This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft File: dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json) Hash identifier: x7j0UWzet/R0tsGNtFwemGAgLAG9MWjgbdBUD9K2DeU= Subject key identifier: 30:74:53:CD:00:D6:EE:C7:64:D8:27:2B:7A:19:AE:1B:18:57:D6:D0 Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF Certificate issuer: /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft Manifest number: 021A Signing time: Tue 23 Dec 2025 01:12:08 +0000 Manifest this update: Tue 23 Dec 2025 01:12:08 +0000 Manifest next update: Tue 30 Dec 2025 01:12:08 +0000 Files and hashes: 1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: 5JsgvsW3rJBfMWMhvDO5sSop7EJ44ajEeEzAcDJjLkg=) 2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: DPyqPkT0neP2hvNy+hn6VREMN9M60vGzkrQgZGHU27c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Validity Not Before: Dec 23 01:12:08 2025 GMT Not After : Dec 30 01:12:08 2025 GMT Subject: CN=6949ec68-d1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:af:3d:3e:2c:47:17:0f:90:77:12:22:33: e0:1a:65:29:84:0e:03:60:5b:64:7d:d7:9f:02:a3: 88:45:df:93:4a:b1:3f:ce:dc:0a:4c:12:c2:68:96: 56:fb:86:c5:1c:81:cd:b0:bf:d3:a0:b1:e2:78:9b: aa:64:be:06:49:d9:4f:44:e7:06:da:ef:57:c4:a9: 09:2f:40:33:2d:80:fe:eb:c5:4d:6f:87:a5:cc:7d: 38:63:68:80:5f:2a:b8:ff:20:91:67:57:3f:3b:2d: 1a:0f:92:de:16:85:06:31:b5:fe:6e:c8:e6:52:61: ed:27:80:8b:fa:47:94:4d:6d:bb:65:e6:fe:cf:17: 04:b5:ad:75:36:ef:8d:3e:e2:ea:b7:d6:48:8c:d0: aa:f8:60:8f:e3:58:cf:89:00:d8:2e:f1:5b:5b:f6: b9:04:2a:75:8a:17:19:a4:6c:5a:43:79:0a:29:d1: 56:8e:d4:73:47:38:fd:be:bd:58:e0:ce:7a:ce:2b: 36:15:e0:9f:ed:74:d8:15:41:5e:e1:3f:4a:4b:e0: c3:a3:63:a7:3a:ed:3c:8f:ec:10:e2:61:6f:83:d3: 63:bc:22:1f:0e:b3:8b:c4:a5:c3:6e:61:c1:12:e9: e8:23:e0:fd:19:ed:1d:e5:3c:b6:16:a5:82:66:28: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:74:53:CD:00:D6:EE:C7:64:D8:27:2B:7A:19:AE:1B:18:57:D6:D0 X509v3 Authority Key Identifier: keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:53:f0:ab:ff:86:61:d2:b5:cb:55:16:5b:2c:72:49:c5:4b: 50:40:d8:28:c9:da:9b:f6:e2:27:70:0f:10:94:12:69:8a:f0: c6:8a:af:0d:c2:89:de:35:a5:dd:40:38:04:89:2f:07:8f:40: dc:2b:04:de:de:af:08:81:b2:67:4b:e4:a3:21:3a:73:07:9d: 07:d9:60:31:5f:9c:f7:24:c6:06:5b:bf:9d:d0:6e:3d:99:db: 2d:94:99:ba:8c:6d:d9:a6:3f:64:97:df:a4:66:56:e7:79:dd: 57:b3:18:ee:58:37:9f:4b:67:83:10:b5:cf:12:e5:91:70:87: 6c:e9:51:96:11:64:c4:33:ba:f5:a1:c7:a0:78:14:69:ef:32: a6:fc:d8:6c:5c:31:f3:d0:6d:1d:d9:03:1c:24:cc:73:be:ff: 8e:14:9a:c9:32:01:6c:65:55:75:fc:e2:a8:ad:e3:26:aa:73: b0:08:a1:c2:42:14:34:b0:40:bd:69:0b:c8:74:96:b8:ee:4f: fa:a6:87:4c:5f:29:b5:8f:b0:2b:71:3b:68:92:44:63:f6:33: 98:aa:01:4e:80:11:f2:d7:ae:e9:f1:25:36:b9:7c:8c:cf:73: e3:64:e1:b0:25:4f:0f:f4:ae:22:77:73:57:43:5f:fa:8b:6a: 48:c2:b1:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI4RjMxMTAvBgNVBAUTKDc2NjYxMDA4REFDODkyODRDNTM3RjJEQ0UwQTkyMEJB OTRFMDc4Q0YwHhcNMjUxMjIzMDExMjA4WhcNMjUxMjMwMDExMjA4WjAYMRYwFAYD VQQDDA02OTQ5ZWM2OC1kMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNyvPT4sRxcPkHcSIjPgGmUphA4DYFtkfdefAqOIRd+TSrE/ztwKTBLCaJZW +4bFHIHNsL/ToLHieJuqZL4GSdlPROcG2u9XxKkJL0AzLYD+68VNb4elzH04Y2iA Xyq4/yCRZ1c/Oy0aD5LeFoUGMbX+bsjmUmHtJ4CL+keUTW27Zeb+zxcEta11Nu+N PuLqt9ZIjNCq+GCP41jPiQDYLvFbW/a5BCp1ihcZpGxaQ3kKKdFWjtRzRzj9vr1Y 4M56zis2FeCf7XTYFUFe4T9KS+DDo2OnOu08j+wQ4mFvg9NjvCIfDrOLxKXDbmHB EunoI+D9Ge0d5Ty2FqWCZijF9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDB0U80A 1u7HZNgnK3oZrhsYV9bQMB8GA1UdIwQYMBaAFHZmEAjayJKExTfy3OCpILqU4HjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjhGMy9DMjc5NThCOEE1 Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtvVEZOX0xjNEtrZ3VwVGdl TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtWVFDTnJJa29URk5fTGM0S2tndXBUZ2VNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjhGMy9DMjc5NThCOEE1Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtv VEZOX0xjNEtrZ3VwVGdlTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJU/Cr/4Zh0rXLVRZbLHJJxUtQQNgoydqb9uIncA8QlBJpivDGiq8N woneNaXdQDgEiS8Hj0DcKwTe3q8IgbJnS+SjITpzB50H2WAxX5z3JMYGW7+d0G49 mdstlJm6jG3Zpj9kl9+kZlbned1XsxjuWDefS2eDELXPEuWRcIds6VGWEWTEM7r1 ocegeBRp7zKm/NhsXDHz0G0d2QMcJMxzvv+OFJrJMgFsZVV1/OKoreMmqnOwCKHC QhQ0sEC9aQvIdJa47k/6podMXym1j7ArcTtokkRj9jOYqgFOgBHy167p8SU2uXyM z3PjZOGwJU8P9K4id3NXQ1/6i2pIwrEM -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:54 2025 by rpki-client