07:17:97:af:23:fb:b9:64:db:95:db:26:d2:47:ac: 6e:51:1d:b7:af:1d:3f:22:be:69:76:73:5d:0d:8d: 3f:11:b9:f6:22:6b:6c:93:21:58:21:23:11:8b:b1: 4e:6a:34:1d:f1:1c:ed:24:02:e8:21:7f:fe:ae:d6: 69:9c:73:7b:fe:26:47:da:62:b9:13:87:0e:b0:43: 98:31:3c:3e:8e:f5:ab:8f:71:74:85:1c:07:bc:cf: 32:52:92:58:7c:3a:a0:fc:eb:1e:42:fa:2f:23:af: a6:21:55:70:27:80:2e:f2:6a:d7:89:b9:e4:2b:d2: 0a:4e:50:b2:07:8a:3c:ee:f6:e3:39:05:5a:6f:3e: ea:0f:ec:3b:a0:04:3e:73:a3:82:b9:a5:97:07:a2: 82:9d:85:ca:10:42:34:78:4e:3b:44:fa:88:a1:e5: 0b:7f:bf:60:5a:23:11:17:99:09:25:a4:29:04:26: 50:12:22:fc:db:4c:27:a5:c4:e1:e5:c5:f8:39:f5: 07:d2:c3:96:49:66:37:10:36:43:6a:a4:b5:c7:35: cb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:91:64:3D:BF:02:64:8E:D4:A4:0E:D8:82:F1:0A:65:4E:AD:67:1C X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:28:f8:47:54:a3:cf:9b:9f:83:2f:4d:58:ce:b5:38:7c:05: 9c:fd:97:41:cf:8d:59:83:d9:be:a5:ca:b2:9b:e7:83:e2:d1: a3:31:a8:f4:87:7b:7c:f1:28:f7:2e:9f:03:cb:1e:e0:c6:56: 82:6b:67:e7:45:89:19:d6:a7:2f:af:ec:75:b2:8d:60:af:a9: 2b:29:7a:e2:48:68:af:69:1e:12:d9:dd:e6:23:39:40:83:5e: 7c:f1:21:56:38:1d:99:6f:70:6d:9c:dd:69:4b:07:97:ff:52: c3:ca:7d:a6:c9:8d:eb:36:e4:15:17:89:3d:07:1d:67:6a:93: 90:75:9b:42:de:fe:7e:b4:c6:4a:49:e2:33:99:c2:97:e5:5e: 63:d2:aa:38:e9:f2:a5:15:c1:16:bb:b8:87:dd:5c:34:73:b0: 35:91:ba:ff:f9:de:3e:cc:ba:61:53:5b:c0:b8:3d:ba:d6:fb: 82:69:96:e7:bc:4c:75:9f:4c:92:6b:f5:c6:e8:78:ba:c0:02: e2:a2:e8:c3:68:f9:d6:3d:c8:5d:7f:9a:0c:84:47:81:e6:bf: 1b:ea:1e:e6:e0:25:96:f4:82:fd:84:68:65:c7:a8:8e:58:0b: 67:85:91:5b:e4:4c:0f:49:50:3e:82:46:58:3f:79:5a:3e:3b: 61:1a:d6:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjUxMjIwMTgyMzQ4WhcNMjUxMjI3MTgyMzQ4WjAYMRYwFAYD VQQDDA02OTQ2ZTliNC0wYTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Tb9qrjdYZw5nRuUX7dMqaaBlbhT5pCrEGmUF6mlPpCyPiaIaeRGLUaijzIH F5evI/u5ZNuV2ybSR6xuUR23rx0/Ir5pdnNdDY0/Ebn2ImtskyFYISMRi7FOajQd 8RztJALoIX/+rtZpnHN7/iZH2mK5E4cOsEOYMTw+jvWrj3F0hRwHvM8yUpJYfDqg /OseQvovI6+mIVVwJ4Au8mrXibnkK9IKTlCyB4o87vbjOQVabz7qD+w7oAQ+c6OC uaWXB6KCnYXKEEI0eE47RPqIoeULf79gWiMRF5kJJaQpBCZQEiL820wnpcTh5cX4 OfUH0sOWSWY3EDZDaqS1xzXL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6RZD2/ AmSO1KQO2ILxCmVOrWccMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYKPhHVKPPm5+DL01YzrU4fAWc/ZdBz41Zg9m+pcqym+eD4tGjMaj0 h3t88Sj3Lp8Dyx7gxlaCa2fnRYkZ1qcvr+x1so1gr6krKXriSGivaR4S2d3mIzlA g1588SFWOB2Zb3BtnN1pSweX/1LDyn2myY3rNuQVF4k9Bx1napOQdZtC3v5+tMZK SeIzmcKX5V5j0qo46fKlFcEWu7iH3Vw0c7A1kbr/+d4+zLphU1vAuD261vuCaZbn vEx1n0ySa/XG6Hi6wALioujDaPnWPchdf5oMhEeB5r8b6h7m4CWW9IL9hGhlx6iO WAtnhZFb5EwPSVA+gkZYP3laPjthGtbb -----END CERTIFICATE-----Generated at Sun Dec 21 04:45:42 2025 by rpki-client