This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: h6DUn+17g1ei/ry+8g5FYnT1DmJnEfyC08TqKAOpxqg= Subject key identifier: 10:CF:1D:9B:91:E8:2A:72:6F:40:04:14:0C:C0:31:D0:B5:B0:10:8B Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 0308 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 02FD Signing time: Sun 21 Dec 2025 00:26:22 +0000 Manifest this update: Sun 21 Dec 2025 00:26:22 +0000 Manifest next update: Sun 28 Dec 2025 00:26:22 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: tgVZ33nYuNMKlKLcgw8Ww5hxw/Fop4M9Ig8hQrtmpCM=) 2: 41F88F22042111ED888BB024C4F9AE02.roa (hash: bOo49vshLt+uwGwclaQ/vUkNjrTzsnBMVbUbDnocL6Q=) 3: 42D236F0042111ED888BB024C4F9AE02.roa (hash: Sw/iVVZQKRk2IehEH8KSZSL+WBhl3LKTM/sZZ2FNR28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 776 (0x308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: Dec 21 00:26:22 2025 GMT Not After : Dec 28 00:26:22 2025 GMT Subject: CN=69473eae-55d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:63:49:0d:50:d7:2a:0f:85:0b:dd:29:c4: fc:61:15:f0:e3:cf:b8:8a:26:48:24:1e:1e:04:96: 60:d2:c9:56:dd:68:68:e3:6e:ba:98:a3:ce:6a:bf: f5:84:5e:7b:e5:16:c0:be:61:77:c4:79:54:7d:27: 42:25:82:19:5c:78:14:91:65:97:d6:af:2e:a7:f0: b0:fa:1e:ee:33:1c:04:a8:f4:6a:19:80:af:f1:7b: 65:9c:55:e9:61:e5:79:b7:14:20:20:c2:20:5c:13: 47:bd:a8:0c:94:39:a4:5e:59:c4:3a:0f:fa:7e:1b: 03:44:99:32:85:5a:50:18:45:ca:51:c1:68:96:3c: 87:fb:06:80:f1:74:b1:3b:52:e2:92:9a:62:b1:3a: 92:a6:4b:b7:88:8e:be:e6:6f:22:6a:87:d0:3f:43: fa:01:76:32:b7:8f:16:b8:9b:62:7c:a2:e2:2d:bd: f8:2c:62:8f:c9:c1:62:de:a1:97:43:20:f8:d8:bb: 1e:ad:6d:ec:a4:e8:75:78:a3:df:18:9c:8f:aa:e5: a1:3f:d3:b0:21:35:b4:a0:69:7b:02:07:12:35:3f: 79:c0:ce:aa:01:0c:7c:53:c4:0b:9e:02:e5:55:db: bc:bc:cc:0b:29:66:13:ab:5a:dd:3c:b1:2a:12:93: 9f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CF:1D:9B:91:E8:2A:72:6F:40:04:14:0C:C0:31:D0:B5:B0:10:8B X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:91:d9:18:4a:6a:62:59:fd:5f:a3:91:a5:43:8a:cb:f2:e6: e6:81:1f:5c:14:0a:d7:3b:a5:29:8b:dc:70:83:a0:d3:60:83: 37:b9:92:31:85:61:5b:3e:1a:f8:32:a9:82:96:1f:ff:a3:15: 61:b6:93:75:9d:da:b2:32:53:f4:97:e2:e5:f0:02:4a:db:c5: fc:9e:1e:1b:06:2d:24:9a:92:31:62:ad:84:0f:93:53:7f:43: 72:6a:62:86:80:fe:2f:68:74:51:0e:53:0f:ef:6e:5a:cc:ab: 09:ad:29:7f:a5:ac:d0:fa:e6:24:bb:19:55:27:3a:08:3d:88: 87:7b:e9:82:37:2d:cc:47:d6:c3:72:ca:2a:2e:4a:ed:63:e4: 93:bf:6c:ca:b4:cf:89:08:5b:dd:06:7a:9b:48:aa:7e:6a:d1: ae:1d:03:6f:df:38:a3:8d:45:47:6a:7d:2e:50:ab:fd:c6:7e: 78:29:fc:dc:14:ef:6a:84:a7:c5:f1:65:a1:c1:6c:a0:6a:7d: 86:19:e8:94:fe:4c:36:c1:6f:8f:a5:4d:81:41:38:e4:f0:c4: 3a:1f:20:07:28:84:80:73:4f:79:67:89:75:de:df:e9:3f:2d: d8:48:5a:a0:65:2c:cf:6d:62:94:25:23:86:17:01:65:39:fc: 9e:41:4b:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjUxMjIxMDAyNjIyWhcNMjUxMjI4MDAyNjIyWjAYMRYwFAYD VQQDDA02OTQ3M2VhZS01NWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkZjSQ1Q1yoPhQvdKcT8YRXw48+4iiZIJB4eBJZg0slW3Who4266mKPOar/1 hF575RbAvmF3xHlUfSdCJYIZXHgUkWWX1q8up/Cw+h7uMxwEqPRqGYCv8XtlnFXp YeV5txQgIMIgXBNHvagMlDmkXlnEOg/6fhsDRJkyhVpQGEXKUcFoljyH+waA8XSx O1LikppisTqSpku3iI6+5m8iaofQP0P6AXYyt48WuJtifKLiLb34LGKPycFi3qGX QyD42LserW3spOh1eKPfGJyPquWhP9OwITW0oGl7AgcSNT95wM6qAQx8U8QLngLl Vdu8vMwLKWYTq1rdPLEqEpOfkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDPHZuR 6Cpyb0AEFAzAMdC1sBCLMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCykdkYSmpiWf1fo5GlQ4rL8ubmgR9cFArXO6Upi9xwg6DTYIM3uZIx hWFbPhr4MqmClh//oxVhtpN1ndqyMlP0l+Ll8AJK28X8nh4bBi0kmpIxYq2ED5NT f0NyamKGgP4vaHRRDlMP725azKsJrSl/pazQ+uYkuxlVJzoIPYiHe+mCNy3MR9bD csoqLkrtY+STv2zKtM+JCFvdBnqbSKp+atGuHQNv3zijjUVHan0uUKv9xn54Kfzc FO9qhKfF8WWhwWygan2GGeiU/kw2wW+PpU2BQTjk8MQ6HyAHKISAc095Z4l13t/p Py3YSFqgZSzPbWKUJSOGFwFlOfyeQUuq -----END CERTIFICATE-----Generated at Mon Dec 22 07:51:03 2025 by rpki-client