This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json) Hash identifier: LGPjNg00mUonx9Ow0DcIezV4qk3TyOOabf2t1pn8HbE= Subject key identifier: 48:62:C4:F9:F0:34:71:C2:11:12:02:8E:D3:25:24:F4:1D:7C:A7:1E Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft Manifest number: 0A Signing time: Fri 19 Dec 2025 06:58:06 +0000 Manifest this update: Fri 19 Dec 2025 06:58:05 +0000 Manifest next update: Fri 26 Dec 2025 06:58:05 +0000 Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: 3bEFaQ8j7UWGaTg1jlt0/pusl4pyBVOpx/VEbiH8P8U=) 2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: Ohq89QpQ4h6890Ezis7aDeUdxD3YflZSmZSGNInyLts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Dec 19 06:58:05 2025 GMT Not After : Dec 26 06:58:05 2025 GMT Subject: CN=6944f77e-de14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ea:8c:89:51:7b:23:8f:c5:3a:d6:1f:fd:28: cd:1a:35:77:e7:a7:de:8e:5e:e4:d1:77:b9:1f:37: ac:f5:e0:6f:58:0c:d1:dc:0d:80:36:6c:c9:0f:0b: 9e:cc:02:0b:63:9c:d8:c2:c0:66:e2:e0:e6:ae:a9: 67:9c:58:48:cc:89:9b:8e:5f:b3:17:58:94:62:ab: 94:96:0a:3d:17:e4:6c:cf:da:f2:39:96:33:3d:c8: e4:d5:39:9c:f0:3f:45:e4:83:a1:17:bf:f1:d3:79: b2:3b:c9:f8:cc:2d:83:51:59:c2:c5:53:8e:80:59: d2:ba:ba:19:45:1a:9c:1d:83:3f:32:f2:4a:0a:11: 10:d4:0f:a2:df:28:e7:ff:24:05:db:97:1b:93:c4: bc:04:2f:5d:a9:d6:af:ec:8d:99:43:ae:29:aa:34: d3:57:91:3b:77:d2:c5:d7:db:83:96:89:b7:ce:df: d2:1d:49:8f:5b:28:25:bd:a4:be:06:62:76:e0:49: 60:f4:32:af:c6:0a:f9:37:9a:9f:26:37:30:56:91: 28:1b:06:5c:a3:45:61:ed:b9:9c:b8:d9:b1:a5:24: ed:ad:41:62:9c:6b:dd:7a:89:29:40:b0:66:c9:66: 54:e9:fe:56:82:06:05:98:f9:cd:f7:d6:e4:df:de: 1e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:62:C4:F9:F0:34:71:C2:11:12:02:8E:D3:25:24:F4:1D:7C:A7:1E X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:5b:1a:b6:dd:f3:88:e4:61:bf:46:cb:3b:77:93:04:c9:0a: 39:7d:5e:7b:c6:66:74:1e:78:23:de:15:0d:08:9f:a4:ae:ea: bd:2b:c8:0c:af:10:a5:5e:d3:69:9b:fb:2a:79:c1:1e:5c:39: 3c:ae:6c:a8:7c:10:e4:5c:c4:8c:e9:0b:aa:e9:3b:5c:c1:fd: 8e:57:09:d1:77:57:6d:ff:d6:1d:14:4f:07:35:6c:c9:6f:db: 95:91:23:1e:72:3b:e4:88:73:34:dc:4f:20:40:04:5a:7a:69: 63:b6:fd:63:83:32:73:05:8f:29:17:9b:14:bb:76:4e:e5:ca: 7a:f1:fd:0e:48:b0:cf:2e:07:fa:11:83:57:1e:dc:9a:24:a3: a2:d5:c5:0f:85:bb:04:16:90:b0:73:93:95:e7:67:b0:21:c5: 80:ef:12:82:60:0c:c8:4c:fd:04:9a:2b:c1:71:dc:32:e0:34: 30:d4:34:8b:bb:c3:48:d3:d2:a4:cb:2d:90:c2:e7:d7:36:3a: 13:1d:85:44:4d:ab:0a:71:cc:9d:8d:7e:f4:94:58:57:16:2b: e9:9c:2d:f5:f3:2a:56:ed:f1:95:c9:38:0d:e6:3f:ec:46:90: 96:34:7c:8d:a2:1b:74:20:d2:54:ef:ac:bd:be:f2:bc:d6:39: b4:2d:6e:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoMzhCQ0Q0RjlGODNBMUFEMDlCNjg4N0RCRUQ4MDRCMTgw QzNBMTZGQzAeFw0yNTEyMTkwNjU4MDVaFw0yNTEyMjYwNjU4MDVaMBgxFjAUBgNV BAMMDTY5NDRmNzdlLWRlMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCL6oyJUXsjj8U61h/9KM0aNXfnp96OXuTRd7kfN6z14G9YDNHcDYA2bMkPC57M AgtjnNjCwGbi4OauqWecWEjMiZuOX7MXWJRiq5SWCj0X5GzP2vI5ljM9yOTVOZzw P0Xkg6EXv/HTebI7yfjMLYNRWcLFU46AWdK6uhlFGpwdgz8y8koKERDUD6LfKOf/ JAXblxuTxLwEL12p1q/sjZlDrimqNNNXkTt30sXX24OWibfO39IdSY9bKCW9pL4G YnbgSWD0Mq/GCvk3mp8mNzBWkSgbBlyjRWHtuZy42bGlJO2tQWKca916iSlAsGbJ ZlTp/laCBgWY+c331uTf3h4dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSGLE+fA0 ccIREgKO0yUk9B18px4wHwYDVR0jBBgwFoAUOLzU+fg6GtCbaIfb7YBLGAw6Fvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzI0N0I1Q0JBRDAw OTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT0x6VS1mZzZHdENiYUlmYjdZQkxHQXc2RnZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RURGLzI0N0I1Q0JBRDAwOTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RD YmFJZmI3WUJMR0F3NkZ2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAERbGrbd84jkYb9Gyzt3kwTJCjl9XnvGZnQeeCPeFQ0In6Su6r0ryAyv EKVe02mb+yp5wR5cOTyubKh8EORcxIzpC6rpO1zB/Y5XCdF3V23/1h0UTwc1bMlv 25WRIx5yO+SIczTcTyBABFp6aWO2/WODMnMFjykXmxS7dk7lynrx/Q5IsM8uB/oR g1ce3Joko6LVxQ+FuwQWkLBzk5XnZ7AhxYDvEoJgDMhM/QSaK8Fx3DLgNDDUNIu7 w0jT0qTLLZDC59c2OhMdhURNqwpxzJ2NfvSUWFcWK+mcLfXzKlbt8ZXJOA3mP+xG kJY0fI2iG3Qg0lTvrL2+8rzWObQtbi4= -----END CERTIFICATE-----Generated at Sat Dec 20 00:34:37 2025 by rpki-client