This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json) Hash identifier: UfnQjhMGgsMewexjag8llu9C/YoQ4MswJOKKDT+TH+A= Subject key identifier: B2:69:8E:4E:41:DC:C4:DE:58:8D:5B:31:2C:E0:66:59:92:91:B8:01 Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0A97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft Manifest number: 0A7D Signing time: Wed 10 Dec 2025 18:43:41 +0000 Manifest this update: Wed 10 Dec 2025 18:43:41 +0000 Manifest next update: Wed 17 Dec 2025 18:43:41 +0000 Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: VCc0slqnOq+Uuj2izQ27jQL8w7CImIY4tLwsKtN3Bhg=) 2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: YgLuhvSqEin+i5SUp1az8jMscHcAbxhVSlyBc8B1vlM=) 3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: DPmiaEz6M1OneZ4z1YKj44DcnnHVGKuSYV+vSNBuquw=) 4: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: wxcY42YjsuRVvMQ/m7CB1YYbOqzcrhZ00l1RvoVq8ek=) 5: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: NLByGRv6anI6tIVcb5p+1Xch3v2zcxtkN/xSf48UIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2711 (0xa97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Dec 10 18:43:41 2025 GMT Not After : Dec 17 18:43:41 2025 GMT Subject: CN=6939bf5d-b65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:29:94:55:1c:ab:76:b5:76:19:2c:88:fc: ca:8a:91:7f:7f:a3:73:66:7c:78:ce:1a:74:bd:4f: 1f:d9:15:fd:c6:78:ce:6e:6f:1c:18:1f:23:95:b2: 97:8a:82:c4:18:d4:ed:59:8a:82:ed:23:c5:a8:cc: 20:ca:b8:f4:05:ed:93:fb:a3:17:3f:67:db:5c:a2: 28:eb:9f:3b:93:bc:06:86:6e:a1:51:0f:a7:d0:12: 90:50:29:5b:a8:c4:89:d3:8d:93:a7:04:f8:02:3a: f7:5a:f6:85:96:7f:f5:44:4f:5d:da:9f:1e:09:67: 97:1e:1b:42:a8:0e:fb:14:56:ce:82:5f:c0:c3:62: 66:42:0e:b6:bf:d7:48:3d:c3:bf:38:d9:bb:92:f3: 3c:d4:3e:a7:c5:ee:60:57:24:ed:09:6d:de:c6:85: fb:5a:7e:cc:27:53:35:46:49:44:6a:28:e6:ff:03: e1:15:94:d9:45:b6:77:4e:98:d8:d3:0e:f0:9b:dd: 54:87:f1:85:d3:c5:f2:ba:e6:84:2e:8c:8a:4f:33: 22:e1:ef:98:01:a9:dd:d3:c8:bb:9a:78:09:23:e5: e0:a8:d8:12:9a:15:20:dd:03:b5:bb:8b:67:fb:62: 61:a2:6e:92:4d:4e:92:af:64:0e:a0:c1:12:8a:91: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:69:8E:4E:41:DC:C4:DE:58:8D:5B:31:2C:E0:66:59:92:91:B8:01 X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:14:a1:13:b4:b4:59:75:7a:90:06:01:07:78:63:0e:e2:b1: 80:95:fc:81:97:4e:49:bd:b2:97:b1:7e:40:3d:ec:e7:0a:63: 8b:9a:12:2b:97:98:0d:7b:68:0f:16:70:f9:72:31:73:23:9d: 80:32:1d:9c:74:34:d8:fe:b5:e8:10:bb:f0:15:0e:83:e3:e7: e0:1d:8b:d7:73:06:97:a8:16:34:89:20:bd:6b:e5:b5:75:15: b8:a0:2d:0f:f6:a0:b6:63:03:93:8c:25:24:eb:c9:9c:35:8c: 89:a4:4f:0a:79:ef:58:df:9d:76:2f:aa:42:8b:69:d0:1e:5d: cd:cb:8e:e9:08:ef:b9:fb:9c:62:eb:19:3e:73:fb:ec:20:57: 55:87:8c:22:8f:ac:6c:d2:a7:0d:1f:39:84:3d:53:12:93:de: 94:7a:ce:17:c3:52:05:41:3e:4f:4d:c6:c3:8e:45:73:c8:ca: 38:83:2e:1a:cd:0e:db:7b:69:d3:06:25:21:59:98:32:c2:f9: d6:83:86:56:1b:3e:d3:97:ec:b4:ff:d4:ec:36:2a:98:79:ca: b1:fd:f1:20:ff:79:f4:c4:8d:e9:ff:30:d4:9e:d0:f6:84:51: 57:9b:59:bf:3b:44:ea:12:94:a9:d9:46:47:42:33:0f:8e:aa: 98:dd:22:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjUxMjEwMTg0MzQxWhcNMjUxMjE3MTg0MzQxWjAYMRYwFAYD VQQDEw02OTM5YmY1ZC1iNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WsplFUcq3a1dhksiPzKipF/f6NzZnx4zhp0vU8f2RX9xnjObm8cGB8jlbKX ioLEGNTtWYqC7SPFqMwgyrj0Be2T+6MXP2fbXKIo6587k7wGhm6hUQ+n0BKQUClb qMSJ042TpwT4Ajr3WvaFln/1RE9d2p8eCWeXHhtCqA77FFbOgl/Aw2JmQg62v9dI PcO/ONm7kvM81D6nxe5gVyTtCW3exoX7Wn7MJ1M1RklEaijm/wPhFZTZRbZ3TpjY 0w7wm91Uh/GF08XyuuaELoyKTzMi4e+YAand08i7mngJI+XgqNgSmhUg3QO1u4tn +2Jhom6STU6Sr2QOoMESipFnSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJpjk5B 3MTeWI1bMSzgZlmSkbgBMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht cG5teHRnbHR0blJUb0RxNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAFKETtLRZdXqQBgEHeGMO4rGAlfyBl05JvbKXsX5APeznCmOLmhIr l5gNe2gPFnD5cjFzI52AMh2cdDTY/rXoELvwFQ6D4+fgHYvXcwaXqBY0iSC9a+W1 dRW4oC0P9qC2YwOTjCUk68mcNYyJpE8Kee9Y3512L6pCi2nQHl3Ny47pCO+5+5xi 6xk+c/vsIFdVh4wij6xs0qcNHzmEPVMSk96Ues4Xw1IFQT5PTcbDjkVzyMo4gy4a zQ7be2nTBiUhWZgywvnWg4ZWGz7Tl+y0/9TsNiqYecqx/fEg/3n0xI3p/zDUntD2 hFFXm1m/O0TqEpSp2UZHQjMPjqqY3SKS -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:47 2025 by rpki-client