This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: /jcTAr2UYmg9MqzkN+2BuCOgj0cxtISHi771fBpONSg= Subject key identifier: 39:0C:73:2A:AD:0B:B9:ED:FF:6B:AF:5A:66:02:63:3C:19:5D:75:FA Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 0383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 037D Signing time: Mon 15 Dec 2025 00:07:31 +0000 Manifest this update: Mon 15 Dec 2025 00:07:31 +0000 Manifest next update: Mon 22 Dec 2025 00:07:31 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: TN61FXTlZqE/OLIDSyM5l0IYomenS74hXTC046sH6jI=) 2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: U/JXwEqtoHC/7jQ68sFwAQsy+SIpyQHakkosmR6Gtvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: Dec 15 00:07:31 2025 GMT Not After : Dec 22 00:07:31 2025 GMT Subject: CN=693f5143-d2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:e1:66:d4:bf:60:ae:e1:e2:e5:de:e2:17: b5:ae:35:c4:f4:46:86:e7:83:ed:eb:ed:a3:57:96: 93:03:23:1d:b8:60:d9:cf:c5:72:75:df:7f:78:58: bf:9c:36:e7:6c:c1:28:a6:20:c3:59:e7:3e:76:2f: 06:9e:d0:b8:f1:4e:d9:59:42:c3:33:81:75:0f:42: ae:1b:bd:28:dd:53:23:72:88:a3:b6:47:be:5b:f6: 1d:75:22:f2:ac:9a:56:6e:12:4f:88:4c:27:f0:a4: 87:d3:cb:c8:86:79:88:69:ad:ec:7c:6b:ef:4a:c0: fd:83:f8:91:63:4f:96:c4:8c:f6:ff:a9:88:c3:a0: 73:1d:10:ff:47:80:35:db:5f:b1:28:9f:c1:b0:bf: 92:e0:5b:4d:4f:e3:3a:77:31:6e:a3:25:b2:5b:68: 6e:1a:6e:ae:6d:bc:31:52:66:a2:c0:db:fe:cb:dd: 24:a5:f8:35:4b:f8:c1:36:e5:9a:69:19:19:b5:67: 14:02:b1:e9:f7:0f:99:7b:8c:a0:c8:60:0e:c0:80: 01:b9:d1:a5:d2:3b:91:2d:a8:48:fa:3d:bd:15:05: 0e:f2:c9:3d:68:f5:d4:43:23:69:ab:69:82:07:14: 06:b2:7a:64:64:db:7c:2c:a7:7f:82:78:33:00:3d: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0C:73:2A:AD:0B:B9:ED:FF:6B:AF:5A:66:02:63:3C:19:5D:75:FA X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:6c:4b:04:ca:03:45:0d:3c:6b:e4:db:11:8a:57:c8:bb:33: e0:2d:9d:df:a2:e1:48:b6:82:71:11:dc:7a:bc:5c:74:74:4e: ca:1b:e7:52:e9:02:bd:2f:70:7a:d8:0b:e7:72:69:f9:ad:09: ac:f3:62:03:36:56:06:bf:85:20:5c:02:13:dc:33:1a:94:33: 7b:01:b7:cd:01:11:4c:96:9d:86:c2:5e:18:b8:e7:8f:d1:04: f9:db:78:6a:67:bc:3e:d8:da:64:bd:61:c1:f6:ed:3e:6f:16: 6c:26:a0:67:70:59:0e:60:40:62:4e:c8:2d:67:2a:68:1b:c3: 60:a3:77:e4:5d:cc:2b:f3:3f:8d:c7:e7:51:74:a0:bb:99:6a: b1:54:93:7b:14:d9:c6:96:61:be:92:90:a6:48:de:4d:08:02: 85:10:b2:9d:5c:1f:3c:52:35:96:46:93:18:47:33:15:84:48: ee:9d:2d:22:8f:e5:00:12:38:7d:3e:66:25:c6:cf:11:fd:12: 01:63:0a:21:52:f5:17:e3:38:43:e1:da:13:43:9c:74:16:28: 50:98:42:7d:51:b4:13:a4:87:42:42:04:d9:a0:d8:eb:7d:65: 74:cb:89:73:ee:29:2a:84:d5:60:9a:33:b8:13:e8:ae:9c:de: b6:76:59:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjUxMjE1MDAwNzMxWhcNMjUxMjIyMDAwNzMxWjAYMRYwFAYD VQQDDA02OTNmNTE0My1kMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxarhZtS/YK7h4uXe4he1rjXE9EaG54Pt6+2jV5aTAyMduGDZz8Vydd9/eFi/ nDbnbMEopiDDWec+di8GntC48U7ZWULDM4F1D0KuG70o3VMjcoijtke+W/YddSLy rJpWbhJPiEwn8KSH08vIhnmIaa3sfGvvSsD9g/iRY0+WxIz2/6mIw6BzHRD/R4A1 21+xKJ/BsL+S4FtNT+M6dzFuoyWyW2huGm6ubbwxUmaiwNv+y90kpfg1S/jBNuWa aRkZtWcUArHp9w+Ze4ygyGAOwIABudGl0juRLahI+j29FQUO8sk9aPXUQyNpq2mC BxQGsnpkZNt8LKd/gngzAD2fdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkMcyqt C7nt/2uvWmYCYzwZXXX6MB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACbEsEygNFDTxr5NsRilfIuzPgLZ3fouFItoJxEdx6vFx0dE7KG+dS 6QK9L3B62Avncmn5rQms82IDNlYGv4UgXAIT3DMalDN7AbfNARFMlp2Gwl4YuOeP 0QT523hqZ7w+2NpkvWHB9u0+bxZsJqBncFkOYEBiTsgtZypoG8Ngo3fkXcwr8z+N x+dRdKC7mWqxVJN7FNnGlmG+kpCmSN5NCAKFELKdXB88UjWWRpMYRzMVhEjunS0i j+UAEjh9PmYlxs8R/RIBYwohUvUX4zhD4doTQ5x0FihQmEJ9UbQTpIdCQgTZoNjr fWV0y4lz7ikqhNVgmjO4E+iunN62dlmS -----END CERTIFICATE-----Generated at Tue Dec 16 06:22:20 2025 by rpki-client