This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: 7Z1jZfi2sOfQ6JFOOCKQLfKj2jvn3b3VFHzFdrq6ydI= Subject key identifier: 12:1C:BD:2C:3A:2C:F6:D3:7A:BB:36:08:D8:9D:91:46:14:87:FD:0E Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 0295 Signing time: Fri 19 Dec 2025 00:47:11 +0000 Manifest this update: Fri 19 Dec 2025 00:47:10 +0000 Manifest next update: Fri 26 Dec 2025 00:47:10 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: xTeL35LTkafWXbyTSDi/8apL0F8uBEF8d2OSbG9/2zA=) 2: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: RaDP91UEhN5m0mKcwjFniZyRM8v4oThc8IlQpZodOMI=) 3: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: DvnuXlMxbSeKodLGBkCXBAwAbwtaoOVHkRHtB3pWfw8=) 4: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IctexMIkkmuKRY28It4wmvJrqOn2UvVnqHfHqiMz3qg=) 5: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: iFRRbtQ83DAhQeOuv0x/8D2BoQrQtE9Qr5lou3dWXyY=) 6: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: 5xlmT2kfel1cvCWV/wEirk2FPvjV62JTYKUe5pZJSHw=) 7: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: bTu32emo4oNYJVA1lCeQHupAf6pJqBWu/TVi/rnIfJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Dec 19 00:47:10 2025 GMT Not After : Dec 26 00:47:10 2025 GMT Subject: CN=6944a08f-b154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:a4:6a:07:26:43:5e:10:6a:42:7b:b7:b0: 6d:04:3b:c3:bd:06:97:00:23:c5:80:d2:11:33:f1: 2a:40:ae:67:b9:fa:c6:9f:0d:dc:23:e1:2c:df:56: 3c:63:3e:48:90:4c:02:70:25:83:95:54:fe:04:2b: 64:a7:05:5d:50:19:09:63:a0:6a:9b:0e:6c:36:b6: 8e:fd:dd:99:c8:12:21:b8:e6:af:5b:1c:fa:41:25: 45:19:e4:b4:a2:cd:f2:31:88:d5:09:e7:5a:fc:10: 2f:c3:ff:69:c1:4b:4d:6e:71:54:21:88:57:96:19: f6:b1:ae:19:78:38:5a:99:eb:d1:78:70:0e:23:c8: bd:0b:85:c3:7a:0b:03:78:17:70:9a:c1:9c:84:44: 92:5a:6c:11:d8:af:6e:90:cf:94:75:dc:d1:f2:4d: 58:7b:51:8c:01:30:eb:dc:63:ac:3b:7f:2a:ba:06: f7:2e:c2:15:9b:8d:6f:7c:44:4a:4b:f0:5d:6c:8d: 5c:1b:6d:c0:19:20:b1:35:e1:63:4b:49:0d:23:08: 96:ee:26:db:7f:c7:0e:c6:5a:7d:ab:59:03:7c:7c: 05:9a:8d:8c:65:b5:06:a5:4d:3b:a4:03:ca:c7:e4: b2:83:d7:51:33:15:7b:27:7d:6e:6a:62:5c:f8:fb: d3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1C:BD:2C:3A:2C:F6:D3:7A:BB:36:08:D8:9D:91:46:14:87:FD:0E X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:32:3c:6d:02:79:9d:65:44:92:ad:65:c2:3e:4e:2e:11:dc: 4c:1f:d9:14:fa:e4:6d:8f:24:53:77:0d:e9:99:14:4e:e5:b4: 2b:9d:96:e6:95:72:0c:b9:a4:4f:be:ca:89:00:16:1b:31:b7: 18:2e:1d:92:0f:1c:3e:60:20:ee:2a:e9:19:4d:6d:c7:a8:7f: b7:b7:83:17:9b:09:55:c3:1d:aa:ec:8b:5e:c0:93:39:42:96: c8:dd:5b:b8:bf:fc:20:a4:0d:58:c8:3c:c1:d5:5a:eb:24:94: ba:3f:98:83:73:69:af:36:a6:f9:11:2a:1a:ec:74:ab:25:f7: f1:64:11:ed:9f:a7:5b:88:f7:aa:cc:eb:88:32:c7:17:ed:30: 36:9f:7d:3c:f2:c1:9f:9e:cd:d4:64:cf:b9:70:e5:2a:b2:d3: 85:45:1b:b1:af:92:b4:63:c6:1e:ff:5b:da:0a:8a:cd:75:d2: 45:b5:6a:97:03:42:7f:37:8c:ed:32:d2:45:2b:b1:8b:57:78: 3e:25:29:71:93:3b:44:0f:f2:bc:fd:03:e5:de:fe:6f:2f:6a: 06:0c:35:81:34:b8:56:d7:d3:24:91:d1:90:c7:42:a6:bb:e9: 7f:18:42:ec:3c:ff:27:00:d5:a5:9c:f5:93:b7:4e:c6:67:2b: 8d:95:42:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjUxMjE5MDA0NzEwWhcNMjUxMjI2MDA0NzEwWjAYMRYwFAYD VQQDDA02OTQ0YTA4Zi1iMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaKkagcmQ14QakJ7t7BtBDvDvQaXACPFgNIRM/EqQK5nufrGnw3cI+Es31Y8 Yz5IkEwCcCWDlVT+BCtkpwVdUBkJY6Bqmw5sNraO/d2ZyBIhuOavWxz6QSVFGeS0 os3yMYjVCeda/BAvw/9pwUtNbnFUIYhXlhn2sa4ZeDhamevReHAOI8i9C4XDegsD eBdwmsGchESSWmwR2K9ukM+UddzR8k1Ye1GMATDr3GOsO38qugb3LsIVm41vfERK S/BdbI1cG23AGSCxNeFjS0kNIwiW7ibbf8cOxlp9q1kDfHwFmo2MZbUGpU07pAPK x+Syg9dRMxV7J31uamJc+PvTvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIcvSw6 LPbTers2CNidkUYUh/0OMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3MjxtAnmdZUSSrWXCPk4uEdxMH9kU+uRtjyRTdw3pmRRO5bQrnZbm lXIMuaRPvsqJABYbMbcYLh2SDxw+YCDuKukZTW3HqH+3t4MXmwlVwx2q7ItewJM5 QpbI3Vu4v/wgpA1YyDzB1VrrJJS6P5iDc2mvNqb5ESoa7HSrJffxZBHtn6dbiPeq zOuIMscX7TA2n3088sGfns3UZM+5cOUqstOFRRuxr5K0Y8Ye/1vaCorNddJFtWqX A0J/N4ztMtJFK7GLV3g+JSlxkztED/K8/QPl3v5vL2oGDDWBNLhW19MkkdGQx0Km u+l/GELsPP8nANWlnPWTt07GZyuNlUIO -----END CERTIFICATE-----Generated at Sun Dec 21 00:11:31 2025 by rpki-client