This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: DEYoxf+n8ZuuPw6ijJVNeBDqXqfG+/7VPNlwygbczhI= Subject key identifier: E5:8E:02:BA:12:9B:6E:C9:25:EE:00:3F:AB:06:D3:A2:75:2A:A9:C7 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 07A4 Signing time: Mon 22 Dec 2025 20:43:24 +0000 Manifest this update: Mon 22 Dec 2025 20:43:23 +0000 Manifest next update: Mon 29 Dec 2025 20:43:23 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: UySFZKiGGtq8NHsn6CDSbesROg3PgEdkQ/PUXMwPBUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Dec 22 20:43:23 2025 GMT Not After : Dec 29 20:43:23 2025 GMT Subject: CN=6949ad6c-bbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:8a:1f:8c:93:8a:fe:0f:96:9d:ef:7f:78: b5:6b:eb:d2:ea:cc:da:e7:e0:cf:01:30:b9:b0:45: 93:f4:13:37:64:9a:7f:a2:61:eb:5a:1b:87:e9:c1: 2c:06:91:02:82:fc:c9:cd:fa:fe:2e:8f:70:bd:71: fa:c0:58:33:8d:a5:29:4a:88:f9:5c:b5:92:85:50: 32:56:2c:6d:12:42:a6:ae:dd:12:0c:6a:a9:42:b8: 98:46:a1:2b:38:31:c9:25:e8:ee:ac:88:44:2d:70: 1c:6f:f0:1c:f8:dc:e0:ad:b9:4d:7d:31:37:46:bd: 57:ac:88:b0:9b:5a:63:3e:ef:4e:26:52:0f:71:a3: 7b:98:d9:33:a6:8d:52:4f:66:ac:5e:d7:6d:a8:91: 11:29:fe:70:3b:21:6c:ef:d1:12:78:72:af:9e:05: de:71:26:d6:30:69:1f:9b:f2:23:a1:b2:e0:8f:dc: bf:01:18:6c:e1:ce:7e:37:1d:02:5c:6e:d1:d6:d1: bf:48:21:c7:a7:1b:c1:29:7f:a3:ec:4c:b9:9c:9e: 26:23:d6:43:1d:10:42:5a:b9:22:c1:bb:10:1c:91: 70:21:bd:96:29:8b:31:20:c8:23:d4:b0:39:f7:27: e3:8b:73:3e:12:c6:0c:9c:0f:f0:65:9e:7d:e1:6f: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8E:02:BA:12:9B:6E:C9:25:EE:00:3F:AB:06:D3:A2:75:2A:A9:C7 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:05:d4:6a:6b:c4:6b:35:5b:78:85:1b:e0:f5:44:bb:9c:42: 13:08:5e:62:01:44:23:c7:71:63:ef:b8:25:b2:70:e5:a4:6a: 07:38:54:4d:98:77:71:2c:83:ed:10:5f:fa:a1:39:37:f8:10: 4d:9a:73:23:c1:66:de:ae:5a:7d:88:e7:2e:b6:bb:b4:eb:2e: a6:2a:73:b6:16:f2:53:51:f0:ae:2c:a6:be:ec:81:45:f1:44: 70:b8:5c:61:e0:c6:a3:bf:68:ab:09:8e:25:30:b4:ee:af:12: 69:6a:ec:49:24:9e:f9:12:a5:86:35:ff:2c:3c:d7:50:6f:a8: a2:6d:c3:d9:c1:36:82:99:45:39:a3:70:d7:3e:e5:8f:ec:11: d1:93:24:fc:9b:cb:e8:77:5c:35:9b:39:64:36:f2:ba:fa:dc: 5b:aa:69:eb:f5:bb:19:eb:13:9a:58:7c:ac:52:cb:aa:d4:83: f9:d4:bf:8f:45:09:93:71:65:97:17:fe:02:38:82:64:65:af: 90:f8:55:e3:11:da:8d:2d:14:95:bc:ac:ea:c0:18:0e:0b:46: f0:ea:25:ee:b9:38:b4:4b:95:11:0d:9b:c3:87:a4:11:c1:11: a1:93:f3:4c:a4:09:fe:3a:4e:5e:66:9f:42:f1:18:82:c0:d5: d3:26:97:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjUxMjIyMjA0MzIzWhcNMjUxMjI5MjA0MzIzWjAYMRYwFAYD VQQDDA02OTQ5YWQ2Yy1iYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyKKH4yTiv4Plp3vf3i1a+vS6sza5+DPATC5sEWT9BM3ZJp/omHrWhuH6cEs BpECgvzJzfr+Lo9wvXH6wFgzjaUpSoj5XLWShVAyVixtEkKmrt0SDGqpQriYRqEr ODHJJejurIhELXAcb/Ac+NzgrblNfTE3Rr1XrIiwm1pjPu9OJlIPcaN7mNkzpo1S T2asXtdtqJERKf5wOyFs79ESeHKvngXecSbWMGkfm/IjobLgj9y/ARhs4c5+Nx0C XG7R1tG/SCHHpxvBKX+j7Ey5nJ4mI9ZDHRBCWrkiwbsQHJFwIb2WKYsxIMgj1LA5 9yfji3M+EsYMnA/wZZ594W+TVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWOAroS m27JJe4AP6sG06J1KqnHMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcBdRqa8RrNVt4hRvg9US7nEITCF5iAUQjx3Fj77glsnDlpGoHOFRN mHdxLIPtEF/6oTk3+BBNmnMjwWberlp9iOcutru06y6mKnO2FvJTUfCuLKa+7IFF 8URwuFxh4Majv2irCY4lMLTurxJpauxJJJ75EqWGNf8sPNdQb6iibcPZwTaCmUU5 o3DXPuWP7BHRkyT8m8vod1w1mzlkNvK6+txbqmnr9bsZ6xOaWHysUsuq1IP51L+P RQmTcWWXF/4COIJkZa+Q+FXjEdqNLRSVvKzqwBgOC0bw6iXuuTi0S5URDZvDh6QR wRGhk/NMpAn+Ok5eZp9C8RiCwNXTJpfz -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:35 2025 by rpki-client