This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft File: omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json) Hash identifier: n7yfHhMicfsxQczHieqoNBrwaNHUaPSmfyGUeMfELV8= Subject key identifier: AE:23:DE:A3:1C:D0:13:D4:2A:04:12:E0:9F:6A:F5:71:6E:79:B6:60 Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 Certificate issuer: /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft Manifest number: C4 Signing time: Tue 23 Dec 2025 04:51:35 +0000 Manifest this update: Tue 23 Dec 2025 04:51:34 +0000 Manifest next update: Tue 30 Dec 2025 04:51:34 +0000 Files and hashes: 1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: FQkKHhHyvKoDnPvBhGnJhnSa8ZCIa9cSnT9xvHfwjGo=) 2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: JQfh1u+kukwSEqZawoJIJYKiGmFwuaaFjBW+kzrVtks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Validity Not Before: Dec 23 04:51:34 2025 GMT Not After : Dec 30 04:51:34 2025 GMT Subject: CN=694a1fd6-b243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b4:c0:d6:2a:46:a6:97:e4:2a:7e:44:80:5f: 6f:8c:89:34:8d:d8:ad:64:41:99:04:a5:d3:f5:6f: fe:75:cd:a6:ce:71:78:18:6c:08:72:dc:40:db:65: ec:09:a1:03:35:77:65:86:56:a7:f6:b5:dd:c5:ae: b5:22:57:bd:ea:f3:58:e2:32:5f:3c:9d:92:04:14: 4a:fb:04:b1:b4:a2:39:5d:5e:97:47:ed:ee:d9:77: c0:06:d2:1a:45:99:65:05:d4:50:d3:8f:57:97:1c: 9f:f3:6e:5c:9a:1b:fa:a9:30:9c:fe:0c:e0:b8:07: 92:c9:3f:8a:b9:6b:ad:dc:89:d2:85:39:26:b5:d2: aa:24:bb:e8:47:17:75:e1:31:dd:d8:e2:8e:f5:d9: 8a:fc:66:29:e7:94:bf:45:24:c0:db:5e:b6:a8:56: 4f:4d:68:72:a8:4e:9b:06:e2:f4:89:7d:08:d1:d6: a2:88:a5:5f:7d:e0:32:73:33:ef:41:c4:5a:95:35: 62:44:14:5d:8f:5a:56:8a:ae:1c:e8:1f:29:11:a3: 45:36:ad:5b:26:fa:df:46:3b:bb:9f:ac:a1:fe:90: 6e:d8:af:47:8d:45:f2:ca:6f:b1:d6:ba:73:3c:a7: 0f:47:25:97:bb:27:00:7b:1c:bf:53:15:db:18:d5: ad:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:23:DE:A3:1C:D0:13:D4:2A:04:12:E0:9F:6A:F5:71:6E:79:B6:60 X509v3 Authority Key Identifier: keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:64:03:c6:1d:cf:59:fe:96:04:23:1b:ff:b7:a6:6f:fe:11: 90:ba:76:0c:47:68:9f:aa:18:a3:ca:d2:9e:05:d2:e7:1d:71: 97:ca:7a:82:33:59:b3:64:f9:ec:25:01:f1:bc:6b:e6:d8:e5: cd:dc:d0:b8:fa:68:41:3c:99:4c:7a:a0:54:f0:26:81:a0:ed: e3:d4:20:54:f4:10:ca:74:4a:33:46:14:f6:6b:30:c6:a0:36: 25:1e:18:00:49:92:72:3e:86:8a:c6:d6:35:5c:c1:25:78:9b: bb:52:ae:3d:5d:68:41:a7:07:69:38:18:e0:09:d9:76:a0:d6: 7c:8e:c4:29:62:57:74:ec:c0:99:62:74:48:c8:02:fd:98:02: 1a:6e:e5:85:ba:3e:95:3f:85:fe:23:33:44:de:4a:11:35:1f: e3:d9:70:d5:a8:9b:fa:25:aa:27:ef:1b:96:69:22:11:44:4f: ab:2b:d7:c1:9a:7b:f2:11:25:0a:4d:8f:b3:a3:e3:b4:d6:1b: af:4b:64:54:68:24:6f:08:b1:7a:86:89:fd:66:f6:de:6b:83: 4d:7b:cf:87:48:b2:fd:3e:08:96:e4:b6:ad:8e:d4:ab:bf:93: 21:14:21:45:87:fb:35:32:1b:02:01:04:1a:c4:ef:03:aa:9b: 8c:6f:2a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EwQzAxMTAvBgNVBAUTKEEyNjYxNjdBMDRGQUZFRTVBRTFBNTBFMDQ1NzBBRDVG RDQ0RUQ2OTIwHhcNMjUxMjIzMDQ1MTM0WhcNMjUxMjMwMDQ1MTM0WjAYMRYwFAYD VQQDDA02OTRhMWZkNi1iMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLTA1ipGppfkKn5EgF9vjIk0jditZEGZBKXT9W/+dc2mznF4GGwIctxA22Xs CaEDNXdlhlan9rXdxa61Ile96vNY4jJfPJ2SBBRK+wSxtKI5XV6XR+3u2XfABtIa RZllBdRQ049Xlxyf825cmhv6qTCc/gzguAeSyT+KuWut3InShTkmtdKqJLvoRxd1 4THd2OKO9dmK/GYp55S/RSTA2162qFZPTWhyqE6bBuL0iX0I0daiiKVffeAyczPv QcRalTViRBRdj1pWiq4c6B8pEaNFNq1bJvrfRju7n6yh/pBu2K9HjUXyym+x1rpz PKcPRyWXuycAexy/UxXbGNWtQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4j3qMc 0BPUKgQS4J9q9XFuebZgMB8GA1UdIwQYMBaAFKJmFnoE+v7lrhpQ4EVwrV/UTtaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTBDMC80QTJFREM4MEI1 RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91V3VHbERnUlhDdFg5Uk8x cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29tWVdlZ1Q2X3VXdUdsRGdSWEN0WDlSTzFwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTBDMC80QTJFREM4MEI1RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91 V3VHbERnUlhDdFg5Uk8xcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuZAPGHc9Z/pYEIxv/t6Zv/hGQunYMR2ifqhijytKeBdLnHXGXynqC M1mzZPnsJQHxvGvm2OXN3NC4+mhBPJlMeqBU8CaBoO3j1CBU9BDKdEozRhT2azDG oDYlHhgASZJyPoaKxtY1XMEleJu7Uq49XWhBpwdpOBjgCdl2oNZ8jsQpYld07MCZ YnRIyAL9mAIabuWFuj6VP4X+IzNE3koRNR/j2XDVqJv6Jaon7xuWaSIRRE+rK9fB mnvyESUKTY+zo+O01huvS2RUaCRvCLF6hon9Zvbea4NNe8+HSLL9PgiW5LatjtSr v5MhFCFFh/s1MhsCAQQaxO8DqpuMbyoC -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:26 2025 by rpki-client