This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json) Hash identifier: g1U2gHqIqzPIfgfYvad1HKYIMFVwpROZkFUKV4ytFds= Subject key identifier: D6:52:8A:DC:1A:C1:CA:D3:D9:17:9D:83:F3:13:3A:9B:75:06:63:4A Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft Manifest number: 22 Signing time: Wed 03 Dec 2025 05:54:58 +0000 Manifest this update: Wed 03 Dec 2025 05:54:57 +0000 Manifest next update: Wed 10 Dec 2025 05:54:57 +0000 Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: YGpkGmJugZT9j3QEH9aiwqzG2fywZh7NVK+IEqQpe10=) 2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: /OONPuUDLnHhTMEraEKTABbJUmrt5brSg9FbXWyrZbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Validity Not Before: Dec 3 05:54:57 2025 GMT Not After : Dec 10 05:54:57 2025 GMT Subject: CN=692fd0b2-a75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:51:c6:40:8c:7d:de:06:3a:25:1a:f0:a9:bd: 79:cd:a8:63:ae:32:c3:7f:ee:06:da:c5:f5:cd:c8: ae:9d:60:21:0c:bd:d3:05:bb:c3:5f:0d:5c:bf:40: 4e:fa:3e:49:d4:d0:1f:ed:74:87:f1:e5:98:3d:10: 05:0c:a9:d6:10:fd:e6:15:b4:ed:db:db:a9:71:1f: f0:a5:34:9e:ff:04:2b:00:f9:ec:61:c4:9b:22:6b: 0c:02:8b:76:8b:a6:88:4d:5a:39:af:0e:67:02:b8: 4f:73:ce:cf:5b:0e:ff:94:31:d0:d4:a0:af:61:2f: 13:7f:3a:f9:01:ca:95:e4:cc:89:4a:cb:bb:f1:97: e2:6e:73:1c:dd:2f:ac:f1:7c:3b:0f:f9:1a:0d:aa: 7a:9b:dc:b5:ff:e2:30:be:b9:8a:c4:35:63:be:30: b1:29:9e:54:cc:e7:6d:08:88:ae:ec:e1:b5:17:2f: ca:91:1c:a5:41:58:d6:ad:5d:8a:b1:0e:67:4b:85: 4b:a6:19:31:45:cf:30:02:0d:26:f7:c4:ce:4e:0d: 05:0f:d6:6a:33:be:20:43:e3:f5:4a:6b:01:21:43: a2:73:ed:d0:c4:5e:c1:cd:1b:1a:3a:5d:ea:f9:32: 2c:96:4c:0a:57:78:df:a5:fa:1c:0c:16:0b:f8:da: 58:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:52:8A:DC:1A:C1:CA:D3:D9:17:9D:83:F3:13:3A:9B:75:06:63:4A X509v3 Authority Key Identifier: keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9f:0c:c5:6e:48:46:cd:1a:ea:55:ff:eb:c0:88:3d:b9:bf: 1f:bc:9a:ca:c0:96:31:97:d7:76:8e:70:7a:7d:d8:d6:37:0f: 81:31:36:4d:e7:78:18:1a:a4:72:99:56:a8:b8:e5:08:56:98: 3a:b2:aa:22:b9:14:5f:ac:c6:e0:3f:a3:08:2d:22:06:0c:7c: 7f:3d:71:d6:70:cb:f6:26:ee:a5:c4:1a:6e:06:6a:5e:ac:67: d1:8e:dc:ce:92:67:84:85:64:13:89:e2:5c:af:20:97:84:ec: 45:52:81:e1:c2:f7:1a:bb:5f:78:d9:27:c0:c3:d1:65:53:76: 44:bf:26:f0:5e:27:26:87:72:8a:45:d2:94:d7:4a:25:d6:0b: 52:f9:82:41:3d:54:87:70:47:c1:6d:6f:6f:fd:d9:fe:fb:48: ca:f0:05:23:ed:39:fd:22:f0:ad:25:ae:b7:a0:e3:52:39:94: 41:05:0c:bc:79:70:80:a0:51:34:de:ab:25:2e:22:59:66:d6: 04:d4:a9:79:10:d1:f0:15:f3:5b:81:23:8b:04:eb:1f:8a:74: d9:89:54:35:a4:36:cd:d5:7b:40:7c:d8:38:c9:1d:1f:50:58: a3:b8:a8:45:23:a3:d7:bc:da:83:13:ba:d9:49:37:4e:fa:e1: f5:7e:73:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTI1OTExMC8GA1UEBRMoNzQ1MDM2MDk3NDI5Q0MxQUM3NkM0Qzk5ODk4RDA2Rjgz RTA3NUMxMzAeFw0yNTEyMDMwNTU0NTdaFw0yNTEyMTAwNTU0NTdaMBgxFjAUBgNV BAMTDTY5MmZkMGIyLWE3NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1UcZAjH3eBjolGvCpvXnNqGOuMsN/7gbaxfXNyK6dYCEMvdMFu8NfDVy/QE76 PknU0B/tdIfx5Zg9EAUMqdYQ/eYVtO3b26lxH/ClNJ7/BCsA+exhxJsiawwCi3aL pohNWjmvDmcCuE9zzs9bDv+UMdDUoK9hLxN/OvkBypXkzIlKy7vxl+JucxzdL6zx fDsP+RoNqnqb3LX/4jC+uYrENWO+MLEpnlTM520IiK7s4bUXL8qRHKVBWNatXYqx DmdLhUumGTFFzzACDSb3xM5ODQUP1mozviBD4/VKawEhQ6Jz7dDEXsHNGxo6Xer5 MiyWTApXeN+l+hwMFgv42liRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1lKK3BrB ytPZF52D8xM6m3UGY0owHwYDVR0jBBgwFoAUdFA2CXQpzBrHbEyZiY0G+D4HXBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5L0ZGOTA5MjhDOUNG ODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJySGJFeVppWTBHLUQ0SFhC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEZBMkNYUXB6QnJIYkV5WmlZMEctRDRIWEJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MjU5L0ZGOTA5MjhDOUNGODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJy SGJFeVppWTBHLUQ0SFhCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF6fDMVuSEbNGupV/+vAiD25vx+8msrAljGX13aOcHp92NY3D4ExNk3n eBgapHKZVqi45QhWmDqyqiK5FF+sxuA/owgtIgYMfH89cdZwy/Ym7qXEGm4Gal6s Z9GO3M6SZ4SFZBOJ4lyvIJeE7EVSgeHC9xq7X3jZJ8DD0WVTdkS/JvBeJyaHcopF 0pTXSiXWC1L5gkE9VIdwR8Ftb2/92f77SMrwBSPtOf0i8K0lrreg41I5lEEFDLx5 cICgUTTeqyUuIllm1gTUqXkQ0fAV81uBI4sE6x+KdNmJVDWkNs3Ve0B82DjJHR9Q WKO4qEUjo9e82oMTutlJN0764fV+c5c= -----END CERTIFICATE-----Generated at Wed Dec 3 16:22:48 2025 by rpki-client