This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json) Hash identifier: dX4yvIP+dEKsXDQTbH7ndXDDz8GNleK4l39no4OjQrE= Subject key identifier: 3F:AA:5D:7D:20:9D:08:2B:26:2D:FC:9A:C2:E7:79:E3:77:44:04:A0 Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Certificate serial: 08B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft Manifest number: 08B0 Signing time: Thu 18 Dec 2025 20:00:39 +0000 Manifest this update: Thu 18 Dec 2025 20:00:39 +0000 Manifest next update: Thu 25 Dec 2025 20:00:39 +0000 Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: /wIOfbA2W+7iVfJrr1s5gX5v8Z+m6REL6OwbEkpX/Ls=) 2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: tYFsHgxAF9/ErgmR/KDg2eSuObnl9aWU/P2C3GZmtAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Validity Not Before: Dec 18 20:00:39 2025 GMT Not After : Dec 25 20:00:39 2025 GMT Subject: CN=69445d67-d714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a8:48:74:f2:b7:ef:fe:da:68:70:c6:35:92: 47:29:b0:2d:d0:f9:22:8a:03:d3:81:58:a9:1b:89: ee:8c:62:be:8b:9d:59:d9:e7:f2:ba:53:51:fb:99: 45:32:6e:5d:44:79:4c:e9:fa:fb:e8:ec:0f:d8:d1: 35:4e:65:e5:91:fa:95:cf:cc:fc:b8:4a:49:1c:05: fd:cd:15:0a:2a:02:8f:33:ee:88:87:c5:74:b2:37: 0a:e3:55:e3:d7:fb:68:5d:bf:49:4d:97:7b:5c:92: 6b:da:48:30:a7:28:fb:83:47:af:c3:a4:ca:2c:3d: a5:c8:3e:e2:09:8c:17:57:f7:67:70:f5:82:64:af: 62:44:26:10:e4:7b:81:1c:96:e8:62:78:4e:8e:60: 74:e5:76:93:83:00:52:a2:4d:cf:aa:3e:5e:f0:49: c1:b2:bb:84:d4:a4:4b:ca:f6:db:e3:fc:29:fc:7a: 19:a3:0b:3c:1a:6a:91:ec:84:4e:be:7f:15:0b:a9: 40:43:40:4c:74:1f:f0:7c:6a:0e:1d:50:3f:96:5a: 3b:5f:4b:3c:ce:20:1e:11:db:0d:a9:22:67:59:28: 9b:4e:aa:e2:f3:38:c1:1e:93:43:26:dd:57:43:03: 77:df:47:19:54:76:ba:dd:01:71:c0:32:d1:b3:b7: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AA:5D:7D:20:9D:08:2B:26:2D:FC:9A:C2:E7:79:E3:77:44:04:A0 X509v3 Authority Key Identifier: keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:cc:64:71:1b:b1:80:72:d3:6e:dc:76:4f:b7:19:ea:f4:91: 41:cf:6a:e6:93:fc:60:4a:c4:ec:10:af:25:33:41:aa:a2:a5: dc:90:29:3f:cd:4c:04:9f:e5:9d:b9:c2:63:c5:55:c3:ba:8a: e3:6b:b2:d7:1a:ff:e1:5b:a8:cd:29:2d:b9:d5:44:06:49:94: 7e:56:59:f8:cf:9c:b3:02:cf:d8:fd:d8:7f:70:d8:1f:b3:54: f8:43:b5:e7:b6:97:70:dc:ba:19:f1:cc:0e:52:3f:f7:fd:02: 6b:61:fc:24:55:94:90:f5:98:82:27:6e:d2:ef:ac:e0:d1:d5: 6c:b5:3c:75:2a:c8:1c:21:09:4b:a3:3b:40:c6:d8:28:ee:20: 3e:0e:f1:34:50:81:20:0c:34:7b:55:98:cb:6c:39:af:f3:0b: 6e:82:fe:07:85:89:2e:24:43:54:a4:c3:ca:a2:0c:fd:53:f4: 2d:b1:d2:e6:fe:6a:1b:9b:a1:ad:de:cb:cd:67:33:e0:02:c5: 3e:69:fd:81:1b:e6:05:7f:89:77:74:f2:1a:b8:23:8d:c6:91: ba:43:7b:5e:f2:e7:53:63:ab:55:ef:d3:53:42:ea:0f:35:c8: 16:98:a6:a2:95:08:fe:5b:fe:c4:e5:15:7b:91:71:58:dc:48: 0d:e5:b0:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCNDgxMTAvBgNVBAUTKDc1RDc1QkRBNTFCQ0EwMDYwRjcwODExMzIzNEM0MTQ1 RTQ0NDQyMUEwHhcNMjUxMjE4MjAwMDM5WhcNMjUxMjI1MjAwMDM5WjAYMRYwFAYD VQQDDA02OTQ0NWQ2Ny1kNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqhIdPK37/7aaHDGNZJHKbAt0PkiigPTgVipG4nujGK+i51Z2efyulNR+5lF Mm5dRHlM6fr76OwP2NE1TmXlkfqVz8z8uEpJHAX9zRUKKgKPM+6Ih8V0sjcK41Xj 1/toXb9JTZd7XJJr2kgwpyj7g0evw6TKLD2lyD7iCYwXV/dncPWCZK9iRCYQ5HuB HJboYnhOjmB05XaTgwBSok3Pqj5e8EnBsruE1KRLyvbb4/wp/HoZows8GmqR7IRO vn8VC6lAQ0BMdB/wfGoOHVA/llo7X0s8ziAeEdsNqSJnWSibTqri8zjBHpNDJt1X QwN330cZVHa63QFxwDLRs7f1lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+qXX0g nQgrJi38msLneeN3RASgMB8GA1UdIwQYMBaAFHXXW9pRvKAGD3CBEyNMQUXkREIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkI0OC85MEM0NzkxQ0NC QjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9BWVBjSUVUSTB4QlJlUkVR aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkZGIybEc4b0FZUGNJRVRJMHhCUmVSRVFoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkI0OC85MEM0NzkxQ0NCQjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9B WVBjSUVUSTB4QlJlUkVRaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmzGRxG7GActNu3HZPtxnq9JFBz2rmk/xgSsTsEK8lM0GqoqXckCk/ zUwEn+WducJjxVXDuorja7LXGv/hW6jNKS251UQGSZR+Vln4z5yzAs/Y/dh/cNgf s1T4Q7Xntpdw3LoZ8cwOUj/3/QJrYfwkVZSQ9ZiCJ27S76zg0dVstTx1KsgcIQlL oztAxtgo7iA+DvE0UIEgDDR7VZjLbDmv8wtugv4HhYkuJENUpMPKogz9U/QtsdLm /mobm6Gt3svNZzPgAsU+af2BG+YFf4l3dPIauCONxpG6Q3te8udTY6tV79NTQuoP NcgWmKailQj+W/7E5RV7kXFY3EgN5bAb -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:40 2025 by rpki-client