This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: vw4C2jA8qgggcgHLOIB+eWJksUH2dMTxkT7tz//+A5U= Subject key identifier: D6:06:D9:79:6E:91:92:A5:6D:45:81:8D:15:C8:AE:4D:54:E3:D5:A6 Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: 67 Signing time: Tue 23 Dec 2025 05:55:29 +0000 Manifest this update: Tue 23 Dec 2025 05:55:28 +0000 Manifest next update: Tue 30 Dec 2025 05:55:28 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: L7ajBcDD3e0Aj9eoqd+2U9y6DHSX2n0V2wy0Bmaricg=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: XYs8/TAj1SKjF36KD3+2Mx5R6rHZ3Npg8Y//QV94Wa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Dec 23 05:55:28 2025 GMT Not After : Dec 30 05:55:28 2025 GMT Subject: CN=694a2ed1-999f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:fb:b3:6a:67:f3:cc:47:a1:c2:a5:bc:05: 27:ab:8a:a5:56:88:ae:a2:72:7f:dc:8c:02:9a:4c: 33:08:d5:5e:1c:1d:f7:b0:3c:a5:f8:e0:40:90:45: 95:98:c7:ac:f1:cc:98:bb:fa:4d:94:68:e8:ea:b7: f5:dc:2d:f8:d2:e9:b9:2b:43:ec:4e:35:b1:44:fd: 2d:b8:60:8e:ae:4e:59:ea:ca:bd:7d:76:5f:81:44: 45:c1:5c:74:82:d4:b5:1e:55:d5:15:64:a0:c8:5f: 46:1a:0e:8b:4a:de:48:6e:dc:d2:57:d1:bf:e6:1f: 51:e6:eb:19:a4:cf:25:c8:c0:fc:16:cf:ad:bf:cb: 4c:94:36:44:b5:b9:bc:c4:6d:34:df:86:a4:7c:2e: 54:c5:99:b4:2c:d2:de:45:ec:e5:68:86:6f:bc:fb: f0:df:a6:9c:6a:18:29:5d:04:85:7c:29:1a:72:a4: 19:93:ff:79:c0:ad:a2:20:34:cc:84:7c:f6:4d:07: 88:94:a8:6c:cc:74:ee:29:9c:3d:73:68:9f:a9:e5: aa:e4:19:19:0e:22:c9:02:c5:29:e0:39:b0:eb:0a: 80:22:5c:c0:53:99:24:85:62:4a:cd:ea:11:29:4f: 80:79:33:a9:ba:dc:d5:24:09:b4:02:20:a4:3d:9c: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:06:D9:79:6E:91:92:A5:6D:45:81:8D:15:C8:AE:4D:54:E3:D5:A6 X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:8d:7a:42:1a:85:05:20:9a:92:98:07:d0:42:98:c7:f5:4a: 45:72:f5:4f:89:80:20:84:83:cd:58:3b:04:c2:d3:c0:f9:8b: d6:b2:0f:a2:77:74:8a:69:fd:9f:ed:c6:38:f7:d5:b2:23:c9: 41:cc:b9:ed:1d:0d:ad:bc:4c:2f:ef:21:14:22:16:4d:a8:7b: 59:61:0e:69:f2:8c:4e:33:1b:d8:54:40:64:e3:54:19:18:3e: ed:93:6e:b5:4c:c7:42:39:c6:48:c0:4a:b4:c4:1c:9f:f3:b3: d6:04:20:aa:ce:f8:23:f6:fb:a7:13:f6:31:8a:d0:0a:3d:17: b8:b3:00:4c:45:1b:03:6b:26:b0:57:f9:f3:ab:a2:a7:47:3e: 01:27:c6:df:de:68:e7:e4:32:e8:30:94:b1:5c:a4:32:52:2e: ca:60:64:af:90:09:be:dc:f7:0b:d5:01:ba:37:90:f5:e8:48: a6:b0:17:f1:f0:cd:b5:25:ec:34:43:1c:78:2e:04:2f:77:ab: 6c:0a:50:6c:bb:f1:c2:f2:13:59:2c:3f:9f:9d:d2:16:c6:8e: 78:78:aa:5a:65:97:9d:d8:b8:49:d1:ff:e7:26:02:0e:c2:7f: a5:3d:7c:39:ac:d8:18:1e:7d:cd:a6:d9:ef:ca:54:85:6d:ec: 56:59:e8:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDlDMjExMC8GA1UEBRMoNzREQ0VBQTg1MDZBMkIzMjdGODdBNDJEMDc0MUFDMzZF RURFRUI0OTAeFw0yNTEyMjMwNTU1MjhaFw0yNTEyMzAwNTU1MjhaMBgxFjAUBgNV BAMMDTY5NGEyZWQxLTk5OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4xvuzamfzzEehwqW8BSeriqVWiK6icn/cjAKaTDMI1V4cHfewPKX44ECQRZWY x6zxzJi7+k2UaOjqt/XcLfjS6bkrQ+xONbFE/S24YI6uTlnqyr19dl+BREXBXHSC 1LUeVdUVZKDIX0YaDotK3khu3NJX0b/mH1Hm6xmkzyXIwPwWz62/y0yUNkS1ubzE bTTfhqR8LlTFmbQs0t5F7OVohm+8+/DfppxqGCldBIV8KRpypBmT/3nAraIgNMyE fPZNB4iUqGzMdO4pnD1zaJ+p5arkGRkOIskCxSngObDrCoAiXMBTmSSFYkrN6hEp T4B5M6m63NUkCbQCIKQ9nMrRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1gbZeW6R kqVtRYGNFciuTVTj1aYwHwYDVR0jBBgwFoAUdNzqqFBqKzJ/h6QtB0GsNu7e60kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0OUMyL0UzQTNERUU2NDhD ODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE56cXFGQnFLekpfaDZRdEIwR3NOdTdlNjBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 OUMyL0UzQTNERUU2NDhDODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pK X2g2UXRCMEdzTnU3ZTYway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAO2NekIahQUgmpKYB9BCmMf1SkVy9U+JgCCEg81YOwTC08D5i9ayD6J3 dIpp/Z/txjj31bIjyUHMue0dDa28TC/vIRQiFk2oe1lhDmnyjE4zG9hUQGTjVBkY Pu2TbrVMx0I5xkjASrTEHJ/zs9YEIKrO+CP2+6cT9jGK0Ao9F7izAExFGwNrJrBX +fOroqdHPgEnxt/eaOfkMugwlLFcpDJSLspgZK+QCb7c9wvVAbo3kPXoSKawF/Hw zbUl7DRDHHguBC93q2wKUGy78cLyE1ksP5+d0hbGjnh4qlpll53YuEnR/+cmAg7C f6U9fDms2Bgefc2m2e/KVIVt7FZZ6H8= -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:13 2025 by rpki-client