This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft File: dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json) Hash identifier: XoIh/p586h3Pp/Dj6nRSC35KJ55hz7l/appsIakNNdQ= Subject key identifier: B3:1C:5B:A5:D4:99:78:D3:F4:92:52:7F:6A:DB:B6:C5:54:E8:9E:EE Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 Certificate issuer: /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft Manifest number: 02A7 Signing time: Wed 03 Dec 2025 02:40:35 +0000 Manifest this update: Wed 03 Dec 2025 02:40:35 +0000 Manifest next update: Wed 10 Dec 2025 02:40:35 +0000 Files and hashes: 1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: G8o7cAPPPuOAVUh+hEvCRfodtDTiDU++0DOPvo4IOHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 02:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Validity Not Before: Dec 3 02:40:35 2025 GMT Not After : Dec 10 02:40:35 2025 GMT Subject: CN=692fa323-22ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:87:1b:ec:d5:15:b6:21:f1:27:06:cf:35: dc:d5:bb:c2:cb:f4:10:5d:c4:0d:ef:73:8a:e9:c5: 14:5f:d3:c0:73:39:9e:f0:34:4a:4a:02:40:7d:9f: f2:88:df:12:ed:34:61:95:e1:7c:57:fa:fb:bd:ef: 09:4b:5f:5b:b3:f9:c9:d5:9b:e8:4b:37:9f:5a:8b: b1:b5:7a:4e:b4:fc:e5:c7:b9:d8:1e:7b:e0:d6:dc: e4:24:01:58:4f:83:ac:48:30:0d:ce:ba:fe:6f:5e: ad:70:08:61:ee:22:90:0c:37:17:1f:44:20:90:4e: 6b:83:03:9d:99:08:56:64:14:ed:d5:1b:c7:00:f1: ce:ef:16:53:5c:58:4b:aa:15:a5:46:e9:cb:f0:d3: 0b:83:70:51:32:9c:d3:d2:b8:2b:84:95:59:56:b4: 56:10:8c:7a:1b:0c:ca:6b:ee:e5:2d:bc:b4:5a:19: 45:a7:fb:ff:29:25:7e:bd:ee:b4:a7:dd:16:ca:d5: 3d:b4:36:66:3d:83:e6:1b:6e:cb:fc:5e:be:7a:f0: a9:69:87:7e:12:db:a6:74:85:5d:85:e7:0f:f5:da: a9:0c:ee:e8:bc:3b:76:6d:f6:36:83:c7:56:ce:08: 88:78:ac:69:c1:a8:8a:03:d2:89:b2:72:4f:f3:c3: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1C:5B:A5:D4:99:78:D3:F4:92:52:7F:6A:DB:B6:C5:54:E8:9E:EE X509v3 Authority Key Identifier: keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3a:34:e0:22:19:9b:2d:42:95:62:2a:71:b4:1c:80:7e:b3: d7:97:e0:cb:02:9d:23:e6:4a:3b:13:59:8c:e5:fa:f8:b5:fd: d9:0b:65:a7:22:5d:77:71:bc:c9:f2:40:06:41:5b:15:0a:19: 48:0a:93:78:1e:a4:eb:3e:dd:a0:b3:62:e1:3b:b0:33:c4:8a: 43:0a:1d:ed:1c:0c:c7:40:5c:e6:1c:37:d2:11:02:78:51:7c: d5:c6:f0:88:90:d6:65:b0:41:93:ec:08:2d:10:37:6a:6f:f5: 57:5b:56:ed:58:23:f1:9a:08:b6:09:be:2c:e5:f2:ef:be:8e: 37:76:65:27:ed:64:1e:c1:37:0a:66:67:08:02:b6:91:39:7f: 07:d4:c1:77:aa:bb:b6:53:03:dc:61:0e:67:05:a1:54:54:27: b9:67:f1:43:4c:03:0c:5f:54:21:7b:f9:ab:76:b4:6f:bb:a8: 12:68:4b:ec:b6:19:8b:8a:eb:d8:f4:ef:9f:e5:e0:79:c1:f7: 75:58:78:85:4e:e0:49:45:1b:d8:a3:4a:b2:81:fe:cf:5b:f9: 71:db:b4:d6:64:aa:7c:c4:f8:25:39:71:d0:ba:3f:df:2a:4b: 63:97:53:f6:c9:a5:e5:08:20:93:e5:84:a8:92:89:43:8e:80: c8:de:88:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDc0M0U3OEM0NTk4RUZDNzJEQTA4NDY0NjUwRUI4RjlD REExNkY5ODAwHhcNMjUxMjAzMDI0MDM1WhcNMjUxMjEwMDI0MDM1WjAYMRYwFAYD VQQDEw02OTJmYTMyMy0yMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv2HG+zVFbYh8ScGzzXc1bvCy/QQXcQN73OK6cUUX9PAczme8DRKSgJAfZ/y iN8S7TRhleF8V/r7ve8JS19bs/nJ1ZvoSzefWouxtXpOtPzlx7nYHnvg1tzkJAFY T4OsSDANzrr+b16tcAhh7iKQDDcXH0QgkE5rgwOdmQhWZBTt1RvHAPHO7xZTXFhL qhWlRunL8NMLg3BRMpzT0rgrhJVZVrRWEIx6GwzKa+7lLby0WhlFp/v/KSV+ve60 p90WytU9tDZmPYPmG27L/F6+evCpaYd+EtumdIVdhecP9dqpDO7ovDt2bfY2g8dW zgiIeKxpwaiKA9KJsnJP88NjgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMcW6XU mXjT9JJSf2rbtsVU6J7uMB8GA1UdIwQYMBaAFHQ+eMRZjvxy2ghGRlDrj5zaFvmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19ITGFDRVpHVU91UG5Ob1ct WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RENTR4Rm1PX0hMYUNFWkdVT3VQbk5vVy1ZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19I TGFDRVpHVU91UG5Ob1ctWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOOjTgIhmbLUKVYipxtByAfrPXl+DLAp0j5ko7E1mM5fr4tf3ZC2Wn Il13cbzJ8kAGQVsVChlICpN4HqTrPt2gs2LhO7AzxIpDCh3tHAzHQFzmHDfSEQJ4 UXzVxvCIkNZlsEGT7AgtEDdqb/VXW1btWCPxmgi2Cb4s5fLvvo43dmUn7WQewTcK ZmcIAraROX8H1MF3qru2UwPcYQ5nBaFUVCe5Z/FDTAMMX1Qhe/mrdrRvu6gSaEvs thmLiuvY9O+f5eB5wfd1WHiFTuBJRRvYo0qygf7PW/lx27TWZKp8xPglOXHQuj/f Kktjl1P2yaXlCCCT5YSokolDjoDI3oiV -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:34 2025 by rpki-client