This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: O7suFi6U6w7u6CdR3JXJ0uXsrKgigzRDO3I6hhi+jgM= Subject key identifier: 57:21:D4:10:7C:EA:4B:80:A6:EB:9D:5B:23:E4:2A:CB:4E:CF:C7:B9 Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 096E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 0967 Signing time: Mon 22 Dec 2025 19:29:29 +0000 Manifest this update: Mon 22 Dec 2025 19:29:29 +0000 Manifest next update: Mon 29 Dec 2025 19:29:29 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: HVLxaEFyt0GYAO+j+HZu14mw5t5CSo6EwxrfO5Ijz9U=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2414 (0x96e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Dec 22 19:29:29 2025 GMT Not After : Dec 29 19:29:29 2025 GMT Subject: CN=69499c19-8194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:ef:3e:10:5e:25:cb:a4:37:44:2f:9d:e2: 2d:57:f3:d2:27:9e:3d:84:d6:b6:bb:73:e5:07:ee: c3:9c:81:ce:34:f7:7d:fd:20:de:40:36:18:90:82: eb:80:f2:6a:01:19:00:4e:8d:a7:65:96:54:2d:1c: 99:13:a1:97:94:f3:d0:2b:3b:78:8c:ab:42:82:c5: ac:fb:b5:60:69:97:c5:8f:69:fe:dd:c3:c9:39:30: 40:52:6a:4b:57:e4:14:fc:14:5d:b1:6b:a9:3c:a1: 81:c4:11:d4:b0:da:fc:2d:d2:b6:f5:7c:88:c7:eb: ca:a8:d1:fb:e2:19:cd:6f:9c:cb:80:b3:33:4f:27: ab:6b:a3:ce:55:f3:5d:d6:f1:3f:ae:44:0b:60:3b: 2d:d3:d3:4f:32:39:17:8c:66:1c:1f:df:aa:2d:22: 4b:09:38:8b:1c:14:9e:9c:62:60:0e:10:d1:bb:50: 93:cc:69:43:b2:af:5f:f6:da:a5:93:41:b1:d2:e2: 58:c7:e2:c6:ad:82:bd:79:a1:95:f4:f7:bb:5a:42: 26:97:09:72:f3:18:ec:fd:fc:02:fa:5e:97:d9:8d: 38:cc:46:98:74:6a:92:4a:ba:ab:81:eb:5c:85:27: 94:ed:e7:6b:5d:8e:78:be:72:ce:0d:88:ae:4c:62: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:21:D4:10:7C:EA:4B:80:A6:EB:9D:5B:23:E4:2A:CB:4E:CF:C7:B9 X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:79:13:03:11:b7:bd:3c:dc:4b:18:97:7b:7c:e1:b5:0b:5e: 5d:9c:de:fb:d7:3e:2e:0e:f3:dd:71:33:8b:c6:2c:ed:7c:16: 15:ca:20:3b:f1:ed:20:99:d3:da:ef:2f:23:d2:4a:5e:61:ad: e8:a3:10:c7:c0:09:5b:19:2b:5c:69:a5:b8:db:44:a4:47:9c: fb:19:74:e3:f4:ce:27:c6:e7:8f:9f:93:44:17:bb:4b:b5:53: 67:4e:c7:8c:25:d7:ea:63:0c:4a:76:58:3a:d2:6b:25:cb:20: 1e:a9:8c:76:61:d6:50:56:96:fd:3a:aa:b9:80:d5:f1:bf:5a: c1:4a:8c:53:4a:23:26:0a:4a:21:af:23:39:ba:2d:5a:1c:dd: 7c:62:31:3f:8d:13:28:dd:eb:10:a2:f7:ee:e7:85:7d:a8:10: 84:9b:60:5e:82:4b:f1:fe:51:7a:ca:e5:c5:eb:58:cc:00:fa: 7c:09:e4:06:ea:1d:28:fd:b4:98:b3:6e:8a:eb:1f:9f:a0:f9: 20:7c:2f:e5:c3:24:8b:ad:1d:56:69:87:12:b1:77:66:2f:84: 78:fd:7e:84:3a:34:55:e3:67:15:6e:ae:ec:d8:5b:01:fd:72: 90:bf:db:a9:17:01:86:ed:9d:41:39:b2:7a:eb:ab:94:8d:ab: 76:04:3f:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUxMjIyMTkyOTI5WhcNMjUxMjI5MTkyOTI5WjAYMRYwFAYD VQQDDA02OTQ5OWMxOS04MTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fDvPhBeJcukN0QvneItV/PSJ549hNa2u3PlB+7DnIHONPd9/SDeQDYYkILr gPJqARkATo2nZZZULRyZE6GXlPPQKzt4jKtCgsWs+7VgaZfFj2n+3cPJOTBAUmpL V+QU/BRdsWupPKGBxBHUsNr8LdK29XyIx+vKqNH74hnNb5zLgLMzTyera6POVfNd 1vE/rkQLYDst09NPMjkXjGYcH9+qLSJLCTiLHBSenGJgDhDRu1CTzGlDsq9f9tql k0Gx0uJYx+LGrYK9eaGV9Pe7WkImlwly8xjs/fwC+l6X2Y04zEaYdGqSSrqrgetc hSeU7edrXY54vnLODYiuTGKzwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFch1BB8 6kuApuudWyPkKstOz8e5MB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBveRMDEbe9PNxLGJd7fOG1C15dnN771z4uDvPdcTOLxiztfBYVyiA7 8e0gmdPa7y8j0kpeYa3ooxDHwAlbGStcaaW420SkR5z7GXTj9M4nxuePn5NEF7tL tVNnTseMJdfqYwxKdlg60mslyyAeqYx2YdZQVpb9Oqq5gNXxv1rBSoxTSiMmCkoh ryM5ui1aHN18YjE/jRMo3esQovfu54V9qBCEm2Begkvx/lF6yuXF61jMAPp8CeQG 6h0o/bSYs26K6x+foPkgfC/lwySLrR1WaYcSsXdmL4R4/X6EOjRV42cVbq7s2FsB /XKQv9upFwGG7Z1BObJ666uUjat2BD8h -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:11 2025 by rpki-client