This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft File: 0DOGEJUQz9wm91V6_5mhMey1lCQ.mft (raw, json) Hash identifier: TgadqavS1/tXALVeqU5NZSRBWyDA8aO86sxlH2+wJdQ= Subject key identifier: C4:57:CA:1B:8A:A0:0B:DB:CA:3B:2B:F2:44:8A:FF:64:D2:36:A6:2E Authority key identifier: D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24 Certificate issuer: /CN=A9189F23/serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424 Certificate serial: 3523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft Manifest number: 350A Signing time: Mon 22 Dec 2025 14:52:15 +0000 Manifest this update: Mon 22 Dec 2025 14:52:14 +0000 Manifest next update: Mon 29 Dec 2025 14:52:14 +0000 Files and hashes: 1: 0DOGEJUQz9wm91V6_5mhMey1lCQ.crl (hash: N952FGN7Lw5ceb8u2Bh/gI+4ARUl7F5aYVG7ceKaQ8A=) 2: BE39F43074B811EB9AECDC67C4F9AE02.roa (hash: p/HanxVhK4ArYTZdoGstHZ4IwhXvXIPJ8kS1SH42IDY=) 3: 7CC8FF74562511E78A45783FC4F9AE02.roa (hash: rvygRsRrMc3fw7NrEvPYGroWBzIJPA2V3AKI1uhtaI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13603 (0x3523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189F23, serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424 Validity Not Before: Dec 22 14:52:14 2025 GMT Not After : Dec 29 14:52:14 2025 GMT Subject: CN=69495b1f-725b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:24:49:64:a0:e8:69:bf:38:e4:ea:cd:84:b1: c9:cd:fb:dc:e3:2c:64:11:cb:8a:85:eb:c8:43:59: 4c:23:ac:7e:93:2c:ca:ee:a2:55:e4:40:51:d9:a2: 7a:b2:47:10:40:07:1e:3f:a5:2a:eb:fe:94:aa:35: ab:39:5f:bf:72:20:4e:55:1a:b8:cd:38:f7:5c:24: bf:b1:23:b8:4d:94:a5:dd:f5:f0:58:89:42:ae:61: 83:7c:cb:42:41:2e:8b:50:4b:3d:18:1d:84:ff:54: 41:12:fc:95:56:5c:ea:85:fa:45:ab:71:f9:7b:fa: 16:c6:2d:21:4f:9c:22:3d:c0:9a:f7:2c:c4:44:58: 16:70:63:6c:ca:66:07:88:27:f9:3d:ad:d6:58:13: 1d:94:e5:62:ba:e9:fe:07:16:a9:f0:ec:9e:99:9a: 83:26:c3:c5:ed:91:32:d9:b3:5c:8e:76:30:71:59: a6:c2:90:5b:44:f5:23:cb:61:20:ce:40:fa:0e:51: 75:f1:76:cb:28:fd:7e:f8:50:18:18:c3:98:a1:f8: da:ec:10:22:f1:2b:a3:7d:1e:3b:64:0b:db:d5:1d: f2:b8:97:e7:ca:9e:fe:d7:22:9b:b2:50:ca:ee:6f: ce:3c:11:ff:db:2d:09:b8:e1:a7:d2:92:d3:3f:d2: 97:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:57:CA:1B:8A:A0:0B:DB:CA:3B:2B:F2:44:8A:FF:64:D2:36:A6:2E X509v3 Authority Key Identifier: keyid:D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ef:7b:8f:b0:99:cc:90:91:47:bd:a5:ac:ed:e0:5e:f4:2c: 3d:89:5c:45:bc:73:b4:13:7e:a1:6a:9b:a9:e0:90:eb:c5:60: 92:4e:8f:e1:42:58:bd:7b:0e:f1:98:53:af:db:95:ce:f4:63: b0:2c:3b:33:43:4a:f6:99:93:6a:1e:28:98:c9:70:b3:4c:1d: 13:5a:12:82:e9:b7:87:a3:6e:ed:89:62:92:9c:bf:43:28:08: d2:b7:66:19:b9:9a:43:57:c1:45:59:24:25:4f:7d:3f:99:7e: 84:5d:6d:fa:3e:d6:14:f0:1c:6f:58:89:ee:e5:32:cf:d1:81: f7:f4:7b:77:2a:7d:9d:23:c0:ab:9a:47:bc:43:f5:49:df:9e: 0a:c1:f6:be:5f:c0:fd:c6:e5:67:be:26:d4:20:43:d8:12:5d: b8:a5:ec:49:a3:02:bd:af:56:14:b3:6d:c3:b8:73:2e:8d:bd: d6:da:24:2b:5a:59:c6:af:cc:44:95:99:50:55:2d:56:0c:83: 83:52:fe:4f:91:07:28:2f:b3:0f:25:81:ef:bb:84:31:04:68: 1a:0d:36:8f:99:99:cb:0b:31:48:1c:76:08:c4:a0:3a:33:d0: 03:38:20:0b:70:36:df:e2:47:27:1a:a9:cd:c9:c5:11:72:a7: 73:02:20:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlGMjMxMTAvBgNVBAUTKEQwMzM4NjEwOTUxMENGREMyNkY3NTU3QUZGOTlBMTMx RUNCNTk0MjQwHhcNMjUxMjIyMTQ1MjE0WhcNMjUxMjI5MTQ1MjE0WjAYMRYwFAYD VQQDDA02OTQ5NWIxZi03MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiyRJZKDoab845OrNhLHJzfvc4yxkEcuKhevIQ1lMI6x+kyzK7qJV5EBR2aJ6 skcQQAceP6Uq6/6UqjWrOV+/ciBOVRq4zTj3XCS/sSO4TZSl3fXwWIlCrmGDfMtC QS6LUEs9GB2E/1RBEvyVVlzqhfpFq3H5e/oWxi0hT5wiPcCa9yzERFgWcGNsymYH iCf5Pa3WWBMdlOViuun+Bxap8OyemZqDJsPF7ZEy2bNcjnYwcVmmwpBbRPUjy2Eg zkD6DlF18XbLKP1++FAYGMOYofja7BAi8SujfR47ZAvb1R3yuJfnyp7+1yKbslDK 7m/OPBH/2y0JuOGn0pLTP9KX/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRXyhuK oAvbyjsr8kSK/2TSNqYuMB8GA1UdIwQYMBaAFNAzhhCVEM/cJvdVev+ZoTHstZQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUYyMy9BNUQ1OThENjFE OUIxMUUyOTMwNTkxODkwOEIwMkNEMi8wRE9HRUpVUXo5d205MVY2XzVtaE1leTFs Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBET0dFSlVRejl3bTkxVjZfNW1oTWV5MWxDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUYyMy9BNUQ1OThENjFEOUIxMUUyOTMwNTkxODkwOEIwMkNEMi8wRE9HRUpVUXo5 d205MVY2XzVtaE1leTFsQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr73uPsJnMkJFHvaWs7eBe9Cw9iVxFvHO0E36hapup4JDrxWCSTo/h Qli9ew7xmFOv25XO9GOwLDszQ0r2mZNqHiiYyXCzTB0TWhKC6beHo27tiWKSnL9D KAjSt2YZuZpDV8FFWSQlT30/mX6EXW36PtYU8BxvWInu5TLP0YH39Ht3Kn2dI8Cr mke8Q/VJ354Kwfa+X8D9xuVnvibUIEPYEl24pexJowK9r1YUs23DuHMujb3W2iQr WlnGr8xElZlQVS1WDIODUv5PkQcoL7MPJYHvu4QxBGgaDTaPmZnLCzFIHHYIxKA6 M9ADOCALcDbf4kcnGqnNycURcqdzAiBA -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:13 2025 by rpki-client