This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: J9g2QCuwl3ng9MS/Gur4Il+3MpraRJN5S3hhv4Wru+0= Subject key identifier: 95:7B:A2:88:BE:85:F1:32:A8:1D:B0:28:F8:5D:17:6C:E3:82:21:9A Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: AB Signing time: Thu 04 Dec 2025 21:51:02 +0000 Manifest this update: Thu 04 Dec 2025 21:51:02 +0000 Manifest next update: Thu 11 Dec 2025 21:51:02 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: j7d2W3+3f0UifczbVaTSYEqicWmvcgMrWGsR31s7dEw=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Dec 4 21:51:02 2025 GMT Not After : Dec 11 21:51:02 2025 GMT Subject: CN=69320246-f9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:33:4b:eb:0e:19:ff:d2:41:86:0d:52:25: 14:54:17:c0:1a:14:62:57:5b:b1:f5:3f:2b:83:91: db:3e:74:82:be:f0:d5:1d:e7:a0:66:1f:70:49:b7: a7:3e:c0:df:e9:1d:6d:23:97:ae:65:e5:3c:6a:70: 6b:8c:e3:e0:5c:13:ba:67:89:27:15:65:49:88:da: 26:3b:9c:64:28:5d:d6:66:73:ac:c5:72:d9:c6:7f: cc:df:54:6a:d6:c7:fa:50:ff:1a:f5:fe:5e:22:fc: 45:b8:cd:6e:ea:56:f4:9c:43:04:12:3d:44:1d:5f: f3:58:31:f6:13:36:0d:ad:79:30:16:4c:b1:a4:94: f7:27:e0:74:e9:9f:29:f3:a4:65:51:ab:64:aa:cc: 44:97:c4:f7:8b:ef:97:de:7a:ea:7a:b0:93:44:c1: 46:47:52:81:2c:52:b1:29:b5:30:47:14:13:e7:f2: b2:5a:40:1d:89:f6:17:44:90:8a:1f:4c:aa:b3:9c: 92:e6:35:1b:b8:99:98:c4:05:17:e9:96:d2:fc:f7: c4:a2:8e:50:f4:2b:56:c0:91:59:0f:3d:58:cf:9a: 06:08:bb:19:ca:57:44:85:73:d4:72:4c:cc:a0:9e: b8:dc:40:67:74:4f:e8:04:5a:d6:27:df:c5:10:72: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7B:A2:88:BE:85:F1:32:A8:1D:B0:28:F8:5D:17:6C:E3:82:21:9A X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:88:f4:b1:a4:59:be:ec:ce:f3:fd:a7:c3:71:24:f4:07:d7: 53:3e:e5:67:e0:91:48:14:49:e7:8e:19:d9:4b:cf:24:09:72: 73:2f:18:89:92:aa:b0:14:43:e3:25:0c:86:3d:9b:05:29:a7: be:11:12:6b:89:0d:3e:6c:cc:67:97:39:7e:f3:dd:9a:4f:52: 2f:21:88:70:c9:18:82:fd:2a:88:40:cc:82:78:f4:6c:a0:32: 2b:2c:e5:4b:a9:f7:38:3d:61:4f:db:63:62:c2:57:8d:cf:c5: 4d:d0:fe:04:ee:18:17:43:44:80:73:2d:bc:06:2a:52:60:87: b8:29:c1:ec:46:11:d1:8e:c4:c5:19:6b:36:3e:09:63:17:b5: bd:aa:7c:8c:56:e7:b8:25:1b:ea:2e:88:5b:e0:b4:e5:1d:d9: c6:a2:61:88:2f:aa:2b:42:06:84:ee:b7:ff:68:09:9f:d0:42: 71:e6:8d:ab:da:ae:56:54:2a:fc:f5:1a:2f:15:36:3e:45:d4: a1:44:76:5a:6a:87:1f:23:4b:af:19:33:28:a0:b3:c5:27:42: 73:d4:a7:f9:8b:c5:c9:b7:b3:52:3c:13:7f:7f:93:36:e5:9f: f2:fc:bf:79:7c:1b:43:ba:ed:05:4c:ad:fc:19:06:59:de:0f: ad:8a:6c:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDODMxMTAvBgNVBAUTKEQyODk4QkFEOTI2NzkxQ0UwOTMzQzA5Mjc5REY5Nzk4 RDdERUI2OTQwHhcNMjUxMjA0MjE1MTAyWhcNMjUxMjExMjE1MTAyWjAYMRYwFAYD VQQDEw02OTMyMDI0Ni1mOWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21EzS+sOGf/SQYYNUiUUVBfAGhRiV1ux9T8rg5HbPnSCvvDVHeegZh9wSben PsDf6R1tI5euZeU8anBrjOPgXBO6Z4knFWVJiNomO5xkKF3WZnOsxXLZxn/M31Rq 1sf6UP8a9f5eIvxFuM1u6lb0nEMEEj1EHV/zWDH2EzYNrXkwFkyxpJT3J+B06Z8p 86RlUatkqsxEl8T3i++X3nrqerCTRMFGR1KBLFKxKbUwRxQT5/KyWkAdifYXRJCK H0yqs5yS5jUbuJmYxAUX6ZbS/PfEoo5Q9CtWwJFZDz1Yz5oGCLsZyldEhXPUckzM oJ643EBndE/oBFrWJ9/FEHL53wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV7ooi+ hfEyqB2wKPhdF2zjgiGaMB8GA1UdIwQYMBaAFNKJi62SZ5HOCTPAknnfl5jX3raU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My8yMEE2MTM3RUND OTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtjNEpNOENTZWQtWG1OZmV0 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM4My8yMEE2MTM3RUNDOTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtj NEpNOENTZWQtWG1OZmV0cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWiPSxpFm+7M7z/afDcST0B9dTPuVn4JFIFEnnjhnZS88kCXJzLxiJ kqqwFEPjJQyGPZsFKae+ERJriQ0+bMxnlzl+892aT1IvIYhwyRiC/SqIQMyCePRs oDIrLOVLqfc4PWFP22NiwleNz8VN0P4E7hgXQ0SAcy28BipSYIe4KcHsRhHRjsTF GWs2PgljF7W9qnyMVue4JRvqLohb4LTlHdnGomGIL6orQgaE7rf/aAmf0EJx5o2r 2q5WVCr89RovFTY+RdShRHZaaocfI0uvGTMooLPFJ0Jz1Kf5i8XJt7NSPBN/f5M2 5Z/y/L95fBtDuu0FTK38GQZZ3g+timxO -----END CERTIFICATE-----Generated at Sat Dec 6 23:04:24 2025 by rpki-client