This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json) Hash identifier: O56Bp/X4k42+Glv/oXad//sjRp8MqpXh/MsMLvdmj2I= Subject key identifier: 73:9B:C4:A8:B3:B9:66:2C:DA:CB:8D:BD:76:D1:D4:4C:D6:CA:6F:8A Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft Manifest number: 01DE Signing time: Fri 19 Dec 2025 02:15:26 +0000 Manifest this update: Fri 19 Dec 2025 02:15:26 +0000 Manifest next update: Fri 26 Dec 2025 02:15:26 +0000 Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: 1qWk+GIm3svXilAHisZcZTJWK58sOCf8Pi4qWRlgXvk=) 2: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: wpnmGkguzd61ngA1alk/0gWu0+VGdOnX4QN2iRz/PDY=) 3: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: hs4pbkMdAj+D2UuqPGCvCOhNIxOm0iHH3n26RgqYzp4=) 4: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: czjAqWQeWsyu/4wi/BZHeovzI0scnOJ//P4FWGc4nUs=) 5: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: jnn+3+ad82Cn/wKtacQrT2BVd7Rq7+SYdgr+JJUl5yM=) 6: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: pk4iRSrrvtFGqra4UOtTwUERBl9wGLn18X+I8xUeZuo=) 7: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: 2oxGf1eF2vMP7e/KYqIXBpkCvgOIzwtv4aEoBWiSHEE=) 8: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: 9VTaK6okqIJvF9II2cb927AcLgrTqA9SlI29NpkDXFQ=) 9: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: GBGetP5iCb9tsjZGfvDrYFe7zLDfSNoHPSI0qO5wZUo=) 10: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: idXeV/vJmvr27TLb+qveG/iLmKPYdgqQIbqbNOCFSf4=) 11: BA917E94D65F11F090E652930BB43E13.roa (hash: 5VaeoiNxYe7urXj1q43i9rT2qxmYG2ELZC0j1WqZW8k=) 12: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (hash: UGq+JUcju28obC/yCTlpFMjzph+6cUj/s9U2aEaPniY=) 13: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: oVqk1V6SMsFEFFypJZwBJY7tdrNrtjHmcrmlxHpAog8=) 14: FAC35354610611EFB6324A30C4F9AE02.roa (hash: 4eY2s8Kl/roYRAvSuHuq1ezQDh2MWHLHPTeUX63R6yM=) 15: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: kP45XXDunbMIfdqYzPQTlFvypMXpadnSedx4GT1Iwgc=) 16: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: Hll2+0qOoXsNfkp2NoMaxMw6B+0BSvaptL4oOoM252E=) 17: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: UClI42Nc4TAFt2EH/zfcSweF10PqmL7CvHfiL9lPAxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: Dec 19 02:15:26 2025 GMT Not After : Dec 26 02:15:26 2025 GMT Subject: CN=6944b53e-3695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:18:42:d2:98:23:42:02:c7:99:c5:58:32: e3:44:ef:82:fa:4b:6b:5c:d5:ee:1c:84:74:35:83: 72:01:97:00:cf:24:77:08:ce:7f:c3:e8:c3:6d:c3: 04:11:c2:4a:42:b0:cd:bd:1d:22:63:a7:fb:0c:07: a7:21:a0:c5:b2:56:0f:44:20:e2:69:66:c5:0a:51: 9c:ea:07:d6:ea:ef:f7:e5:fa:41:7b:6b:59:b8:a6: 18:0d:23:d8:de:34:9a:14:10:64:92:b2:65:76:33: fd:a7:fa:c3:db:15:78:6e:61:f8:c8:a8:05:aa:18: 4c:fb:ca:db:eb:29:bd:39:bc:8f:3f:ea:df:47:dc: 00:c6:c8:95:38:ed:ba:e8:2a:92:61:91:8b:ff:0e: 1f:2d:83:1c:b5:3b:08:b9:a7:a9:ae:5a:30:23:f9: 8e:a7:ac:c3:c5:89:cd:8e:4d:78:b2:a2:df:11:8e: 62:6a:fb:5b:dd:2a:a7:81:87:ad:36:0f:2f:f6:e8: b9:14:19:7b:44:93:87:ff:1f:93:ec:52:bd:18:9e: 7c:6b:bf:95:15:34:ae:a1:64:e8:d1:6a:a7:4e:17: 85:1c:cd:67:7d:43:29:cd:5f:43:c9:9a:90:81:37: d0:6e:06:91:8a:a3:fe:60:ee:4d:c9:f3:b5:c7:88: e4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9B:C4:A8:B3:B9:66:2C:DA:CB:8D:BD:76:D1:D4:4C:D6:CA:6F:8A X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f4:1d:2b:9e:14:2c:ad:e0:ce:68:43:c2:4b:da:61:a9:55: 30:d0:97:a9:77:e8:81:ae:d0:6a:cf:35:ce:a6:b0:26:72:3d: 63:86:c0:6c:28:72:c1:83:db:6e:ed:d3:e7:a2:c5:e3:0e:13: 39:0f:01:07:9e:31:1b:07:61:65:00:cb:ee:ca:95:29:d1:12: 3f:d7:02:5c:22:3f:b7:22:82:97:61:c7:99:dc:c7:72:57:fc: 75:67:f6:45:35:bd:cb:b1:af:56:5a:99:d5:23:37:a5:ab:49: ea:f7:58:2a:23:e9:97:e3:67:42:1d:a1:38:8c:c4:b6:87:98: 83:7d:cf:50:c3:4c:64:99:18:95:2d:e1:a1:ce:b7:78:08:2c: e5:69:c8:4c:cb:44:47:59:b0:9c:34:04:11:61:9f:c4:de:6e: 43:d1:43:33:46:bd:1f:5f:ca:e7:3d:b6:f9:f7:7d:31:7c:50: 1b:62:3b:6d:7c:ed:c8:78:b6:48:69:14:ad:4f:ad:cd:f3:27: e7:3c:2f:de:7f:20:c0:15:45:80:df:9c:91:86:8c:3d:a0:5d: 90:05:2a:d1:b7:99:4a:4e:e4:34:e0:fc:87:96:47:b5:c6:68: 13:a0:66:ed:46:c4:34:71:c6:dd:74:e9:3a:53:46:51:b4:ec: 8c:e5:d5:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjUxMjE5MDIxNTI2WhcNMjUxMjI2MDIxNTI2WjAYMRYwFAYD VQQDDA02OTQ0YjUzZS0zNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPsYQtKYI0ICx5nFWDLjRO+C+ktrXNXuHIR0NYNyAZcAzyR3CM5/w+jDbcME EcJKQrDNvR0iY6f7DAenIaDFslYPRCDiaWbFClGc6gfW6u/35fpBe2tZuKYYDSPY 3jSaFBBkkrJldjP9p/rD2xV4bmH4yKgFqhhM+8rb6ym9ObyPP+rfR9wAxsiVOO26 6CqSYZGL/w4fLYMctTsIuaeprlowI/mOp6zDxYnNjk14sqLfEY5iavtb3SqngYet Ng8v9ui5FBl7RJOH/x+T7FK9GJ58a7+VFTSuoWTo0WqnTheFHM1nfUMpzV9DyZqQ gTfQbgaRiqP+YO5NyfO1x4jkSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHObxKiz uWYs2suNvXbR1EzWym+KMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM2Qy83NUI5OEJGMDM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVm TDl6dTFCT3ZKNngxajJyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv9B0rnhQsreDOaEPCS9phqVUw0Jepd+iBrtBqzzXOprAmcj1jhsBs KHLBg9tu7dPnosXjDhM5DwEHnjEbB2FlAMvuypUp0RI/1wJcIj+3IoKXYceZ3Mdy V/x1Z/ZFNb3Lsa9WWpnVIzelq0nq91gqI+mX42dCHaE4jMS2h5iDfc9Qw0xkmRiV LeGhzrd4CCzlachMy0RHWbCcNAQRYZ/E3m5D0UMzRr0fX8rnPbb5930xfFAbYjtt fO3IeLZIaRStT63N8yfnPC/efyDAFUWA35yRhow9oF2QBSrRt5lKTuQ04PyHlke1 xmgToGbtRsQ0ccbddOk6U0ZRtOyM5dX+ -----END CERTIFICATE-----Generated at Sat Dec 20 21:11:41 2025 by rpki-client