This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: eyjTwR0lMbogE/hbgVwmr1IJMneLn3ek7kotATnhzl8= Subject key identifier: 91:54:0C:2B:4E:2C:A3:CE:73:09:CA:58:F6:92:3B:FD:C3:45:7D:2B Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 07B8 Signing time: Wed 10 Dec 2025 20:12:29 +0000 Manifest this update: Wed 10 Dec 2025 20:12:28 +0000 Manifest next update: Wed 17 Dec 2025 20:12:28 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: JjC/lF5AjSTPrWRXAcp2PtU4G6bBb842mvS9auHTS04=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: dCRsUxTYQfbVmR8r076QUZHUhBb4kgZRsGIm5GyZ/CI=) 3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: KN4CWPFNBhIIjqsGJhbyUP98ulbl0SGTkd2fLpRZk+I=) 4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: D4Cs5JY9tNHVDlAQoZ8zXAojWJ56gds9kQSJUSLXkfU=) 5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: lZu5pdaUasH8/fasxCeSUbAtaYZZr63nIN4QhjX8ELY=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: BhSHDdRG8/0Zm5EF7nED+w+EERbxSAwCaFSs3AEh7LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 20:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Dec 10 20:12:28 2025 GMT Not After : Dec 17 20:12:28 2025 GMT Subject: CN=6939d42d-85cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:8a:c6:39:67:76:38:ba:f7:95:a9:01:66: 0b:8e:09:d5:d7:1d:23:d7:46:74:91:e4:14:12:2e: 65:a7:30:92:85:d0:99:e5:01:1b:75:8f:6b:24:1b: 3d:1b:5a:ef:fa:50:d0:92:ad:f0:03:82:17:83:86: 15:af:e9:ef:d5:88:38:e9:ff:56:72:e7:2c:57:d3: b4:81:b6:88:f3:d4:69:12:8c:8d:7a:87:b8:2e:86: 59:c4:3f:c8:68:30:13:ac:f7:ef:86:1f:5b:e6:09: be:72:74:7c:a9:08:b4:7b:fd:0a:be:57:b2:c3:e1: b6:bb:bb:db:78:76:23:4e:d9:77:90:de:23:9e:21: 12:84:1c:45:8f:fe:82:91:b6:e0:1d:b0:62:04:3d: 60:30:80:00:14:1e:8f:ba:a9:39:a5:d2:c8:78:73: ad:91:e1:b2:35:0f:f0:e5:d8:52:08:96:87:9e:92: 97:5b:71:b4:43:8c:3e:53:ab:a1:cd:be:be:60:32: 09:f2:cc:e8:05:b5:61:6e:13:af:49:5d:cb:6b:9c: b9:3b:4d:d3:14:44:ce:db:a2:a5:04:12:09:cb:13: 38:a7:6f:c1:d6:e1:31:ad:03:07:7e:7d:09:e3:2c: 9e:3d:2f:9d:7e:cd:b3:d2:cf:1a:a3:04:b4:e5:74: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:54:0C:2B:4E:2C:A3:CE:73:09:CA:58:F6:92:3B:FD:C3:45:7D:2B X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a2:89:5c:32:f8:6e:5d:72:8c:97:18:53:d7:7a:b7:08:96: fe:41:ea:fe:1e:02:81:90:d6:12:79:c9:ea:11:4b:64:32:62: 8d:9f:64:b3:c5:5b:b9:fb:b8:71:b0:39:4d:5e:d4:f1:4b:d2: ff:ee:70:5c:5b:81:22:d4:c7:0e:f3:a2:2e:0f:a7:5b:89:b8: c2:aa:ea:f6:e9:74:8f:d6:0d:79:7f:1e:08:f8:4f:e7:f9:05: ad:21:8f:1c:56:35:6b:b7:0f:02:13:59:10:ef:af:98:9e:5f: 5d:12:4e:03:13:d7:a4:55:9f:c2:6b:57:69:ab:56:77:c0:03: 61:fa:3d:7e:c0:b5:3f:8c:da:ab:6b:b2:8d:f1:4d:21:ad:41: 06:47:51:8f:84:03:58:8f:aa:77:b6:d3:d9:05:71:9e:f6:1a: dd:16:a7:dd:6b:80:cf:66:d8:41:51:ce:dc:94:59:b5:b0:b0: 19:f9:f9:9f:bd:60:8a:d6:0d:ec:44:73:b9:f1:3b:a6:c7:db: ce:81:f2:07:8d:b9:bd:99:65:bf:64:a4:8f:5c:37:ba:95:1e: 45:fd:42:b8:e7:cc:8f:e5:a2:87:5e:b2:86:a3:83:22:c9:cc: 79:88:6b:a1:a9:9a:c4:2c:c9:63:17:72:a7:6c:15:df:ab:34: 20:ce:95:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjUxMjEwMjAxMjI4WhcNMjUxMjE3MjAxMjI4WjAYMRYwFAYD VQQDEw02OTM5ZDQyZC04NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVaKxjlndji695WpAWYLjgnV1x0j10Z0keQUEi5lpzCShdCZ5QEbdY9rJBs9 G1rv+lDQkq3wA4IXg4YVr+nv1Yg46f9WcucsV9O0gbaI89RpEoyNeoe4LoZZxD/I aDATrPfvhh9b5gm+cnR8qQi0e/0Kvleyw+G2u7vbeHYjTtl3kN4jniEShBxFj/6C kbbgHbBiBD1gMIAAFB6Puqk5pdLIeHOtkeGyNQ/w5dhSCJaHnpKXW3G0Q4w+U6uh zb6+YDIJ8szoBbVhbhOvSV3La5y5O03TFETO26KlBBIJyxM4p2/B1uExrQMHfn0J 4yyePS+dfs2z0s8aowS05XQUvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFUDCtO LKPOcwnKWPaSO/3DRX0rMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGoolcMvhuXXKMlxhT13q3CJb+Qer+HgKBkNYSecnqEUtkMmKNn2Sz xVu5+7hxsDlNXtTxS9L/7nBcW4Ei1McO86IuD6dbibjCqur26XSP1g15fx4I+E/n +QWtIY8cVjVrtw8CE1kQ76+Ynl9dEk4DE9ekVZ/Ca1dpq1Z3wANh+j1+wLU/jNqr a7KN8U0hrUEGR1GPhANYj6p3ttPZBXGe9hrdFqfda4DPZthBUc7clFm1sLAZ+fmf vWCK1g3sRHO58Tumx9vOgfIHjbm9mWW/ZKSPXDe6lR5F/UK458yP5aKHXrKGo4Mi ycx5iGuhqZrELMljF3KnbBXfqzQgzpX7 -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:53 2025 by rpki-client