This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: Jj++SfjWNGqrvIIATXQXRg1mEOcYcx5q9VchqzXxxLE= Subject key identifier: E6:43:02:C6:96:C7:73:F6:6D:8A:6D:C4:57:58:A5:7B:4D:EC:4D:91 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 0180 Signing time: Sun 21 Dec 2025 03:22:43 +0000 Manifest this update: Sun 21 Dec 2025 03:22:43 +0000 Manifest next update: Sun 28 Dec 2025 03:22:43 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: c8R3/Dss6qUiTCcBobE2GkkWt5pWEI+GJHL0IqenPUA=) 2: 2FEF460CD41D11F09C0AFC45C4F9AE02.roa (hash: pfaFNjdDoYDKJn2gtwF5CVq3TneelyE5IvrNs164kK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Dec 21 03:22:43 2025 GMT Not After : Dec 28 03:22:43 2025 GMT Subject: CN=69476803-7001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:d9:de:a5:d6:a8:2d:ca:a6:6c:00:24:94: ff:05:30:92:b1:ec:4f:61:0e:97:34:69:ec:28:81: 81:d1:85:a2:fc:9d:b7:db:c5:85:2e:2d:46:3c:ee: ff:be:40:4d:3f:31:da:28:3e:68:41:1a:47:16:17: 9c:97:f2:72:03:cc:c0:e0:4a:f5:15:6a:2d:e4:54: a8:72:f6:e1:08:df:03:62:fd:c3:38:8c:24:d1:33: 23:bd:23:66:dc:d8:23:76:72:b3:e4:07:cc:69:76: 80:7e:c0:3b:c1:6b:4e:f5:a8:1e:31:ee:4a:26:f9: c7:80:c2:45:cc:3a:55:39:a3:62:b5:7e:02:7f:99: 9f:df:0e:c0:02:34:7a:0b:55:87:be:6b:b5:2c:31: e1:07:fa:ba:18:d8:e2:04:f0:56:8e:36:bd:c5:f8: 14:9b:20:16:32:99:0f:fd:09:2a:b5:2d:53:a5:c8: a8:85:42:b8:e3:a1:52:ba:4a:9e:4d:49:20:96:bc: 3a:76:59:b8:73:6c:f9:17:60:d9:cb:a4:32:54:92: 69:a9:1f:d2:92:5a:ff:97:30:21:6a:d6:ad:4d:da: b5:74:42:bb:1c:76:1b:65:79:c1:11:6d:6f:a4:69: 74:65:b1:03:96:f4:f2:d2:11:73:5c:2c:ec:16:0b: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:43:02:C6:96:C7:73:F6:6D:8A:6D:C4:57:58:A5:7B:4D:EC:4D:91 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:21:1c:0e:85:4d:56:10:21:98:75:68:73:5c:91:ce:a3:51: 85:b6:90:fb:2c:f7:c7:58:1a:3b:0d:96:c6:a5:7c:d7:ca:3a: 59:1b:d2:a0:b6:6e:72:78:dd:9e:f2:96:08:db:e4:a1:d9:0f: 52:e5:c8:90:4f:fa:66:9a:90:e1:f5:d1:70:fb:d3:a1:1e:b7: e4:12:8f:71:39:53:64:dc:bc:6b:45:2c:02:ca:96:35:89:a9: 20:24:f5:2d:50:94:bd:27:77:bf:3f:bd:c4:eb:7a:dd:76:28: 10:ef:04:db:e4:d1:0f:b5:03:6a:b0:6a:18:f9:e8:45:5b:d4: b2:d6:d2:07:51:57:c6:33:ca:20:49:ac:77:5b:70:c3:14:73: d4:64:97:6c:8b:57:bc:e8:5a:73:58:56:c8:29:72:fc:ec:83: 97:5d:41:10:14:5f:59:8c:fb:7d:7e:c9:ef:cd:26:2f:66:be: 8a:08:19:21:32:e7:bb:0f:8a:4d:7b:db:66:a4:45:6a:42:97: 4f:f5:c8:24:fe:66:23:31:15:b1:ae:70:fc:12:29:73:81:d6: c9:54:a2:55:39:8c:b1:63:0c:89:80:4e:1e:13:56:27:41:82: b5:f9:99:e4:21:a3:2c:63:c5:de:75:16:6a:66:d9:92:e8:be: 21:1b:75:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjUxMjIxMDMyMjQzWhcNMjUxMjI4MDMyMjQzWjAYMRYwFAYD VQQDDA02OTQ3NjgwMy03MDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkFvZ3qXWqC3KpmwAJJT/BTCSsexPYQ6XNGnsKIGB0YWi/J2328WFLi1GPO7/ vkBNPzHaKD5oQRpHFhecl/JyA8zA4Er1FWot5FSocvbhCN8DYv3DOIwk0TMjvSNm 3NgjdnKz5AfMaXaAfsA7wWtO9ageMe5KJvnHgMJFzDpVOaNitX4Cf5mf3w7AAjR6 C1WHvmu1LDHhB/q6GNjiBPBWjja9xfgUmyAWMpkP/QkqtS1TpciohUK446FSukqe TUkglrw6dlm4c2z5F2DZy6QyVJJpqR/Sklr/lzAhatatTdq1dEK7HHYbZXnBEW1v pGl0ZbEDlvTy0hFzXCzsFgv/5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZDAsaW x3P2bYptxFdYpXtN7E2RMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfIRwOhU1WECGYdWhzXJHOo1GFtpD7LPfHWBo7DZbGpXzXyjpZG9Kg tm5yeN2e8pYI2+Sh2Q9S5ciQT/pmmpDh9dFw+9OhHrfkEo9xOVNk3LxrRSwCypY1 iakgJPUtUJS9J3e/P73E63rddigQ7wTb5NEPtQNqsGoY+ehFW9Sy1tIHUVfGM8og Sax3W3DDFHPUZJdsi1e86FpzWFbIKXL87IOXXUEQFF9ZjPt9fsnvzSYvZr6KCBkh Mue7D4pNe9tmpEVqQpdP9cgk/mYjMRWxrnD8EilzgdbJVKJVOYyxYwyJgE4eE1Yn QYK1+ZnkIaMsY8XedRZqZtmS6L4hG3UH -----END CERTIFICATE-----Generated at Mon Dec 22 22:32:54 2025 by rpki-client