This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft File: D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft (raw, json) Hash identifier: etOrEtwFUPAbnN6BKjFA0zQMpaH9xBFYwUEh6Xptw6U= Subject key identifier: C7:2A:3C:95:5F:A3:BF:81:B4:E8:D7:58:39:73:F2:6D:05:29:3A:35 Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 Certificate issuer: /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft Manifest number: 08 Signing time: Wed 03 Dec 2025 06:11:27 +0000 Manifest this update: Wed 03 Dec 2025 06:11:27 +0000 Manifest next update: Wed 10 Dec 2025 06:11:27 +0000 Files and hashes: 1: D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl (hash: 20p4/Bh2xI0l/J2uXWf4Kgf7yzf0obG6quoM73bmpxg=) 2: 970D44E2C54F11F0A154DD09C4F9AE02.roa (hash: o7zQq18IhpXsDy9Xt660Zyl7qDNpUt6Y0sraKZYBzJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Validity Not Before: Dec 3 06:11:27 2025 GMT Not After : Dec 10 06:11:27 2025 GMT Subject: CN=692fd48f-3d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:c9:45:78:9a:c9:c9:27:ba:2e:e4:46:a0: fd:7b:6e:f1:9b:1c:41:b1:9d:d1:82:64:03:2e:e2: 89:8f:26:44:81:5f:c9:19:d5:3d:b8:b7:ed:18:cd: 82:70:29:aa:b3:5b:7e:bc:37:94:8d:21:f0:f9:6a: 5f:af:be:34:da:16:cf:17:be:ce:0b:83:54:34:69: d5:6b:17:d4:75:aa:44:65:d6:0c:78:9a:2f:b1:85: d0:b9:80:e5:4b:d0:06:69:3c:84:c9:25:c0:57:0d: 42:76:0c:44:c1:b6:40:91:d9:f9:95:50:f4:96:58: a3:cb:8b:75:24:77:40:01:83:10:e4:4f:b0:d7:ec: 56:27:eb:7d:cd:0a:da:e9:5c:bb:09:92:0e:18:90: da:d3:a1:5e:9a:15:25:18:2b:d9:13:fb:e7:29:f1: 5d:a7:69:54:b6:44:6a:6a:86:e4:4e:5f:8d:48:bb: f9:6e:3c:34:ed:4c:24:56:a7:ff:a1:50:72:a1:bc: a5:73:dc:24:d4:a7:39:5e:f8:d6:8c:28:d0:d3:af: 74:40:71:af:c6:5c:11:ae:59:0d:53:3b:89:5d:22: d6:fa:9e:c2:28:6c:bb:79:85:a7:25:5b:26:d1:db: 95:27:d2:44:85:e0:e8:9c:44:aa:48:92:6a:30:8a: ad:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2A:3C:95:5F:A3:BF:81:B4:E8:D7:58:39:73:F2:6D:05:29:3A:35 X509v3 Authority Key Identifier: keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a3:c8:2a:7d:ba:80:3f:4f:e8:94:9d:a2:5b:22:a2:f2:73: 47:47:2a:e8:ee:2e:3e:e3:59:db:3a:e4:92:88:1f:c5:d0:24: a9:5b:63:97:4b:f3:1b:56:d5:f6:66:5a:20:c1:f6:85:c7:51: 29:db:d2:91:61:b1:84:a5:7e:cb:1e:8c:37:12:8f:82:b1:be: 67:5b:69:69:56:28:6e:22:58:73:85:49:d6:39:d7:93:9a:25: 00:16:ba:08:2f:1b:5d:61:71:fb:9c:aa:b9:bb:97:93:00:c2: 00:06:be:85:67:e0:25:44:1c:2b:c5:b8:51:6e:9f:4c:1e:2b: 69:1d:cc:8c:c0:23:50:ab:1c:1c:d4:10:00:7e:16:0e:42:63: e1:a8:d0:f2:e2:39:61:f4:f9:ec:ff:8b:c3:dc:64:d2:b0:3e: e4:fe:59:cf:a4:41:d2:73:d5:df:22:c5:ee:79:cf:80:e7:76: 0b:ab:ff:e8:f8:94:02:fb:cc:92:18:21:5e:99:14:ab:ef:14: 1d:a2:4f:3c:55:59:b2:73:2a:b7:be:7c:2d:a6:6f:16:95:68: 4e:77:51:10:bf:61:1f:b2:34:12:e8:d8:a7:5c:0a:10:8c:cd: de:1a:2a:3d:e9:a4:a7:2c:c4:ec:46:25:ae:8b:b5:10:1c:b8: c0:5d:ff:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzA2RjExMC8GA1UEBRMoMEY1MzIwOTZFN0Y1OERFNDAxRjI2NTA3NkRFRkI1Qzgy RTcxRjNFMjAeFw0yNTEyMDMwNjExMjdaFw0yNTEyMTAwNjExMjdaMBgxFjAUBgNV BAMTDTY5MmZkNDhmLTNkMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/v8lFeJrJySe6LuRGoP17bvGbHEGxndGCZAMu4omPJkSBX8kZ1T24t+0YzYJw KaqzW368N5SNIfD5al+vvjTaFs8Xvs4Lg1Q0adVrF9R1qkRl1gx4mi+xhdC5gOVL 0AZpPITJJcBXDUJ2DETBtkCR2fmVUPSWWKPLi3Ukd0ABgxDkT7DX7FYn633NCtrp XLsJkg4YkNrToV6aFSUYK9kT++cp8V2naVS2RGpqhuROX41Iu/luPDTtTCRWp/+h UHKhvKVz3CTUpzle+NaMKNDTr3RAca/GXBGuWQ1TO4ldItb6nsIobLt5haclWybR 25Un0kSF4OicRKpIkmowiq0LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxyo8lV+j v4G06NdYOXPybQUpOjUwHwYDVR0jBBgwFoAUD1Mgluf1jeQB8mUHbe+1yC5x8+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzMDZGLzYxQzI2OEQ2QzU0 RTExRjA4ODU4NEY4NkM0RjlBRTAyL0QxTWdsdWYxamVRQjhtVUhiZS0xeUM1eDgt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFNZ2x1ZjFqZVFCOG1VSGJlLTF5QzV4OC1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz MDZGLzYxQzI2OEQ2QzU0RTExRjA4ODU4NEY4NkM0RjlBRTAyL0QxTWdsdWYxamVR QjhtVUhiZS0xeUM1eDgtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB2jyCp9uoA/T+iUnaJbIqLyc0dHKujuLj7jWds65JKIH8XQJKlbY5dL 8xtW1fZmWiDB9oXHUSnb0pFhsYSlfssejDcSj4KxvmdbaWlWKG4iWHOFSdY515Oa JQAWuggvG11hcfucqrm7l5MAwgAGvoVn4CVEHCvFuFFun0weK2kdzIzAI1CrHBzU EAB+Fg5CY+Go0PLiOWH0+ez/i8PcZNKwPuT+Wc+kQdJz1d8ixe55z4Dndgur/+j4 lAL7zJIYIV6ZFKvvFB2iTzxVWbJzKre+fC2mbxaVaE53URC/YR+yNBLo2KdcChCM zd4aKj3ppKcsxOxGJa6LtRAcuMBd/34= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:08 2025 by rpki-client