This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: qHVnBtOHnVnk2EkWX5ZCA7VpjyKArqdw1/0CR8CWp4w= Subject key identifier: 3E:38:E5:88:48:BB:B8:7D:BF:1D:BA:88:B7:EB:59:51:F0:AC:94:6C Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 022E Signing time: Tue 23 Dec 2025 01:04:47 +0000 Manifest this update: Tue 23 Dec 2025 01:04:46 +0000 Manifest next update: Tue 30 Dec 2025 01:04:46 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: fiFafGukPznPgGpvOSzcvk+7nnCo5mUStYwWkOw7Y0k=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 4u5QNoJcEGBkXy8XRMZ846SeZinFB+3AOCkdTLg5xUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Dec 23 01:04:46 2025 GMT Not After : Dec 30 01:04:46 2025 GMT Subject: CN=6949eaae-9749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:24:15:e2:0f:fe:70:b7:09:25:a9:06:85: 25:ef:de:d5:0d:43:94:93:c9:53:79:b3:b3:87:52: 2d:63:1b:7e:7f:6a:54:d3:42:e5:25:38:38:26:37: 4c:59:14:fd:18:68:3e:f8:19:c0:e2:e9:3f:9a:32: b6:4b:e3:22:57:7f:a9:94:f0:eb:1e:9f:7b:dc:97: 17:58:5d:9f:e8:b9:64:39:11:8e:10:46:23:00:04: 4f:94:65:94:43:e2:1e:ee:ff:ff:8d:76:c0:38:b7: 4f:5d:da:3a:15:b3:f7:33:bc:c3:a7:9f:4c:37:40: db:62:f0:d7:aa:6e:5d:e9:8e:0a:77:0b:2f:2b:e1: 1e:6b:60:00:34:89:fd:0d:db:ac:2c:9d:ac:23:1b: b8:4e:71:20:25:3b:59:c4:90:3b:0d:5b:96:ff:68: be:c0:f7:a3:10:c3:f0:a9:8f:20:0d:1e:ed:33:50: c2:29:6f:ee:5e:cc:44:49:d6:55:29:94:81:b9:f1: 11:4d:c8:5a:36:5b:d3:5f:8f:bf:1e:26:08:12:06: 9d:73:44:3d:99:22:b0:68:77:54:1d:5b:24:ea:77: d6:d6:b3:a9:66:a2:49:20:30:39:81:08:90:dc:73: 5c:66:06:94:0d:fe:51:14:ff:a1:47:64:ec:d0:56: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:38:E5:88:48:BB:B8:7D:BF:1D:BA:88:B7:EB:59:51:F0:AC:94:6C X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:a4:15:4e:8f:d0:7a:5c:bc:9f:69:90:73:e4:04:81:c0:ac: 94:73:ca:5d:96:3a:ca:2d:28:d7:9f:16:b6:8e:11:f5:74:85: 1e:fe:04:0d:a5:20:0d:6b:e4:37:9d:09:1a:34:1a:8a:87:e5: 52:4b:84:5d:cc:72:96:c7:d4:3e:02:19:aa:26:bd:a5:c8:52: ab:70:35:45:93:33:fc:5d:0f:6c:df:01:1f:78:66:bd:4e:bd: 40:b0:e0:b4:a8:41:b0:67:95:bd:2b:8b:b3:c7:9e:48:51:8e: b8:ca:d1:d2:2c:8d:74:ad:db:01:46:68:4b:a0:e2:a3:68:8d: 7d:9e:05:b4:c9:c4:9d:c9:08:bc:cb:ea:0f:a4:ea:0b:e7:11: 48:95:a7:cb:4c:29:f4:04:73:90:ff:da:24:48:f6:9f:d1:a1: 54:40:bc:9d:73:f5:6d:2b:9e:2c:b7:6f:06:90:44:ac:fa:2b: 07:6f:a3:18:8b:e2:65:6f:25:74:7c:b0:bb:f3:6d:7a:63:b1: 3c:80:2e:0a:de:74:40:9b:17:5e:4e:d2:8a:1d:96:f3:e9:ad: fb:be:f4:b7:33:3c:06:e1:70:be:10:7a:b5:27:1c:7c:57:50: 50:d8:a2:88:2e:b0:72:b0:57:8c:b5:24:f6:28:fb:32:7d:39: 3a:37:81:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjUxMjIzMDEwNDQ2WhcNMjUxMjMwMDEwNDQ2WjAYMRYwFAYD VQQDDA02OTQ5ZWFhZS05NzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLMkFeIP/nC3CSWpBoUl797VDUOUk8lTebOzh1ItYxt+f2pU00LlJTg4JjdM WRT9GGg++BnA4uk/mjK2S+MiV3+plPDrHp973JcXWF2f6LlkORGOEEYjAARPlGWU Q+Ie7v//jXbAOLdPXdo6FbP3M7zDp59MN0DbYvDXqm5d6Y4KdwsvK+Eea2AANIn9 DdusLJ2sIxu4TnEgJTtZxJA7DVuW/2i+wPejEMPwqY8gDR7tM1DCKW/uXsxESdZV KZSBufERTchaNlvTX4+/HiYIEgadc0Q9mSKwaHdUHVsk6nfW1rOpZqJJIDA5gQiQ 3HNcZgaUDf5RFP+hR2Ts0FaV6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD445YhI u7h9vx26iLfrWVHwrJRsMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVpBVOj9B6XLyfaZBz5ASBwKyUc8pdljrKLSjXnxa2jhH1dIUe/gQN pSANa+Q3nQkaNBqKh+VSS4RdzHKWx9Q+AhmqJr2lyFKrcDVFkzP8XQ9s3wEfeGa9 Tr1AsOC0qEGwZ5W9K4uzx55IUY64ytHSLI10rdsBRmhLoOKjaI19ngW0ycSdyQi8 y+oPpOoL5xFIlafLTCn0BHOQ/9okSPaf0aFUQLydc/VtK54st28GkESs+isHb6MY i+JlbyV0fLC78216Y7E8gC4K3nRAmxdeTtKKHZbz6a37vvS3MzwG4XC+EHq1Jxx8 V1BQ2KKILrBysFeMtST2KPsyfTk6N4GK -----END CERTIFICATE-----Generated at Tue Dec 23 08:43:57 2025 by rpki-client