This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json) Hash identifier: zi0GKbpVU9cAw5aodFeVEdNfnM8PTQRspqFnNKXIn3w= Subject key identifier: 1D:6F:BD:DC:86:CE:E1:AF:EB:CF:A6:73:0F:15:04:F7:44:B7:E4:C3 Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft Manifest number: 066F Signing time: Mon 22 Dec 2025 21:45:35 +0000 Manifest this update: Mon 22 Dec 2025 21:45:35 +0000 Manifest next update: Mon 29 Dec 2025 21:45:35 +0000 Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: ghEMGyPPX0JatdQyjknufxx4+J1bml2V8iiAg4Mf58o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Validity Not Before: Dec 22 21:45:35 2025 GMT Not After : Dec 29 21:45:35 2025 GMT Subject: CN=6949bbff-779a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:18:ee:35:06:35:ef:93:e3:86:dd:cc:a2: 70:30:10:bd:d9:2a:07:6e:30:76:6b:e9:b1:fd:e4: 3f:b6:d3:c7:62:33:12:5e:36:43:c7:92:f7:2f:85: dc:1e:bf:29:d3:e6:1f:d1:51:0a:7b:70:74:6e:b6: 8f:6e:a0:67:c2:8d:9e:80:39:0e:a9:ec:a2:64:6b: 41:4b:f7:e3:fb:b9:dd:6a:58:45:48:49:0e:92:55: f1:87:08:4f:bd:2d:99:f3:d3:68:d5:da:cb:7e:48: 45:23:fe:ae:1c:d1:ae:6c:95:e9:8f:04:34:09:ef: aa:88:4d:96:86:b6:44:ba:b1:2d:5c:67:5a:21:1f: 64:1b:a8:50:ea:9a:2d:c0:46:02:e5:aa:8e:04:e5: 9a:86:80:9f:0c:bd:28:99:0a:17:e6:33:16:dd:bc: 50:40:9e:68:49:ea:af:70:a5:54:4b:f3:53:33:e6: 7a:a8:35:88:0d:df:bf:88:f5:87:09:73:42:47:c2: 77:ed:43:d9:89:b4:df:0e:ef:39:d3:1f:38:58:50: c6:29:ed:ce:bd:a4:de:d5:f5:aa:30:17:c7:3f:c9: c0:e0:31:aa:fa:36:d6:6a:d6:84:d9:43:ac:82:8f: 6c:1d:d8:0c:0b:dc:5b:c7:2b:aa:4d:6c:20:38:a1: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:BD:DC:86:CE:E1:AF:EB:CF:A6:73:0F:15:04:F7:44:B7:E4:C3 X509v3 Authority Key Identifier: keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:25:44:09:81:c5:1b:e5:ba:0e:c8:c9:81:95:22:98:eb:8b: 52:fe:95:ea:a3:62:b0:05:76:1d:58:a6:7f:52:2c:75:a6:0a: 3a:99:aa:79:32:6b:f2:b2:3e:54:70:df:d3:9c:84:42:e7:62: 91:19:1c:fb:63:dc:06:ab:15:40:03:2b:4f:6d:86:39:07:40: 57:32:94:96:21:44:56:fb:fc:c2:bf:3d:63:3d:bb:9c:b8:a1: 2c:01:f9:56:e7:39:4e:2f:05:8e:be:60:6f:09:65:a3:87:1d: b3:8f:52:98:e7:9e:3c:cd:64:fd:2a:08:d7:73:ef:2c:57:36: 66:f1:e4:d7:66:67:f4:10:47:1c:a7:a1:e2:e7:6d:f6:23:0f: df:06:95:32:1d:78:27:2f:77:ae:12:a6:7b:e1:fb:aa:64:28: 79:7d:e6:55:1a:8f:4e:1b:72:6e:14:58:98:4a:0f:1a:11:59: 96:ae:15:59:da:3e:c6:6e:1c:1a:85:dc:ad:70:8d:77:83:1d: 06:83:d1:7b:16:81:98:66:d6:84:8d:cf:c5:89:41:ff:f6:8c: d5:19:5d:cf:28:ff:1f:cd:f0:49:8a:f1:52:7f:fb:16:97:e0: b7:40:b9:e3:a9:5d:b9:f6:27:04:ea:33:f3:40:10:49:34:99: dd:8b:15:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC MUQ1ODgzNjkwHhcNMjUxMjIyMjE0NTM1WhcNMjUxMjI5MjE0NTM1WjAYMRYwFAYD VQQDDA02OTQ5YmJmZi03NzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlO8Y7jUGNe+T44bdzKJwMBC92SoHbjB2a+mx/eQ/ttPHYjMSXjZDx5L3L4Xc Hr8p0+Yf0VEKe3B0braPbqBnwo2egDkOqeyiZGtBS/fj+7ndalhFSEkOklXxhwhP vS2Z89No1drLfkhFI/6uHNGubJXpjwQ0Ce+qiE2WhrZEurEtXGdaIR9kG6hQ6pot wEYC5aqOBOWahoCfDL0omQoX5jMW3bxQQJ5oSeqvcKVUS/NTM+Z6qDWIDd+/iPWH CXNCR8J37UPZibTfDu850x84WFDGKe3OvaTe1fWqMBfHP8nA4DGq+jbWataE2UOs go9sHdgMC9xbxyuqTWwgOKFMdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1vvdyG zuGv68+mcw8VBPdEt+TDMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2 MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O OGJBQXBEMGZpUy14MVlnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcJUQJgcUb5boOyMmBlSKY64tS/pXqo2KwBXYdWKZ/Uix1pgo6map5 Mmvysj5UcN/TnIRC52KRGRz7Y9wGqxVAAytPbYY5B0BXMpSWIURW+/zCvz1jPbuc uKEsAflW5zlOLwWOvmBvCWWjhx2zj1KY5548zWT9KgjXc+8sVzZm8eTXZmf0EEcc p6Hi5232Iw/fBpUyHXgnL3euEqZ74fuqZCh5feZVGo9OG3JuFFiYSg8aEVmWrhVZ 2j7GbhwahdytcI13gx0Gg9F7FoGYZtaEjc/FiUH/9ozVGV3PKP8fzfBJivFSf/sW l+C3QLnjqV259icE6jPzQBBJNJndixUB -----END CERTIFICATE-----Generated at Tue Dec 23 15:52:58 2025 by rpki-client