This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft File: 1O0zil4gh9gu9ML2RZm0ERJy5eA.mft (raw, json) Hash identifier: wL7//3hcQNL1Z8dGAIGoxR+rZXdoIQYsYrz5+ZavrS0= Subject key identifier: A7:1A:57:65:33:44:97:51:45:D5:3E:2E:90:29:60:22:A4:D8:2D:6E Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 Certificate issuer: /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft Manifest number: 0781 Signing time: Mon 22 Dec 2025 20:51:14 +0000 Manifest this update: Mon 22 Dec 2025 20:51:14 +0000 Manifest next update: Mon 29 Dec 2025 20:51:14 +0000 Files and hashes: 1: 1O0zil4gh9gu9ML2RZm0ERJy5eA.crl (hash: Oqj9VXQMstYLn2dtHmrVJRHdMWPYm7r1ZR+wKB/qtdQ=) 2: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (hash: gBZ45Ahcw6RfwL3mlFFuHRRbvWj8T4TaJokdj0B0Q2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Validity Not Before: Dec 22 20:51:14 2025 GMT Not After : Dec 29 20:51:14 2025 GMT Subject: CN=6949af42-43db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:82:48:fa:20:54:b6:22:9b:3e:a5:9f:87: 63:54:f6:0e:66:34:56:49:12:a7:86:2e:e5:5e:9f: 59:c9:f2:9d:d2:e4:3a:92:9b:8b:29:e2:7f:57:0c: 2a:d3:52:3e:e6:d0:66:48:39:0c:19:50:11:d5:35: d6:d2:ac:ce:b8:25:2a:96:4c:ee:1d:62:e4:d6:07: d6:d0:cd:ca:40:72:9d:57:62:50:f9:f9:71:90:fa: 39:08:ff:4e:ad:d9:1f:e3:c6:4e:db:ee:fa:9d:fc: a1:ef:c4:20:67:90:b1:b4:dd:7e:6f:f7:74:34:f8: 98:59:4c:0a:ea:15:52:35:59:04:c7:64:41:d5:ef: 42:04:f3:9a:38:54:3e:c3:12:69:43:1d:3f:35:2d: ce:74:b0:fa:f2:17:01:4d:08:5d:38:d0:74:ff:a1: 19:34:7e:b2:a7:ed:e3:71:f4:cf:12:44:02:8d:60: ca:2d:b3:60:1e:93:b1:e8:07:0d:ad:24:23:d5:20: 90:72:f2:85:35:df:d5:02:a0:64:1c:c9:60:12:4c: 55:24:88:71:1b:ab:07:57:de:da:90:72:14:25:fd: 73:ad:97:36:c6:b5:4d:19:c4:64:a2:c5:ab:9a:8f: 4c:3c:9a:c2:85:9e:07:42:ae:a6:ef:39:fc:31:eb: 54:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1A:57:65:33:44:97:51:45:D5:3E:2E:90:29:60:22:A4:D8:2D:6E X509v3 Authority Key Identifier: keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:73:9a:5b:7c:50:b0:0f:bc:cc:46:f7:58:4c:3d:ca:55:91: 59:ed:d8:51:41:9f:14:4a:c9:33:fa:71:47:92:ea:0c:33:5c: 5c:c1:4c:81:e2:cf:c9:d6:19:0a:a7:8f:d9:a7:8a:79:9f:c0: ca:43:72:0b:83:a3:1d:ab:d9:c7:bf:19:e1:71:00:37:52:5e: 99:da:a3:83:68:2f:a5:75:9d:1d:a4:02:fe:54:8d:16:24:db: e3:e0:c6:84:7f:d9:e2:97:f8:06:15:a1:b8:d1:01:8a:73:84: 6f:f9:07:42:5c:f2:fb:e5:f6:84:1b:ab:2f:bb:0c:de:0a:90: 10:c6:a4:32:f2:5e:c4:b9:25:2e:1a:4d:05:1f:1a:e0:55:b1: 18:48:a1:f1:69:28:ae:3e:2d:d8:8d:95:ab:fb:c8:56:b4:44: ef:d7:4e:32:78:81:21:71:d8:0a:56:c3:5f:04:82:9a:1f:d3: c5:1c:0b:96:da:44:dc:e7:88:ab:de:a9:71:e0:d1:61:ad:e8: a2:4c:99:69:f6:68:16:58:74:e9:6d:9b:f9:a9:a8:2a:2c:21: 55:35:3f:4d:25:51:68:9a:1c:8c:10:e9:a3:64:58:4e:46:f8: 38:30:af:d1:3c:e4:03:78:fa:08:ca:b9:98:10:2e:cf:6f:21: 2e:55:98:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDQTQxMTAvBgNVBAUTKEQ0RUQzMzhBNUUyMDg3RDgyRUY0QzJGNjQ1OTlCNDEx MTI3MkU1RTAwHhcNMjUxMjIyMjA1MTE0WhcNMjUxMjI5MjA1MTE0WjAYMRYwFAYD VQQDDA02OTQ5YWY0Mi00M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbyCSPogVLYimz6ln4djVPYOZjRWSRKnhi7lXp9ZyfKd0uQ6kpuLKeJ/Vwwq 01I+5tBmSDkMGVAR1TXW0qzOuCUqlkzuHWLk1gfW0M3KQHKdV2JQ+flxkPo5CP9O rdkf48ZO2+76nfyh78QgZ5CxtN1+b/d0NPiYWUwK6hVSNVkEx2RB1e9CBPOaOFQ+ wxJpQx0/NS3OdLD68hcBTQhdONB0/6EZNH6yp+3jcfTPEkQCjWDKLbNgHpOx6AcN rSQj1SCQcvKFNd/VAqBkHMlgEkxVJIhxG6sHV97akHIUJf1zrZc2xrVNGcRkosWr mo9MPJrChZ4HQq6m7zn8MetUSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcaV2Uz RJdRRdU+LpApYCKk2C1uMB8GA1UdIwQYMBaAFNTtM4peIIfYLvTC9kWZtBEScuXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNBNC83QUU5RkVENjNB N0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5Z3U5TUwyUlptMEVSSnk1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPMHppbDRnaDlndTlNTDJSWm0wRVJKeTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNBNC83QUU5RkVENjNBN0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5 Z3U5TUwyUlptMEVSSnk1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApc5pbfFCwD7zMRvdYTD3KVZFZ7dhRQZ8USskz+nFHkuoMM1xcwUyB 4s/J1hkKp4/Zp4p5n8DKQ3ILg6Mdq9nHvxnhcQA3Ul6Z2qODaC+ldZ0dpAL+VI0W JNvj4MaEf9nil/gGFaG40QGKc4Rv+QdCXPL75faEG6svuwzeCpAQxqQy8l7EuSUu Gk0FHxrgVbEYSKHxaSiuPi3YjZWr+8hWtETv104yeIEhcdgKVsNfBIKaH9PFHAuW 2kTc54ir3qlx4NFhreiiTJlp9mgWWHTpbZv5qagqLCFVNT9NJVFomhyMEOmjZFhO Rvg4MK/RPOQDePoIyrmYEC7PbyEuVZgZ -----END CERTIFICATE-----Generated at Tue Dec 23 14:17:05 2025 by rpki-client