This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: uQrgal9HjylfuU9E5LP01fSzt+dbNmFiKmKlG0yKAJc= Subject key identifier: 4A:7D:31:5B:E0:12:5D:4E:1C:DF:20:C1:6D:24:EE:49:F2:13:AA:26 Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 027C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 0265 Signing time: Fri 19 Dec 2025 00:58:47 +0000 Manifest this update: Fri 19 Dec 2025 00:58:46 +0000 Manifest next update: Fri 26 Dec 2025 00:58:46 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: vcCLDcgHDN0Gdv0+XffOIxhW5gUNLgwjD/IHJZQ0ow4=) 2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: yeooqHJnDt6tmtO4WveVbPPLltlUGiqPv+ArId7+Nvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Dec 19 00:58:46 2025 GMT Not After : Dec 26 00:58:46 2025 GMT Subject: CN=6944a346-aae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:53:cb:49:8a:42:6b:f6:35:87:c2:f0:da: 62:72:e3:0b:99:64:61:30:b9:39:5e:86:6d:c4:42: 1f:19:42:eb:64:85:16:47:b6:85:6c:4c:ad:9d:db: 64:fc:6d:cd:17:6a:42:e6:3d:96:58:c6:b4:a1:04: 7a:c9:ba:d8:1e:71:19:ce:5d:8e:7c:99:a4:71:53: 3b:df:9c:13:7d:47:94:53:e5:54:d1:ed:86:8d:2f: 7a:43:48:6e:f5:9e:eb:c2:e2:79:cd:f4:30:b2:2d: 6f:87:ff:fd:a0:9f:e7:bf:37:5d:ee:71:5d:07:14: a4:1a:59:62:f4:6b:80:42:81:70:e3:d2:46:75:fb: 8f:53:4a:67:90:6c:8d:8c:b7:1b:29:de:d5:a8:cb: d8:1a:e8:4b:30:3f:12:8d:31:35:ff:81:83:3d:04: 94:fd:2a:26:ed:5e:e2:3e:73:bc:44:c6:9b:b5:fa: 13:3c:26:5e:f5:c6:9b:3a:df:f3:7f:33:0b:09:7c: 55:13:35:c9:84:b1:7a:c5:a8:4a:da:f0:0a:fd:57: 23:59:90:6e:6f:41:20:56:f5:2a:e4:92:c2:70:9d: f6:81:dc:ff:9e:e3:43:5e:67:d1:b3:0b:c3:6b:41: 97:7b:63:1a:81:d2:ee:7f:59:f7:4b:54:c4:53:c2: c5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7D:31:5B:E0:12:5D:4E:1C:DF:20:C1:6D:24:EE:49:F2:13:AA:26 X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9b:0b:54:50:bd:26:60:a9:b2:47:9c:76:7d:20:6f:1a:e8: 31:57:53:33:de:84:1b:e3:84:3c:e5:b7:b1:30:72:f6:5a:38: cd:42:d0:27:ad:7d:f7:cb:47:5c:50:de:a2:f9:f3:2a:82:77: 97:12:64:8d:19:59:b5:de:9a:0d:68:83:41:27:96:c8:f9:7a: 8f:e9:27:85:61:b5:b7:7b:7b:b3:24:9c:7d:f8:40:88:ee:59: 98:6c:7b:09:9d:a0:30:e2:fb:5c:da:ba:67:37:47:b5:1c:91: b1:ca:d6:ac:6b:c4:e3:36:cd:79:c7:2b:5d:25:94:24:bd:6c: 1d:c1:03:84:f6:7c:53:43:3d:41:e4:02:8c:20:32:cb:d6:b8: 18:11:10:b3:9e:1e:4d:b6:73:78:0f:2c:d2:e3:93:6e:42:d0: ff:e7:d7:30:81:d3:a4:99:8a:82:d5:a8:48:f7:66:75:6d:e4: 16:2c:85:93:4f:cd:c6:11:80:dc:56:79:46:71:26:0b:c6:32: 04:44:23:09:a7:37:50:fa:10:ed:5d:5d:8c:e5:76:4a:a7:e4: e4:e0:6c:ee:7d:3a:0f:40:f7:6d:9a:56:d0:92:05:81:5b:56: 85:b7:0e:a2:bf:1b:16:40:d2:71:5d:c4:a0:39:4f:09:77:26: d9:98:35:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUxMjE5MDA1ODQ2WhcNMjUxMjI2MDA1ODQ2WjAYMRYwFAYD VQQDDA02OTQ0YTM0Ni1hYWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+JTy0mKQmv2NYfC8NpicuMLmWRhMLk5XoZtxEIfGULrZIUWR7aFbEytndtk /G3NF2pC5j2WWMa0oQR6ybrYHnEZzl2OfJmkcVM735wTfUeUU+VU0e2GjS96Q0hu 9Z7rwuJ5zfQwsi1vh//9oJ/nvzdd7nFdBxSkGlli9GuAQoFw49JGdfuPU0pnkGyN jLcbKd7VqMvYGuhLMD8SjTE1/4GDPQSU/Som7V7iPnO8RMabtfoTPCZe9cabOt/z fzMLCXxVEzXJhLF6xahK2vAK/VcjWZBub0EgVvUq5JLCcJ32gdz/nuNDXmfRswvD a0GXe2MagdLuf1n3S1TEU8LFJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp9MVvg El1OHN8gwW0k7knyE6omMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdmwtUUL0mYKmyR5x2fSBvGugxV1Mz3oQb44Q85bexMHL2WjjNQtAn rX33y0dcUN6i+fMqgneXEmSNGVm13poNaINBJ5bI+XqP6SeFYbW3e3uzJJx9+ECI 7lmYbHsJnaAw4vtc2rpnN0e1HJGxytasa8TjNs15xytdJZQkvWwdwQOE9nxTQz1B 5AKMIDLL1rgYERCznh5NtnN4DyzS45NuQtD/59cwgdOkmYqC1ahI92Z1beQWLIWT T83GEYDcVnlGcSYLxjIERCMJpzdQ+hDtXV2M5XZKp+Tk4GzufToPQPdtmlbQkgWB W1aFtw6ivxsWQNJxXcSgOU8JdybZmDWk -----END CERTIFICATE-----Generated at Fri Dec 19 12:36:20 2025 by rpki-client