This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: 2HGHC/F6bUJV4OyQGanweAVBH7AbKHxbxk48UfZXpBg= Subject key identifier: B8:9D:A0:C4:F8:4F:D7:DE:F3:BF:5A:F3:76:A9:3D:ED:B7:78:E2:C6 Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 104C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0FC7 Signing time: Mon 22 Dec 2025 17:14:12 +0000 Manifest this update: Mon 22 Dec 2025 17:14:12 +0000 Manifest next update: Mon 29 Dec 2025 17:14:12 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: HVmru9IstlqKHnBSuDx3wOdbeiYM6Eiv5WOByBHmxwI=) 2: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: HvCeCNMd3cDYBcsUNmnAZgRE0yTF+p8FgFeiy4l06fs=) 3: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: zq3r2bqYk5JoyYAxGmuwDEsSoCRJP0AIOXoJJj3slFs=) 4: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: ZKO21v7I5AsbeHedpQVwlDjC0YYOzEud39SdbR3CgmA=) 5: B35E5B46334111EF9770A542C4F9AE02.roa (hash: eo1b+Yq2Qt1v8H4Ltid7fTu6HkQPul0DLMpDr+LxnZs=) 6: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: nicSmvXStk5YSg3xIJcJaFbSV0F719Jx8dhmknr9Hs0=) 7: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: PTHJR1ja6PHKnchzMzvjSZlwBo+yBYxt/AqG4ozJw5A=) 8: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: wE9Ja7ZzAfw7/oCX8jXb3Mmdvu+AmH7Xr6q2xftQxQg=) 9: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: 05k3Et6L9d2nE0FPEy+35+jv6KXbsZR/t8jrPFetuWc=) 10: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: IrKqf3WwcP3c1t/kdOeFbTBkd7MIU0BN08Rqrji/qUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4172 (0x104c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Dec 22 17:14:12 2025 GMT Not After : Dec 29 17:14:12 2025 GMT Subject: CN=69497c64-5198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:e0:5a:79:b4:25:7f:b1:5d:f6:e9:3f:42: 4b:7d:bb:b5:68:26:12:b5:6b:c4:d6:b8:ba:e2:e9: f9:4c:62:71:e8:a1:5e:60:37:14:18:85:44:87:49: bd:6f:51:e6:4e:b7:60:44:2a:a0:e0:f2:84:88:c7: 79:17:ae:eb:62:9e:02:cb:83:15:2f:d6:cc:cc:32: c4:51:38:ad:3c:0e:bf:e6:c8:5f:5e:91:75:e6:91: 81:17:16:9e:07:2e:58:13:8c:78:98:e2:a1:1e:de: 15:ce:c3:22:88:13:4d:7e:aa:0c:dc:4d:de:0b:f1: 2c:3c:aa:2e:2d:46:1f:75:fe:ad:1f:52:af:a3:aa: 0f:58:79:bd:21:81:d8:ee:1d:65:4b:0c:1c:ac:70: e8:d8:32:c4:63:e1:6b:28:c2:12:73:b9:a7:89:09: 4e:6b:23:e3:f0:0a:1e:92:f2:c0:90:49:d9:81:a1: 24:3c:dd:0b:e2:21:43:4d:9c:32:a8:a2:e1:7c:57: a3:70:19:0a:57:f3:e2:84:3e:6a:9e:9d:9f:22:62: c5:61:c2:03:46:ba:70:b7:30:79:8f:8b:11:5a:3d: aa:2f:d6:e0:a0:1b:22:cd:47:ba:34:61:65:39:dc: 41:ee:24:96:29:ac:40:ed:f9:27:62:8e:6f:a2:f9: f9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9D:A0:C4:F8:4F:D7:DE:F3:BF:5A:F3:76:A9:3D:ED:B7:78:E2:C6 X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:41:36:c2:c0:63:b6:da:2a:d5:40:09:4c:0d:fd:04:c1:07: af:3a:3c:b9:02:12:a6:b1:f0:70:4c:3d:19:31:e7:f6:8f:02: df:ba:05:d2:e6:c0:31:0c:96:fd:01:09:60:e6:2d:19:df:a2: 39:0a:a8:43:51:d4:7f:50:60:99:f8:b9:68:99:11:a0:78:45: 68:93:3d:9c:d7:63:34:8e:17:2d:5e:b7:9c:45:c3:4c:2f:a1: 05:5b:2e:94:98:18:16:d2:62:51:82:e6:09:d6:8e:bd:a3:27: c7:5b:d4:b5:1c:2f:9d:7d:8c:80:2e:f7:1a:59:c8:12:69:c5: b5:6a:97:73:41:00:3c:99:61:c0:41:96:da:72:fe:65:39:fe: 81:77:33:dd:e9:d0:0a:aa:5f:a0:19:a9:06:0f:f8:69:d7:dc: 48:21:01:1c:38:d0:37:56:a3:29:07:a9:a9:82:75:03:37:37: 40:4f:8c:d4:53:61:88:ae:d2:f2:58:6f:5a:db:62:15:df:ac: b6:85:7a:80:a6:76:b2:ee:4f:bc:04:33:29:49:fb:10:84:fb: 39:bd:8c:6e:9a:ab:a5:91:b6:6f:f0:6c:a3:ee:dc:83:e5:4e: e2:70:6e:b8:b6:20:15:d2:3d:c8:6b:3f:a8:84:0b:10:a0:2e: 30:c0:e3:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUxMjIyMTcxNDEyWhcNMjUxMjI5MTcxNDEyWjAYMRYwFAYD VQQDDA02OTQ5N2M2NC01MTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+DgWnm0JX+xXfbpP0JLfbu1aCYStWvE1ri64un5TGJx6KFeYDcUGIVEh0m9 b1HmTrdgRCqg4PKEiMd5F67rYp4Cy4MVL9bMzDLEUTitPA6/5shfXpF15pGBFxae By5YE4x4mOKhHt4VzsMiiBNNfqoM3E3eC/EsPKouLUYfdf6tH1Kvo6oPWHm9IYHY 7h1lSwwcrHDo2DLEY+FrKMISc7mniQlOayPj8AoekvLAkEnZgaEkPN0L4iFDTZwy qKLhfFejcBkKV/PihD5qnp2fImLFYcIDRrpwtzB5j4sRWj2qL9bgoBsizUe6NGFl OdxB7iSWKaxA7fknYo5vovn5LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLidoMT4 T9fe879a83apPe23eOLGMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDsQTbCwGO22irVQAlMDf0EwQevOjy5AhKmsfBwTD0ZMef2jwLfugXS 5sAxDJb9AQlg5i0Z36I5CqhDUdR/UGCZ+LlomRGgeEVokz2c12M0jhctXrecRcNM L6EFWy6UmBgW0mJRguYJ1o69oyfHW9S1HC+dfYyALvcaWcgSacW1apdzQQA8mWHA QZbacv5lOf6BdzPd6dAKql+gGakGD/hp19xIIQEcONA3VqMpB6mpgnUDNzdAT4zU U2GIrtLyWG9a22IV36y2hXqApnay7k+8BDMpSfsQhPs5vYxumqulkbZv8Gyj7tyD 5U7icG64tiAV0j3Iaz+ohAsQoC4wwONO -----END CERTIFICATE-----Generated at Wed Dec 24 02:19:51 2025 by rpki-client