This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft File: OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json) Hash identifier: AuNehsnJFZbM3nur3sVV9QYMhH28D1A67CdBYeO946g= Subject key identifier: 36:81:E7:19:20:0B:C2:50:EA:B0:23:2F:DF:FD:05:EE:DA:13:B8:77 Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B Certificate issuer: /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft Manifest number: 07 Signing time: Fri 19 Dec 2025 07:03:49 +0000 Manifest this update: Fri 19 Dec 2025 07:03:48 +0000 Manifest next update: Fri 26 Dec 2025 07:03:48 +0000 Files and hashes: 1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: 74tFQg4B4V8Yxy/ocn72ppnVB7C1qsADzLK5O7ptTbA=) 2: 73261D50DBF311F0B2CAB720556F56BC.roa (hash: ywJMDcoKtldr4HOdsn13LtO6Zc7isr0wzrZeQ+VLd08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B Validity Not Before: Dec 19 07:03:48 2025 GMT Not After : Dec 26 07:03:48 2025 GMT Subject: CN=6944f8d5-27ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:b0:d4:fb:9f:06:6d:2b:fd:d6:9b:24:1d: ba:e8:46:e2:b9:00:f3:a5:22:39:78:9a:c0:c5:10: 3f:19:4c:4d:71:b2:02:c6:0f:da:6a:b8:20:65:a6: b6:35:05:8f:e6:eb:c2:73:8d:ad:c5:ba:a0:31:ae: 2e:8e:37:43:89:9c:34:33:40:59:e6:ba:a9:1b:59: e8:3d:b9:b9:7d:06:04:23:a7:39:0e:fb:80:d3:8e: 0a:14:2b:d9:f4:c7:f3:97:b2:f9:5b:75:75:5b:c1: df:04:11:4f:21:3c:80:fb:ab:36:66:a5:3c:40:2f: 8d:1c:fd:b8:3f:28:33:e2:80:f6:d9:e0:3d:27:9f: 55:4e:38:d4:66:88:49:0c:74:ed:9f:08:13:ee:2a: e1:46:b1:88:ec:76:5c:b3:c5:dd:32:82:25:ea:0f: da:b3:91:22:59:65:67:00:25:39:a9:54:a4:53:d1: 40:82:04:5f:62:31:a2:13:c2:96:90:00:f0:62:42: 0b:fd:ff:67:96:47:51:cc:33:f3:f7:48:88:ff:80: be:07:df:77:b3:54:1f:f0:d6:58:00:30:92:41:37: 46:1d:e7:d1:d1:0e:56:73:ff:92:f9:75:28:17:f8: 78:b0:00:a6:29:33:fd:56:3d:14:44:69:91:65:bd: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:81:E7:19:20:0B:C2:50:EA:B0:23:2F:DF:FD:05:EE:DA:13:B8:77 X509v3 Authority Key Identifier: keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:63:42:f6:4f:21:8f:1f:47:74:5e:94:ff:4d:33:32:2c:1a: 22:d7:7a:50:55:9a:2b:ce:72:8d:ad:20:31:b4:2b:f2:12:79: 15:2f:41:5c:22:9c:a6:70:ae:2f:ce:91:3b:9f:bb:59:a6:49: d8:f5:81:1f:30:6c:f5:61:49:43:f1:25:4a:bc:6e:61:76:84: 53:7b:77:00:dc:12:41:d1:ca:f9:7e:67:3b:51:e6:50:11:ec: 93:2e:0f:e7:53:52:b3:b7:76:6f:d2:4b:a5:37:2c:97:54:be: db:8d:08:af:fd:51:a9:46:66:f6:99:93:09:3e:f7:b1:c2:84: 69:7f:a8:c3:f6:82:df:f2:06:b4:dd:f1:e2:14:c2:05:21:94: d0:5c:68:be:08:2e:08:88:49:a1:dc:f5:a6:4d:37:56:44:5d: 5b:9d:78:09:dc:5a:17:4e:c5:98:2d:04:54:14:45:8f:ed:46: 90:de:57:72:1d:50:bd:de:af:84:63:bf:9e:aa:28:4a:6b:ea: fe:68:ad:20:cb:2f:69:72:69:5f:ce:b1:03:ad:1b:2f:e3:b7: 99:b1:21:dd:37:11:13:a4:a5:f8:ec:02:0d:18:d7:b9:f4:ad: d0:cd:b3:67:2f:22:28:82:0c:59:57:aa:39:8e:c7:a7:cf:f0: e3:19:be:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4 QzQyNTExMC8GA1UEBRMoM0ExQjA5NDE5MUZFMzQ3NTM3MTlDMUQ0ODFGMjA4ODVB ODA4QzE2QjAeFw0yNTEyMTkwNzAzNDhaFw0yNTEyMjYwNzAzNDhaMBgxFjAUBgNV BAMMDTY5NDRmOGQ1LTI3ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJgbDU+58GbSv91pskHbroRuK5APOlIjl4msDFED8ZTE1xsgLGD9pquCBlprY1 BY/m68Jzja3FuqAxri6ON0OJnDQzQFnmuqkbWeg9ubl9BgQjpzkO+4DTjgoUK9n0 x/OXsvlbdXVbwd8EEU8hPID7qzZmpTxAL40c/bg/KDPigPbZ4D0nn1VOONRmiEkM dO2fCBPuKuFGsYjsdlyzxd0ygiXqD9qzkSJZZWcAJTmpVKRT0UCCBF9iMaITwpaQ APBiQgv9/2eWR1HMM/P3SIj/gL4H33ezVB/w1lgAMJJBN0Yd59HRDlZz/5L5dSgX +HiwAKYpM/1WPRREaZFlvcZnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNoHnGSAL wlDqsCMv3/0F7toTuHcwHwYDVR0jBBgwFoAUOhsJQZH+NHU3GcHUgfIIhagIwWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDNDI1L0RGQkFFRTE0REJF NDExRjBBOEI1QkY2NDM2NkY1NkJDL09oc0pRWkgtTkhVM0djSFVnZklJaGFnSXdX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2hzSlFaSC1OSFUzR2NIVWdmSUloYWdJd1dzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD NDI1L0RGQkFFRTE0REJFNDExRjBBOEI1QkY2NDM2NkY1NkJDL09oc0pRWkgtTkhV M0djSFVnZklJaGFnSXdXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHRjQvZPIY8fR3RelP9NMzIsGiLXelBVmivOco2tIDG0K/ISeRUvQVwi nKZwri/OkTufu1mmSdj1gR8wbPVhSUPxJUq8bmF2hFN7dwDcEkHRyvl+ZztR5lAR 7JMuD+dTUrO3dm/SS6U3LJdUvtuNCK/9UalGZvaZkwk+97HChGl/qMP2gt/yBrTd 8eIUwgUhlNBcaL4ILgiISaHc9aZNN1ZEXVudeAncWhdOxZgtBFQURY/tRpDeV3Id UL3er4Rjv56qKEpr6v5orSDLL2lyaV/OsQOtGy/jt5mxId03EROkpfjsAg0Y17n0 rdDNs2cvIiiCDFlXqjmOx6fP8OMZviM= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:04 2025 by rpki-client