This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: qfOa2boP6CWfz5FVd+IGq07QGqACMcIIu1cuOMfq5Fc= Subject key identifier: 90:0A:79:2A:B9:67:58:BA:BA:38:5B:41:79:9B:A5:CE:D4:06:18:E8 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 01F4 Signing time: Sun 07 Dec 2025 01:19:46 +0000 Manifest this update: Sun 07 Dec 2025 01:19:46 +0000 Manifest next update: Sun 14 Dec 2025 01:19:46 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: tGj8W8TUJccVGDypeFsNbIzJwMVlqvH5zul2DxiIUVM=) 2: CE65A4E4A57E11EFA1B6E428C4F9AE02.roa (hash: 1SKbx2XsDMYzA80POo6zzafuauDwKbPNh6n7Ob5AjVA=) 3: D0103496FD6611EE9188C568C4F9AE02.roa (hash: PxpNeamT7nJAO8ypf86mF4tTFHjbBgphhBI0WaQ2K6I=) 4: 13D68EB430AB11F0A15DC75AC4F9AE02.roa (hash: 8ceZRP/XUhaUyTjeioD/K4mCivFkQCLXcH6cjJ7JFq0=) 5: E762B166FAF811EE92A3642EC4F9AE02.roa (hash: e/dOTjn5zjRzl7VVF4lYBqEjUR3aP4ajbLKyVpxXtqo=) 6: 803597528D5911F087734E0BC4F9AE02.roa (hash: nE7csU7wzmCX2AbBS7z4n8sEfZSzQpZLx/oSC0wZ/sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Dec 7 01:19:46 2025 GMT Not After : Dec 14 01:19:46 2025 GMT Subject: CN=6934d632-8417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:9e:47:b1:9d:15:34:e3:b0:94:3f:ad:d0: 4f:9e:9c:ca:fe:d7:65:54:35:31:79:ac:a5:32:59: 0e:a5:2b:a8:bd:40:55:fb:54:d2:57:00:d4:0c:f7: 03:9f:4d:54:3a:d4:6b:e7:d2:44:2a:ee:76:97:e2: 36:77:55:68:c8:02:75:58:10:6d:b4:04:f2:31:8b: 7d:8d:e1:77:f7:ad:92:57:36:d8:d0:12:71:30:e4: e1:cd:fa:e1:22:1f:b1:41:5b:2f:9b:2a:b3:c5:2c: ef:d2:9a:4d:4b:dc:04:6d:6e:e9:28:bc:f9:a8:dc: a7:48:24:70:c2:45:60:ad:a2:2c:66:ed:00:51:28: 99:bc:98:d1:d4:e8:14:ef:96:08:1b:19:f8:82:cf: 84:93:6a:61:68:db:d1:23:8a:ac:d6:24:52:08:cf: f6:87:af:4a:d8:db:e0:60:21:a5:5d:a1:5b:ef:2c: ea:b0:36:80:95:af:2f:21:ac:4b:20:d1:48:3c:f0: 18:de:bd:a4:51:ad:5c:47:06:4f:3a:05:4d:fc:7a: df:79:3f:68:f8:c4:75:fe:e3:82:49:bf:8d:68:0d: 6e:85:50:2b:02:14:5d:d8:45:74:3e:62:b4:6f:e0: 7e:8c:42:10:3b:38:38:cd:8b:73:e1:ee:40:a5:5f: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0A:79:2A:B9:67:58:BA:BA:38:5B:41:79:9B:A5:CE:D4:06:18:E8 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:93:be:f3:15:1e:c8:fa:1a:6f:64:59:da:dc:3d:87:55:25: 31:ad:95:62:7a:8f:3b:73:1c:2a:b7:10:16:a9:2f:b0:51:51: ee:8a:7d:07:79:a1:4f:cd:6c:ac:2c:07:ee:c6:60:11:b3:0a: e0:93:bf:49:0f:34:66:e0:f7:69:69:04:04:fe:ca:47:11:14: 6a:10:29:00:ae:0c:ee:5c:22:8a:77:18:19:80:7e:57:d3:71: 64:33:fc:c6:73:0e:83:3e:cd:48:a4:09:f0:81:aa:6f:dd:e8: 26:38:05:16:49:9f:87:9e:23:1d:b2:84:b2:eb:c0:cd:50:7e: 6b:2c:db:99:0e:69:5d:48:32:af:9a:37:4e:6f:ef:26:51:62: 98:cf:a8:b9:ef:04:09:52:e1:74:73:2c:61:37:b6:79:96:86: 48:7a:dc:17:41:eb:a1:b5:8c:4c:38:32:e3:0d:a5:19:9d:94: 23:fd:69:31:7c:12:1c:4e:46:2f:3f:f5:9b:cf:4d:22:85:51: 15:2b:58:c8:74:17:aa:5c:16:2b:5e:4a:d0:43:a6:82:fb:07: c4:e0:e3:73:fd:2a:7b:9f:a9:95:8b:74:9b:b2:94:04:fd:9a: f6:e1:af:f8:b3:d2:5c:36:ed:fc:a9:9e:8f:7c:e5:bb:20:6e: 9f:8d:1f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjUxMjA3MDExOTQ2WhcNMjUxMjE0MDExOTQ2WjAYMRYwFAYD VQQDEw02OTM0ZDYzMi04NDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qKeR7GdFTTjsJQ/rdBPnpzK/tdlVDUxeaylMlkOpSuovUBV+1TSVwDUDPcD n01UOtRr59JEKu52l+I2d1VoyAJ1WBBttATyMYt9jeF3962SVzbY0BJxMOThzfrh Ih+xQVsvmyqzxSzv0ppNS9wEbW7pKLz5qNynSCRwwkVgraIsZu0AUSiZvJjR1OgU 75YIGxn4gs+Ek2phaNvRI4qs1iRSCM/2h69K2NvgYCGlXaFb7yzqsDaAla8vIaxL INFIPPAY3r2kUa1cRwZPOgVN/HrfeT9o+MR1/uOCSb+NaA1uhVArAhRd2EV0PmK0 b+B+jEIQOzg4zYtz4e5ApV8CjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAKeSq5 Z1i6ujhbQXmbpc7UBhjoMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8k77zFR7I+hpvZFna3D2HVSUxrZVieo87cxwqtxAWqS+wUVHuin0H eaFPzWysLAfuxmARswrgk79JDzRm4PdpaQQE/spHERRqECkArgzuXCKKdxgZgH5X 03FkM/zGcw6DPs1IpAnwgapv3egmOAUWSZ+HniMdsoSy68DNUH5rLNuZDmldSDKv mjdOb+8mUWKYz6i57wQJUuF0cyxhN7Z5loZIetwXQeuhtYxMODLjDaUZnZQj/Wkx fBIcTkYvP/Wbz00ihVEVK1jIdBeqXBYrXkrQQ6aC+wfE4ONz/Sp7n6mVi3SbspQE /Zr24a/4s9JcNu38qZ6PfOW7IG6fjR9o -----END CERTIFICATE-----Generated at Mon Dec 8 06:14:26 2025 by rpki-client