This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json) Hash identifier: 44qKu7FMT7R4i3cQtg8ey24V6rPYx26A/AAMCQXKtlQ= Subject key identifier: 87:5A:DC:1D:BE:9C:4D:18:73:68:C1:E1:8C:23:0E:B2:CF:78:4A:19 Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Certificate serial: 1389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft Manifest number: 24AA Signing time: Mon 22 Dec 2025 16:41:47 +0000 Manifest this update: Mon 22 Dec 2025 16:41:47 +0000 Manifest next update: Mon 29 Dec 2025 16:41:47 +0000 Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: hfU657RJCHgGfexLgh9Qz2vSDpe5Y7cMH7nKh8yzbzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5001 (0x1389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Validity Not Before: Dec 22 16:41:47 2025 GMT Not After : Dec 29 16:41:47 2025 GMT Subject: CN=694974cb-6496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a7:87:f2:8f:cd:cd:de:98:4d:43:c8:f3:bf: 12:c9:d4:b4:f5:58:84:16:bb:04:2a:5a:f8:60:65: 0f:86:bf:15:0f:6d:8c:50:35:19:65:9a:2c:cf:e8: 4f:de:8e:d1:d1:25:7f:f1:b0:f0:49:bb:18:c8:5d: e0:8e:eb:c8:ea:89:b0:be:0b:e4:6b:df:15:78:be: 40:c3:90:81:77:3f:23:4d:d6:c8:b8:ca:9c:b6:c5: 89:b2:42:09:83:2b:00:70:6b:cb:41:2b:24:d5:2d: af:8f:84:4c:6e:b3:5b:91:60:34:15:e1:75:21:5f: eb:55:69:c8:f8:e1:ce:10:60:58:7b:bb:ce:46:16: 9c:8e:c9:3b:15:3e:6f:1a:c6:6b:31:35:52:51:58: 89:73:50:23:ed:d4:85:2c:3a:b0:6d:ae:5f:ca:20: 81:35:80:ca:68:bf:9e:7d:84:be:04:5b:30:77:0e: 9a:42:6e:48:96:eb:a3:8b:7c:c1:db:d7:c5:19:b6: 03:7b:2b:19:8e:e3:ed:38:a5:e1:95:aa:59:d9:a2: de:67:11:a1:97:85:d8:34:94:9b:f3:1d:07:a4:af: 3e:82:1b:ec:fa:9b:ad:7f:4e:4f:43:6f:9e:95:c7: e5:1e:35:ac:16:c1:c4:c4:bc:1a:78:2b:a9:75:1c: f0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5A:DC:1D:BE:9C:4D:18:73:68:C1:E1:8C:23:0E:B2:CF:78:4A:19 X509v3 Authority Key Identifier: keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:97:00:07:05:f1:a5:85:26:4b:69:3e:7c:7c:fe:6d:c8:1d: 01:37:78:fc:99:af:92:3a:40:8f:28:4d:f2:00:d8:fb:9e:d4: 6c:b4:54:9d:cf:aa:c6:ab:1c:11:18:40:24:d5:dc:46:55:dd: 79:f0:75:35:38:a6:67:a0:db:6f:58:6e:12:aa:b6:c7:ba:7e: 61:bb:75:d6:d1:d6:1b:a3:51:23:95:06:ba:73:9f:20:49:3b: f6:23:5f:7d:1e:1c:a9:b3:39:47:ad:9f:77:36:2a:5a:73:dc: 2b:9a:c2:8f:30:16:64:6b:2c:06:5b:e6:fa:c7:aa:1f:67:0e: e5:a7:2d:8f:c5:7e:fe:92:ca:8a:7c:6f:d9:3d:9c:e2:74:4a: d6:10:41:66:78:c2:eb:c6:c9:bc:5d:88:85:8f:17:55:0a:9b: d6:63:35:15:6d:d7:bb:18:49:65:f1:df:b2:96:d5:4c:e2:7a: d9:46:cb:9f:38:96:d8:d1:c1:78:e1:cc:a5:1c:d1:7b:50:44: 5e:e3:e7:15:5b:59:57:d7:6d:5b:be:64:f7:7f:90:77:13:b1: 8b:d4:42:ce:12:cd:59:7f:4c:23:60:ce:d8:ee:33:6e:ab:2b: 84:d7:b4:57:c0:3b:91:84:85:44:dc:9b:fb:ba:bd:3b:d3:2a: 98:6e:8c:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDNBRDhDMERBNEI1RTEzNDNBMzg0NTQ0QjY0NDAxMTg4 NTI2MEZGMDcwHhcNMjUxMjIyMTY0MTQ3WhcNMjUxMjI5MTY0MTQ3WjAYMRYwFAYD VQQDDA02OTQ5NzRjYi02NDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46eH8o/Nzd6YTUPI878SydS09ViEFrsEKlr4YGUPhr8VD22MUDUZZZosz+hP 3o7R0SV/8bDwSbsYyF3gjuvI6omwvgvka98VeL5Aw5CBdz8jTdbIuMqctsWJskIJ gysAcGvLQSsk1S2vj4RMbrNbkWA0FeF1IV/rVWnI+OHOEGBYe7vORhacjsk7FT5v GsZrMTVSUViJc1Aj7dSFLDqwba5fyiCBNYDKaL+efYS+BFswdw6aQm5Iluuji3zB 29fFGbYDeysZjuPtOKXhlapZ2aLeZxGhl4XYNJSb8x0HpK8+ghvs+putf05PQ2+e lcflHjWsFsHExLwaeCupdRzwawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIda3B2+ nE0Yc2jB4YwjDrLPeEoZMB8GA1UdIwQYMBaAFDrYwNpLXhNDo4RUS2RAEYhSYP8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUwT2poRlJMWkVBUmlGSmdf d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL090akEya3RlRTBPamhGUkxaRUFSaUZKZ193Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUw T2poRlJMWkVBUmlGSmdfd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCElwAHBfGlhSZLaT58fP5tyB0BN3j8ma+SOkCPKE3yANj7ntRstFSd z6rGqxwRGEAk1dxGVd158HU1OKZnoNtvWG4SqrbHun5hu3XW0dYbo1EjlQa6c58g STv2I199HhypszlHrZ93Nipac9wrmsKPMBZkaywGW+b6x6ofZw7lpy2PxX7+ksqK fG/ZPZzidErWEEFmeMLrxsm8XYiFjxdVCpvWYzUVbde7GEll8d+yltVM4nrZRsuf OJbY0cF44cylHNF7UERe4+cVW1lX121bvmT3f5B3E7GL1ELOEs1Zf0wjYM7Y7jNu qyuE17RXwDuRhIVE3Jv7ur070yqYbowq -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:03 2025 by rpki-client