This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft File: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft (raw, json) Hash identifier: Q2jJIS7C+4JQmPf1spnz4FaP1toBaB4y+P5ex1Wu/xs= Subject key identifier: 49:CB:68:75:62:1B:F3:B1:20:A8:3C:3D:C4:33:11:A6:53:91:9E:CC Authority key identifier: 74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A Certificate issuer: /CN=A91CCDAE/serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft Manifest number: 10 Signing time: Tue 23 Dec 2025 06:47:23 +0000 Manifest this update: Tue 23 Dec 2025 06:47:23 +0000 Manifest next update: Tue 30 Dec 2025 06:47:23 +0000 Files and hashes: 1: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl (hash: 8kSTjzd7M4kWIkk/u35ofWEtnr4xPEHBk+GTaJQRLh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A Validity Not Before: Dec 23 06:47:23 2025 GMT Not After : Dec 30 06:47:23 2025 GMT Subject: CN=694a3afb-d58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:eb:1b:0f:2b:18:96:ca:b6:b3:35:60:8b: b5:41:ae:f7:b8:9a:43:33:ac:0c:f4:f0:30:f7:f5: 97:54:b2:ad:ff:42:32:c6:1d:2d:36:7e:7a:c7:27: 26:d8:2a:cd:ff:86:2d:be:7f:4f:a6:3f:90:91:49: c1:92:88:e6:e3:b6:92:72:8d:09:eb:63:fe:e3:62: 81:96:73:95:6f:36:95:cb:a1:0a:90:7b:9e:b1:05: a6:39:c9:27:f2:6d:e0:04:1e:ff:9c:71:f9:45:2d: 9f:f4:26:ca:b0:74:8f:16:af:a0:2b:20:09:c0:6f: 91:e6:5a:db:49:96:4a:5f:47:29:ee:c3:e8:29:2d: 97:0a:2b:35:ac:e1:e6:6f:42:68:f2:6f:02:e0:6d: 71:98:ef:8b:da:3a:84:87:a8:ab:c1:54:47:ec:46: 2a:2c:e0:0a:f8:ba:f8:51:e5:b8:dd:cc:cb:b4:72: 42:6d:d6:20:05:4b:a2:1b:7e:98:c1:81:f9:2c:2f: 62:64:86:9b:97:84:8e:56:6a:67:0d:86:21:36:bf: fa:11:b5:70:9e:3b:66:18:3b:b0:7e:a5:f4:9c:72: 8b:8b:81:46:14:0f:c9:1d:ea:4b:6b:19:c1:8e:cc: 00:77:4c:7e:b4:67:fb:ce:42:50:15:20:8d:06:c9: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CB:68:75:62:1B:F3:B1:20:A8:3C:3D:C4:33:11:A6:53:91:9E:CC X509v3 Authority Key Identifier: keyid:74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:6a:be:58:40:37:83:08:5c:16:18:54:41:fd:2c:db:81:80: 1c:59:5c:24:d0:a5:b8:31:01:fa:59:3b:26:80:fa:44:e2:44: b0:ec:bd:3e:2f:66:fe:a3:c9:61:3a:13:e8:fc:f9:a9:b7:29: 62:53:6d:37:ab:03:4c:0d:8f:12:83:ee:d8:7c:8a:58:4b:e6: bf:21:f8:73:36:f5:6a:09:fb:b0:db:b5:5c:97:5c:71:cb:3e: 46:7c:f1:c8:ec:52:bb:db:c7:f0:af:84:c5:12:cf:8c:09:dd: 13:9a:43:c8:7c:aa:a8:d9:b6:7d:c0:ed:6f:07:77:f3:8f:db: d4:3a:1f:f9:ba:b3:5c:b8:2e:13:93:75:f5:bc:ee:d8:5e:56: 16:49:d3:9f:89:d0:11:2c:0a:82:20:53:df:48:fd:0e:ae:02: 69:88:b9:e7:03:ff:43:81:0b:2a:56:73:19:52:0c:21:d9:49: 32:ff:f1:a3:ae:3b:cc:e8:39:34:c8:c5:4c:a3:a2:63:04:60: fe:a1:65:ac:3e:46:3c:ff:26:4f:cc:c2:3c:97:46:c8:5f:62: 1d:ef:7d:4d:aa:0b:56:13:2c:cd:b5:1c:9b:49:66:c9:aa:12: ea:03:26:07:d2:3a:17:71:30:4f:cf:28:a4:d4:9b:16:25:05: 62:44:6c:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0RBRTExMC8GA1UEBRMoNzREOUZFMUQ2MTZBNzNDOEZEOUQwMEE3NEEwRTYyQzA1 QTkxRTA5QTAeFw0yNTEyMjMwNjQ3MjNaFw0yNTEyMzAwNjQ3MjNaMBgxFjAUBgNV BAMMDTY5NGEzYWZiLWQ1OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0BOsbDysYlsq2szVgi7VBrve4mkMzrAz08DD39ZdUsq3/QjLGHS02fnrHJybY Ks3/hi2+f0+mP5CRScGSiObjtpJyjQnrY/7jYoGWc5VvNpXLoQqQe56xBaY5ySfy beAEHv+ccflFLZ/0JsqwdI8Wr6ArIAnAb5HmWttJlkpfRynuw+gpLZcKKzWs4eZv QmjybwLgbXGY74vaOoSHqKvBVEfsRios4Ar4uvhR5bjdzMu0ckJt1iAFS6IbfpjB gfksL2JkhpuXhI5WamcNhiE2v/oRtXCeO2YYO7B+pfSccouLgUYUD8kd6ktrGcGO zAB3TH60Z/vOQlAVII0GyX+XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSctodWIb 87EgqDw9xDMRplORnswwHwYDVR0jBBgwFoAUdNn+HWFqc8j9nQCnSg5iwFqR4Jow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDREFFLzA1QzFFQ0ZFQzg0 MjExRjA4RDk3OUE3RUM0RjlBRTAyL2RObi1IV0ZxYzhqOW5RQ25TZzVpd0ZxUjRK by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE5uLUhXRnFjOGo5blFDblNnNWl3RnFSNEpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND REFFLzA1QzFFQ0ZFQzg0MjExRjA4RDk3OUE3RUM0RjlBRTAyL2RObi1IV0ZxYzhq OW5RQ25TZzVpd0ZxUjRKby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIlqvlhAN4MIXBYYVEH9LNuBgBxZXCTQpbgxAfpZOyaA+kTiRLDsvT4v Zv6jyWE6E+j8+am3KWJTbTerA0wNjxKD7th8ilhL5r8h+HM29WoJ+7DbtVyXXHHL PkZ88cjsUrvbx/CvhMUSz4wJ3ROaQ8h8qqjZtn3A7W8Hd/OP29Q6H/m6s1y4LhOT dfW87theVhZJ05+J0BEsCoIgU99I/Q6uAmmIuecD/0OBCypWcxlSDCHZSTL/8aOu O8zoOTTIxUyjomMEYP6hZaw+Rjz/Jk/MwjyXRshfYh3vfU2qC1YTLM21HJtJZsmq EuoDJgfSOhdxME/PKKTUmxYlBWJEbC4= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:31 2025 by rpki-client