This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: EsRM6R8oVmQiAe9LSd/wKZQhxT9P6OrDSs2bKQmrC3U= Subject key identifier: 5E:1B:F5:8D:DD:08:0E:7B:46:CC:16:99:A6:19:65:C7:E6:3B:4F:E7 Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 081E Signing time: Mon 22 Dec 2025 20:14:31 +0000 Manifest this update: Mon 22 Dec 2025 20:14:31 +0000 Manifest next update: Mon 29 Dec 2025 20:14:31 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: kjgu8DGEKGHWNkJbjGSZFR9ULfTpD4xo2TOTj1zB3kw=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: Tqr4ie55p2/V+s+yow+35ypL/spNlzsBpm3sU38Vgbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Dec 22 20:14:31 2025 GMT Not After : Dec 29 20:14:31 2025 GMT Subject: CN=6949a6a7-55df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:6d:e9:47:41:9d:a2:3e:da:a5:ab:78:b7: ad:ac:75:a9:d3:ab:4d:b9:bd:52:f4:27:63:ee:db: 46:42:4b:46:31:d6:a7:70:b4:7e:00:f1:a9:6b:dc: b6:4a:ed:71:89:bb:4b:45:14:2c:2a:09:f2:cc:59: b8:01:56:c7:19:98:af:c0:6f:23:47:df:68:a0:84: 74:1e:f3:30:42:bb:a0:e2:9f:21:fa:05:ba:c9:cc: 7b:d1:86:28:e4:46:12:ad:a3:20:48:76:8e:fc:cb: f0:e4:32:d9:fe:38:b5:11:dd:90:64:74:52:af:45: 37:be:3b:24:aa:84:07:b3:53:b1:02:72:7a:fe:47: f1:ba:c7:57:48:ef:af:80:8f:b2:ce:c2:ba:ae:2c: 77:b6:8f:b0:67:31:ff:0a:77:41:f1:82:eb:93:ee: 0f:12:55:8e:a5:0a:da:db:e1:09:08:7b:58:eb:a1: 90:88:b5:0d:ec:36:ee:21:05:77:b0:ea:25:63:11: a8:d2:68:7f:7a:34:ee:b1:66:82:0a:e8:9f:a1:9d: 09:a5:a3:65:39:bc:aa:08:48:60:86:21:49:b7:9b: 6c:63:20:df:ce:94:ef:f3:b2:a5:58:dd:be:22:e1: 29:0c:f5:35:ab:f2:fa:ec:1b:76:c4:bf:12:30:5b: 84:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1B:F5:8D:DD:08:0E:7B:46:CC:16:99:A6:19:65:C7:E6:3B:4F:E7 X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3f:53:e9:16:67:25:1a:14:e2:a7:a3:a4:d4:d8:e6:4b:ad: 64:a6:5d:03:c9:a3:d4:e9:1d:f4:7f:80:6b:55:e1:d3:d0:fa: 28:63:ca:59:a9:e3:bd:91:7a:4f:b4:56:b9:7f:c5:ab:e0:c4: 8f:15:85:dc:a2:c7:41:db:fd:90:56:71:9e:c0:42:e3:d6:8d: cc:83:ec:46:13:fe:76:a5:4f:92:d2:02:e2:14:42:39:85:cc: ad:14:02:56:15:83:72:67:63:0b:33:66:80:3a:b5:45:85:ad: 04:1d:16:e7:5a:50:57:1c:cc:06:91:c5:d6:96:c3:7d:e4:ef: ed:73:e4:7f:0b:72:59:ea:71:95:17:82:52:30:dd:84:bc:f1: 4f:f5:3f:55:a0:63:61:33:06:78:b0:7a:16:5f:65:8e:a6:2f: e6:25:80:9d:e0:c0:5e:3c:5d:bf:7c:2b:3a:f8:68:84:0e:2a: 59:63:7f:18:66:7b:86:cc:6a:b4:a7:3f:b8:32:b0:eb:18:38: a5:9b:3a:78:82:37:67:3a:37:66:28:99:dd:44:91:de:cb:d8: f8:61:20:0b:17:9d:04:68:8a:7a:01:12:7b:44:18:0e:4f:4c: 45:69:2b:01:e4:9d:4b:bd:e7:e2:95:96:b2:48:c7:a8:c4:c0: 80:48:1d:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUxMjIyMjAxNDMxWhcNMjUxMjI5MjAxNDMxWjAYMRYwFAYD VQQDDA02OTQ5YTZhNy01NWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzK1t6UdBnaI+2qWreLetrHWp06tNub1S9Cdj7ttGQktGMdancLR+APGpa9y2 Su1xibtLRRQsKgnyzFm4AVbHGZivwG8jR99ooIR0HvMwQrug4p8h+gW6ycx70YYo 5EYSraMgSHaO/Mvw5DLZ/ji1Ed2QZHRSr0U3vjskqoQHs1OxAnJ6/kfxusdXSO+v gI+yzsK6rix3to+wZzH/CndB8YLrk+4PElWOpQra2+EJCHtY66GQiLUN7DbuIQV3 sOolYxGo0mh/ejTusWaCCuifoZ0JpaNlObyqCEhghiFJt5tsYyDfzpTv87KlWN2+ IuEpDPU1q/L67Bt2xL8SMFuEHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4b9Y3d CA57RswWmaYZZcfmO0/nMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaP1PpFmclGhTip6Ok1NjmS61kpl0DyaPU6R30f4BrVeHT0PooY8pZ qeO9kXpPtFa5f8Wr4MSPFYXcosdB2/2QVnGewELj1o3Mg+xGE/52pU+S0gLiFEI5 hcytFAJWFYNyZ2MLM2aAOrVFha0EHRbnWlBXHMwGkcXWlsN95O/tc+R/C3JZ6nGV F4JSMN2EvPFP9T9VoGNhMwZ4sHoWX2WOpi/mJYCd4MBePF2/fCs6+GiEDipZY38Y ZnuGzGq0pz+4MrDrGDilmzp4gjdnOjdmKJndRJHey9j4YSALF50EaIp6ARJ7RBgO T0xFaSsB5J1LvefilZaySMeoxMCASB09 -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:57 2025 by rpki-client