This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft File: rDzLekAZEcjlFT8wFmpUyacWP3s.mft (raw, json) Hash identifier: xjsaMvgD8/61bEXBWhUWB6sJCcZATfDXIEXdqj8m9mc= Subject key identifier: 00:04:D8:A1:80:DA:5C:D0:2A:EF:7F:70:40:CC:F5:2D:D3:AB:0E:01 Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B Certificate issuer: /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft Manifest number: 1D Signing time: Wed 03 Dec 2025 05:58:54 +0000 Manifest this update: Wed 03 Dec 2025 05:58:54 +0000 Manifest next update: Wed 10 Dec 2025 05:58:54 +0000 Files and hashes: 1: rDzLekAZEcjlFT8wFmpUyacWP3s.crl (hash: HAQvaMnMyoeoKzqOo+qYaGH2+Hck+xOSeT+s+JtCZ7Y=) 2: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (hash: GetDT8ar6UQGvcmvjsGOW3aX6ZiD1t+5sWscwddFzJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Validity Not Before: Dec 3 05:58:54 2025 GMT Not After : Dec 10 05:58:54 2025 GMT Subject: CN=692fd19e-6b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7b:20:01:49:f6:45:59:18:17:e0:07:aa:51: 74:a5:64:59:c8:cb:60:c3:dc:dd:79:1d:d3:44:ac: 36:83:c9:7a:db:63:50:1f:b1:b3:5a:80:3f:8e:97: 31:36:1b:f2:30:bb:42:fd:9a:64:5c:94:c1:87:58: 6b:d9:ef:2d:b4:7e:14:75:52:32:02:0e:44:a1:18: d0:53:fc:fa:2c:25:32:96:2e:70:fd:2b:44:0d:91: 71:4f:73:fb:e6:9f:1d:6d:95:f3:f0:7e:6e:0f:c7: 27:63:10:19:c5:17:37:b0:26:b0:2e:d1:b8:29:e4: d3:8a:1f:df:d4:84:05:db:02:af:ff:85:c3:e0:10: af:b6:c6:fe:5a:a3:90:a8:89:15:0d:62:2a:76:e5: 48:11:b5:f5:87:70:26:bb:bb:23:01:70:b3:29:8a: 29:10:fb:34:66:05:1b:36:ac:c1:0e:9d:ec:e3:34: ba:59:79:65:ff:b9:8b:b8:e6:55:80:95:d4:c4:bd: c4:e8:89:94:e6:51:35:3c:f1:b3:c6:74:a4:25:bb: e2:b6:86:ce:c7:5b:61:03:83:9d:8d:42:3b:47:b4: 2d:b3:06:53:d6:0e:cf:cd:f5:1e:16:de:2c:3b:42: ca:46:2e:5a:f3:d1:b7:a1:4f:a1:00:29:62:5b:93: 6b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:04:D8:A1:80:DA:5C:D0:2A:EF:7F:70:40:CC:F5:2D:D3:AB:0E:01 X509v3 Authority Key Identifier: keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:5e:12:1a:45:54:97:f1:ff:6d:40:73:b6:ba:c8:b1:4f:f6: 6b:d6:1c:39:62:19:5b:6c:8b:9a:c3:51:61:68:06:b5:f5:88: c9:0b:fa:b8:5f:d9:97:09:1f:be:25:40:c9:39:ea:7d:b8:95: ad:2e:80:5b:88:1f:f5:38:63:58:1a:d1:98:aa:67:94:7a:cf: 51:b5:86:72:84:78:d7:10:8b:b5:0f:f3:b1:70:50:45:5d:1e: 18:d4:26:de:c0:70:bc:49:d8:78:8d:7a:f7:bc:a4:cd:06:a3: 47:b1:35:bc:3a:b4:9c:f6:03:3a:ad:dc:7e:12:c7:58:53:95: e0:6b:5d:eb:a2:38:7b:29:4e:2d:f5:de:41:e9:3d:5c:27:6e: 29:42:36:e8:6f:ae:59:0d:84:5b:60:c5:8e:34:fc:0b:a3:73: 4c:9c:f5:03:9c:80:86:76:3a:d6:8e:52:33:aa:11:b0:f9:02: d0:95:8c:52:b8:8f:d9:7a:c8:bc:35:8c:98:ab:1f:b5:27:2d: ad:22:35:8f:b4:6e:4c:af:ed:27:79:e7:9b:6b:f8:11:08:9f: 18:6c:01:b4:47:fa:d4:03:6c:b0:bf:d2:40:9e:78:ec:96:62: 3b:15:0f:52:8a:2a:8f:a3:a9:9e:01:c9:33:86:50:00:2f:98: 76:48:4b:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTMzNzExMC8GA1UEBRMoQUMzQ0NCN0E0MDE5MTFDOEU1MTUzRjMwMTY2QTU0QzlB NzE2M0Y3QjAeFw0yNTEyMDMwNTU4NTRaFw0yNTEyMTAwNTU4NTRaMBgxFjAUBgNV BAMTDTY5MmZkMTllLTZiMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdeyABSfZFWRgX4AeqUXSlZFnIy2DD3N15HdNErDaDyXrbY1AfsbNagD+OlzE2 G/Iwu0L9mmRclMGHWGvZ7y20fhR1UjICDkShGNBT/PosJTKWLnD9K0QNkXFPc/vm nx1tlfPwfm4PxydjEBnFFzewJrAu0bgp5NOKH9/UhAXbAq//hcPgEK+2xv5ao5Co iRUNYip25UgRtfWHcCa7uyMBcLMpiikQ+zRmBRs2rMEOnezjNLpZeWX/uYu45lWA ldTEvcToiZTmUTU88bPGdKQlu+K2hs7HW2EDg52NQjtHtC2zBlPWDs/N9R4W3iw7 QspGLlrz0behT6EAKWJbk2vvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAATYoYDa XNAq739wQMz1LdOrDgEwHwYDVR0jBBgwFoAUrDzLekAZEcjlFT8wFmpUyacWP3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzNFMDlGMEU0QTgx NjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNqbEZUOHdGbXBVeWFjV1Az cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvckR6TGVrQVpFY2psRlQ4d0ZtcFV5YWNXUDNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 MzM3LzNFMDlGMEU0QTgxNjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNq bEZUOHdGbXBVeWFjV1Azcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNeEhpFVJfx/21Ac7a6yLFP9mvWHDliGVtsi5rDUWFoBrX1iMkL+rhf 2ZcJH74lQMk56n24la0ugFuIH/U4Y1ga0ZiqZ5R6z1G1hnKEeNcQi7UP87FwUEVd HhjUJt7AcLxJ2HiNeve8pM0Go0exNbw6tJz2Azqt3H4Sx1hTleBrXeuiOHspTi31 3kHpPVwnbilCNuhvrlkNhFtgxY40/Aujc0yc9QOcgIZ2OtaOUjOqEbD5AtCVjFK4 j9l6yLw1jJirH7UnLa0iNY+0bkyv7Sd555tr+BEInxhsAbRH+tQDbLC/0kCeeOyW YjsVD1KKKo+jqZ4ByTOGUAAvmHZIS0s= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:25 2025 by rpki-client