This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
File: 0KOmnirBDCwQU_cvdJlH7CK5w80.mft (raw, json)
Hash identifier: hzmZ3ir92lJPgrXA4B0hJK9e6UDxw6CG8U23KbkjwUg=
Subject key identifier: BD:45:62:05:2B:47:CD:74:9E:26:24:59:68:DC:5B:A5:56:27:A7:8E
Authority key identifier: D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD
Certificate issuer: /CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
Certificate serial: 0A6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
Manifest number: 0A5D
Signing time: Sat 20 Dec 2025 19:09:01 +0000
Manifest this update: Sat 20 Dec 2025 19:09:00 +0000
Manifest next update: Sat 27 Dec 2025 19:09:00 +0000
Files and hashes: 1: 0KOmnirBDCwQU_cvdJlH7CK5w80.crl (hash: r7keSqp3vC5gTiDQNOT4DX6t42B0uxj2epwKYsBuMoU=)
2: 077A609E183911EB9C11C27CC4F9AE02.roa (hash: 3+/t3J2iluPwHXxOgZE7j6ggbnPpq8pNrSyJFTrrBZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl
rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180758, serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
Validity
Not Before: Dec 20 19:09:00 2025 GMT
Not After : Dec 27 19:09:00 2025 GMT
Subject: CN=6946f44d-1cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:18:b9:ad:ed:75:b5:9b:cd:50:c8:3a:c5:
4d:ab:35:91:73:b6:0e:ea:9b:8d:ed:01:8c:c4:2f:
2d:15:bd:3a:71:14:52:11:b1:97:02:41:47:b3:3e:
8a:c8:3b:2d:23:b5:a6:1a:3c:ac:b6:e5:ec:1c:98:
ef:88:48:31:54:0f:f5:cf:56:1d:59:65:ad:c0:78:
27:56:cf:4b:63:e2:58:c0:d8:01:a7:72:f6:11:a1:
cf:be:1b:cf:94:0c:d5:ad:42:48:20:3d:2c:07:44:
90:ae:08:b0:ea:8b:ca:c2:85:90:f0:4a:6f:ad:e2:
02:3e:74:40:58:48:be:be:5a:9d:bf:3f:5a:fd:81:
5c:4e:4c:0e:2c:2f:64:df:d4:56:7e:ea:2d:19:f0:
d1:30:94:0a:ff:54:78:03:e2:73:dc:be:94:2c:8b:
e5:1b:3a:5b:52:93:07:1a:c3:08:bf:f5:e8:a5:5f:
15:6c:54:4e:bb:03:12:fe:fb:f3:38:be:d6:31:a2:
f8:cf:d4:ff:5c:93:31:91:64:5e:b0:4e:47:d1:b4:
ed:28:d1:52:44:97:86:47:90:e0:20:79:35:ac:bc:
6d:3c:4d:e8:1f:19:ab:a7:89:63:c3:2f:65:92:49:
69:d7:5b:70:5f:08:1c:e5:e5:cc:ce:ce:34:08:35:
a8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:62:05:2B:47:CD:74:9E:26:24:59:68:DC:5B:A5:56:27:A7:8E
X509v3 Authority Key Identifier:
keyid:D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:df:9f:78:bc:9c:c6:e8:1a:2f:d8:24:1e:60:a6:6d:d4:ea:
18:b7:2c:7d:d7:15:6a:d8:e7:79:19:4b:f1:a2:c4:7d:4e:09:
38:9a:c0:67:8f:13:66:03:34:5b:50:9a:ca:80:49:2c:74:32:
aa:e5:da:3b:f9:c5:91:5c:1b:a3:82:e0:41:f3:4e:d5:de:aa:
50:03:33:67:43:fa:51:a9:0b:b0:cb:a0:e6:52:11:4e:8a:34:
c2:2a:2a:91:1b:a6:d6:c7:52:61:46:a1:3f:82:32:e5:89:89:
ec:d4:55:44:0f:9b:1e:50:b1:eb:f6:f1:da:5c:60:1b:d6:44:
f2:28:86:a3:42:b2:a9:05:ed:63:5d:4f:e0:5f:f3:bb:3a:0d:
fa:8c:d7:3e:56:96:f4:61:79:a7:66:c5:4b:c9:12:62:74:28:
b4:53:56:d9:0b:bd:fc:11:bc:e1:71:f1:e7:03:28:9d:b8:67:
8a:57:2e:41:53:c8:24:21:72:51:4f:6d:95:23:a8:9b:e3:ec:
28:d3:0a:a9:0b:f4:a6:e8:56:28:d7:c3:2b:49:40:8c:7a:e5:
26:8a:a5:d6:68:39:fb:ed:ac:6a:17:94:9b:8f:9c:6f:92:df:
1f:6f:6d:44:81:ad:72:3c:b4:fd:3d:09:74:13:5a:7a:76:41:
6c:d6:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:42:42 2025 by rpki-client