This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: 7xCatjRG7uXKlZwy14jCYXS7zTvWOLqo4mMKngZH9oc= Subject key identifier: 41:0E:C2:18:16:D8:77:43:C2:68:06:D2:D9:7E:40:9D:B1:33:E7:0F Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 09E5 Signing time: Thu 04 Dec 2025 19:09:41 +0000 Manifest this update: Thu 04 Dec 2025 19:09:41 +0000 Manifest next update: Thu 11 Dec 2025 19:09:41 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: mFUdIdWv6P6UiZpzbvquWOiAbsSMH4k3y3ftEx6I2eo=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: wJNkPrAZnAwunRdATcEif4I0/3DklspHznNyGIiQ8LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Dec 4 19:09:41 2025 GMT Not After : Dec 11 19:09:41 2025 GMT Subject: CN=6931dc75-4455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:63:97:2f:ec:6b:68:e0:ec:d3:a4:db:99:07: 2d:5f:cc:1a:08:ba:0a:6a:db:e5:48:b6:04:ce:c1: 08:0d:9e:32:42:e8:5a:12:6f:ef:c4:9b:bd:4f:54: 05:81:d2:f8:94:19:9e:2c:5d:3c:d6:12:ef:7d:20: 6b:93:13:74:4e:c2:fd:c4:90:04:56:dc:04:81:7d: 3a:87:0a:2a:69:9d:41:e1:e7:a8:13:d1:58:02:2d: 98:bf:7a:11:c7:f3:ad:7d:df:49:68:b3:2c:5d:99: e1:01:3c:a4:da:1e:37:cb:dd:b9:3b:ea:68:68:e3: af:b0:73:a7:dd:8b:d2:a2:eb:f3:b0:ec:7c:af:57: 4c:b3:5d:72:34:cd:93:77:f4:8a:d1:33:d8:dd:93: 00:73:e1:8c:33:d4:ea:e7:3a:7a:a1:82:c8:4e:ba: 2d:dc:45:5d:5a:74:77:aa:43:43:b0:d5:73:fa:1c: b0:b8:14:31:c7:c4:7a:4c:71:7e:99:2a:82:8b:7c: 46:3e:e2:6a:ba:d7:12:d0:a1:94:6f:5c:97:c2:39: 1e:45:db:54:d0:2e:3e:e0:f5:e3:1a:81:6c:57:f7: c9:ee:3f:05:5c:74:ff:e4:79:90:2e:54:39:82:28: fe:79:88:ae:8a:83:77:69:ae:41:8e:f6:71:c5:95: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0E:C2:18:16:D8:77:43:C2:68:06:D2:D9:7E:40:9D:B1:33:E7:0F X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:31:5e:32:03:9a:d3:91:e5:f2:bf:d7:43:ec:7f:05:35:9c: b0:20:69:9d:7e:d4:2a:d7:e9:e7:03:59:73:2d:df:77:14:97: c2:5b:1d:26:94:08:87:9d:71:a9:77:78:d2:59:7a:71:58:19: f6:1c:cd:70:4a:fa:12:cc:25:41:3b:bf:3b:5d:b4:07:9b:54: 0f:2a:4f:5c:ae:33:a3:05:e5:19:cd:47:ff:68:14:f7:dc:b1: 13:3b:00:b7:cd:0b:3c:37:e7:3e:cf:17:44:da:1f:d3:14:bb: d9:81:67:03:d5:35:b6:fc:d9:a2:40:94:74:7e:c0:61:c9:a9: ac:f8:99:b8:da:9e:f3:fc:cf:32:72:b2:1e:0a:70:f0:f8:fb: 0e:05:b6:56:be:21:c0:24:d0:7c:62:d6:9f:a7:b9:a3:c5:59: 41:ba:fb:3f:f5:de:a5:d2:11:dd:c7:3a:d3:b2:9c:30:91:0f: 47:1f:f2:96:65:06:b6:ac:55:fa:a0:21:fa:eb:95:0a:8d:a8: 3f:05:76:32:78:25:fd:0a:0d:6e:90:54:b9:ed:15:f0:c1:9d: 79:26:48:e3:58:58:e7:cc:99:ae:06:98:af:69:0c:92:e7:ef: 4e:04:6b:75:df:e5:54:86:f7:5a:09:10:9f:2a:f2:9d:9c:63: d1:34:26:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjUxMjA0MTkwOTQxWhcNMjUxMjExMTkwOTQxWjAYMRYwFAYD VQQDEw02OTMxZGM3NS00NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmOXL+xraODs06TbmQctX8waCLoKatvlSLYEzsEIDZ4yQuhaEm/vxJu9T1QF gdL4lBmeLF081hLvfSBrkxN0TsL9xJAEVtwEgX06hwoqaZ1B4eeoE9FYAi2Yv3oR x/Otfd9JaLMsXZnhATyk2h43y925O+poaOOvsHOn3YvSouvzsOx8r1dMs11yNM2T d/SK0TPY3ZMAc+GMM9Tq5zp6oYLITrot3EVdWnR3qkNDsNVz+hywuBQxx8R6THF+ mSqCi3xGPuJqutcS0KGUb1yXwjkeRdtU0C4+4PXjGoFsV/fJ7j8FXHT/5HmQLlQ5 gij+eYiuioN3aa5BjvZxxZUtAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEOwhgW 2HdDwmgG0tl+QJ2xM+cPMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPMV4yA5rTkeXyv9dD7H8FNZywIGmdftQq1+nnA1lzLd93FJfCWx0m lAiHnXGpd3jSWXpxWBn2HM1wSvoSzCVBO787XbQHm1QPKk9crjOjBeUZzUf/aBT3 3LETOwC3zQs8N+c+zxdE2h/TFLvZgWcD1TW2/NmiQJR0fsBhyams+Jm42p7z/M8y crIeCnDw+PsOBbZWviHAJNB8Ytafp7mjxVlBuvs/9d6l0hHdxzrTspwwkQ9HH/KW ZQa2rFX6oCH665UKjag/BXYyeCX9Cg1ukFS57RXwwZ15JkjjWFjnzJmuBpivaQyS 5+9OBGt13+VUhvdaCRCfKvKdnGPRNCYD -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:47 2025 by rpki-client