This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: YRAONNGC8arcLumRWWJML3JUYA+A5NJ4+U1iqiA5Qmw= Subject key identifier: E3:94:C5:BA:70:5A:E5:34:DB:8E:18:0B:77:DD:D6:B6:CE:87:BE:36 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: B4 Signing time: Fri 19 Dec 2025 05:12:48 +0000 Manifest this update: Fri 19 Dec 2025 05:12:48 +0000 Manifest next update: Fri 26 Dec 2025 05:12:48 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: 0XitxZVc7B2fp9P12Pz+gyzanfDopEFs1zYqtzQSQ0A=) 2: 7404496836E411F0A95FB239C4F9AE02.roa (hash: WHGMZh9P2RExWIeMMaDkbGi0VRoxW1Iai0A3Zb9yWT4=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: 6GqewoLZaVKTqsSzxgnIGXRwmj2ShKpEerZMfS7j+UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Dec 19 05:12:48 2025 GMT Not After : Dec 26 05:12:48 2025 GMT Subject: CN=6944ded0-2e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:53:83:0d:90:e0:23:0e:33:20:dd:71:fa:49: 63:73:6c:a8:99:25:34:1c:89:2b:97:42:5b:62:92: 5e:88:77:1a:a3:51:47:f8:7a:8c:44:61:66:a0:6c: d8:8a:ed:27:45:8c:f4:11:33:22:71:68:ee:cc:83: 4e:80:15:7a:bc:81:a5:34:aa:bc:49:54:91:87:25: 02:1c:11:2f:b4:13:78:de:41:a3:16:e6:69:34:d9: d3:ce:e5:db:12:f6:a5:d0:a0:ec:c2:6d:ff:65:bc: 89:e0:9a:f6:df:76:41:f8:c5:7d:71:7c:e2:cd:bc: 33:e5:7a:54:10:05:6c:20:0f:2e:09:9d:c2:e9:95: 75:f0:52:a2:a8:2e:73:1f:ff:a5:e7:65:2c:f0:c4: 6d:2f:11:f6:1c:65:d7:64:06:2d:ed:29:0f:47:b7: b8:ff:df:4d:51:09:b3:7b:12:ba:bb:f9:62:d7:45: 84:81:a9:b5:cd:15:ee:15:2f:a4:fb:48:6e:7c:40: 45:67:83:a6:a9:75:d4:86:5b:dc:46:24:25:0a:ae: 83:4b:da:14:23:10:c8:20:d1:0e:e6:18:04:10:d3: 5d:d6:a3:e1:ad:e3:31:c1:93:3b:44:13:24:df:14: fa:6d:e8:93:47:de:44:21:aa:56:2f:ab:ae:8b:98: 86:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:94:C5:BA:70:5A:E5:34:DB:8E:18:0B:77:DD:D6:B6:CE:87:BE:36 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d7:bf:29:79:65:dc:6e:a5:42:a2:54:88:27:71:ed:2c:00: b2:ab:af:e5:0f:af:a4:bd:15:37:3b:4d:82:49:bd:26:38:05: 09:6b:10:2f:90:3a:5d:c6:a5:53:2e:b7:91:ba:cc:75:0f:43: c5:bb:22:45:c8:29:19:ba:f2:78:83:ec:71:99:30:6f:4f:79: 5f:f1:b2:b3:03:47:c1:72:a9:86:0e:cb:cf:79:73:78:4e:46: f6:6c:9c:79:3c:6c:85:9c:cb:9e:f0:fd:a7:54:0e:51:47:68: af:7b:62:8d:9e:83:a2:ba:5e:25:ad:52:56:61:84:5e:03:c2: 48:9d:a7:2d:3e:37:c9:5c:e9:39:a9:fd:14:24:18:32:42:1e: 3f:98:26:1f:51:c2:5b:12:cc:5b:16:f8:c6:4a:2c:8d:92:8e: f0:ec:18:20:4d:75:df:00:51:90:01:5c:2e:9b:81:8d:16:f3: 77:9d:f4:79:d0:85:67:ff:dd:0e:e6:72:14:2b:c4:c2:2e:ad: f1:2f:45:82:4b:00:ac:19:41:3e:26:58:62:88:6c:dd:fc:f5: 89:4f:f5:03:e9:fd:31:bf:0a:94:ba:d5:9c:0c:c2:7a:53:7f: 41:80:7b:6f:96:88:a8:ba:e7:aa:d5:b3:49:fb:2e:42:e8:1d: a1:bd:6a:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjUxMjE5MDUxMjQ4WhcNMjUxMjI2MDUxMjQ4WjAYMRYwFAYD VQQDDA02OTQ0ZGVkMC0yZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51ODDZDgIw4zIN1x+kljc2yomSU0HIkrl0JbYpJeiHcao1FH+HqMRGFmoGzY iu0nRYz0ETMicWjuzINOgBV6vIGlNKq8SVSRhyUCHBEvtBN43kGjFuZpNNnTzuXb Eval0KDswm3/ZbyJ4Jr233ZB+MV9cXzizbwz5XpUEAVsIA8uCZ3C6ZV18FKiqC5z H/+l52Us8MRtLxH2HGXXZAYt7SkPR7e4/99NUQmzexK6u/li10WEgam1zRXuFS+k +0hufEBFZ4OmqXXUhlvcRiQlCq6DS9oUIxDIINEO5hgEENNd1qPhreMxwZM7RBMk 3xT6beiTR95EIapWL6uui5iGdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOUxbpw WuU0244YC3fd1rbOh742MB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh178peWXcbqVColSIJ3HtLACyq6/lD6+kvRU3O02CSb0mOAUJaxAv kDpdxqVTLreRusx1D0PFuyJFyCkZuvJ4g+xxmTBvT3lf8bKzA0fBcqmGDsvPeXN4 Tkb2bJx5PGyFnMue8P2nVA5RR2ive2KNnoOiul4lrVJWYYReA8JInactPjfJXOk5 qf0UJBgyQh4/mCYfUcJbEsxbFvjGSiyNko7w7BggTXXfAFGQAVwum4GNFvN3nfR5 0IVn/90O5nIUK8TCLq3xL0WCSwCsGUE+JlhiiGzd/PWJT/UD6f0xvwqUutWcDMJ6 U39BgHtvloiouueq1bNJ+y5C6B2hvWq5 -----END CERTIFICATE-----Generated at Fri Dec 19 20:25:34 2025 by rpki-client