This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft File: dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json) Hash identifier: xo0IUKw6EtIAxtkMjoIWEqFrrTMBsUvkDu6tKL53iw8= Subject key identifier: 42:B6:86:F2:5C:73:65:B3:8F:5E:17:F6:5B:4B:37:B1:B2:E9:EF:2A Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft Manifest number: 06C6 Signing time: Sat 20 Dec 2025 21:39:44 +0000 Manifest this update: Sat 20 Dec 2025 21:39:44 +0000 Manifest next update: Sat 27 Dec 2025 21:39:44 +0000 Files and hashes: 1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: Pnzr7N/xgFo4oo/jzSuAppnaSDg1Cbyl5WRKf29UaTE=) 2: 8158A3A6943211F0843A1075C4F9AE02.roa (hash: 0lN/Ng3NrJ/5kCvRcvb8gFvnW3r3YxhFiq3R/rO55bM=) 3: 3CEDCE18900D11F0BD65E474C4F9AE02.roa (hash: UlU8FGyIe5T0I0XXCW9XvGGScSrSWkYOAvIkrPLe+o0=) 4: 8EFF79AA9C9B11F09188945AC4F9AE02.roa (hash: vjiqIdfdvKZRB8r/txhRVqd+ixYcog2/ptWnbBhNw5A=) 5: 4FE5F30290D411F0B8A56049C4F9AE02.roa (hash: tijl1a/Co2BtT46BKoUW7AiBvHenjrU1pgwCiF84Uq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Validity Not Before: Dec 20 21:39:44 2025 GMT Not After : Dec 27 21:39:44 2025 GMT Subject: CN=694717a0-fa99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5f:e8:f4:2d:df:9c:70:5f:90:8e:77:b9:2c: 8d:aa:b9:23:06:6c:ec:34:c0:8f:49:4f:94:b1:6d: 2a:b3:20:d2:1e:9a:1c:f7:9f:b6:16:9a:03:16:9b: 20:06:5d:08:e7:55:ed:6f:ae:59:99:76:cc:ca:b4: 67:59:b1:48:de:c2:12:8a:85:8b:04:e8:74:36:14: 96:72:82:4c:01:ff:71:ce:52:23:66:ec:43:9c:a5: 30:b7:25:48:4b:54:4d:26:4c:fa:d5:7f:f8:14:9f: f2:6c:ba:6e:2f:85:99:1b:31:76:6b:71:1a:d6:8a: 51:a7:ef:8f:8c:70:eb:78:ad:3c:82:4b:b7:bf:b3: f5:1f:e2:11:9c:77:be:fd:5b:ab:52:f3:a2:c4:55: b3:0a:41:c1:82:dd:a7:e6:18:11:de:9f:8e:db:83: 37:38:bd:f8:f4:66:b3:29:24:1c:d2:4a:8f:a5:04: 46:99:3e:6d:0c:44:94:68:4f:ce:59:69:86:81:77: aa:d7:4f:55:4d:c5:6d:76:62:e9:63:db:2c:ad:10: 21:99:84:a1:73:aa:91:77:2a:4e:34:d6:2e:f8:9a: 2c:54:7b:fa:8b:f1:af:7f:bc:9a:93:94:83:75:70: 97:12:32:68:74:c7:55:26:f0:34:47:d6:50:c5:83: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B6:86:F2:5C:73:65:B3:8F:5E:17:F6:5B:4B:37:B1:B2:E9:EF:2A X509v3 Authority Key Identifier: keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:d5:1c:03:d6:73:d0:be:8e:5b:22:66:31:b5:63:2f:52:11: 60:9b:b9:36:84:4d:b1:56:1a:ea:01:d1:64:b3:02:e6:51:e4: 98:5f:81:29:b3:b8:8a:57:07:7d:df:cd:1b:49:a6:e8:5a:37: 0d:6a:d6:a5:ad:7d:48:2a:bc:62:e1:c5:33:7d:cf:ea:00:17: c6:1b:a6:61:57:a9:46:cf:a1:99:a9:d4:61:05:10:70:48:26: e2:b7:c4:36:26:e8:ce:f6:0b:01:bc:fa:f5:6b:e3:7d:b2:01: 21:a0:94:c6:e7:e6:df:20:27:81:24:b5:1c:ad:94:8a:21:2e: e0:af:42:c3:b2:0f:af:14:e6:c8:4a:13:b4:3e:6e:42:fc:3c: 04:ac:06:92:40:17:11:8f:f2:4c:f4:aa:d2:2f:53:55:b9:fe: 2d:dc:a0:c6:d5:35:bf:91:c3:f4:9a:73:df:26:ff:f6:32:12: df:90:75:52:42:03:18:ee:7b:82:4d:c3:fd:d2:db:93:8f:55: 40:0c:7b:31:17:54:14:e5:82:39:cf:9e:05:16:7d:b4:e0:b8: 5e:18:4d:d2:e1:e8:64:cf:ef:6b:0e:d0:87:53:23:64:ea:bf: b0:0b:92:fc:8c:47:e6:08:f5:4b:1c:e7:a3:54:f9:ec:c2:13: 88:c4:a2:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB RjA5Rjg0MTEwHhcNMjUxMjIwMjEzOTQ0WhcNMjUxMjI3MjEzOTQ0WjAYMRYwFAYD VQQDDA02OTQ3MTdhMC1mYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnV/o9C3fnHBfkI53uSyNqrkjBmzsNMCPSU+UsW0qsyDSHpoc95+2FpoDFpsg Bl0I51Xtb65ZmXbMyrRnWbFI3sISioWLBOh0NhSWcoJMAf9xzlIjZuxDnKUwtyVI S1RNJkz61X/4FJ/ybLpuL4WZGzF2a3Ea1opRp++PjHDreK08gku3v7P1H+IRnHe+ /VurUvOixFWzCkHBgt2n5hgR3p+O24M3OL349GazKSQc0kqPpQRGmT5tDESUaE/O WWmGgXeq109VTcVtdmLpY9ssrRAhmYShc6qRdypONNYu+JosVHv6i/Gvf7yak5SD dXCXEjJodMdVJvA0R9ZQxYOCGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEK2hvJc c2Wzj14X9ltLN7Gy6e8qMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjlGOC85MkQwQkUwMjkwNjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdh a3Q0aUkyb3FXbEN2Q2ZoQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG1RwD1nPQvo5bImYxtWMvUhFgm7k2hE2xVhrqAdFkswLmUeSYX4Ep s7iKVwd9380bSaboWjcNatalrX1IKrxi4cUzfc/qABfGG6ZhV6lGz6GZqdRhBRBw SCbit8Q2JujO9gsBvPr1a+N9sgEhoJTG5+bfICeBJLUcrZSKIS7gr0LDsg+vFObI ShO0Pm5C/DwErAaSQBcRj/JM9KrSL1NVuf4t3KDG1TW/kcP0mnPfJv/2MhLfkHVS QgMY7nuCTcP90tuTj1VADHsxF1QU5YI5z54FFn204LheGE3S4ehkz+9rDtCHUyNk 6r+wC5L8jEfmCPVLHOejVPnswhOIxKJ4 -----END CERTIFICATE-----Generated at Sun Dec 21 20:38:30 2025 by rpki-client