This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json) Hash identifier: dxwgQNBEFHnftNBBvxLGFt0hyFhWM2hOYO8nt7uuvUk= Subject key identifier: 23:5E:7C:7A:E7:6A:C1:C7:28:06:8C:86:A0:AD:DB:23:A6:B8:8F:66 Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft Manifest number: 022B Signing time: Tue 23 Dec 2025 01:11:08 +0000 Manifest this update: Tue 23 Dec 2025 01:11:07 +0000 Manifest next update: Tue 30 Dec 2025 01:11:07 +0000 Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: 11vgozVykMkO7lmTsaSxdGRKLwYHN30ohlmjKBvSzFQ=) 2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: W0QjuNMkR2tH07pxncoFfLsVRRNFM7JZ6iVRcm37NHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E Validity Not Before: Dec 23 01:11:07 2025 GMT Not After : Dec 30 01:11:07 2025 GMT Subject: CN=6949ec2b-d532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:70:c3:73:2e:11:64:26:82:3d:45:bd:c9: 1a:44:50:93:be:45:3e:d5:83:1a:82:f1:13:5e:ae: fa:57:41:e4:95:f7:d5:90:a2:14:e7:d5:29:2a:e4: ad:6a:e7:cd:88:31:70:f3:f3:0c:15:db:a0:32:f1: a9:d6:49:46:c7:31:59:80:d2:01:ab:26:f9:87:b9: dc:27:c4:18:cf:0d:cc:b4:fa:cd:5e:3f:c4:ba:ac: 21:cc:8f:5f:b4:a8:34:1a:a2:2f:ea:44:2c:84:e6: 7d:13:2a:43:3b:7a:6b:7b:94:6e:fb:b8:44:3f:c7: 4d:8b:b4:1c:9f:02:98:11:f2:f0:69:ae:17:09:a5: fa:8b:bf:f2:b3:f9:48:57:74:2a:69:26:de:bc:c7: 93:cf:9b:db:e3:e9:a0:a7:c7:62:f9:4c:86:32:fb: 02:25:6f:2c:5c:29:2d:03:3c:11:cb:5e:f4:84:49: c6:a4:22:25:2c:3b:e0:67:f8:82:91:88:d1:59:8b: 9f:4e:2f:03:ff:f4:7b:ac:2b:45:52:62:f2:c2:e7: 53:f4:47:28:41:f8:82:e4:88:3b:be:07:f3:11:04: 0a:48:c8:6d:5b:eb:75:7c:b1:74:30:db:1d:61:b8: 10:c1:c1:9d:20:5d:f5:e0:0e:dc:c8:43:cb:cc:ea: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5E:7C:7A:E7:6A:C1:C7:28:06:8C:86:A0:AD:DB:23:A6:B8:8F:66 X509v3 Authority Key Identifier: keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f6:d0:4b:72:85:55:2c:80:dc:eb:a5:2c:4b:c1:95:81:f5: e3:fd:8c:b2:ea:81:d5:82:bc:a1:ee:50:37:8f:84:18:f4:91: e6:81:4d:f3:4d:b7:7d:8d:29:e7:de:9a:2f:c7:2c:d1:36:07: 06:04:ec:36:a0:d9:43:5b:2a:54:04:71:e6:ec:88:ba:c4:de: 50:72:b5:22:e2:37:39:45:0d:39:94:d3:66:0e:fb:85:7a:45: 80:ef:e1:97:4f:29:ac:dd:2f:35:d0:ae:93:3f:6d:69:63:31: a8:ad:39:df:a5:87:d7:7c:0b:1f:df:6e:9a:40:b0:06:4b:b2: 49:49:80:03:51:d5:a1:2a:66:28:e2:7c:c8:8b:a0:14:05:5d: ac:ce:c3:09:76:63:6a:94:1c:12:8f:ed:24:b8:5d:5d:de:b6: 4b:b2:59:b1:a2:51:fd:d2:55:4e:bb:32:4f:d6:86:db:eb:bc: 3c:36:6e:01:63:a3:9c:11:65:47:3f:9a:c8:8e:7c:bb:16:0e: 92:f4:95:c8:41:e5:fb:e2:ca:c6:9d:b6:5c:94:6f:ac:d9:3f: d8:7a:32:e0:88:87:19:aa:fe:bf:6f:d0:77:6f:89:04:2f:8f: 8d:70:95:ce:91:f3:61:a8:09:2f:94:68:44:f0:4c:e5:2f:f2: cd:04:77:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0 NzNCNkRFNUUwHhcNMjUxMjIzMDExMTA3WhcNMjUxMjMwMDExMTA3WjAYMRYwFAYD VQQDDA02OTQ5ZWMyYi1kNTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/Nww3MuEWQmgj1FvckaRFCTvkU+1YMagvETXq76V0HklffVkKIU59UpKuSt aufNiDFw8/MMFdugMvGp1klGxzFZgNIBqyb5h7ncJ8QYzw3MtPrNXj/EuqwhzI9f tKg0GqIv6kQshOZ9EypDO3pre5Ru+7hEP8dNi7QcnwKYEfLwaa4XCaX6i7/ys/lI V3QqaSbevMeTz5vb4+mgp8di+UyGMvsCJW8sXCktAzwRy170hEnGpCIlLDvgZ/iC kYjRWYufTi8D//R7rCtFUmLywudT9EcoQfiC5Ig7vgfzEQQKSMhtW+t1fLF0MNsd YbgQwcGdIF314A7cyEPLzOqHQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNefHrn asHHKAaMhqCt2yOmuI9mMB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwRS8wMDA4M0ZBQzlENTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3 bUhKSFM1QndaakJITzIzbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy9tBLcoVVLIDc66UsS8GVgfXj/Yyy6oHVgryh7lA3j4QY9JHmgU3z Tbd9jSnn3povxyzRNgcGBOw2oNlDWypUBHHm7Ii6xN5QcrUi4jc5RQ05lNNmDvuF ekWA7+GXTyms3S810K6TP21pYzGorTnfpYfXfAsf326aQLAGS7JJSYADUdWhKmYo 4nzIi6AUBV2szsMJdmNqlBwSj+0kuF1d3rZLslmxolH90lVOuzJP1obb67w8Nm4B Y6OcEWVHP5rIjny7Fg6S9JXIQeX74srGnbZclG+s2T/YejLgiIcZqv6/b9B3b4kE L4+NcJXOkfNhqAkvlGhE8EzlL/LNBHdA -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:21 2025 by rpki-client