This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft File: DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json) Hash identifier: 2fdy+tZyIxV065Tav4qgSZP9XNl1o1fLKEpc4qMh6g4= Subject key identifier: A9:BB:B2:F0:1D:E4:6E:99:5B:18:2D:46:AA:91:97:B2:C3:E4:B4:F0 Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB Certificate issuer: /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft Manifest number: 05A8 Signing time: Mon 22 Dec 2025 22:16:14 +0000 Manifest this update: Mon 22 Dec 2025 22:16:13 +0000 Manifest next update: Mon 29 Dec 2025 22:16:13 +0000 Files and hashes: 1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: Oj5jcFEmrVau0nNum7jTDyYcx72kTFb7Lr9hQC2zXf8=) 2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: B73jK8rs3UShIkXEqnOr+hGZIISFb8px20z32h4py5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C3E, serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Validity Not Before: Dec 22 22:16:13 2025 GMT Not After : Dec 29 22:16:13 2025 GMT Subject: CN=6949c32e-731f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:28:d1:7b:3e:13:29:5f:0b:94:59:91:95: ad:ab:77:86:5c:b6:08:ef:0a:cc:dd:db:b3:ad:59: f3:2f:af:59:f2:9b:9c:cb:c4:a0:ff:94:6e:d0:12: 54:b1:c5:33:e1:ff:72:6a:43:ac:2c:dc:48:fe:ce: ab:1f:02:be:3d:8d:f4:ed:a7:30:04:cb:92:f4:b7: b8:2c:33:5e:c0:55:7e:e0:45:1d:22:d8:ea:cd:ca: ba:d3:d2:8f:5a:75:87:9f:38:9b:99:ce:4b:95:aa: 3c:22:dd:7f:b2:7d:d2:85:68:ea:ab:14:fb:bd:6d: a1:5c:a3:ce:71:d8:b9:93:d0:35:7a:a7:32:0b:f6: aa:8a:ea:dc:3a:52:a0:86:c2:e7:4b:1c:9c:ec:0c: 02:db:dd:f8:12:42:9e:b0:7e:02:ef:6b:68:0e:de: fd:64:cd:4b:10:fd:a1:fe:48:69:f9:e5:84:ca:d5: c4:f7:74:6e:fb:52:5f:69:fe:be:3e:6f:08:45:5d: ee:45:bc:55:dc:2f:7f:a2:d6:69:b2:76:63:31:bd: 43:74:80:a7:79:83:c7:3a:a3:4c:6c:8c:29:f7:bf: 8a:19:fc:ec:e0:4f:3c:4d:6b:e9:f6:8c:08:4e:3d: 4c:41:34:43:81:41:7c:42:80:98:b6:a1:1d:55:ee: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BB:B2:F0:1D:E4:6E:99:5B:18:2D:46:AA:91:97:B2:C3:E4:B4:F0 X509v3 Authority Key Identifier: keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7d:76:08:8a:a4:ec:59:ec:ef:df:a9:d3:3c:17:43:90:8f: 61:b0:b4:d3:0f:8a:b6:97:00:d0:41:a4:d1:ac:10:7a:8b:55: be:e7:2b:f1:2e:c9:8d:5e:8a:bf:99:8c:da:3f:33:83:dc:7b: 95:f2:96:63:a7:ab:15:19:6f:b0:b8:51:45:ed:bc:9c:8b:c4: a7:87:d2:fa:46:ed:9a:c0:c2:20:64:2d:ee:b8:a9:a4:0f:d9: 2b:76:82:63:f5:08:e1:a3:87:3f:d5:ce:ab:4c:69:59:46:dd: 11:d0:6e:09:38:9c:77:a2:dd:39:05:d3:14:8e:0c:58:d2:79: d1:af:2e:17:a1:84:5b:9c:44:42:a7:a4:de:7c:ec:18:80:b4: 4a:d9:b4:cf:60:e7:fb:b8:4c:c5:e1:df:dc:49:9a:5f:f4:da: 39:9d:d5:75:05:83:e9:2a:0f:40:bf:59:a6:58:c2:aa:99:18: 30:fd:81:be:aa:7d:dc:b3:0c:e9:c8:90:5c:5b:dd:08:fc:eb: 42:9b:c1:3f:3d:7c:40:a7:1b:53:c5:5d:18:f7:63:57:c4:5e: a2:e1:62:ad:6b:bb:46:7f:fb:f2:ae:e5:9b:42:06:0b:16:f8: b6:ae:09:4e:e5:d7:d8:61:aa:c7:ac:fa:42:52:cc:0e:f3:e4: 44:e0:6b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDM0UxMTAvBgNVBAUTKDBDMEIxREQ1RjZBQjY0NEM1NzA3ODFBNDI5RTQ0ODA1 MDIxOEU5RUIwHhcNMjUxMjIyMjIxNjEzWhcNMjUxMjI5MjIxNjEzWjAYMRYwFAYD VQQDDA02OTQ5YzMyZS03MzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtK0o0Xs+EylfC5RZkZWtq3eGXLYI7wrM3duzrVnzL69Z8pucy8Sg/5Ru0BJU scUz4f9yakOsLNxI/s6rHwK+PY307acwBMuS9Le4LDNewFV+4EUdItjqzcq609KP WnWHnzibmc5Llao8It1/sn3ShWjqqxT7vW2hXKPOcdi5k9A1eqcyC/aqiurcOlKg hsLnSxyc7AwC2934EkKesH4C72toDt79ZM1LEP2h/khp+eWEytXE93Ru+1Jfaf6+ Pm8IRV3uRbxV3C9/otZpsnZjMb1DdICneYPHOqNMbIwp97+KGfzs4E88TWvp9owI Tj1MQTRDgUF8QoCYtqEdVe7kwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKm7svAd 5G6ZWxgtRqqRl7LD5LTwMB8GA1UdIwQYMBaAFAwLHdX2q2RMVweBpCnkSAUCGOnr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEMzRS9BODA3QzFDOEY0 MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpFeFhCNEdrS2VSSUJRSVk2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBc2QxZmFyWkV4WEI0R2tLZVJJQlFJWTZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEMzRS9BODA3QzFDOEY0MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpF eFhCNEdrS2VSSUJRSVk2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdfXYIiqTsWezv36nTPBdDkI9hsLTTD4q2lwDQQaTRrBB6i1W+5yvx LsmNXoq/mYzaPzOD3HuV8pZjp6sVGW+wuFFF7byci8Snh9L6Ru2awMIgZC3uuKmk D9krdoJj9Qjho4c/1c6rTGlZRt0R0G4JOJx3ot05BdMUjgxY0nnRry4XoYRbnERC p6TefOwYgLRK2bTPYOf7uEzF4d/cSZpf9No5ndV1BYPpKg9Av1mmWMKqmRgw/YG+ qn3cswzpyJBcW90I/OtCm8E/PXxApxtTxV0Y92NXxF6i4WKta7tGf/vyruWbQgYL Fvi2rglO5dfYYarHrPpCUswO8+RE4GvQ -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:59 2025 by rpki-client