This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json) Hash identifier: 99FK5GeL4lCg5L9Glp+UAS9ozW1Nk8+mwo0AckxMZD4= Subject key identifier: 69:65:EA:7C:FA:02:47:BC:7E:0A:1A:76:FB:03:3E:41:A0:AA:CA:D4 Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft Manifest number: 01D6 Signing time: Sun 21 Dec 2025 02:01:53 +0000 Manifest this update: Sun 21 Dec 2025 02:01:52 +0000 Manifest next update: Sun 28 Dec 2025 02:01:52 +0000 Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: OKTQAFnPQPAuaoECafeQgXvLk7ZED5HE5aEgaVMh4ks=) 2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: Hgvy/rbsLEaWAnrB/PMoMX/RB2XdkdZAeykYpDBMbDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Validity Not Before: Dec 21 02:01:52 2025 GMT Not After : Dec 28 02:01:52 2025 GMT Subject: CN=69475510-bf27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:47:52:0c:31:e6:16:14:fd:57:c4:2b:94: dd:87:a5:84:73:5c:e8:6d:34:e7:42:04:6d:9c:e5: f2:1b:63:56:f0:bc:9a:a4:ff:1b:37:ac:9d:e9:3b: 5d:a1:a9:ed:ed:f3:4e:be:11:70:4c:9b:64:cd:bb: d7:48:0b:7b:c9:bd:c2:14:86:17:f3:c0:36:4a:74: ba:06:4b:86:15:ba:40:ef:e9:34:df:23:63:22:e4: d3:b2:22:ea:a1:39:27:2a:44:cb:b1:5c:4b:2b:b1: 4d:ae:e6:3e:2a:3b:a9:c6:95:31:87:5b:08:64:e2: f1:e0:8c:bc:27:f1:37:f3:4f:1a:0a:7d:04:9b:87: 48:cd:b4:1c:69:0e:de:f3:7f:cb:f3:a1:e3:64:5e: d8:0d:f3:6f:c9:17:e9:86:89:45:bd:14:f1:44:2f: 94:3a:9a:4d:c1:7e:b9:d3:7e:d7:46:5e:50:63:fd: 95:13:dd:6e:e5:b4:86:ce:70:24:5a:88:e5:81:70: 00:db:9c:43:8e:a6:60:50:02:a2:bd:f0:17:46:17: c4:22:de:de:e5:61:10:61:4d:2f:20:e7:ad:cc:66: 14:7d:64:26:ca:47:df:3e:8c:cc:8d:bd:49:05:5c: b7:7b:ac:6f:60:28:09:89:ae:5c:a0:2b:99:02:36: 6e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:65:EA:7C:FA:02:47:BC:7E:0A:1A:76:FB:03:3E:41:A0:AA:CA:D4 X509v3 Authority Key Identifier: keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:75:69:a4:a9:21:98:cd:c0:5e:eb:a8:91:37:74:20:3c:ad: d9:25:03:bf:ff:8f:40:5a:17:e2:8d:1a:aa:13:eb:e1:37:5b: 1d:b4:b8:3d:65:ec:5f:a4:63:86:6f:fd:be:2f:f6:af:1c:1f: ea:96:33:88:c8:85:98:e8:63:84:a5:db:b6:81:67:f5:dc:6f: 8b:e7:05:63:47:2d:dd:bd:67:2e:9a:8a:1a:a8:b3:ac:1e:77: 47:78:0c:63:f5:62:65:65:75:9a:1c:90:5d:91:fa:a8:cf:ef: 3b:52:68:98:c3:cd:10:a2:2b:1e:91:74:e2:37:8e:7b:9d:3f: 90:6f:58:75:ce:68:7f:34:75:0e:d8:05:44:b0:e1:c5:a3:53: 7e:44:65:26:c7:84:37:82:5d:fe:a5:38:7d:a7:d8:58:5a:eb: aa:6c:cf:0f:aa:76:81:6b:f3:b5:81:44:67:34:5a:d5:96:e4: 5b:7c:2c:56:a9:e3:6a:1f:b0:07:9b:85:20:ca:a9:85:67:c5: 8b:75:19:0a:b1:60:02:ca:a1:f0:27:02:c5:80:46:fa:33:29: f0:88:f4:02:9e:84:7d:5c:77:30:73:cc:99:eb:5c:38:55:8b: 64:18:71:b7:9e:58:5a:0a:81:1c:bc:99:fa:ef:50:cd:91:16: 05:b6:23:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyM0IxMTAvBgNVBAUTKEY4MEExN0UxOEUzRjNBMTJGNzUyMzM2NzJFOEFDNjdG ODBFNTJGREYwHhcNMjUxMjIxMDIwMTUyWhcNMjUxMjI4MDIwMTUyWjAYMRYwFAYD VQQDDA02OTQ3NTUxMC1iZjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznZHUgwx5hYU/VfEK5Tdh6WEc1zobTTnQgRtnOXyG2NW8LyapP8bN6yd6Ttd oant7fNOvhFwTJtkzbvXSAt7yb3CFIYX88A2SnS6BkuGFbpA7+k03yNjIuTTsiLq oTknKkTLsVxLK7FNruY+KjupxpUxh1sIZOLx4Iy8J/E3808aCn0Em4dIzbQcaQ7e 83/L86HjZF7YDfNvyRfpholFvRTxRC+UOppNwX65037XRl5QY/2VE91u5bSGznAk WojlgXAA25xDjqZgUAKivfAXRhfEIt7e5WEQYU0vIOetzGYUfWQmykffPozMjb1J BVy3e6xvYCgJia5coCuZAjZu4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGll6nz6 Ake8fgoadvsDPkGgqsrUMB8GA1UdIwQYMBaAFPgKF+GOPzoS91IzZy6Kxn+A5S/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIzQi9EQzQ5QTVGQTBB QjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09oTDNVak5uTG9yR2Y0RGxM OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIzQi9EQzQ5QTVGQTBBQjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09o TDNVak5uTG9yR2Y0RGxMOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATdWmkqSGYzcBe66iRN3QgPK3ZJQO//49AWhfijRqqE+vhN1sdtLg9 ZexfpGOGb/2+L/avHB/qljOIyIWY6GOEpdu2gWf13G+L5wVjRy3dvWcumooaqLOs HndHeAxj9WJlZXWaHJBdkfqoz+87UmiYw80QoisekXTiN457nT+Qb1h1zmh/NHUO 2AVEsOHFo1N+RGUmx4Q3gl3+pTh9p9hYWuuqbM8PqnaBa/O1gURnNFrVluRbfCxW qeNqH7AHm4UgyqmFZ8WLdRkKsWACyqHwJwLFgEb6MynwiPQCnoR9XHcwc8yZ61w4 VYtkGHG3nlhaCoEcvJn671DNkRYFtiPK -----END CERTIFICATE-----Generated at Mon Dec 22 05:38:14 2025 by rpki-client