This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft File: 5cOmhsg97m0zv-xUHqy0pKCJknk.mft (raw, json) Hash identifier: EZm7Az8vOql5ZYoPtzk6ZPU11VDfQk8ywE/sIv8clPA= Subject key identifier: 21:10:36:58:D3:46:98:65:8A:D3:01:83:EB:2A:68:C5:85:26:8F:6F Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 Certificate issuer: /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Certificate serial: 1739 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft Manifest number: 172F Signing time: Mon 22 Dec 2025 16:22:10 +0000 Manifest this update: Mon 22 Dec 2025 16:22:10 +0000 Manifest next update: Mon 29 Dec 2025 16:22:10 +0000 Files and hashes: 1: 5cOmhsg97m0zv-xUHqy0pKCJknk.crl (hash: 4p9UhlTM2OZW6Bj7pjMcFoKf6LzU/SC5S4dXOVpZwiU=) 2: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (hash: aM0yH97r/h3xu615cUuk5zwsCFMLHVQ8whXpoG1e1kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5945 (0x1739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AA6, serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Validity Not Before: Dec 22 16:22:10 2025 GMT Not After : Dec 29 16:22:10 2025 GMT Subject: CN=69497032-4255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:31:f3:7d:b5:ce:dd:92:c8:c9:9d:89:7e: ea:31:fb:84:39:50:73:d8:dc:18:5a:c0:df:e5:30: ff:93:47:9e:c8:a7:bc:25:6c:d4:96:0f:ec:ae:be: 7d:37:01:7d:d2:f1:06:8d:40:a7:80:5b:ca:5c:74: 07:f6:4c:55:02:4e:72:ae:56:dd:34:72:c7:3f:05: 40:2f:26:d1:8e:2c:9d:98:56:5c:58:69:fa:3d:67: 31:13:10:36:c0:b4:8d:51:a0:46:3b:1d:45:c5:5f: 56:76:2b:67:01:cf:f3:2b:75:52:45:af:25:d0:e4: f7:6b:16:96:31:41:3b:f0:54:cd:9a:c9:e9:3f:b7: f8:1f:c9:20:7c:1b:3c:03:f3:e3:b6:56:ec:87:b4: d3:c1:e7:2c:87:c8:c7:89:5b:8e:88:fb:83:3c:0d: a6:b1:46:71:28:7c:d4:4a:a2:5a:50:14:6d:b2:b3: 4a:5e:7f:f6:6a:21:8f:71:b7:27:81:2d:8d:b9:c9: 8a:9f:25:96:b0:0a:0b:24:dd:26:43:f3:e8:4c:01: be:b7:d5:8c:41:24:fd:06:a9:05:83:50:4f:51:87: de:ea:f4:14:4e:1e:ef:75:8e:5c:a1:be:ef:59:da: fe:49:7d:39:41:c6:a6:30:38:53:4c:36:aa:0d:e6: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:10:36:58:D3:46:98:65:8A:D3:01:83:EB:2A:68:C5:85:26:8F:6F X509v3 Authority Key Identifier: keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f4:ed:d4:0d:dc:69:2d:5f:49:c2:66:03:11:60:d2:91:f2: 5b:f4:f5:71:96:7d:07:f3:66:8b:8f:87:48:5a:5e:1b:2c:fa: 90:d2:b3:0b:6a:25:d6:b3:ef:61:3d:90:04:4f:cc:2a:ff:f1: d4:19:f6:72:39:8d:00:2c:7c:5c:a5:07:fd:28:5d:34:aa:e0: 11:1c:29:0a:0b:71:e8:c1:cb:96:be:98:35:7e:e6:3e:14:28: 4b:6d:3f:c3:e3:1b:38:7e:c6:93:37:0c:43:e1:34:48:48:5c: 98:9a:2f:e3:c5:2b:d0:cb:4e:c6:fc:3a:3f:b3:5e:05:e8:76: 65:45:2a:34:b1:20:a0:2d:ae:a6:ae:af:f4:af:d7:25:2e:e0: 47:3d:2b:b4:6a:71:18:20:a8:7e:9a:1d:2e:29:14:31:d4:a0: ce:ec:4d:0b:1f:14:39:1e:33:8d:3b:47:7b:0a:fe:de:ea:1f: ef:dd:bc:02:0f:11:32:68:ba:49:1c:27:45:01:47:e8:14:3e: 0e:65:95:91:17:bd:4f:8c:08:cb:d4:19:28:7b:9b:ed:7d:81: b4:3f:f1:42:c8:9d:8d:e7:39:0b:c0:55:36:3a:b4:fe:d6:78: 7f:d5:7b:5b:32:86:bb:ee:fe:c8:b7:a7:51:f0:34:67:1c:3d: dc:63:ab:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0 QTA4OTkyNzkwHhcNMjUxMjIyMTYyMjEwWhcNMjUxMjI5MTYyMjEwWjAYMRYwFAYD VQQDDA02OTQ5NzAzMi00MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpEx8321zt2SyMmdiX7qMfuEOVBz2NwYWsDf5TD/k0eeyKe8JWzUlg/srr59 NwF90vEGjUCngFvKXHQH9kxVAk5yrlbdNHLHPwVALybRjiydmFZcWGn6PWcxExA2 wLSNUaBGOx1FxV9WditnAc/zK3VSRa8l0OT3axaWMUE78FTNmsnpP7f4H8kgfBs8 A/Pjtlbsh7TTwecsh8jHiVuOiPuDPA2msUZxKHzUSqJaUBRtsrNKXn/2aiGPcbcn gS2NucmKnyWWsAoLJN0mQ/PoTAG+t9WMQST9BqkFg1BPUYfe6vQUTh7vdY5cob7v Wdr+SX05QcamMDhTTDaqDebxnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEQNljT RphlitMBg+sqaMWFJo9vMB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1 MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FBNi85QzNEODdFNkY1MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdt MHp2LXhVSHF5MHBLQ0prbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG9O3UDdxpLV9JwmYDEWDSkfJb9PVxln0H82aLj4dIWl4bLPqQ0rML aiXWs+9hPZAET8wq//HUGfZyOY0ALHxcpQf9KF00quARHCkKC3HowcuWvpg1fuY+ FChLbT/D4xs4fsaTNwxD4TRISFyYmi/jxSvQy07G/Do/s14F6HZlRSo0sSCgLa6m rq/0r9clLuBHPSu0anEYIKh+mh0uKRQx1KDO7E0LHxQ5HjONO0d7Cv7e6h/v3bwC DxEyaLpJHCdFAUfoFD4OZZWRF71PjAjL1Bkoe5vtfYG0P/FCyJ2N5zkLwFU2OrT+ 1nh/1XtbMoa77v7It6dR8DRnHD3cY6vT -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:26 2025 by rpki-client