This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: XD0cebCNWzADjE5VXj1tKfhjRbQUUieVJBanCL8hiDk= Subject key identifier: 58:3B:5B:1F:70:C4:8E:3C:3B:92:4D:27:DE:25:F0:92:24:16:CB:AA Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 10B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 109D Signing time: Mon 22 Dec 2025 17:02:53 +0000 Manifest this update: Mon 22 Dec 2025 17:02:52 +0000 Manifest next update: Mon 29 Dec 2025 17:02:52 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: H0bVm2FoBX75z7MV8ObQWO7sHuarzSrJoQkO4kOZwMQ=) 2: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) 3: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4274 (0x10b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Dec 22 17:02:52 2025 GMT Not After : Dec 29 17:02:52 2025 GMT Subject: CN=694979bd-4bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:dd:9f:37:a5:2f:b0:c9:44:c6:2d:be:2b: bb:bf:4e:2a:3a:32:49:fb:02:05:83:67:86:b6:0b: e3:2f:59:3d:b0:b2:b1:1f:4e:69:c9:6e:79:42:26: 64:ec:f0:0e:35:00:55:53:14:2d:db:df:0c:83:a1: 3c:81:1c:44:07:8f:12:e1:a1:0c:d9:74:a3:f3:0b: dd:15:50:b5:6e:59:39:b6:f1:fd:0f:06:7f:10:de: df:ab:bd:1b:11:48:d2:99:29:41:82:93:7b:d5:01: f8:29:2f:c1:64:16:e2:0e:40:02:0e:17:19:49:32: d0:94:e2:34:64:84:4d:2f:78:07:2a:3a:25:e2:02: 36:13:55:66:af:6c:69:e4:ff:19:b7:a9:51:bf:36: c3:5f:de:d7:6e:1a:cd:8c:1f:af:d8:47:ac:96:96: 45:88:b8:c7:9c:9b:1a:8a:6a:04:3c:d2:0d:53:fc: 37:aa:60:0b:8a:77:b9:c1:81:87:79:d5:16:3f:84: 6f:0f:3e:cb:e1:69:55:b0:8b:b0:61:d4:db:8d:f4: ad:f2:e4:9c:67:16:ce:e7:53:29:f9:2d:cd:18:7f: b8:85:2c:31:36:6a:14:93:82:8a:43:d0:3e:32:83: 4e:9a:85:03:da:18:31:ed:4f:79:cd:03:dd:aa:75: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3B:5B:1F:70:C4:8E:3C:3B:92:4D:27:DE:25:F0:92:24:16:CB:AA X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fa:eb:c2:f4:c0:5f:f7:0e:69:57:28:ce:dd:52:dc:c8:de: 92:bd:91:67:5a:57:04:66:3d:18:3b:6f:01:9a:82:af:8a:b4: bb:4f:de:3e:c5:b9:ba:b8:48:20:43:af:70:9a:c1:6e:25:43: 8d:34:0f:b9:ba:6d:1d:79:d3:62:50:71:3c:cd:a0:f5:cc:a2: 19:77:f5:b3:e1:04:71:7e:51:ae:da:7b:f9:37:37:fd:b1:d8: 26:7a:a0:bd:27:cf:50:f7:a0:c3:35:ad:b3:10:ef:10:61:c7: e7:6e:2c:b4:68:0b:c0:3c:9b:24:17:b8:0e:91:7f:fb:2e:e8: 5b:26:8f:f4:b0:60:58:b9:90:03:eb:a7:d6:3a:21:32:dd:ed: aa:8d:01:e0:a5:54:84:a8:c3:a5:8c:ce:02:db:f7:75:7e:e9: 68:dd:3f:41:7b:18:35:21:cc:89:7c:5a:50:9d:4d:26:81:60: c1:14:3d:18:09:26:99:3c:3c:86:70:f5:5b:44:c5:50:11:e6: 23:60:44:2c:4e:34:ff:5f:62:7f:25:62:39:6e:e9:e0:7e:27: 2e:51:f8:8d:af:9a:a7:56:83:9f:24:4d:22:8e:76:ab:8f:38: 5c:e9:fd:85:f2:14:9e:43:8a:31:02:e4:fb:10:f3:b9:7b:23: e9:21:08:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjUxMjIyMTcwMjUyWhcNMjUxMjI5MTcwMjUyWjAYMRYwFAYD VQQDDA02OTQ5NzliZC00YmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxafdnzelL7DJRMYtviu7v04qOjJJ+wIFg2eGtgvjL1k9sLKxH05pyW55QiZk 7PAONQBVUxQt298Mg6E8gRxEB48S4aEM2XSj8wvdFVC1blk5tvH9DwZ/EN7fq70b EUjSmSlBgpN71QH4KS/BZBbiDkACDhcZSTLQlOI0ZIRNL3gHKjol4gI2E1Vmr2xp 5P8Zt6lRvzbDX97XbhrNjB+v2EeslpZFiLjHnJsaimoEPNINU/w3qmALine5wYGH edUWP4RvDz7L4WlVsIuwYdTbjfSt8uScZxbO51Mp+S3NGH+4hSwxNmoUk4KKQ9A+ MoNOmoUD2hgx7U95zQPdqnUxWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFg7Wx9w xI48O5JNJ94l8JIkFsuqMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6+uvC9MBf9w5pVyjO3VLcyN6SvZFnWlcEZj0YO28BmoKvirS7T94+ xbm6uEggQ69wmsFuJUONNA+5um0dedNiUHE8zaD1zKIZd/Wz4QRxflGu2nv5Nzf9 sdgmeqC9J89Q96DDNa2zEO8QYcfnbiy0aAvAPJskF7gOkX/7LuhbJo/0sGBYuZAD 66fWOiEy3e2qjQHgpVSEqMOljM4C2/d1fulo3T9Bexg1IcyJfFpQnU0mgWDBFD0Y CSaZPDyGcPVbRMVQEeYjYEQsTjT/X2J/JWI5bungficuUfiNr5qnVoOfJE0ijnar jzhc6f2F8hSeQ4oxAuT7EPO5eyPpIQgc -----END CERTIFICATE-----Generated at Wed Dec 24 15:59:11 2025 by rpki-client