This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: YkPvCnI7u5mUvmD8rErN79mFImaNHoq1TryOcaRp+Gs= Subject key identifier: E4:B5:1D:1A:C0:5C:68:60:F7:8F:71:4D:18:BC:09:68:FF:B3:E7:AA Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 1048 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0FC3 Signing time: Sun 14 Dec 2025 17:19:53 +0000 Manifest this update: Sun 14 Dec 2025 17:19:53 +0000 Manifest next update: Sun 21 Dec 2025 17:19:53 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: aihKLR0v/rZYBY+Rdv8gXUR/2OHaBBUGp23GiY9EvxY=) 2: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: ZKO21v7I5AsbeHedpQVwlDjC0YYOzEud39SdbR3CgmA=) 3: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: nicSmvXStk5YSg3xIJcJaFbSV0F719Jx8dhmknr9Hs0=) 4: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: PTHJR1ja6PHKnchzMzvjSZlwBo+yBYxt/AqG4ozJw5A=) 5: B35E5B46334111EF9770A542C4F9AE02.roa (hash: eo1b+Yq2Qt1v8H4Ltid7fTu6HkQPul0DLMpDr+LxnZs=) 6: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: wE9Ja7ZzAfw7/oCX8jXb3Mmdvu+AmH7Xr6q2xftQxQg=) 7: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: HvCeCNMd3cDYBcsUNmnAZgRE0yTF+p8FgFeiy4l06fs=) 8: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: 05k3Et6L9d2nE0FPEy+35+jv6KXbsZR/t8jrPFetuWc=) 9: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: IrKqf3WwcP3c1t/kdOeFbTBkd7MIU0BN08Rqrji/qUU=) 10: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: zq3r2bqYk5JoyYAxGmuwDEsSoCRJP0AIOXoJJj3slFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4168 (0x1048) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Dec 14 17:19:53 2025 GMT Not After : Dec 21 17:19:53 2025 GMT Subject: CN=693ef1b9-719f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f5:9c:17:c0:da:44:00:48:b7:c5:b7:2e:a7: 5f:f4:c4:9b:ec:2c:d1:1c:4f:f1:04:28:54:ea:57: 8a:03:db:00:98:0b:b9:d3:ee:1b:69:5e:c1:fd:fd: 14:af:24:27:71:9a:7a:1e:48:32:df:1f:36:81:9a: 0c:12:55:6c:75:97:e5:80:c7:05:aa:26:7f:83:e7: 85:bb:b1:0d:4f:c5:70:d0:60:d4:e1:ef:ec:86:16: 49:73:27:61:29:0f:e9:25:1c:bf:ca:87:e9:12:7b: b7:c2:71:3d:c6:79:68:1c:e5:03:a8:56:4a:cb:ca: 91:65:bb:6c:fd:7d:5e:3a:86:40:5c:17:7a:e4:48: 3d:16:af:22:4f:1a:86:d4:84:1b:e5:fe:d7:1a:46: 1b:57:63:f9:c5:7b:52:42:0a:be:fd:e7:9b:66:0e: aa:39:65:f9:48:a3:05:6e:75:5e:0a:96:07:2d:2b: d1:c2:4b:88:a9:f4:01:eb:18:82:aa:bf:58:68:2b: 62:44:3c:30:06:13:cc:4d:90:d8:6d:b5:f1:df:cc: ad:bc:c2:b8:be:42:ab:0f:81:b1:ab:ff:bd:d7:93: 22:95:09:99:2f:94:1a:41:b6:d0:93:f3:14:dd:17: c3:c2:d7:4a:ee:e3:a6:c4:fa:d1:5c:1d:49:d5:53: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B5:1D:1A:C0:5C:68:60:F7:8F:71:4D:18:BC:09:68:FF:B3:E7:AA X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:27:8a:5a:ac:7f:e1:28:44:4c:dd:f1:3c:87:36:7b:08:d1: 30:0f:cc:fa:45:38:1c:c5:3a:6d:a7:32:57:d3:38:71:bc:c9: 52:a1:02:cb:42:86:66:5f:08:c8:eb:5b:bb:e4:b1:fe:85:6b: 35:36:6f:61:fa:a5:cc:d3:16:6a:35:b8:27:04:0e:bc:45:f2: 57:74:9e:f4:1c:c0:85:04:42:15:42:28:80:75:e5:f4:08:88: d1:b3:64:8e:59:dd:c5:e4:d4:66:6e:58:96:6c:d5:a1:93:01: c8:fc:89:96:40:8e:10:a4:38:b1:e8:7c:52:fd:98:5a:f6:4d: c4:76:37:dd:2f:e9:1e:d7:64:df:4a:1a:6b:1a:4b:9d:7c:d4: b6:fc:3d:be:79:e4:0d:48:c2:74:ce:46:7a:18:6e:b5:fe:ae: 0b:a2:03:be:51:37:a1:31:81:c1:16:2f:1c:8e:c1:c6:86:64: 59:28:b6:72:2b:a1:a9:51:93:ac:9b:42:da:14:6a:92:e4:76: 15:ae:e8:a8:8f:8e:0d:a0:c6:93:5c:65:cb:52:37:f7:c1:ab: db:6f:4c:6a:63:fe:82:aa:67:d6:5b:84:bf:8d:f4:b0:8a:a6: 45:31:69:5d:c3:d0:06:9f:94:be:e5:4d:fa:16:aa:90:e2:7b: c7:21:60:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUxMjE0MTcxOTUzWhcNMjUxMjIxMTcxOTUzWjAYMRYwFAYD VQQDDA02OTNlZjFiOS03MTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfWcF8DaRABIt8W3Lqdf9MSb7CzRHE/xBChU6leKA9sAmAu50+4baV7B/f0U ryQncZp6Hkgy3x82gZoMElVsdZflgMcFqiZ/g+eFu7ENT8Vw0GDU4e/shhZJcydh KQ/pJRy/yofpEnu3wnE9xnloHOUDqFZKy8qRZbts/X1eOoZAXBd65Eg9Fq8iTxqG 1IQb5f7XGkYbV2P5xXtSQgq+/eebZg6qOWX5SKMFbnVeCpYHLSvRwkuIqfQB6xiC qr9YaCtiRDwwBhPMTZDYbbXx38ytvMK4vkKrD4Gxq/+915MilQmZL5QaQbbQk/MU 3RfDwtdK7uOmxPrRXB1J1VNUQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS1HRrA XGhg949xTRi8CWj/s+eqMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZJ4parH/hKERM3fE8hzZ7CNEwD8z6RTgcxTptpzJX0zhxvMlSoQLL QoZmXwjI61u75LH+hWs1Nm9h+qXM0xZqNbgnBA68RfJXdJ70HMCFBEIVQiiAdeX0 CIjRs2SOWd3F5NRmbliWbNWhkwHI/ImWQI4QpDix6HxS/Zha9k3EdjfdL+ke12Tf ShprGkudfNS2/D2+eeQNSMJ0zkZ6GG61/q4LogO+UTehMYHBFi8cjsHGhmRZKLZy K6GpUZOsm0LaFGqS5HYVruioj44NoMaTXGXLUjf3wavbb0xqY/6CqmfWW4S/jfSw iqZFMWldw9AGn5S+5U36FqqQ4nvHIWAz -----END CERTIFICATE-----Generated at Tue Dec 16 13:49:18 2025 by rpki-client