This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft File: 1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json) Hash identifier: vLzbu8M3y30Uxoj8iqrRK2acTexPUPKRd+mW4nAILZ0= Subject key identifier: 3F:0B:F0:EE:C9:89:96:F0:44:51:4B:56:BB:46:C5:C1:1A:3A:2D:1C Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 Certificate issuer: /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft Manifest number: 05 Signing time: Wed 03 Dec 2025 06:16:04 +0000 Manifest this update: Wed 03 Dec 2025 06:16:04 +0000 Manifest next update: Wed 10 Dec 2025 06:16:04 +0000 Files and hashes: 1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: jKcdq5d77sG9iSgD+KkoZ4Q42lbU5vJz5spgfFOamOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Validity Not Before: Dec 3 06:16:04 2025 GMT Not After : Dec 10 06:16:04 2025 GMT Subject: CN=692fd5a4-77a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:ce:ab:42:ef:9f:1b:c0:21:72:41:1c:e2: b6:98:c8:40:75:81:d2:47:f6:57:84:f9:56:c1:58: c5:05:1d:0e:bd:9b:6b:12:6d:3e:6c:e6:38:c9:dd: ce:a3:24:7e:75:b1:a7:c7:2c:9a:d4:c2:17:bf:f5: 9f:ef:34:68:38:63:b1:62:8d:e1:54:2d:18:43:b9: 6b:cf:9a:8f:fd:fa:0d:55:22:2c:13:a2:ec:37:3d: 37:23:d6:dd:fd:29:2e:f2:bc:88:af:82:f7:d5:73: d0:28:7f:20:53:f0:5c:a6:24:db:ef:89:3e:07:33: e1:46:41:84:53:4f:ff:5a:6f:ea:e0:18:47:9c:0d: 67:59:dc:7f:ff:3b:34:64:0c:7f:4c:f2:82:a1:1e: 88:e4:d7:d0:96:c4:20:0f:0b:27:7c:e2:72:33:e9: 8b:d4:9c:5b:35:a7:4b:56:e2:bc:4c:4d:2c:0c:c9: 9f:0d:fd:22:f1:b5:38:3a:c4:43:7b:5f:13:e5:32: 38:b0:ef:61:d2:74:0e:e1:94:de:cb:fe:e4:4b:3b: 5e:de:d4:87:dc:b3:07:59:e9:b0:81:6a:d2:03:0c: bb:46:36:dc:f5:f6:b8:8d:94:05:d2:d0:1e:9f:be: bf:5a:97:01:54:e9:47:1d:24:92:5d:97:ab:ca:65: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0B:F0:EE:C9:89:96:F0:44:51:4B:56:BB:46:C5:C1:1A:3A:2D:1C X509v3 Authority Key Identifier: keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:0b:33:8e:b2:8a:2f:3c:97:34:83:eb:b5:09:c8:de:69:37: 3b:df:30:c8:13:79:a9:7e:05:ff:e8:81:cb:5a:aa:d0:65:2e: e3:a3:36:4f:a5:44:f1:72:e1:f0:85:45:db:8d:fe:4a:fc:33: d9:17:e1:51:cf:30:2b:85:b7:0d:a0:32:c2:53:c6:ad:42:8a: 02:c9:6c:71:80:9f:eb:76:96:c5:d2:ba:4a:13:77:b8:84:a5: 5d:88:75:6c:db:71:d3:6d:42:d1:83:d4:f0:7e:67:95:cc:43: 0b:04:05:92:8d:59:20:df:bd:7f:d2:6e:07:fb:3a:ed:58:60: 8c:50:c4:93:4d:ee:ea:32:d9:81:aa:09:91:85:36:8d:35:19: 76:7a:c7:a0:ab:2d:30:0f:03:77:54:8e:4f:e8:cd:e3:48:bb: d7:c6:30:d0:82:cb:75:32:cd:c2:39:53:e9:e3:b1:46:a9:1a: 66:2c:44:a0:75:26:cb:8a:8b:d8:32:24:75:36:90:b4:7f:ad: 78:a0:d1:18:73:ee:a2:03:39:28:f2:72:a5:c4:24:5c:89:66: ea:e2:8b:be:59:82:23:7a:42:b0:4e:38:f7:c7:a0:99:fc:80: 52:86:c8:65:31:5a:a7:53:9c:38:f1:e6:a6:f0:4f:fc:f1:a4: 4a:ab:9a:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDdFRDExMC8GA1UEBRMoRDVEMEQ4RTFGMDNENTEwMDg4OUY0MTgwQTY1RjU1MEEw RDU4MEI4NTAeFw0yNTEyMDMwNjE2MDRaFw0yNTEyMTAwNjE2MDRaMBgxFjAUBgNV BAMTDTY5MmZkNWE0LTc3YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDfs6rQu+fG8AhckEc4raYyEB1gdJH9leE+VbBWMUFHQ69m2sSbT5s5jjJ3c6j JH51safHLJrUwhe/9Z/vNGg4Y7FijeFULRhDuWvPmo/9+g1VIiwTouw3PTcj1t39 KS7yvIivgvfVc9AofyBT8FymJNvviT4HM+FGQYRTT/9ab+rgGEecDWdZ3H//OzRk DH9M8oKhHojk19CWxCAPCyd84nIz6YvUnFs1p0tW4rxMTSwMyZ8N/SLxtTg6xEN7 XxPlMjiw72HSdA7hlN7L/uRLO17e1IfcswdZ6bCBatIDDLtGNtz19riNlAXS0B6f vr9alwFU6UcdJJJdl6vKZSnNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPwvw7smJ lvBEUUtWu0bFwRo6LRwwHwYDVR0jBBgwFoAU1dDY4fA9UQCIn0GApl9VCg1YC4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0N0VEL0M5QzYyREE0Q0I4 MDExRjBBNjhFNTQxQ0M0RjlBRTAyLzFkRFk0ZkE5VVFDSW4wR0FwbDlWQ2cxWUM0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWREWTRmQTlVUUNJbjBHQXBsOVZDZzFZQzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 N0VEL0M5QzYyREE0Q0I4MDExRjBBNjhFNTQxQ0M0RjlBRTAyLzFkRFk0ZkE5VVFD SW4wR0FwbDlWQ2cxWUM0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIULM46yii88lzSD67UJyN5pNzvfMMgTeal+Bf/ogctaqtBlLuOjNk+l RPFy4fCFRduN/kr8M9kX4VHPMCuFtw2gMsJTxq1CigLJbHGAn+t2lsXSukoTd7iE pV2IdWzbcdNtQtGD1PB+Z5XMQwsEBZKNWSDfvX/Sbgf7Ou1YYIxQxJNN7uoy2YGq CZGFNo01GXZ6x6CrLTAPA3dUjk/ozeNIu9fGMNCCy3UyzcI5U+njsUapGmYsRKB1 JsuKi9gyJHU2kLR/rXig0Rhz7qIDOSjycqXEJFyJZurii75ZgiN6QrBOOPfHoJn8 gFKGyGUxWqdTnDjx5qbwT/zxpEqrmks= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:21 2025 by rpki-client