This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft File: wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json) Hash identifier: Y+J/YfxtDR+bywFsN4mZWZ+JHpkSlYbyfdVF7gWfpXk= Subject key identifier: 43:BB:49:F9:40:AA:20:7E:EE:C4:A0:88:C8:F8:EC:26:70:86:4F:98 Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft Manifest number: 0150 Signing time: Tue 23 Dec 2025 03:27:56 +0000 Manifest this update: Tue 23 Dec 2025 03:27:55 +0000 Manifest next update: Tue 30 Dec 2025 03:27:55 +0000 Files and hashes: 1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: 6WkmN5L8krQelltxMEVQLMXlGrCFhEuoAniweJtEOYo=) 2: E37CCF70718911EFA0C30257C4F9AE02.roa (hash: /gAZLPIK5N+oUjrTM1zm3bFOQvpgh0r/tqZUpI/jzmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: Dec 23 03:27:55 2025 GMT Not After : Dec 30 03:27:55 2025 GMT Subject: CN=694a0c3c-47a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:a7:46:8a:fc:07:9a:cd:ea:36:ac:4b:07: 68:7c:06:e3:14:9a:cb:46:44:a2:ec:83:b8:64:28: 85:ef:bd:24:f6:b6:b4:df:fa:c7:8e:10:9f:26:c5: ed:41:2a:db:03:0a:b1:fc:bf:59:ae:9b:d7:7a:1a: df:f6:43:21:1c:3b:93:cd:2b:5f:e7:a2:da:b4:19: d8:68:7d:c2:73:d4:9d:9c:89:74:52:2c:c5:f8:34: bf:8e:e2:f9:29:ff:d3:f6:5b:43:2d:94:13:50:36: 63:9a:3d:9a:e8:c2:c0:00:4a:55:c9:f6:6e:23:43: 20:e6:42:b1:ff:0f:7b:c9:7c:0b:70:d9:ac:06:e4: 49:aa:34:68:7b:a3:9f:0f:a9:0c:18:c2:a4:2d:d2: 13:38:7c:26:27:6e:a2:ea:56:59:5b:98:cb:cb:9f: 8e:f4:74:6d:37:41:cb:8c:33:ad:f8:3d:53:33:8b: cc:35:7a:33:83:a5:e4:91:7a:bd:a4:37:07:9d:fc: d0:57:35:58:ff:f3:19:7d:8f:76:6f:f9:b4:4b:dd: 3a:fa:36:63:9e:5f:d5:8a:b8:08:81:cc:c8:37:b6: da:12:73:a7:e5:50:c7:6d:fa:e6:fc:04:86:a4:0a: 08:f6:b7:16:8e:74:03:d8:83:24:f5:92:d0:08:79: da:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BB:49:F9:40:AA:20:7E:EE:C4:A0:88:C8:F8:EC:26:70:86:4F:98 X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c6:8d:fa:41:ab:6e:10:61:a8:14:0e:ee:2d:de:07:6f:97: e0:0e:b3:3c:d0:78:d4:42:48:49:35:91:e8:05:33:7c:03:32: a1:08:b7:3e:04:39:ef:39:a5:c8:6c:b7:9f:24:b8:48:6b:99: 9a:fc:89:0e:c1:73:db:96:ca:39:43:0a:6e:66:27:26:f2:c6: 33:4c:2c:65:b7:72:b9:d8:68:7f:9b:59:91:fc:93:37:d4:84: 97:40:e1:97:80:3f:ea:ba:a8:6a:ce:be:77:93:59:00:8c:8e: 49:50:9e:f5:8a:28:86:c5:79:60:b7:68:57:15:d1:ab:98:cc: c6:88:23:9b:ed:00:01:b6:fe:17:bf:6c:d0:11:9d:c2:3f:6e: af:56:c3:be:13:ec:60:25:33:0b:40:3b:e6:07:97:57:34:8f: 55:84:08:16:c4:ca:32:55:a9:16:6e:de:33:e1:ca:f5:27:35: ad:16:eb:00:f5:e3:23:bf:06:7f:32:9b:08:02:1a:0e:38:7c: 22:c5:ec:a0:2e:65:4b:f7:72:e8:23:56:ec:2a:47:9e:44:17: 78:1b:f9:9b:7c:12:be:15:05:38:0f:1f:d4:c3:9f:19:53:0c: 29:6b:87:ac:ea:ce:45:dd:c4:2b:78:e0:96:24:2e:4d:3c:80: f3:06:b6:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGN0MxMTAvBgNVBAUTKEMwRTMxQjVGNDVDRkU1MkJBQzVDRURCOERDQzZBMUEz MjJGNDcwNUQwHhcNMjUxMjIzMDMyNzU1WhcNMjUxMjMwMDMyNzU1WjAYMRYwFAYD VQQDDA02OTRhMGMzYy00N2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlynRor8B5rN6jasSwdofAbjFJrLRkSi7IO4ZCiF770k9ra03/rHjhCfJsXt QSrbAwqx/L9ZrpvXehrf9kMhHDuTzStf56LatBnYaH3Cc9SdnIl0UizF+DS/juL5 Kf/T9ltDLZQTUDZjmj2a6MLAAEpVyfZuI0Mg5kKx/w97yXwLcNmsBuRJqjRoe6Of D6kMGMKkLdITOHwmJ26i6lZZW5jLy5+O9HRtN0HLjDOt+D1TM4vMNXozg6XkkXq9 pDcHnfzQVzVY//MZfY92b/m0S906+jZjnl/VirgIgczIN7baEnOn5VDHbfrm/ASG pAoI9rcWjnQD2IMk9ZLQCHnaPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEO7SflA qiB+7sSgiMj47CZwhk+YMB8GA1UdIwQYMBaAFMDjG19Fz+UrrFztuNzGoaMi9HBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy84NkY5MTYxQ0ZD NUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVTdXNYTzI0M01haG95TDBj RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3Qy84NkY5MTYxQ0ZDNUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVT dXNYTzI0M01haG95TDBjRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYxo36QatuEGGoFA7uLd4Hb5fgDrM80HjUQkhJNZHoBTN8AzKhCLc+ BDnvOaXIbLefJLhIa5ma/IkOwXPblso5QwpuZicm8sYzTCxlt3K52Gh/m1mR/JM3 1ISXQOGXgD/quqhqzr53k1kAjI5JUJ71iiiGxXlgt2hXFdGrmMzGiCOb7QABtv4X v2zQEZ3CP26vVsO+E+xgJTMLQDvmB5dXNI9VhAgWxMoyVakWbt4z4cr1JzWtFusA 9eMjvwZ/MpsIAhoOOHwixeygLmVL93LoI1bsKkeeRBd4G/mbfBK+FQU4Dx/Uw58Z Uwwpa4es6s5F3cQreOCWJC5NPIDzBrY4 -----END CERTIFICATE-----Generated at Tue Dec 23 14:17:04 2025 by rpki-client