This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json) Hash identifier: ETBdxiYwT8AsH3hfMGpscpgG62QPqrju99mC+ZdAu0Y= Subject key identifier: CA:AE:60:0B:52:58:83:4A:99:9A:DE:03:65:00:9E:B5:D5:EE:9F:9F Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 08C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft Manifest number: 08B9 Signing time: Fri 12 Dec 2025 19:54:36 +0000 Manifest this update: Fri 12 Dec 2025 19:54:36 +0000 Manifest next update: Fri 19 Dec 2025 19:54:36 +0000 Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: gGRBEJUV5+hvvGszpwrhFiZ1Ugt63kVg7MedpQhWrm0=) 2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: l3BnPkx3AD0+V1TVm9PvDdFXvv/NHwdEm5t8UJry1xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 19:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2243 (0x8c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Dec 12 19:54:36 2025 GMT Not After : Dec 19 19:54:36 2025 GMT Subject: CN=693c72fc-29c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:4a:14:89:b5:69:dd:da:c5:e6:11:eb:c2: 19:05:0b:3a:10:07:0e:93:f5:88:0b:bc:f4:96:d2: b7:3d:c2:3c:55:b5:04:4b:13:56:f7:4a:b5:26:4f: b4:ca:72:b5:20:e7:32:71:ec:73:e1:a3:48:5f:81: 53:b5:be:4a:91:7f:8d:bb:fd:91:f6:a8:7a:cb:a8: 65:c4:5e:73:74:57:ce:0f:2d:66:75:33:64:b1:01: 88:1c:42:fc:ab:65:cb:b2:8d:28:4d:0a:eb:fd:31: 76:08:aa:ba:56:db:5b:6d:fd:94:b5:ad:5d:c7:97: c7:c8:b7:e9:5c:12:21:b1:cb:be:d9:6e:ad:45:a7: cf:c2:8c:c9:7b:e2:07:53:61:2d:9f:f2:8b:11:24: 39:da:a4:f5:54:99:30:23:5d:5c:4f:17:8a:bb:10: 77:f7:54:98:c1:67:f8:5a:32:95:44:35:59:82:83: 50:bd:71:7c:4b:a5:64:3d:c7:5b:aa:05:8f:10:e7: a7:af:ef:b0:3d:15:cf:00:47:2f:f6:7d:8b:c3:da: 8b:7f:41:b5:61:5c:ee:f8:1e:04:7c:e7:bb:a8:59: 35:e9:00:70:58:ec:b4:eb:96:fd:68:a5:2c:43:29: e8:62:98:aa:b2:2c:b2:cf:19:28:9f:34:c1:60:e0: d6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:60:0B:52:58:83:4A:99:9A:DE:03:65:00:9E:B5:D5:EE:9F:9F X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:12:8a:4a:29:0c:f2:7f:0e:5c:03:f9:20:38:c5:0f:5d:91: cb:fd:c9:43:e8:9e:42:e5:03:a1:1d:54:8d:28:05:95:7d:59: ab:05:38:d6:ec:2c:3b:1e:00:77:7d:a3:5a:11:9b:24:ca:69: a5:8e:96:41:9a:e4:8f:f0:b7:13:74:9a:df:7f:cc:50:32:ab: eb:e1:68:cd:55:e3:7b:4b:91:db:99:ce:99:c8:98:e2:32:67: fd:79:d5:79:bf:9d:16:24:24:d0:88:9c:45:69:d5:a5:76:21: d8:5c:ab:b3:dd:22:8c:d0:6b:b8:69:0f:3a:d2:f3:74:cb:03: 09:fc:5b:31:5b:bf:55:53:63:73:81:ab:33:6c:e0:49:87:a8: 4f:d3:a0:93:a9:6d:38:4f:98:95:a5:7a:d9:73:6a:fc:d6:74: c4:5c:85:cd:5a:05:57:26:ea:cf:d4:6a:70:19:97:1e:a0:58: f1:24:65:f5:57:b7:e6:c3:68:ac:23:1b:1f:83:f5:71:25:e9: b4:2d:74:5e:ae:56:79:73:79:3e:18:74:fa:60:0a:08:f1:af: 59:f2:e9:b6:7e:e2:c7:e8:d0:d6:35:ff:d9:c6:a4:98:b5:b2: 95:54:d2:c0:35:50:55:d3:d0:f7:ff:01:ce:cd:34:f4:9d:d9: ad:cc:61:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUxMjEyMTk1NDM2WhcNMjUxMjE5MTk1NDM2WjAYMRYwFAYD VQQDDA02OTNjNzJmYy0yOWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZlKFIm1ad3axeYR68IZBQs6EAcOk/WIC7z0ltK3PcI8VbUESxNW90q1Jk+0 ynK1IOcycexz4aNIX4FTtb5KkX+Nu/2R9qh6y6hlxF5zdFfODy1mdTNksQGIHEL8 q2XLso0oTQrr/TF2CKq6Vttbbf2Uta1dx5fHyLfpXBIhscu+2W6tRafPwozJe+IH U2Etn/KLESQ52qT1VJkwI11cTxeKuxB391SYwWf4WjKVRDVZgoNQvXF8S6VkPcdb qgWPEOenr++wPRXPAEcv9n2Lw9qLf0G1YVzu+B4EfOe7qFk16QBwWOy065b9aKUs QynoYpiqsiyyzxkonzTBYODWWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMquYAtS WINKmZreA2UAnrXV7p+fMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNEopKKQzyfw5cA/kgOMUPXZHL/clD6J5C5QOhHVSNKAWVfVmrBTjW 7Cw7HgB3faNaEZskymmljpZBmuSP8LcTdJrff8xQMqvr4WjNVeN7S5Hbmc6ZyJji Mmf9edV5v50WJCTQiJxFadWldiHYXKuz3SKM0Gu4aQ860vN0ywMJ/FsxW79VU2Nz gaszbOBJh6hP06CTqW04T5iVpXrZc2r81nTEXIXNWgVXJurP1GpwGZceoFjxJGX1 V7fmw2isIxsfg/VxJem0LXRerlZ5c3k+GHT6YAoI8a9Z8um2fuLH6NDWNf/ZxqSY tbKVVNLANVBV09D3/wHOzTT0ndmtzGHE -----END CERTIFICATE-----Generated at Sun Dec 14 09:16:19 2025 by rpki-client