This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: QyiAik+HgmHkufVe+t3pbTj93qM1GozUncDPyD36QZE= Subject key identifier: 2E:B2:AF:48:B0:D2:79:50:81:D5:9A:BB:8D:D0:1F:DF:89:B6:CB:0E Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 09B2 Signing time: Mon 22 Dec 2025 19:24:03 +0000 Manifest this update: Mon 22 Dec 2025 19:24:03 +0000 Manifest next update: Mon 29 Dec 2025 19:24:03 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: 67tTugTK+QS3v5B3eO4Ve7AfsykwYSMc4zK9Iq1m5r4=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: MVtlwW2sU7CkBdehjteFY61IQnaVOAPQQ+etloBMPo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: Dec 22 19:24:03 2025 GMT Not After : Dec 29 19:24:03 2025 GMT Subject: CN=69499ad3-0256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:6e:35:7c:7a:9c:3c:15:e0:17:5a:1a:1d: c0:13:04:3f:8e:6d:fb:d5:f2:36:83:6a:6a:d4:ce: fd:d4:34:24:ae:d6:32:cd:76:39:a2:33:bd:0f:db: 10:de:88:d4:59:56:17:fd:b0:f1:c0:fa:ad:90:13: 5b:76:e0:a9:61:b6:b0:a8:66:47:d1:e4:a4:56:58: 91:c2:05:ba:12:32:fe:ec:86:d9:6b:47:72:9a:bd: aa:6d:be:b2:1d:f2:56:ee:70:29:77:8a:e3:dd:d0: 06:12:19:86:95:25:f7:11:8c:e7:da:dc:8c:96:8a: 44:c2:29:7b:c9:0f:13:e3:77:78:bb:ed:9c:cb:0a: 91:19:30:69:b8:20:1b:d5:a6:6d:60:a3:f6:44:f1: e0:9f:c4:bd:e7:47:83:a6:61:0a:8e:d5:79:aa:9e: 91:6a:dc:df:53:5e:c1:17:51:dc:e9:b2:ec:d6:f6: cf:22:00:4c:85:09:b9:f3:26:da:86:b5:bc:e7:f9: 71:ae:df:93:0c:a3:74:3b:b8:f3:92:a6:bb:46:78: 38:a0:be:44:63:8d:3f:8d:d5:1c:bd:61:e2:d6:79: e6:e5:94:0f:5c:89:38:06:c3:2f:f1:50:fb:57:62: 87:96:49:0d:1a:30:21:7e:31:36:d2:55:8f:b8:4c: dd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B2:AF:48:B0:D2:79:50:81:D5:9A:BB:8D:D0:1F:DF:89:B6:CB:0E X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f6:28:ee:43:99:ec:f1:64:af:13:47:b5:d3:4a:f4:a0:99: 3e:82:54:b7:f3:e7:ff:48:ca:e1:86:bc:79:a6:bf:89:7f:69: c1:92:c8:82:86:94:8b:cf:ca:db:48:52:db:38:ca:cf:52:21: 5d:31:3d:a7:3f:e4:8c:19:f8:0c:b5:32:6c:fa:5f:50:e7:e2: b1:87:3e:a5:b1:7c:be:a9:c5:71:1f:b2:63:7c:06:67:e5:e4: 5b:11:1a:f0:14:52:5f:a6:f2:13:4e:b2:78:9f:69:0c:da:87: d1:8c:ad:31:17:5d:5f:d6:30:df:aa:f1:41:df:8e:2b:be:ce: 3f:c9:c2:75:b8:94:cd:41:87:c4:b7:3f:3b:a5:9a:d3:87:55: 9c:09:4d:95:7b:43:84:94:7a:28:8c:ae:23:ee:d4:ea:ef:b7: d5:36:44:f0:db:f8:ee:3f:43:84:51:83:63:5b:dc:fc:ac:9f: 82:55:35:b4:4f:c6:de:f5:06:a2:1e:8c:d7:c9:89:ba:1b:b8: 70:1e:47:bd:5f:72:28:44:42:a9:29:fd:4d:29:ae:65:05:36: e5:1a:0b:22:79:14:97:00:69:71:ec:29:f7:bd:bc:ba:22:42: c3:b0:5b:ce:de:00:0e:1b:1d:9f:f8:9b:f9:e1:fb:88:5c:f5: e3:24:0d:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjUxMjIyMTkyNDAzWhcNMjUxMjI5MTkyNDAzWjAYMRYwFAYD VQQDDA02OTQ5OWFkMy0wMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgluNXx6nDwV4BdaGh3AEwQ/jm371fI2g2pq1M791DQkrtYyzXY5ojO9D9sQ 3ojUWVYX/bDxwPqtkBNbduCpYbawqGZH0eSkVliRwgW6EjL+7IbZa0dymr2qbb6y HfJW7nApd4rj3dAGEhmGlSX3EYzn2tyMlopEwil7yQ8T43d4u+2cywqRGTBpuCAb 1aZtYKP2RPHgn8S950eDpmEKjtV5qp6RatzfU17BF1Hc6bLs1vbPIgBMhQm58yba hrW85/lxrt+TDKN0O7jzkqa7Rng4oL5EY40/jdUcvWHi1nnm5ZQPXIk4BsMv8VD7 V2KHlkkNGjAhfjE20lWPuEzdUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6yr0iw 0nlQgdWau43QH9+JtssOMB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC39ijuQ5ns8WSvE0e100r0oJk+glS38+f/SMrhhrx5pr+Jf2nBksiC hpSLz8rbSFLbOMrPUiFdMT2nP+SMGfgMtTJs+l9Q5+Kxhz6lsXy+qcVxH7JjfAZn 5eRbERrwFFJfpvITTrJ4n2kM2ofRjK0xF11f1jDfqvFB344rvs4/ycJ1uJTNQYfE tz87pZrTh1WcCU2Ve0OElHoojK4j7tTq77fVNkTw2/juP0OEUYNjW9z8rJ+CVTW0 T8be9QaiHozXyYm6G7hwHke9X3IoREKpKf1NKa5lBTblGgsieRSXAGlx7Cn3vby6 IkLDsFvO3gAOGx2f+Jv54fuIXPXjJA3f -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:09 2025 by rpki-client