This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: xYKQ/0jAGwDDMi+TbwLksyxsFi/QojUZl/ijpKLZdoE= Subject key identifier: D2:36:52:4D:66:8F:DC:2E:FF:00:4B:A3:09:9C:DA:98:D9:0A:48:49 Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 09FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 09F2 Signing time: Tue 30 Dec 2025 19:20:20 +0000 Manifest this update: Tue 30 Dec 2025 19:20:20 +0000 Manifest next update: Tue 06 Jan 2026 19:20:20 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: YbuJLeKCL05QbD1VaOlqP6SSKKfLcGz4FX320Z4hGpI=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: wJNkPrAZnAwunRdATcEif4I0/3DklspHznNyGIiQ8LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 19:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2558 (0x9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Dec 30 19:20:20 2025 GMT Not After : Jan 6 19:20:20 2026 GMT Subject: CN=695425f4-6fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:d9:4e:b1:9f:00:e0:6b:98:17:0b:7d:03: 4a:f9:6f:fb:4f:b2:e3:22:ad:e1:e9:0f:42:bd:e2: 1f:47:90:b9:1c:95:6f:93:47:66:27:05:14:88:37: 12:49:1d:71:69:de:b7:f1:24:b1:cc:64:bd:f3:55: 37:bc:44:14:fe:24:6a:b7:50:7d:6f:be:fe:70:fa: 5b:0f:14:b5:ff:1f:14:7e:8d:97:d2:a3:42:5d:17: db:3c:84:60:55:a4:9b:7c:99:11:46:bc:32:72:c1: 77:46:1b:91:0d:c5:0e:c8:28:e0:89:67:93:38:88: ea:49:90:8e:22:a4:a0:1f:c2:03:2a:e2:f7:ea:f9: f6:61:22:b0:2f:fb:e3:b9:78:0d:13:4f:33:54:22: 97:fa:ff:2e:9b:82:e9:fd:4b:56:4c:02:cd:8a:79: 7a:1f:37:68:c6:c4:79:6d:55:02:10:e4:a2:30:7c: 5c:72:8b:60:68:e7:f1:ef:a8:12:05:e7:8f:57:e6: 1b:46:d6:2e:cb:4a:db:14:12:c8:b2:da:b0:b7:f3: df:d1:63:e5:96:60:dc:fa:fe:fc:8c:52:5d:fd:c6: aa:d5:73:46:30:5c:6b:7a:83:c5:f8:b7:71:14:3b: 97:2f:2b:db:18:77:58:22:a9:39:d3:8e:ec:86:40: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:36:52:4D:66:8F:DC:2E:FF:00:4B:A3:09:9C:DA:98:D9:0A:48:49 X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:92:42:f6:03:92:b3:bb:b6:83:71:e3:12:61:c6:15:e9:cc: a5:d2:c2:91:c9:0a:5b:42:c2:f4:1e:b2:e9:94:69:88:a9:84: 3e:2e:6a:cc:c3:19:87:50:32:bb:ba:cc:59:20:a9:60:9a:33: af:63:72:c8:15:41:12:6c:0a:9e:5c:05:10:a2:63:d2:4e:94: 6e:d9:df:55:51:b4:da:cc:9c:1c:50:2f:ab:09:fd:71:e7:00: fb:eb:ec:be:a5:74:d0:b0:41:18:67:9e:1a:83:fb:fd:13:78: 89:db:7c:ea:22:6d:4c:53:e5:e2:94:a0:1b:69:bf:0e:9c:68: df:cd:49:a9:c1:bc:8c:a9:b7:0e:25:af:c7:00:d5:23:e2:80: 43:46:c6:55:5a:4c:5d:4b:11:8d:1c:eb:b8:66:bf:41:ab:d6: 78:e9:6c:dd:61:02:52:88:c1:ad:00:91:a5:f4:07:b2:ff:4f: 85:07:96:75:57:f2:7a:68:d8:ea:18:37:5f:ee:55:44:be:19: 2c:14:96:6a:7e:f6:48:6c:5e:5b:5a:16:7b:55:a7:17:0f:6b: e1:e2:23:43:9b:ca:e0:6f:a5:58:db:ae:98:f9:60:f5:56:74: 3e:ac:54:f9:4f:fa:69:d1:a9:47:bd:ef:d0:e5:11:a5:95:59: dc:24:8f:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjUxMjMwMTkyMDIwWhcNMjYwMTA2MTkyMDIwWjAYMRYwFAYD VQQDDA02OTU0MjVmNC02ZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nrZTrGfAOBrmBcLfQNK+W/7T7LjIq3h6Q9CveIfR5C5HJVvk0dmJwUUiDcS SR1xad638SSxzGS981U3vEQU/iRqt1B9b77+cPpbDxS1/x8Ufo2X0qNCXRfbPIRg VaSbfJkRRrwycsF3RhuRDcUOyCjgiWeTOIjqSZCOIqSgH8IDKuL36vn2YSKwL/vj uXgNE08zVCKX+v8um4Lp/UtWTALNinl6HzdoxsR5bVUCEOSiMHxccotgaOfx76gS BeePV+YbRtYuy0rbFBLIstqwt/Pf0WPllmDc+v78jFJd/caq1XNGMFxreoPF+Ldx FDuXLyvbGHdYIqk5047shkDJ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI2Uk1m j9wu/wBLowmc2pjZCkhJMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/kkL2A5Kzu7aDceMSYcYV6cyl0sKRyQpbQsL0HrLplGmIqYQ+LmrM wxmHUDK7usxZIKlgmjOvY3LIFUESbAqeXAUQomPSTpRu2d9VUbTazJwcUC+rCf1x 5wD76+y+pXTQsEEYZ54ag/v9E3iJ23zqIm1MU+XilKAbab8OnGjfzUmpwbyMqbcO Ja/HANUj4oBDRsZVWkxdSxGNHOu4Zr9Bq9Z46WzdYQJSiMGtAJGl9Aey/0+FB5Z1 V/J6aNjqGDdf7lVEvhksFJZqfvZIbF5bWhZ7VacXD2vh4iNDm8rgb6VY266Y+WD1 VnQ+rFT5T/pp0alHve/Q5RGllVncJI8R -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:23 2025 by rpki-client