This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft File: Omhmsd88LltfrK7gwJkrvHiMXQo.mft (raw, json) Hash identifier: SQ/L9tlsMFhpOk2Va4UDpA8lnp6p3bnhMGYoxntLlRg= Subject key identifier: 2A:18:C6:E8:D2:22:B8:D4:C3:A5:3D:4B:4D:9D:D8:29:C5:6A:F7:77 Authority key identifier: 3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A Certificate issuer: /CN=A911A6D6/serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft Manifest number: 01DF Signing time: Fri 19 Dec 2025 01:54:05 +0000 Manifest this update: Fri 19 Dec 2025 01:54:04 +0000 Manifest next update: Fri 26 Dec 2025 01:54:04 +0000 Files and hashes: 1: Omhmsd88LltfrK7gwJkrvHiMXQo.crl (hash: Ancc/VIGZ/RPsBFu7b0UhdWW7+OUf9gg+uQ27b4JQkk=) 2: D4D3B47EA27811EE9C29A256C4F9AE02.roa (hash: QHRHGfrfRtZTCug8O+YvL4h2f3rUlXsvRTX9IxlC4gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A6D6, serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A Validity Not Before: Dec 19 01:54:04 2025 GMT Not After : Dec 26 01:54:04 2025 GMT Subject: CN=6944b03d-9237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dc:54:0a:96:43:54:e2:e7:9b:54:6d:f6:36: cd:50:29:46:11:4a:18:05:06:70:98:f7:af:bb:19: 2b:c5:ac:f4:65:c6:85:d5:1a:f8:e8:83:c9:c1:eb: 9e:39:9c:22:a1:62:03:d6:6c:48:42:f0:e2:09:ff: b4:2b:67:51:c3:d6:94:83:85:83:23:c0:73:07:3b: cd:b7:81:a5:87:f3:e8:69:b6:42:65:23:10:d5:13: 36:ae:d9:28:f2:21:8a:a1:6d:6c:d2:60:06:0a:77: 33:a7:ed:54:ac:69:7e:70:f1:fa:a7:53:ca:ca:c8: 22:67:b9:0e:e9:3a:a4:54:51:64:92:9f:78:d7:2b: f7:13:46:b2:28:2f:5a:e3:18:7c:76:86:4c:78:a3: 0a:5f:75:83:dc:86:16:92:f2:7a:66:38:4b:2f:80: 7f:ba:7c:bf:a7:1c:8d:e9:de:d2:27:4d:46:72:73: 56:0d:20:c7:f8:ed:fd:ba:fd:15:26:c1:49:84:31: 1b:75:e7:ac:ed:8e:8b:f7:d6:ee:13:14:d5:4a:27: ea:2d:9e:e3:94:e8:55:bf:02:6b:bb:df:b4:02:92: 6c:f4:f6:20:fa:89:c2:11:fc:73:f7:3b:d0:ff:44: d0:23:76:96:fe:05:30:7f:8e:35:b6:fd:e9:a2:79: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:18:C6:E8:D2:22:B8:D4:C3:A5:3D:4B:4D:9D:D8:29:C5:6A:F7:77 X509v3 Authority Key Identifier: keyid:3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:05:24:37:c1:4e:16:78:fa:8e:e3:48:1d:b2:2b:f9:03:b3: 81:7d:33:a7:96:ec:ca:72:8d:56:f5:e3:63:ef:60:0a:3d:70: 95:ab:1e:0b:08:b6:d4:a8:da:80:dc:11:70:9e:5e:82:ed:cd: 7f:b9:93:19:63:0f:34:ab:76:e1:3b:2b:6b:7d:4a:fa:3e:2c: 34:21:39:bf:d1:c5:95:25:64:18:8e:41:cd:f4:8d:7d:65:b4: 5c:7b:50:29:65:2f:5d:9d:d0:87:2c:35:c6:35:01:0d:f2:5c: 00:41:77:b3:0c:e0:b9:6a:80:69:5e:96:a1:2c:cb:62:1d:c4: 24:e0:25:05:8c:50:f0:78:2a:1a:b0:ed:aa:70:28:a6:64:a3: 83:ef:29:6f:e2:6e:f8:84:14:89:d6:2d:2a:57:c5:e7:91:4b: a6:2c:0b:fb:28:3b:29:03:f1:0a:43:75:db:10:e6:fe:a6:a0: bf:7a:0e:3f:70:15:82:22:66:6a:83:46:60:a8:04:12:1e:22: d5:3e:14:a2:e9:ec:1a:b3:bb:04:b4:98:76:b9:a6:0e:38:5c: d4:87:17:0d:18:fa:cb:06:30:c9:c6:46:5b:1e:6c:0b:1d:2f: b8:3e:79:95:67:d9:4f:11:3d:a7:cf:17:60:aa:d3:6e:98:bc: b9:a5:d6:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE2RDYxMTAvBgNVBAUTKDNBNjg2NkIxREYzQzJFNUI1RkFDQUVFMEMwOTkyQkJD Nzg4QzVEMEEwHhcNMjUxMjE5MDE1NDA0WhcNMjUxMjI2MDE1NDA0WjAYMRYwFAYD VQQDDA02OTQ0YjAzZC05MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjdxUCpZDVOLnm1Rt9jbNUClGEUoYBQZwmPevuxkrxaz0ZcaF1Rr46IPJweue OZwioWID1mxIQvDiCf+0K2dRw9aUg4WDI8BzBzvNt4Glh/PoabZCZSMQ1RM2rtko 8iGKoW1s0mAGCnczp+1UrGl+cPH6p1PKysgiZ7kO6TqkVFFkkp941yv3E0ayKC9a 4xh8doZMeKMKX3WD3IYWkvJ6ZjhLL4B/uny/pxyN6d7SJ01GcnNWDSDH+O39uv0V JsFJhDEbdees7Y6L99buExTVSifqLZ7jlOhVvwJru9+0ApJs9PYg+onCEfxz9zvQ /0TQI3aW/gUwf441tv3ponlThQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoYxujS IrjUw6U9S02d2CnFavd3MB8GA1UdIwQYMBaAFDpoZrHfPC5bX6yu4MCZK7x4jF0K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTZENi9ERTM0QzE3OEZD ODAxMUVEQTgzODIwNTJDNEY5QUUwMi9PbWhtc2Q4OExsdGZySzdnd0prcnZIaU1Y UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09taG1zZDg4TGx0ZnJLN2d3SmtydkhpTVhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTZENi9ERTM0QzE3OEZDODAxMUVEQTgzODIwNTJDNEY5QUUwMi9PbWhtc2Q4OExs dGZySzdnd0prcnZIaU1YUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsBSQ3wU4WePqO40gdsiv5A7OBfTOnluzKco1W9eNj72AKPXCVqx4L CLbUqNqA3BFwnl6C7c1/uZMZYw80q3bhOytrfUr6Piw0ITm/0cWVJWQYjkHN9I19 ZbRce1ApZS9dndCHLDXGNQEN8lwAQXezDOC5aoBpXpahLMtiHcQk4CUFjFDweCoa sO2qcCimZKOD7ylv4m74hBSJ1i0qV8XnkUumLAv7KDspA/EKQ3XbEOb+pqC/eg4/ cBWCImZqg0ZgqAQSHiLVPhSi6ewas7sEtJh2uaYOOFzUhxcNGPrLBjDJxkZbHmwL HS+4PnmVZ9lPET2nzxdgqtNumLy5pdaG -----END CERTIFICATE-----Generated at Sat Dec 20 00:15:53 2025 by rpki-client