This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json) Hash identifier: NuiRLcEnex+RTIxfbLtKYZInrAwzV2d7Y48HqmSFGsc= Subject key identifier: D2:2D:B6:DB:83:B1:07:64:F4:82:B8:C4:D6:66:56:54:09:84:BE:C4 Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Certificate serial: 2450 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft Manifest number: 60CC Signing time: Thu 18 Dec 2025 14:15:16 +0000 Manifest this update: Thu 18 Dec 2025 14:15:16 +0000 Manifest next update: Thu 25 Dec 2025 14:15:16 +0000 Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: x3mCl3/W/vfDeauZ7HkGzWgbS+6CYS0/GB+EfPA2XHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9296 (0x2450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Validity Not Before: Dec 18 14:15:16 2025 GMT Not After : Dec 25 14:15:16 2025 GMT Subject: CN=69440c74-3dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:a1:b8:92:7f:27:3a:86:bb:da:9e:2f:73: c3:a2:4b:08:76:33:3d:ce:b0:99:85:b3:76:c5:ae: de:bf:4c:51:ad:e7:70:e3:10:57:40:88:c9:82:87: a0:44:c1:a1:67:ef:a6:5a:5d:0b:72:b8:b3:cd:7c: 8d:71:d2:62:47:8a:58:a2:a2:6d:65:f2:95:be:a5: bc:34:7e:7f:b1:83:f2:60:de:a1:d1:d1:9b:80:75: 54:23:9c:0e:2a:13:a3:93:12:ba:dc:9f:66:d5:29: 8f:04:6c:c9:1f:53:85:58:63:bb:9c:cc:d3:48:bf: 3d:58:08:b5:51:0c:a6:df:93:64:1e:ac:12:55:e4: 9d:22:05:d0:1f:05:89:8d:6a:9b:ee:ec:57:11:aa: 5a:96:46:e4:63:cb:92:46:13:ba:34:68:3a:66:7f: d7:36:c7:9a:91:04:cd:cf:25:53:3e:f2:66:e6:89: 90:ed:47:81:2f:60:e3:62:92:c8:50:83:39:3b:61: be:ba:19:ec:79:4b:c0:e5:51:9e:35:52:d6:71:c4: 10:1c:ac:4d:29:9c:10:16:6e:43:b4:e1:f5:5a:06: 2d:cd:c6:83:3f:1f:b5:52:07:2a:0b:b5:d3:ec:2b: 38:f7:8f:7b:8e:9b:b4:90:81:bf:2e:dc:ac:f2:35: 14:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2D:B6:DB:83:B1:07:64:F4:82:B8:C4:D6:66:56:54:09:84:BE:C4 X509v3 Authority Key Identifier: keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:02:38:61:ee:81:73:a3:0d:48:6b:b4:14:db:a6:a5:55:00: 2a:04:cd:0e:b4:b9:95:cc:cc:16:5b:48:28:4d:96:84:50:0c: 7b:8e:5c:0f:e8:13:6c:42:2f:30:9d:b5:5c:0f:dc:c7:e0:45: 0a:4b:30:08:6f:8a:4f:6a:04:03:90:d2:f7:7e:1b:ec:27:ef: 8e:2f:87:2f:a0:b5:c2:41:b5:d6:71:09:30:57:86:74:8d:a2: f0:79:59:15:68:e5:32:17:5f:3d:4f:1b:c0:0f:b5:40:5a:88: 94:b2:24:7c:7f:b5:84:75:d8:23:5a:d9:71:40:0b:70:25:9d: 58:e4:80:ff:97:f5:f0:46:5d:12:6f:98:cf:7a:f8:04:7e:6f: 12:bb:69:2a:86:e6:6d:46:d5:c7:0a:1a:54:d2:66:b0:80:d0: b9:9b:16:72:05:d5:62:8c:1e:de:c7:9f:b8:50:64:a7:ed:3d: d2:cc:ea:13:5c:40:75:e6:d5:5f:89:d8:0d:71:f4:ca:c7:57: 6a:83:85:a7:1a:b4:c3:a3:59:14:15:c1:cb:7d:1c:4e:b4:c0: 38:09:05:b7:8c:aa:fa:bd:6f:c7:fd:a1:29:17:a8:c6:eb:7d: 80:54:9c:c9:dc:14:6a:f3:f4:ab:0c:96:99:e3:b7:ca:9f:88: d2:5d:a7:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD M0MzMTkyNDEwHhcNMjUxMjE4MTQxNTE2WhcNMjUxMjI1MTQxNTE2WjAYMRYwFAYD VQQDDA02OTQ0MGM3NC0zZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuChuJJ/JzqGu9qeL3PDoksIdjM9zrCZhbN2xa7ev0xRredw4xBXQIjJgoeg RMGhZ++mWl0LcrizzXyNcdJiR4pYoqJtZfKVvqW8NH5/sYPyYN6h0dGbgHVUI5wO KhOjkxK63J9m1SmPBGzJH1OFWGO7nMzTSL89WAi1UQym35NkHqwSVeSdIgXQHwWJ jWqb7uxXEapalkbkY8uSRhO6NGg6Zn/XNseakQTNzyVTPvJm5omQ7UeBL2DjYpLI UIM5O2G+uhnseUvA5VGeNVLWccQQHKxNKZwQFm5DtOH1WgYtzcaDPx+1UgcqC7XT 7Cs49497jpu0kIG/Ltys8jUUZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNItttuD sQdk9IK4xNZmVlQJhL7EMB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhAjhh7oFzow1Ia7QU26alVQAqBM0OtLmVzMwWW0goTZaEUAx7jlwP 6BNsQi8wnbVcD9zH4EUKSzAIb4pPagQDkNL3fhvsJ++OL4cvoLXCQbXWcQkwV4Z0 jaLweVkVaOUyF189TxvAD7VAWoiUsiR8f7WEddgjWtlxQAtwJZ1Y5ID/l/XwRl0S b5jPevgEfm8Su2kqhuZtRtXHChpU0mawgNC5mxZyBdVijB7ex5+4UGSn7T3SzOoT XEB15tVfidgNcfTKx1dqg4WnGrTDo1kUFcHLfRxOtMA4CQW3jKr6vW/H/aEpF6jG 632AVJzJ3BRq8/SrDJaZ47fKn4jSXadZ -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:53 2025 by rpki-client