This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json) Hash identifier: UazJQ0W4hSVsTBiNnBhf3+q3xAYMnQPINu4N6pFKRnU= Subject key identifier: 03:78:D4:23:49:ED:66:8F:A4:EA:92:34:4D:20:37:91:F7:87:7F:A6 Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 Certificate issuer: /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft Manifest number: 0215 Signing time: Wed 31 Dec 2025 01:31:51 +0000 Manifest this update: Wed 31 Dec 2025 01:31:50 +0000 Manifest next update: Wed 07 Jan 2026 01:31:50 +0000 Files and hashes: 1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: K9Yzmbem1O5q3gszfIrCZcbfhRB5do95ebDOhL4B3ys=) 2: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: y5xiYH+E4HYqH1SblkLZqyCJBhm93J5XtdfEMZPQc64=) 3: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: GwFZaSvuCVOFbdFdtZmys4ibTnEED7fiZiFkSAJJVzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 01:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Validity Not Before: Dec 31 01:31:50 2025 GMT Not After : Jan 7 01:31:50 2026 GMT Subject: CN=69547d07-9a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b9:5c:8e:2c:54:39:a5:61:3c:3c:e7:45:03: 62:5e:c7:f8:49:58:26:42:c7:d9:59:b7:f3:33:85: 63:b6:38:0d:95:6f:49:43:2a:7a:29:76:4f:0f:ac: 88:65:46:b7:01:3d:79:8d:3e:08:ed:84:51:4e:a0: c2:db:25:e5:96:e8:a0:36:27:7d:54:5b:53:1a:5b: 3b:13:05:04:78:0c:a2:cc:20:db:1c:2f:22:86:57: a9:da:7e:b6:4e:89:0b:fd:b1:fb:09:ec:04:c4:b4: 43:bf:ad:bd:89:b8:69:89:99:86:e1:51:c8:79:b9: 1d:f1:12:be:88:33:ab:43:dd:ae:89:65:81:5f:5c: 69:fd:85:96:a5:ee:d9:fa:1b:2c:5c:a1:0a:63:e4: f5:54:56:4f:c9:17:3c:b1:1a:ae:e7:48:ea:1f:e9: 0f:08:0c:f5:1c:ac:96:83:3f:7d:2a:ac:6e:66:d6: f3:90:f8:89:f4:76:46:75:12:f9:2e:13:aa:af:5f: db:38:3c:b0:2a:ef:15:9d:f9:4f:fe:ab:77:0f:bf: 83:ce:00:8e:1a:09:9e:cf:2a:fc:0f:3d:39:ed:d1: 8c:7b:fc:a7:e6:0b:23:18:1b:ef:d8:f9:8d:6c:28: 07:7e:96:c9:52:9c:89:7e:b1:be:c9:b0:4a:b4:a7: e3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:78:D4:23:49:ED:66:8F:A4:EA:92:34:4D:20:37:91:F7:87:7F:A6 X509v3 Authority Key Identifier: keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:22:3f:82:d2:1b:0e:23:73:95:ca:04:fe:7a:57:44:12:dc: 01:c9:55:1d:6f:f0:c0:83:85:62:95:4a:b5:b1:cd:34:a9:55: 60:b9:01:8a:45:2f:a1:11:ea:b4:8c:05:5c:cd:cf:8a:cb:fa: 08:f8:14:b9:3a:c4:51:fd:4e:fe:d3:31:9c:e4:29:3f:22:3f: 05:25:26:e5:c3:fa:70:2f:b0:21:05:e7:88:80:3b:6a:d2:ed: fb:03:df:db:0b:33:b5:8a:50:50:72:2d:70:db:bb:4e:af:1d: b5:4a:9c:98:7d:37:f8:ee:2f:c6:5f:d0:46:eb:a0:b1:64:66: b6:fd:8f:0d:d2:8a:02:80:49:78:d8:90:3e:96:69:17:c8:70: 7e:cd:c3:b0:4f:0b:33:40:4f:1a:e8:8e:a6:2d:4f:e8:8f:72: e2:55:ad:fb:9c:f9:d6:80:b4:ad:3e:b7:b9:79:0a:d5:4c:4d: 7c:69:0f:12:b9:48:a9:c1:84:8f:c5:1b:ba:b5:ee:4d:eb:9b: 6c:17:5e:64:07:73:aa:7b:14:3c:17:3c:04:fe:dc:af:a3:d0: 1d:29:10:38:7a:7b:bd:52:78:43:6c:f5:c3:5b:39:b7:a0:57: de:a3:b7:d4:b6:a9:36:90:8f:0c:22:4b:b2:2e:98:00:7f:e3: 6e:40:a0:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMDAxMTAvBgNVBAUTKDM4QzBCMUM1OEQwMERFM0Y3M0FENUI1ODg3RDQyNDlC REVFN0JCQTIwHhcNMjUxMjMxMDEzMTUwWhcNMjYwMTA3MDEzMTUwWjAYMRYwFAYD VQQDDA02OTU0N2QwNy05YTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh7lcjixUOaVhPDznRQNiXsf4SVgmQsfZWbfzM4VjtjgNlW9JQyp6KXZPD6yI ZUa3AT15jT4I7YRRTqDC2yXlluigNid9VFtTGls7EwUEeAyizCDbHC8ihlep2n62 TokL/bH7CewExLRDv629ibhpiZmG4VHIebkd8RK+iDOrQ92uiWWBX1xp/YWWpe7Z +hssXKEKY+T1VFZPyRc8sRqu50jqH+kPCAz1HKyWgz99KqxuZtbzkPiJ9HZGdRL5 LhOqr1/bODywKu8VnflP/qt3D7+DzgCOGgmezyr8Dz057dGMe/yn5gsjGBvv2PmN bCgHfpbJUpyJfrG+ybBKtKfjfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN41CNJ 7WaPpOqSNE0gN5H3h3+mMB8GA1UdIwQYMBaAFDjAscWNAN4/c61bWIfUJJve57ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwMC9GNUE5NTJFMEND MDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNqOXpyVnRZaDlRa205N251 NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NQ3h4WTBBM2o5enJWdFloOVFrbTk3bnU2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwMC9GNUE5NTJFMENDMDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNq OXpyVnRZaDlRa205N251NkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmIj+C0hsOI3OVygT+eldEEtwByVUdb/DAg4VilUq1sc00qVVguQGK RS+hEeq0jAVczc+Ky/oI+BS5OsRR/U7+0zGc5Ck/Ij8FJSblw/pwL7AhBeeIgDtq 0u37A9/bCzO1ilBQci1w27tOrx21SpyYfTf47i/GX9BG66CxZGa2/Y8N0ooCgEl4 2JA+lmkXyHB+zcOwTwszQE8a6I6mLU/oj3LiVa37nPnWgLStPre5eQrVTE18aQ8S uUipwYSPxRu6te5N65tsF15kB3OqexQ8FzwE/tyvo9AdKRA4enu9UnhDbPXDWzm3 oFfeo7fUtqk2kI8MIkuyLpgAf+NuQKCW -----END CERTIFICATE-----Generated at Wed Dec 31 05:26:00 2025 by rpki-client