This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json) Hash identifier: tiGjfBBf0U0O9urd7rnNKEhqLb+VIJZkpeQQo4EAHZc= Subject key identifier: F9:FF:AF:90:CF:90:B2:10:5F:D9:C8:98:99:C2:A6:F5:BC:CC:A9:E3 Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft Manifest number: 24 Signing time: Tue 23 Dec 2025 06:39:03 +0000 Manifest this update: Tue 23 Dec 2025 06:39:03 +0000 Manifest next update: Tue 30 Dec 2025 06:39:03 +0000 Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: ovdFxM+s1OyyQ0F+FMef4AXOI95dR5XoMd/qVEsn9WI=) 2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: SdFwkFKVKGQJMPSxRwUazujF8EdEIyRb2qsEHEvHujY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Validity Not Before: Dec 23 06:39:03 2025 GMT Not After : Dec 30 06:39:03 2025 GMT Subject: CN=694a3907-f7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a0:1d:0f:7c:97:b2:bf:f9:c0:50:55:9e:5d: 14:7d:ac:2e:6c:3b:be:21:43:0b:67:5b:b1:20:b7: a7:05:49:c1:41:80:69:99:20:72:96:32:86:73:16: 5e:23:25:f9:6f:98:b8:41:e6:dd:78:d8:a1:ce:c2: 2e:2c:db:5b:78:7d:9c:3a:c8:8f:95:2d:ec:9e:a0: 1c:f2:ad:1d:ee:f0:43:54:c1:52:77:72:99:4d:c3: 8a:9d:6f:ae:e7:fb:39:57:3b:fe:d8:54:3d:9b:78: 64:e2:2f:a3:54:77:99:f2:78:ce:9b:ae:82:0d:f9: da:38:90:2b:22:60:06:72:36:ad:f5:1d:be:f8:fc: d7:86:2f:bf:db:37:f2:3c:98:a3:c3:3c:2b:fb:50: bc:e4:55:42:bf:e2:d7:cd:19:d9:fb:b2:71:65:fb: 1b:7a:b6:86:ca:56:12:d7:d3:22:73:77:35:07:ba: 3c:ea:92:f8:81:48:f6:97:dd:56:7e:91:e6:ac:19: 68:a5:60:e9:ec:a3:40:be:01:b3:d4:c3:6c:28:90: 9b:be:db:83:ef:3e:71:d8:f3:5b:d7:6d:62:b5:57: 84:3d:8e:84:a4:b5:fc:78:83:5c:21:99:83:a9:24: 92:9d:33:1b:7b:ad:80:06:f7:65:51:32:a1:24:3e: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:AF:90:CF:90:B2:10:5F:D9:C8:98:99:C2:A6:F5:BC:CC:A9:E3 X509v3 Authority Key Identifier: keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:63:e0:cc:d0:ba:48:d3:96:60:85:9c:fc:ae:a0:8d:49:93: 82:8d:7f:b5:39:ed:4f:11:cb:d4:f5:90:52:7f:a1:a6:13:0c: e5:4d:76:9d:f1:47:a8:9a:d0:64:20:0f:79:05:8a:b2:03:5d: 49:9d:cf:f8:09:d5:c2:07:13:7d:4f:5c:76:cc:90:a1:c9:17: ab:9d:79:eb:29:66:b8:8e:07:14:3f:3f:79:79:85:fe:0b:1e: ae:a8:a4:61:8e:d8:cc:1d:9c:36:94:6a:c6:19:c5:48:46:83: e3:d7:79:cc:cc:1d:da:1e:91:88:52:60:3f:de:ed:b8:f2:94: c9:ec:ed:f1:c4:6f:8d:6f:93:b4:9a:b1:23:3e:e1:d7:c8:54: 5b:b6:1f:d3:79:37:9a:e7:88:3c:2c:12:59:49:27:d4:a6:df: d6:39:75:40:f7:8f:52:10:79:b6:46:be:b6:12:eb:71:46:da: 03:95:cf:f1:95:04:57:1b:81:d7:82:ce:2f:b8:8f:e8:fe:87: f5:83:27:41:b4:60:66:f1:42:38:42:f2:c6:0d:63:79:8a:18: 65:18:41:63:54:d8:7f:3d:fe:f3:c2:4b:45:67:8c:cf:23:41: 16:3f:8c:95:19:6b:b2:4f:5e:f9:4c:f4:e0:4d:d9:7b:5a:7b: 16:3d:a8:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RkVDMjExMC8GA1UEBRMoNzQ1RDU3N0Y1QjhFN0Q0RjhEQjQ5QThEQjlBQ0IxM0ZD MjVBQTIzMzAeFw0yNTEyMjMwNjM5MDNaFw0yNTEyMzAwNjM5MDNaMBgxFjAUBgNV BAMMDTY5NGEzOTA3LWY3YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYoB0PfJeyv/nAUFWeXRR9rC5sO74hQwtnW7Egt6cFScFBgGmZIHKWMoZzFl4j JflvmLhB5t142KHOwi4s21t4fZw6yI+VLeyeoBzyrR3u8ENUwVJ3cplNw4qdb67n +zlXO/7YVD2beGTiL6NUd5nyeM6broIN+do4kCsiYAZyNq31Hb74/NeGL7/bN/I8 mKPDPCv7ULzkVUK/4tfNGdn7snFl+xt6tobKVhLX0yJzdzUHujzqkviBSPaX3VZ+ keasGWilYOnso0C+AbPUw2wokJu+24PvPnHY81vXbWK1V4Q9joSktfx4g1whmYOp JJKdMxt7rYAG92VRMqEkPtTBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+f+vkM+Q shBf2ciYmcKm9bzMqeMwHwYDVR0jBBgwFoAUdF1Xf1uOfU+NtJqNuayxP8JaojMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRUMyL0I4MkE5QTFDQjg3 RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUtTnRKcU51YXl4UDhKYW9q TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEYxWGYxdU9mVS1OdEpxTnVheXhQOEphb2pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG RUMyL0I4MkE5QTFDQjg3RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUt TnRKcU51YXl4UDhKYW9qTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGZj4MzQukjTlmCFnPyuoI1Jk4KNf7U57U8Ry9T1kFJ/oaYTDOVNdp3x R6ia0GQgD3kFirIDXUmdz/gJ1cIHE31PXHbMkKHJF6udeespZriOBxQ/P3l5hf4L Hq6opGGO2MwdnDaUasYZxUhGg+PXeczMHdoekYhSYD/e7bjylMns7fHEb41vk7Sa sSM+4dfIVFu2H9N5N5rniDwsEllJJ9Sm39Y5dUD3j1IQebZGvrYS63FG2gOVz/GV BFcbgdeCzi+4j+j+h/WDJ0G0YGbxQjhC8sYNY3mKGGUYQWNU2H89/vPCS0VnjM8j QRY/jJUZa7JPXvlM9OBN2XtaexY9qNM= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:30 2025 by rpki-client