This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: FD2mUPB99fN0J7f1AvB9K3fdSgBeJaAlwYvTT+fairE= Subject key identifier: 99:EF:57:3F:E7:73:22:FB:B7:CE:42:E4:2C:14:2E:E5:00:64:A7:C3 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0DE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0DDB Signing time: Sat 20 Dec 2025 17:32:54 +0000 Manifest this update: Sat 20 Dec 2025 17:32:54 +0000 Manifest next update: Sat 27 Dec 2025 17:32:54 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: Owiw4CpXOzq7lAumyWDCP/e1u9aivtkpfbE8SvWU6NA=) 2: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: bubDAyNTv3SrURQ57IlrP+BsnMnB0ZguwTBhf+r4Z54=) 3: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: M//W1UwKYdpgfzirMsSYlccdpo+EbdrSiaWLAUJYdus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3557 (0xde5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Dec 20 17:32:54 2025 GMT Not After : Dec 27 17:32:54 2025 GMT Subject: CN=6946ddc6-4bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f9:d7:8a:96:d2:ed:3c:a3:8e:fc:a7:c1:a6: 16:7f:0c:f2:42:07:26:7f:eb:ab:64:db:2e:15:44: b6:d9:59:05:67:ed:6e:91:0e:4a:3f:d3:44:64:fd: f5:93:49:b2:e1:c0:de:6a:09:9c:34:67:6d:0d:13: 60:fe:7c:16:99:46:2d:f6:26:67:ed:16:98:40:b7: 16:96:0e:34:5f:a9:8f:d7:2a:cf:38:ea:c8:13:24: e4:25:04:25:cc:4a:61:40:ed:61:70:a4:58:e9:0d: ef:33:8b:ff:d6:c1:97:7e:d6:ca:c0:05:51:5e:c0: 2f:e8:70:1c:d9:71:79:04:1b:ab:a1:f4:a8:1b:22: a0:26:99:36:68:c0:75:eb:37:16:1c:3a:7a:ed:69: 68:07:9c:ab:1e:e7:3f:ec:09:6b:8f:9a:c2:c3:b6: 5c:30:b0:df:f1:f9:b9:24:4f:39:a7:07:46:90:a7: 44:bf:23:b2:d5:b1:72:e1:bf:e2:ec:19:94:12:e3: c1:38:24:f0:a6:0f:ac:18:0f:e5:16:0f:3e:51:18: 14:95:1d:e8:89:b7:4f:0f:66:23:cd:21:9e:fb:ae: 73:62:15:c5:3e:ad:75:56:7c:af:1a:53:19:3b:a2: 16:9d:54:5f:fa:db:bd:7f:0c:92:f9:a3:fb:11:ca: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EF:57:3F:E7:73:22:FB:B7:CE:42:E4:2C:14:2E:E5:00:64:A7:C3 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:cb:f0:1a:4f:43:2b:cc:ac:c2:30:b1:4a:81:a4:cc:cd:df: 4e:4c:a0:18:7b:31:24:ba:e2:78:d5:22:51:86:c6:db:89:03: f9:0a:fd:3c:f8:31:f4:86:6a:df:df:dc:ac:fa:47:fe:b7:c1: 97:02:a4:dc:27:d7:e5:9a:a5:86:97:b2:a7:27:62:52:f1:67: 00:3c:72:38:91:07:11:8a:f9:53:7b:44:3a:d3:88:a0:d6:17: 03:ff:83:51:65:b8:09:0f:e4:e9:05:7b:4c:42:cb:55:23:f1: 70:ab:38:e3:ae:05:cb:dc:1a:a4:32:ff:64:d5:d7:a5:5b:6d: 7e:36:bc:bf:ef:b6:91:a0:4b:73:2c:5e:3c:c4:bc:a1:c5:14: d4:cb:af:6e:69:38:03:56:4c:70:e2:ec:1d:fd:c4:50:ac:91: 9f:3d:0f:71:45:d0:7e:df:46:97:84:58:6b:78:23:f4:8f:67: 89:43:02:01:a3:4d:bf:35:40:fa:e8:08:69:e9:8f:af:37:8a: 17:60:50:fc:ac:16:50:f1:05:c2:e7:75:5f:f2:75:3f:a5:64: 7a:77:91:da:99:60:35:78:dd:2a:60:eb:b5:f1:9a:f0:80:dd: 68:d3:c0:fa:57:df:23:53:d2:23:57:37:36:e0:82:a9:6a:34: 03:4c:51:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjUxMjIwMTczMjU0WhcNMjUxMjI3MTczMjU0WjAYMRYwFAYD VQQDDA02OTQ2ZGRjNi00YmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PnXipbS7TyjjvynwaYWfwzyQgcmf+urZNsuFUS22VkFZ+1ukQ5KP9NEZP31 k0my4cDeagmcNGdtDRNg/nwWmUYt9iZn7RaYQLcWlg40X6mP1yrPOOrIEyTkJQQl zEphQO1hcKRY6Q3vM4v/1sGXftbKwAVRXsAv6HAc2XF5BBurofSoGyKgJpk2aMB1 6zcWHDp67WloB5yrHuc/7Alrj5rCw7ZcMLDf8fm5JE85pwdGkKdEvyOy1bFy4b/i 7BmUEuPBOCTwpg+sGA/lFg8+URgUlR3oibdPD2YjzSGe+65zYhXFPq11VnyvGlMZ O6IWnVRf+tu9fwyS+aP7EcqODwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnvVz/n cyL7t85C5CwULuUAZKfDMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIy/AaT0MrzKzCMLFKgaTMzd9OTKAYezEkuuJ41SJRhsbbiQP5Cv08 +DH0hmrf39ys+kf+t8GXAqTcJ9flmqWGl7KnJ2JS8WcAPHI4kQcRivlTe0Q604ig 1hcD/4NRZbgJD+TpBXtMQstVI/FwqzjjrgXL3BqkMv9k1delW21+Nry/77aRoEtz LF48xLyhxRTUy69uaTgDVkxw4uwd/cRQrJGfPQ9xRdB+30aXhFhreCP0j2eJQwIB o02/NUD66Ahp6Y+vN4oXYFD8rBZQ8QXC53Vf8nU/pWR6d5HamWA1eN0qYOu18Zrw gN1o08D6V98jU9IjVzc24IKpajQDTFH7 -----END CERTIFICATE-----Generated at Mon Dec 22 05:12:46 2025 by rpki-client