This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft File: dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json) Hash identifier: ZBuN8Npr1cppCVTO1Hq+qyrTC6M3AxY/+U2xTBCQ3nA= Subject key identifier: 2C:68:24:E2:D7:1E:45:09:31:F2:C7:FE:65:9F:CF:59:8E:B4:D0:8B Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B Certificate serial: 039B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft Manifest number: 0395 Signing time: Fri 19 Dec 2025 00:02:11 +0000 Manifest this update: Fri 19 Dec 2025 00:02:11 +0000 Manifest next update: Fri 26 Dec 2025 00:02:11 +0000 Files and hashes: 1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: t12GMs8sPyQVuFt8AKQCk0yQVFQCOkj63+JVkfxp/Ys=) 2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: kqlFbGdiLITylJzEnme24j5JnutD1SpM8Rs0rr0qBXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B Validity Not Before: Dec 19 00:02:11 2025 GMT Not After : Dec 26 00:02:11 2025 GMT Subject: CN=69449603-9d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:84:a4:ac:8a:b2:78:b8:ce:89:e3:e1:09: 30:8d:95:02:f5:1d:d1:5e:cd:a1:fb:69:88:ba:d7: 8b:53:12:21:4d:ce:4b:3f:81:0c:93:c8:22:66:da: 03:91:77:72:af:81:14:fe:56:79:f7:2c:d8:cf:d6: ef:04:05:8c:38:31:e0:62:53:99:44:92:f1:82:6a: 55:9e:69:8b:46:c4:0e:1f:45:5a:a4:c8:b8:a6:41: 81:7a:99:a1:eb:73:12:8a:6a:52:fb:96:24:fd:d1: b8:97:2b:3e:b1:34:e7:1d:11:11:d7:05:10:98:90: 7f:29:e9:fb:e6:32:46:51:e1:2f:42:19:e7:38:5c: 15:a9:b6:39:61:6a:ac:2c:4e:6e:ab:28:dc:d3:3e: bb:13:6a:eb:09:3f:01:94:cf:40:74:93:c9:71:0c: d2:fd:6d:5d:d6:37:d1:cd:49:46:3d:a1:77:c9:6c: a0:96:96:e2:d9:b3:54:eb:a7:3c:c6:14:49:8b:6d: fa:82:61:50:92:f1:2d:46:90:8e:82:43:bf:d1:07: 62:72:8a:78:38:fd:7e:de:eb:46:9b:37:54:a8:ff: d9:84:a5:b3:3b:41:3e:43:49:5e:a0:b5:3a:ee:3a: ad:83:c4:71:0d:d8:a5:11:97:c9:1f:78:36:08:32: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:68:24:E2:D7:1E:45:09:31:F2:C7:FE:65:9F:CF:59:8E:B4:D0:8B X509v3 Authority Key Identifier: keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b2:f8:34:64:1b:ab:ff:31:61:77:7f:c6:7b:22:61:a7:4a: 8d:76:18:ec:31:4c:8c:35:ba:09:cc:8e:78:69:a4:f6:ba:ab: a2:0c:16:28:d4:52:8a:50:57:19:01:e2:7b:e0:d7:ca:4f:43: 59:6d:0b:4c:15:56:ce:ff:cb:ca:d4:de:c9:de:b7:e1:72:09: c7:07:b3:84:35:66:e2:7a:74:23:f3:df:14:60:f5:4d:b4:62: 8d:f3:e9:9d:49:10:7c:e6:b3:e7:ba:f3:6c:b7:84:7d:aa:c1: c5:03:f4:ef:a2:5b:3b:1b:31:c9:6d:ed:8c:82:d4:27:b4:88: 89:6c:31:23:53:c3:06:21:3e:54:8c:47:ae:0c:96:1d:72:1e: b0:df:cc:7e:87:67:e4:34:0a:67:59:da:2b:47:56:a1:91:5f: 95:cc:02:48:41:f6:dc:e4:1f:f7:da:70:97:2d:66:c6:87:d8: 70:be:40:6c:91:cc:3f:6f:b1:32:d4:72:bc:3e:81:6a:d6:b5: b2:b7:4a:35:bc:51:75:2e:db:26:4b:73:d8:83:c7:38:72:52: f5:ff:64:fe:b3:73:55:33:e3:3a:41:ba:f9:8e:57:31:f5:ce: 6a:80:7d:90:bb:9a:88:01:b8:e6:82:1a:1e:78:57:d2:e7:65: 57:ac:be:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5 Qjg3MERFMUIwHhcNMjUxMjE5MDAwMjExWhcNMjUxMjI2MDAwMjExWjAYMRYwFAYD VQQDDA02OTQ0OTYwMy05ZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEuEpKyKsni4zonj4QkwjZUC9R3RXs2h+2mIuteLUxIhTc5LP4EMk8giZtoD kXdyr4EU/lZ59yzYz9bvBAWMODHgYlOZRJLxgmpVnmmLRsQOH0VapMi4pkGBepmh 63MSimpS+5Yk/dG4lys+sTTnHRER1wUQmJB/Ken75jJGUeEvQhnnOFwVqbY5YWqs LE5uqyjc0z67E2rrCT8BlM9AdJPJcQzS/W1d1jfRzUlGPaF3yWyglpbi2bNU66c8 xhRJi236gmFQkvEtRpCOgkO/0Qdicop4OP1+3utGmzdUqP/ZhKWzO0E+Q0leoLU6 7jqtg8RxDdilEZfJH3g2CDL5vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxoJOLX HkUJMfLH/mWfz1mOtNCLMB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2 QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNGOS8xQ0Y1OTc0NkM2QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpD Tnl4T0NoRGdZM21iaHczaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRsvg0ZBur/zFhd3/GeyJhp0qNdhjsMUyMNboJzI54aaT2uquiDBYo 1FKKUFcZAeJ74NfKT0NZbQtMFVbO/8vK1N7J3rfhcgnHB7OENWbienQj898UYPVN tGKN8+mdSRB85rPnuvNst4R9qsHFA/Tvols7GzHJbe2MgtQntIiJbDEjU8MGIT5U jEeuDJYdch6w38x+h2fkNApnWdorR1ahkV+VzAJIQfbc5B/32nCXLWbGh9hwvkBs kcw/b7Ey1HK8PoFq1rWyt0o1vFF1LtsmS3PYg8c4clL1/2T+s3NVM+M6Qbr5jlcx 9c5qgH2Qu5qIAbjmghoeeFfS52VXrL5j -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:51 2025 by rpki-client