This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json) Hash identifier: 9bPw5Hd9TMmLvLHPsmG+UUv0xADNot8wJloHJ+NQUTg= Subject key identifier: 3D:9C:07:BA:9C:EC:C2:B6:A5:18:52:1E:4C:25:4A:F0:74:2B:AA:84 Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Certificate serial: 0E5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft Manifest number: 0F0B Signing time: Sat 20 Dec 2025 17:28:40 +0000 Manifest this update: Sat 20 Dec 2025 17:28:40 +0000 Manifest next update: Sat 27 Dec 2025 17:28:40 +0000 Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: ZSDOLEcNCYFcspCrruAuD5SYLpHAMJJCfKavaUcxrF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3678 (0xe5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Validity Not Before: Dec 20 17:28:40 2025 GMT Not After : Dec 27 17:28:40 2025 GMT Subject: CN=6946dcc8-8528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:d2:62:e9:43:9b:7d:26:d8:9e:85:b0:eb: d7:65:3e:fb:71:43:7a:b5:8e:67:b9:48:49:9c:64: c2:29:6a:09:40:fd:50:ef:f4:3e:33:4e:ee:82:2c: 48:90:1e:d8:48:2e:14:34:12:70:b4:da:b7:5e:3a: 90:8d:f0:48:15:89:90:d1:fe:66:e9:15:18:ae:56: 9b:29:d5:52:44:bc:34:c8:fc:91:60:aa:dd:d0:73: a0:7c:dd:89:c8:36:74:54:32:a3:01:da:bd:b7:b9: ac:01:93:20:35:15:54:53:0c:9e:06:5a:57:a4:57: f5:2d:18:4c:39:27:57:4a:ef:f9:3d:bf:87:bd:a4: 24:6b:b8:ae:e7:7f:a6:4c:b9:1a:01:a6:43:0b:33: 5b:85:54:4c:60:12:c2:27:c3:e3:9c:38:8c:8e:07: ad:85:40:7a:03:9a:ba:e4:40:41:79:47:73:59:2b: af:57:23:2b:f2:c2:63:1a:af:75:62:df:a1:b5:45: ff:a1:54:71:00:80:b3:ce:f8:4d:bc:36:8f:84:45: f8:b3:e6:d1:94:99:f0:0f:f8:da:82:26:09:03:94: 1c:a0:c2:29:50:33:38:cb:b6:c7:e9:77:72:62:f8: 42:80:02:23:17:24:c1:30:a0:92:35:fb:44:5f:21: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9C:07:BA:9C:EC:C2:B6:A5:18:52:1E:4C:25:4A:F0:74:2B:AA:84 X509v3 Authority Key Identifier: keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:1b:15:32:6b:42:2e:5d:c4:bc:57:f0:11:87:d5:af:a1:7e: 3b:9c:f7:be:40:d2:2c:90:70:4a:65:53:90:c5:88:58:cc:c5: 90:44:25:f5:00:6e:07:f9:8d:82:5e:ab:e3:57:ba:0a:48:5c: 4d:ef:09:af:80:17:90:66:ea:45:3a:0e:6b:4a:b1:75:c3:83: b1:86:18:77:c0:5e:7a:27:04:10:61:1a:21:02:14:55:e6:8a: 67:1f:18:29:e7:51:fd:27:ea:b1:79:5b:30:19:de:5c:7d:d2: e3:3f:2e:74:9d:38:11:22:85:22:33:0f:0c:2d:7b:f5:07:10: fb:30:b4:3e:99:df:74:47:9c:6c:ea:2f:54:a5:ef:80:34:ba: ff:cf:e9:99:e8:6b:2c:d9:f7:c5:84:01:27:ea:65:55:e0:fa: 84:11:76:e0:bb:a3:91:03:f2:02:85:36:51:cd:46:aa:12:a0: b7:66:55:09:ce:07:be:23:e7:9b:b0:96:c3:f3:cb:b4:65:ac: 72:25:5a:01:76:f5:e3:30:22:a8:ee:8b:b8:64:ea:29:64:b9: 01:60:fd:e0:03:f8:ac:f4:2e:c1:cb:df:8f:f2:4b:29:fe:fe: 9e:4b:f6:50:eb:5d:4a:f6:d0:34:bc:91:80:6d:1e:3b:99:fd: 10:16:4f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKDBERjk5RTMyNEIwRTNBNTNFOEU1NkQ3MDIwRkY2RkJD NUJGMUNCMDIwHhcNMjUxMjIwMTcyODQwWhcNMjUxMjI3MTcyODQwWjAYMRYwFAYD VQQDDA02OTQ2ZGNjOC04NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXPSYulDm30m2J6FsOvXZT77cUN6tY5nuUhJnGTCKWoJQP1Q7/Q+M07ugixI kB7YSC4UNBJwtNq3XjqQjfBIFYmQ0f5m6RUYrlabKdVSRLw0yPyRYKrd0HOgfN2J yDZ0VDKjAdq9t7msAZMgNRVUUwyeBlpXpFf1LRhMOSdXSu/5Pb+HvaQka7iu53+m TLkaAaZDCzNbhVRMYBLCJ8PjnDiMjgethUB6A5q65EBBeUdzWSuvVyMr8sJjGq91 Yt+htUX/oVRxAICzzvhNvDaPhEX4s+bRlJnwD/jagiYJA5QcoMIpUDM4y7bH6Xdy YvhCgAIjFyTBMKCSNftEXyFkVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2cB7qc 7MK2pRhSHkwlSvB0K6qEMB8GA1UdIwQYMBaAFA35njJLDjpT6OVtcCD/b7xb8csC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09sUG81VzF3SVA5dnZGdnh5 d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmbWVNa3NPT2xQbzVXMXdJUDl2dkZ2eHl3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09s UG81VzF3SVA5dnZGdnh5d0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWGxUya0IuXcS8V/ARh9WvoX47nPe+QNIskHBKZVOQxYhYzMWQRCX1 AG4H+Y2CXqvjV7oKSFxN7wmvgBeQZupFOg5rSrF1w4Oxhhh3wF56JwQQYRohAhRV 5opnHxgp51H9J+qxeVswGd5cfdLjPy50nTgRIoUiMw8MLXv1BxD7MLQ+md90R5xs 6i9Upe+ANLr/z+mZ6Gss2ffFhAEn6mVV4PqEEXbgu6ORA/IChTZRzUaqEqC3ZlUJ zge+I+ebsJbD88u0ZaxyJVoBdvXjMCKo7ou4ZOopZLkBYP3gA/is9C7By9+P8ksp /v6eS/ZQ611K9tA0vJGAbR47mf0QFk8k -----END CERTIFICATE-----Generated at Sun Dec 21 21:30:31 2025 by rpki-client