This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: Yqw3w16dC0eAXSUZmouJ4EnMmM9u+niwMxo019YbFt8= Subject key identifier: BE:9F:87:6E:65:9C:57:C3:A4:83:40:29:68:7D:2C:36:A9:E6:C1:EF Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 01BC Signing time: Fri 19 Dec 2025 02:13:54 +0000 Manifest this update: Fri 19 Dec 2025 02:13:53 +0000 Manifest next update: Fri 26 Dec 2025 02:13:53 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: 1t2oFsl7f0E3oQ1G8kGOdM18CDERsqpxm0/OgeI1TcY=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: z9EaBOoQtdVuIHEm9IdKFd2T44FBt8oNShj0hBUX4to=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: mPLM8pUe2jYc/yGUmyUlykE/dN1LWPP09wTlH7B34ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Dec 19 02:13:53 2025 GMT Not After : Dec 26 02:13:53 2025 GMT Subject: CN=6944b4e2-3de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:35:cf:8a:53:d8:45:44:8b:75:fd:63:5b: 47:e5:08:c3:85:b1:ff:f5:42:ad:d2:fd:1a:79:73: a5:cd:e1:59:29:c9:55:d4:13:c6:c1:f0:65:c9:a4: 6e:7d:22:6a:94:eb:a4:ce:a4:b4:08:af:3e:6d:14: e7:0a:25:90:21:f8:11:d7:ae:11:37:25:f7:a3:08: f3:a9:3c:13:7e:2b:b6:b1:e5:a7:4e:48:22:58:a3: 6e:5d:3f:88:a9:77:92:55:7c:cc:ef:62:93:b1:56: b3:c9:c0:93:0b:b1:e4:0f:96:23:a8:e9:d0:af:e6: e9:f5:ac:7d:75:ba:ee:59:40:7c:2a:91:e6:a4:8d: 50:79:32:7d:05:61:52:52:77:d3:dd:8f:17:cc:5e: 9e:ca:b3:ed:ed:3a:54:aa:27:0c:f5:8a:81:78:32: 15:45:60:1e:77:fd:ef:9f:72:ca:8d:2e:80:ce:e0: db:e2:db:1d:68:9b:87:a7:1d:02:47:42:67:41:cd: 60:ee:ae:21:91:35:ec:a7:65:b3:13:6d:a8:02:26: bf:b6:23:15:a1:78:5d:12:43:c8:fc:2e:7d:3b:b6: fa:ed:e7:16:62:5b:3a:1e:46:b8:bc:67:e5:f2:09: ba:04:e1:63:2b:ff:31:ea:e0:4e:de:05:db:a1:55: 0c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9F:87:6E:65:9C:57:C3:A4:83:40:29:68:7D:2C:36:A9:E6:C1:EF X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:3c:4f:32:7e:cd:ca:da:ec:d2:e0:d2:8b:6a:ec:85:c5:5c: 49:6d:75:9c:7c:2e:9e:5d:21:98:1b:b4:28:42:ba:a9:b7:fd: b6:41:96:15:79:dd:e0:28:b6:2f:54:e8:d1:ed:37:0f:3c:c6: bd:0e:0d:fc:f9:dd:d9:1a:ef:43:f1:15:c5:1e:04:7d:fa:3e: 3a:92:1c:a9:8e:f4:bd:db:0b:bc:95:6f:ce:ac:1f:ad:4e:85: 1c:30:a1:a1:a5:aa:a1:09:d0:22:27:f8:7c:4f:49:07:c1:5e: 77:16:00:d2:94:d1:66:a5:61:84:4b:56:7b:f7:bf:5a:ac:85: fb:74:24:10:21:db:c1:b1:25:8e:a6:0f:57:6c:5d:28:bf:82: 19:b6:63:d2:ff:c2:cb:df:f6:79:e9:87:62:e2:fd:20:88:8b: d0:d9:36:25:ea:82:2f:cc:2b:61:c5:d9:b9:00:df:50:a9:e1: ce:37:53:b0:29:dc:ca:9c:2b:a4:b4:48:45:9b:33:57:53:7a: 6c:e3:74:d4:0f:a6:34:ea:a4:84:60:9d:c5:c4:38:7f:6a:81: 4b:96:ea:9b:a3:f7:61:1f:7c:53:de:97:9d:6c:73:24:5c:f2: ce:9e:7b:4f:f6:7e:a9:50:48:13:b5:75:69:91:7a:61:33:83: c3:3b:3d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjUxMjE5MDIxMzUzWhcNMjUxMjI2MDIxMzUzWjAYMRYwFAYD VQQDDA02OTQ0YjRlMi0zZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8M1z4pT2EVEi3X9Y1tH5QjDhbH/9UKt0v0aeXOlzeFZKclV1BPGwfBlyaRu fSJqlOukzqS0CK8+bRTnCiWQIfgR164RNyX3owjzqTwTfiu2seWnTkgiWKNuXT+I qXeSVXzM72KTsVazycCTC7HkD5YjqOnQr+bp9ax9dbruWUB8KpHmpI1QeTJ9BWFS UnfT3Y8XzF6eyrPt7TpUqicM9YqBeDIVRWAed/3vn3LKjS6AzuDb4tsdaJuHpx0C R0JnQc1g7q4hkTXsp2WzE22oAia/tiMVoXhdEkPI/C59O7b67ecWYls6Hka4vGfl 8gm6BOFjK/8x6uBO3gXboVUM0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6fh25l nFfDpINAKWh9LDap5sHvMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHPE8yfs3K2uzS4NKLauyFxVxJbXWcfC6eXSGYG7QoQrqpt/22QZYV ed3gKLYvVOjR7TcPPMa9Dg38+d3ZGu9D8RXFHgR9+j46khypjvS92wu8lW/OrB+t ToUcMKGhpaqhCdAiJ/h8T0kHwV53FgDSlNFmpWGES1Z7979arIX7dCQQIdvBsSWO pg9XbF0ov4IZtmPS/8LL3/Z56Ydi4v0giIvQ2TYl6oIvzCthxdm5AN9QqeHON1Ow KdzKnCuktEhFmzNXU3ps43TUD6Y06qSEYJ3FxDh/aoFLluqbo/dhH3xT3pedbHMk XPLOnntP9n6pUEgTtXVpkXphM4PDOz3q -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:55 2025 by rpki-client