This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: e5dfI2FbbJDC9VxyfYJ5qD0fcVQ5IMeA3T6Of8p76vo= Subject key identifier: 61:52:85:EF:68:0E:27:C2:6A:CB:28:BB:CE:5F:F2:AD:A3:A3:4B:EE Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: B4 Signing time: Tue 23 Dec 2025 05:12:59 +0000 Manifest this update: Tue 23 Dec 2025 05:12:58 +0000 Manifest next update: Tue 30 Dec 2025 05:12:58 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: Ps7K6DyijzqWCPaXyYr0fqVNnDTCWVLispdW8l/8bZM=) 2: 04241E3222F011F0B021396DC4F9AE02.roa (hash: 9kO0kni7kPsnzaPtvxx9OF7DZQab6VvydwUdZC1SpXA=) 3: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: UodVJEZpG8jo//8K6ghcq6/5J2v+GWRbykcw2y9KJwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Dec 23 05:12:58 2025 GMT Not After : Dec 30 05:12:58 2025 GMT Subject: CN=694a24db-5477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:61:d9:59:b0:94:3c:57:f7:8d:b1:52:e2: eb:45:aa:45:f1:85:8b:54:a3:95:59:f7:c9:6f:dd: 06:25:8b:ec:85:75:66:ce:d3:31:6d:27:ea:1d:6f: ce:db:2d:13:25:86:85:d5:74:72:31:5f:b3:fb:cc: 43:ea:dc:80:57:6b:c3:0f:bd:c3:90:36:ab:e1:ec: 7c:66:9e:11:48:b3:d5:ce:e9:4e:91:6d:a7:65:50: 76:f9:b6:4b:2f:27:18:73:40:33:9c:ba:3e:b9:3a: 51:62:06:4d:ef:09:5f:57:dd:9a:01:df:aa:90:92: de:c9:2c:ee:86:15:3a:fa:ce:22:12:d5:7e:9a:4a: af:38:86:c2:99:80:ab:d3:c9:10:b0:2e:53:a0:6b: 24:6f:0b:3b:fb:13:4f:3d:34:91:5e:cd:c8:89:74: 2f:e9:90:b7:6f:59:05:86:3e:3a:8b:ed:ce:10:63: 89:3d:e0:40:21:b0:95:0c:a7:a0:70:9d:08:4f:cd: 54:f8:ab:4c:a2:6e:fd:f0:df:a9:7a:05:db:5d:0f: 03:85:b0:29:0e:f5:b8:6a:5f:26:1c:b1:b5:9c:9e: d7:86:b9:c2:ac:68:61:3e:03:ee:8f:ea:9b:63:b9: b6:c1:83:c5:15:c4:fe:22:fc:9a:4b:54:3e:71:39: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:52:85:EF:68:0E:27:C2:6A:CB:28:BB:CE:5F:F2:AD:A3:A3:4B:EE X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:53:3c:ab:7b:fe:0c:fc:c2:a9:06:56:1b:e1:a1:f0:b6:08: e8:9a:3a:4d:0a:6d:5b:c1:c3:40:5d:4b:bb:c7:f0:72:09:bf: 2e:df:43:55:e6:60:93:b3:60:06:4b:12:6a:46:6c:cb:fc:7c: ec:5f:b1:18:0e:aa:27:b8:be:38:f5:e7:c5:6c:8a:00:7d:ad: 44:fd:bf:38:9e:90:5f:db:fc:45:aa:e1:8b:6d:d1:69:f3:53: 65:5b:13:f1:0a:e8:bd:f3:30:11:cd:10:cd:bd:ff:34:72:cc: 9d:1e:59:75:8f:d6:8b:fa:16:39:7c:8f:80:98:a4:2e:87:ec: 79:0f:3c:36:48:60:e3:03:36:be:0d:63:67:15:32:85:35:d4: fb:4c:53:b6:f3:22:8a:d6:bd:c4:2b:64:3a:ac:23:b9:3b:d0: ef:c7:ac:ea:c2:c9:d0:0d:d1:5e:ac:21:ec:f5:7d:03:bd:3b: 99:54:ab:bd:23:99:d8:ed:65:64:fb:5f:4d:76:1d:33:81:d0: 64:47:b2:a6:62:14:35:62:a8:46:ee:f6:4c:c9:c6:38:f2:13: 19:14:80:57:df:2e:60:d9:65:0b:32:22:0a:30:ff:fe:7b:4c: bd:2f:85:65:15:50:9a:6b:7c:f7:a4:03:f9:4e:1e:d9:bc:45: 0e:2c:98:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3 MDE2Qzk5MDQwHhcNMjUxMjIzMDUxMjU4WhcNMjUxMjMwMDUxMjU4WjAYMRYwFAYD VQQDDA02OTRhMjRkYi01NDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlaRh2VmwlDxX942xUuLrRapF8YWLVKOVWffJb90GJYvshXVmztMxbSfqHW/O 2y0TJYaF1XRyMV+z+8xD6tyAV2vDD73DkDar4ex8Zp4RSLPVzulOkW2nZVB2+bZL LycYc0AznLo+uTpRYgZN7wlfV92aAd+qkJLeySzuhhU6+s4iEtV+mkqvOIbCmYCr 08kQsC5ToGskbws7+xNPPTSRXs3IiXQv6ZC3b1kFhj46i+3OEGOJPeBAIbCVDKeg cJ0IT81U+KtMom798N+pegXbXQ8DhbApDvW4al8mHLG1nJ7XhrnCrGhhPgPuj+qb Y7m2wYPFFcT+IvyaS1Q+cTlArwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFShe9o DifCassou85f8q2jo0vuMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1 RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBUzyre/4M/MKpBlYb4aHwtgjomjpNCm1bwcNAXUu7x/ByCb8u30NV 5mCTs2AGSxJqRmzL/HzsX7EYDqonuL449efFbIoAfa1E/b84npBf2/xFquGLbdFp 81NlWxPxCui98zARzRDNvf80csydHll1j9aL+hY5fI+AmKQuh+x5Dzw2SGDjAza+ DWNnFTKFNdT7TFO28yKK1r3EK2Q6rCO5O9Dvx6zqwsnQDdFerCHs9X0DvTuZVKu9 I5nY7WVk+19Ndh0zgdBkR7KmYhQ1YqhG7vZMycY48hMZFIBX3y5g2WULMiIKMP/+ e0y9L4VlFVCaa3z3pAP5Th7ZvEUOLJhs -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:18 2025 by rpki-client