This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: U0b3ekx9fk9dTWgszt0AGN6No8exlWTFEF4W9Uzdqp0= Subject key identifier: 3C:A5:6A:ED:97:D6:E0:9F:AA:A8:B7:74:73:4C:74:4F:95:D6:54:B2 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: 013B Signing time: Tue 23 Dec 2025 03:28:05 +0000 Manifest this update: Tue 23 Dec 2025 03:28:05 +0000 Manifest next update: Tue 30 Dec 2025 03:28:05 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: 2ZwhHRbrIgRtaLzriURYIgroZoYoznK6hTUmYIVI6/c=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: RUYAq/sHQifGw9yl10echj1dgf9tOoWhpM9Z2a6ZUv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Dec 23 03:28:05 2025 GMT Not After : Dec 30 03:28:05 2025 GMT Subject: CN=694a0c45-b832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:42:08:25:b1:2b:3c:4e:44:e6:be:30:4b:1b: 23:8b:5d:1d:5e:c3:81:f2:3b:6c:89:fd:3b:78:3f: 1d:76:d8:76:13:d0:d8:3e:bf:41:ea:e0:ab:d5:0b: d5:aa:e8:b8:9b:5a:0a:b1:dc:6d:e3:2d:18:48:7b: 2a:16:ba:00:71:4d:b5:7b:2d:cd:fe:fb:be:d3:67: 99:c9:44:16:98:99:3f:b4:43:24:da:99:88:51:68: 48:f7:92:b1:5e:86:30:92:9e:ac:78:7e:57:22:87: 0c:88:00:89:5d:67:44:36:96:51:f1:51:5d:e4:58: f1:70:4a:6f:44:7a:ca:5c:31:58:9f:86:0a:5a:54: fa:0b:23:84:06:a6:d5:42:48:76:f3:33:b7:62:c8: 41:2a:0c:12:17:6a:4f:00:61:7a:76:72:a9:10:4e: 66:f8:a0:e2:7d:e5:36:90:37:20:67:9d:70:12:f1: a4:f6:b3:e1:a0:99:d5:ab:7e:0a:54:2f:e3:d6:17: 4a:9f:50:bd:bf:7a:aa:e0:ba:d5:f3:e1:0f:1a:5b: a0:94:fd:25:7a:92:02:2b:15:26:fa:37:a7:a3:71: e8:27:5d:ea:8f:29:85:be:4a:6c:2f:70:63:40:73: 69:6d:33:75:f6:77:62:68:d7:95:6f:2f:c5:a9:60: f2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A5:6A:ED:97:D6:E0:9F:AA:A8:B7:74:73:4C:74:4F:95:D6:54:B2 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e7:bb:91:16:b5:9b:97:20:14:45:ae:50:3e:c7:58:ad:00: 1a:2a:11:24:48:89:bb:d3:b5:7a:28:2c:38:b8:e8:93:9b:fb: ee:cb:a9:77:7d:60:00:f5:6b:ea:98:ad:96:5c:9d:28:f9:20: 7e:b3:47:a5:fb:c2:6f:e4:a3:a9:a2:2c:2c:10:17:d1:26:6f: 58:7b:6c:78:05:0a:71:2f:a8:68:b5:6e:06:b2:a2:47:53:ca: 25:d5:ec:b9:e6:c3:20:76:93:39:a4:d4:8d:9e:a6:b4:a5:2a: b9:5b:63:05:6e:84:e6:77:ce:7b:86:15:4b:45:e2:60:f0:da: 3b:50:df:28:2f:b8:39:30:00:22:38:6e:8c:e9:4e:a9:67:be: 26:25:8f:a4:22:8d:71:57:e1:d2:77:6b:eb:6c:f6:22:2a:34: 21:82:97:c4:7a:3f:8e:76:9e:e4:d9:ea:91:d0:17:81:f6:4e: 12:38:ec:c9:92:fd:25:8d:18:0b:f9:16:67:db:94:d9:ec:a8: 6b:00:33:09:be:33:b5:54:9b:21:5c:ee:59:5d:9c:4f:c1:42: c5:96:77:1a:7c:17:c6:a5:dc:2e:9f:86:f4:54:e5:37:b1:13: c3:fe:7f:0c:6b:8a:08:d7:7d:d6:ec:04:93:4e:d7:09:db:b2: 1d:eb:0d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUxMjIzMDMyODA1WhcNMjUxMjMwMDMyODA1WjAYMRYwFAYD VQQDDA02OTRhMGM0NS1iODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60IIJbErPE5E5r4wSxsji10dXsOB8jtsif07eD8ddth2E9DYPr9B6uCr1QvV qui4m1oKsdxt4y0YSHsqFroAcU21ey3N/vu+02eZyUQWmJk/tEMk2pmIUWhI95Kx XoYwkp6seH5XIocMiACJXWdENpZR8VFd5FjxcEpvRHrKXDFYn4YKWlT6CyOEBqbV Qkh28zO3YshBKgwSF2pPAGF6dnKpEE5m+KDifeU2kDcgZ51wEvGk9rPhoJnVq34K VC/j1hdKn1C9v3qq4LrV8+EPGluglP0lepICKxUm+jeno3HoJ13qjymFvkpsL3Bj QHNpbTN19ndiaNeVby/FqWDyLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDylau2X 1uCfqqi3dHNMdE+V1lSyMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm57uRFrWblyAURa5QPsdYrQAaKhEkSIm707V6KCw4uOiTm/vuy6l3 fWAA9WvqmK2WXJ0o+SB+s0el+8Jv5KOpoiwsEBfRJm9Ye2x4BQpxL6hotW4GsqJH U8ol1ey55sMgdpM5pNSNnqa0pSq5W2MFboTmd857hhVLReJg8No7UN8oL7g5MAAi OG6M6U6pZ74mJY+kIo1xV+HSd2vrbPYiKjQhgpfEej+Odp7k2eqR0BeB9k4SOOzJ kv0ljRgL+RZn25TZ7KhrADMJvjO1VJshXO5ZXZxPwULFlncafBfGpdwun4b0VOU3 sRPD/n8Ma4oI133W7ASTTtcJ27Id6w3C -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:06 2025 by rpki-client