This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft File: DvuCEhc42eyGnjyjzwUA-RKOF6g.mft (raw, json) Hash identifier: FzAacHJEEM0WdMhdKNXWjAPDoZoD54VEStybj+a1mx8= Subject key identifier: D8:04:F2:A4:4A:5B:F3:8E:63:89:6E:DF:7A:D1:9E:B1:0C:39:74:D8 Authority key identifier: 0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8 Certificate issuer: /CN=A91DEDFD/serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft Manifest number: 0C Signing time: Tue 02 Dec 2025 19:44:24 +0000 Manifest this update: Tue 02 Dec 2025 19:44:24 +0000 Manifest next update: Tue 09 Dec 2025 19:44:24 +0000 Files and hashes: 1: DvuCEhc42eyGnjyjzwUA-RKOF6g.crl (hash: rEPS2IjpJDB4miK8Kc78Zur0vKmurb6ZmDLLE2VUcfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 19:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8 Validity Not Before: Dec 2 19:44:24 2025 GMT Not After : Dec 9 19:44:24 2025 GMT Subject: CN=692f4198-70af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:71:bc:9c:5c:d2:2c:bc:ad:b9:bf:7b:be:ab: af:a8:45:47:95:07:df:0a:b5:d8:26:62:03:ae:54: cc:dd:ed:91:d9:1f:29:fc:6a:fb:e9:ff:d0:49:f5: 5e:c3:e3:09:6a:38:5a:4e:0e:bc:f6:86:ab:08:2b: a5:1d:1b:89:91:e1:9a:a2:72:86:92:83:d4:a9:5d: f5:e1:2d:b1:ee:21:11:56:cd:41:4b:6a:80:4b:84: d9:01:4f:0a:1c:d6:3a:73:b4:87:90:0f:84:53:54: 4e:1c:56:ba:53:b8:26:99:e3:87:32:0b:3d:82:77: bc:d9:d7:8a:4a:8d:9d:81:9f:f5:a9:0d:ab:f0:b6: 5d:01:6e:e1:0a:ef:62:f8:b5:55:02:76:ad:2a:52: 2b:e5:be:ea:10:ab:38:b5:3d:a7:a1:cb:95:ee:59: 27:54:d7:68:fd:31:da:c6:46:db:a8:68:26:c6:1b: 3a:20:17:06:c5:0f:0d:e2:70:16:89:2f:9f:00:e0: 76:57:98:b5:ab:d8:9b:5c:c4:23:92:3e:a2:13:0c: 92:83:38:2c:ff:f7:fc:e2:22:c2:71:45:c3:7f:b2: af:07:9d:23:eb:ab:e5:bc:07:5a:c9:99:be:af:9a: 81:a3:92:46:3d:76:39:84:c7:17:64:73:92:55:f6: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:04:F2:A4:4A:5B:F3:8E:63:89:6E:DF:7A:D1:9E:B1:0C:39:74:D8 X509v3 Authority Key Identifier: keyid:0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f0:e2:b3:c6:50:8e:12:0d:60:82:18:27:97:f4:e5:04:9a: 59:67:d5:08:e6:fb:d5:65:cf:17:a1:8b:a0:c6:8c:8f:e5:18: 2c:c5:88:b8:77:33:27:08:b2:d0:af:15:19:dd:ed:be:fe:f5: 38:e6:7b:9d:84:a9:62:40:55:8e:e7:37:57:eb:08:54:03:7b: 51:28:46:78:86:6c:68:04:b4:00:0a:fc:37:62:98:b6:ae:7e: 07:5f:61:bc:96:1d:dc:1e:d1:da:f4:62:05:cf:36:ae:82:97: 65:4e:93:1e:d0:10:12:b6:3d:4a:09:a8:bb:6d:f9:d8:6a:63: 64:7a:ab:e6:b1:fc:07:0f:72:cd:a7:6a:d6:1e:27:b3:d8:3f: a3:4a:24:ac:be:48:0d:7c:ca:3a:df:4c:a2:bc:d9:7b:b0:7f: db:9e:99:c9:1f:7a:46:e6:72:05:9c:3d:dd:dc:04:dd:ae:bf: 99:75:db:c7:b7:a9:15:66:0d:4f:ec:4c:c4:b5:94:0a:3e:c4: ba:2a:6a:68:cf:b2:d2:98:61:58:f2:44:d6:55:83:df:93:8c: a5:59:74:b8:4c:c9:a5:18:04:28:89:97:65:45:a3:5b:5f:ed: 6a:b9:6a:63:9a:e5:57:36:d4:a8:87:ef:0b:1a:2c:d8:0a:7a: 81:2a:8b:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RURGRDExMC8GA1UEBRMoMEVGQjgyMTIxNzM4RDlFQzg2OUUzQ0EzQ0YwNTAwRjkx MjhFMTdBODAeFw0yNTEyMDIxOTQ0MjRaFw0yNTEyMDkxOTQ0MjRaMBgxFjAUBgNV BAMTDTY5MmY0MTk4LTcwYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCacbycXNIsvK25v3u+q6+oRUeVB98KtdgmYgOuVMzd7ZHZHyn8avvp/9BJ9V7D 4wlqOFpODrz2hqsIK6UdG4mR4ZqicoaSg9SpXfXhLbHuIRFWzUFLaoBLhNkBTwoc 1jpztIeQD4RTVE4cVrpTuCaZ44cyCz2Cd7zZ14pKjZ2Bn/WpDavwtl0BbuEK72L4 tVUCdq0qUivlvuoQqzi1Paehy5XuWSdU12j9MdrGRtuoaCbGGzogFwbFDw3icBaJ L58A4HZXmLWr2JtcxCOSPqITDJKDOCz/9/ziIsJxRcN/sq8HnSPrq+W8B1rJmb6v moGjkkY9djmExxdkc5JV9hedAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2ATypEpb 845jiW7fetGesQw5dNgwHwYDVR0jBBgwFoAUDvuCEhc42eyGnjyjzwUA+RKOF6gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFREZEL0VBMUQ4RTE2QzEz MTExRjBCNDMxNzQzRUM0RjlBRTAyL0R2dUNFaGM0MmV5R25qeWp6d1VBLVJLT0Y2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRHZ1Q0VoYzQyZXlHbmp5anp3VUEtUktPRjZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF REZEL0VBMUQ4RTE2QzEzMTExRjBCNDMxNzQzRUM0RjlBRTAyL0R2dUNFaGM0MmV5 R25qeWp6d1VBLVJLT0Y2Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFnw4rPGUI4SDWCCGCeX9OUEmlln1Qjm+9Vlzxehi6DGjI/lGCzFiLh3 MycIstCvFRnd7b7+9Tjme52EqWJAVY7nN1frCFQDe1EoRniGbGgEtAAK/DdimLau fgdfYbyWHdwe0dr0YgXPNq6Cl2VOkx7QEBK2PUoJqLtt+dhqY2R6q+ax/AcPcs2n atYeJ7PYP6NKJKy+SA18yjrfTKK82Xuwf9uemckfekbmcgWcPd3cBN2uv5l128e3 qRVmDU/sTMS1lAo+xLoqamjPstKYYVjyRNZVg9+TjKVZdLhMyaUYBCiJl2VFo1tf 7Wq5amOa5Vc21KiH7wsaLNgKeoEqi5o= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:07 2025 by rpki-client