This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: A/Gb8qtBvv/NfMsG7zyMq9sXf0/wP8FVbpCFBOpBMEw= Subject key identifier: C7:F4:D3:97:B0:A1:DA:D9:72:CC:8B:23:07:90:5E:5C:9F:1A:50:C1 Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1ADB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1ACE Signing time: Wed 24 Dec 2025 16:06:38 +0000 Manifest this update: Wed 24 Dec 2025 16:06:38 +0000 Manifest next update: Wed 31 Dec 2025 16:06:38 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: G0tlVqUbEJds5Fub8yvuQi0qCv2btYz8EcjLZS/vCHM=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: XzGkPPqSTC5CeDxEAOY4CC7n2iKvE4CetGVSiQJeAZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6875 (0x1adb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Dec 24 16:06:38 2025 GMT Not After : Dec 31 16:06:38 2025 GMT Subject: CN=694c0f8e-8756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:8c:00:04:4d:c9:60:b0:0b:8a:2a:cb:c5: ce:a2:ea:f1:58:39:43:c5:b6:7e:0b:fe:41:ef:7e: db:0b:c8:b4:af:61:6d:38:48:4a:83:fd:d2:53:f0: c4:d8:f4:dc:cc:7f:91:ab:e0:6c:fc:22:9b:2b:6f: ff:b3:94:06:b2:7e:7e:69:7a:18:7d:88:49:5c:b6: 1f:e5:ec:af:0a:db:00:dc:0b:ff:40:39:ad:93:03: 8b:c3:9d:f8:b0:db:5b:93:94:27:8a:a6:43:35:04: b6:0a:68:3e:0f:cd:7f:33:9b:45:07:6e:c7:e2:75: f9:96:f9:2d:e7:9c:3f:d0:ec:eb:ea:9f:16:2c:54: b1:58:29:54:c4:47:7d:32:71:37:7a:4b:b9:99:8a: 9e:62:86:49:7e:5e:b9:7c:a4:1e:e6:11:a7:6e:dc: 7c:da:78:30:23:a2:2a:a6:74:bb:a3:35:24:c3:b9: fc:96:70:38:47:1d:a1:e6:b1:0b:b5:6a:96:24:ec: c0:a0:b8:35:7f:1f:ae:2d:2e:35:00:6a:a1:b0:dd: ec:a3:4c:12:60:32:12:d3:78:4a:e2:86:9d:90:ec: cd:2f:8c:24:94:6c:c2:7e:0d:ed:af:54:93:09:2d: c9:4e:00:94:d2:d2:8b:81:57:86:6e:1d:c0:b5:22: 89:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F4:D3:97:B0:A1:DA:D9:72:CC:8B:23:07:90:5E:5C:9F:1A:50:C1 X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:61:dc:75:3f:b6:f2:85:a6:0c:d3:60:64:ad:fc:2a:39:60: 00:6a:7e:d6:8f:99:ce:a9:84:70:82:fb:65:31:58:c6:62:95: eb:a6:f8:b9:ef:44:cf:19:5f:02:80:dc:ee:43:b9:8e:cd:83: d6:e8:58:2f:fa:8d:95:18:7e:0f:ac:a3:a2:3a:01:33:22:d7: b0:f4:46:8a:b9:b7:85:9b:27:7e:2d:c4:97:19:25:7e:05:7f: 5e:27:88:e9:ab:38:5a:00:89:4e:76:55:6f:80:58:02:00:da: 5a:36:f2:db:f0:9c:54:69:81:bf:c5:48:53:5f:ef:ae:b5:02: b8:e5:58:c5:f7:94:7f:46:83:5d:5b:42:3a:6e:c7:77:7d:7a: 39:b4:54:3e:f5:eb:d7:d9:75:5e:98:53:bc:61:87:fc:fa:b7: a2:17:f7:82:dc:01:30:16:91:e7:5d:f3:6c:0d:0d:cc:16:b7: 97:df:a7:57:50:d5:4a:72:72:55:cb:b2:f4:fd:f6:40:71:2f: e4:68:a0:03:d9:75:b4:c6:9f:f9:3b:a1:ef:71:e9:df:21:e6: 26:b7:5f:af:7b:7a:09:48:28:d2:1b:a0:07:92:2e:46:1e:b1: 5e:f0:4a:6c:3c:83:5e:da:0b:b6:0b:43:bd:2f:0c:41:70:30: e2:68:ea:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjUxMjI0MTYwNjM4WhcNMjUxMjMxMTYwNjM4WjAYMRYwFAYD VQQDDA02OTRjMGY4ZS04NzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kqMAARNyWCwC4oqy8XOourxWDlDxbZ+C/5B737bC8i0r2FtOEhKg/3SU/DE 2PTczH+Rq+Bs/CKbK2//s5QGsn5+aXoYfYhJXLYf5eyvCtsA3Av/QDmtkwOLw534 sNtbk5QniqZDNQS2Cmg+D81/M5tFB27H4nX5lvkt55w/0Ozr6p8WLFSxWClUxEd9 MnE3eku5mYqeYoZJfl65fKQe5hGnbtx82ngwI6IqpnS7ozUkw7n8lnA4Rx2h5rEL tWqWJOzAoLg1fx+uLS41AGqhsN3so0wSYDIS03hK4oadkOzNL4wklGzCfg3tr1ST CS3JTgCU0tKLgVeGbh3AtSKJMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf005ew odrZcsyLIweQXlyfGlDBMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8Ydx1P7byhaYM02BkrfwqOWAAan7Wj5nOqYRwgvtlMVjGYpXrpvi5 70TPGV8CgNzuQ7mOzYPW6Fgv+o2VGH4PrKOiOgEzItew9EaKubeFmyd+LcSXGSV+ BX9eJ4jpqzhaAIlOdlVvgFgCANpaNvLb8JxUaYG/xUhTX++utQK45VjF95R/RoNd W0I6bsd3fXo5tFQ+9evX2XVemFO8YYf8+reiF/eC3AEwFpHnXfNsDQ3MFreX36dX UNVKcnJVy7L0/fZAcS/kaKAD2XW0xp/5O6HvcenfIeYmt1+ve3oJSCjSG6AHki5G HrFe8EpsPINe2gu2C0O9LwxBcDDiaOpF -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:13 2025 by rpki-client