This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: 8dlQ0AfXYJSKWdvEbhNTg/uFLavWHgygND7pP3jrbK8= Subject key identifier: CF:48:32:CA:F8:72:F9:F0:F9:D7:BE:7F:B7:48:8B:FD:91:E4:2B:48 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0D0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0CCE Signing time: Wed 10 Dec 2025 17:38:23 +0000 Manifest this update: Wed 10 Dec 2025 17:38:22 +0000 Manifest next update: Wed 17 Dec 2025 17:38:22 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: sRj3aLiGRJC0nBtCrekHaUK4GecGy5P5sd22/b8Y5lo=) 2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: ySE2YBsbAXt0k1PEdiGam1s5GhhHLonIBlG28ashrzw=) 3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 9xj2eLyG/tdesiN53tFy07gS2PXLIBFRo+Pfj6Aj7f4=) 4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: dJZrsN09jQhR1tV/MBGDtF9J2z2S5+/G8ySEaBQlIWI=) 5: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: 5k3lhIIOE5jK/yOHyIZ8i0wDdX2SrJVnqaK6Nl9SYpA=) 6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: 0bKIGEsq8hLfPMAMaZjPiHvxpIZHU52fzssXfn7yiXU=) 7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: DBPGuu5yRvDvP4FC/IjV2H3T+xTKFbXciVMjwanRb/4=) 8: E0848D606F7611EDB491621FC4F9AE02.roa (hash: /EuxmPPRYBaK5xLwAa5WDWDWOcYmzlBlj89Amjexk/E=) 9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: DfS1XhJ0VY2l1Vl6FaTOWiiwrvVb4J6NRESIx8xEXkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Dec 10 17:38:22 2025 GMT Not After : Dec 17 17:38:22 2025 GMT Subject: CN=6939b00f-bc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:10:ee:6b:12:8c:cf:1d:71:b5:0c:16:2b:40: 99:2c:1e:c9:58:f1:13:c4:d1:b5:c6:27:61:bb:4d: d5:10:fe:d1:50:8c:49:d2:91:18:ff:6a:75:49:13: b8:29:c2:85:5f:96:78:57:4d:50:3f:ab:5c:a0:d1: 05:7d:70:cb:9b:23:88:53:dd:0b:af:c1:5c:05:94: 58:40:f6:88:78:72:be:60:02:57:c5:e2:9f:c7:c7: 07:cc:ea:df:99:58:e6:0e:4c:0f:ce:c2:4d:9f:a1: 8a:34:aa:2c:d3:dc:ad:f7:ae:d2:79:d6:07:80:44: aa:20:c2:22:6d:f1:b6:2b:73:b6:cb:ea:11:e9:05: f5:76:26:7c:6f:82:72:40:64:07:01:59:df:1f:b0: 21:94:3a:db:fb:da:5e:1d:6f:b7:09:bd:57:85:54: 58:2d:1c:a5:b1:af:78:26:b7:e1:0c:65:ab:fb:52: 2e:99:66:2f:7b:64:a8:00:4a:60:de:c1:f9:45:ca: b4:dd:a7:de:61:ca:21:e6:c3:11:06:f5:ad:ff:94: 27:79:26:9c:26:ce:07:9a:43:23:3f:25:39:9a:7c: da:e5:3e:f4:06:29:5f:9a:98:8e:55:e3:5a:8f:8a: a1:d9:a5:d9:ed:3a:12:59:8c:4b:3c:19:52:43:9b: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:48:32:CA:F8:72:F9:F0:F9:D7:BE:7F:B7:48:8B:FD:91:E4:2B:48 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:01:a1:85:5e:b0:62:4b:7c:3b:d4:77:90:23:39:f5:13:6b: ba:a6:b2:92:88:09:42:61:42:9d:d0:dc:ac:f5:6e:59:28:42: be:e5:63:c7:1d:01:75:e0:6d:50:d4:65:a7:26:fb:ca:fd:88: f7:9c:dd:b4:0a:c0:8a:be:93:8e:8c:7e:36:16:ca:ca:4e:e2: b9:98:d2:4c:0f:72:fa:68:6b:c9:13:a2:c3:e3:c5:df:41:9b: 95:22:87:04:ea:11:63:c3:5e:d7:7b:b3:f7:13:31:d6:6f:59: 66:92:c4:39:f9:4f:4c:b6:78:5d:57:17:bd:70:40:b3:2c:d7: 2a:8b:f5:25:3e:22:90:91:f8:46:90:7f:e1:9d:94:cd:15:30: 74:17:9a:95:bc:c6:cd:b4:5f:44:47:88:96:99:de:ff:da:5a: 11:5e:d7:ca:e1:0a:13:63:a7:56:71:f9:86:37:6f:f9:08:33: 50:02:07:3f:25:f1:50:71:03:b4:1b:b4:7b:99:f5:13:7a:3b: 81:df:86:82:03:dd:76:47:a2:dc:6c:95:1c:e3:b3:d9:a3:7a: 98:c1:33:aa:f6:ce:53:54:f8:a3:5d:cf:1e:2e:16:f6:8b:6f: 6d:20:11:94:21:0b:6d:92:e1:4c:e3:76:20:16:94:e5:65:13: 63:ca:07:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjUxMjEwMTczODIyWhcNMjUxMjE3MTczODIyWjAYMRYwFAYD VQQDEw02OTM5YjAwZi1iYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xDuaxKMzx1xtQwWK0CZLB7JWPETxNG1xidhu03VEP7RUIxJ0pEY/2p1SRO4 KcKFX5Z4V01QP6tcoNEFfXDLmyOIU90Lr8FcBZRYQPaIeHK+YAJXxeKfx8cHzOrf mVjmDkwPzsJNn6GKNKos09yt967SedYHgESqIMIibfG2K3O2y+oR6QX1diZ8b4Jy QGQHAVnfH7AhlDrb+9peHW+3Cb1XhVRYLRylsa94JrfhDGWr+1IumWYve2SoAEpg 3sH5Rcq03afeYcoh5sMRBvWt/5QneSacJs4HmkMjPyU5mnza5T70BilfmpiOVeNa j4qh2aXZ7ToSWYxLPBlSQ5up3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9IMsr4 cvnw+de+f7dIi/2R5CtIMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUAaGFXrBiS3w71HeQIzn1E2u6prKSiAlCYUKd0Nys9W5ZKEK+5WPH HQF14G1Q1GWnJvvK/Yj3nN20CsCKvpOOjH42FsrKTuK5mNJMD3L6aGvJE6LD48Xf QZuVIocE6hFjw17Xe7P3EzHWb1lmksQ5+U9MtnhdVxe9cECzLNcqi/UlPiKQkfhG kH/hnZTNFTB0F5qVvMbNtF9ER4iWmd7/2loRXtfK4QoTY6dWcfmGN2/5CDNQAgc/ JfFQcQO0G7R7mfUTejuB34aCA912R6LcbJUc47PZo3qYwTOq9s5TVPijXc8eLhb2 i29tIBGUIQttkuFM43YgFpTlZRNjygfy -----END CERTIFICATE-----Generated at Fri Dec 12 13:01:08 2025 by rpki-client