This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json) Hash identifier: DAGm5oC2Btjhzsst0374YMUgetx/oQcvkaaXq02DaNk= Subject key identifier: 19:68:E1:3A:FE:A2:E3:5E:32:A2:0A:32:84:67:47:24:E1:3B:A4:52 Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft Manifest number: 044E Signing time: Mon 22 Dec 2025 23:15:55 +0000 Manifest this update: Mon 22 Dec 2025 23:15:55 +0000 Manifest next update: Mon 29 Dec 2025 23:15:55 +0000 Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: fliWppbmdERf6Wix7zb4m2cv21AVVwueyoq4GXx/QyQ=) 2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: iIiLthCmbedJRo28SgXjSnyh36vN7rpzHjXfoOnGfcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Validity Not Before: Dec 22 23:15:55 2025 GMT Not After : Dec 29 23:15:55 2025 GMT Subject: CN=6949d12b-9fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:30:8e:da:cd:59:02:d3:a2:0d:65:9b:97:eb: 30:cd:5e:fe:29:5d:1c:bb:dd:ab:4a:d4:d9:2c:75: ef:63:1f:a3:f5:56:68:7a:98:50:4a:a2:88:bc:f3: 9c:fb:d6:44:fd:a7:03:19:6c:89:f8:8d:6d:96:97: ea:49:6c:96:43:26:ef:0d:8e:91:50:47:2c:41:91: 39:33:21:2e:d8:0c:3a:a1:bc:0f:9b:79:2a:fa:bb: 98:7e:25:1b:db:e7:99:a5:95:b8:10:2d:96:1c:99: 55:63:46:e9:47:d7:62:a2:ff:93:0e:cf:18:8d:18: 73:40:28:82:cd:bc:f9:e0:59:a9:4c:f5:94:03:a9: 92:1e:95:60:32:eb:79:b8:f4:e4:ed:49:10:8f:79: 8b:5c:22:09:dc:02:a1:82:12:11:80:a1:d2:94:4f: 84:fb:96:e4:23:e9:f3:f6:54:83:c9:03:6c:be:6d: 88:25:9f:c3:e0:93:05:ef:94:80:15:05:65:5d:3f: 4a:30:17:1a:89:fd:be:f5:13:4b:bd:42:89:53:de: 95:21:52:ad:8e:a4:01:d5:7e:3e:72:12:94:93:46: d1:0a:b3:5a:a0:72:8b:4e:4a:8f:9b:81:89:d7:50: 32:19:b8:2c:f6:bd:f5:a9:dc:aa:ac:11:d3:96:4f: 49:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:68:E1:3A:FE:A2:E3:5E:32:A2:0A:32:84:67:47:24:E1:3B:A4:52 X509v3 Authority Key Identifier: keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:07:16:3f:4c:33:2d:38:48:47:4e:af:2a:a6:51:84:7c:47: 13:15:e5:b7:43:c1:59:74:fe:87:f4:37:a2:50:17:63:fb:32: b9:69:2c:d3:56:40:e4:58:76:cc:77:c2:eb:25:e9:4d:9f:47: 64:b1:4f:36:d8:00:c5:f2:37:a7:19:2a:dc:6c:b0:b7:f6:32: 99:cd:6f:34:25:ab:d7:b3:03:0b:74:61:1b:6c:cf:f9:82:be: cc:a6:4e:40:bb:5f:cb:80:09:cb:3e:26:31:89:e7:07:e5:43: 58:2f:ab:5c:5c:00:09:01:d2:94:91:c2:e3:84:65:ef:38:bd: c0:61:7d:98:cd:41:ce:09:44:4a:bc:04:42:dd:17:98:d5:99: fc:ff:14:3b:4c:76:ae:2d:fb:9e:32:9b:44:d7:a9:99:38:6d: ae:7d:3e:33:34:50:ef:c8:d8:9a:5d:22:c7:55:f5:0b:5c:c8: 5c:67:4d:58:e6:8b:44:11:17:49:36:b5:f6:43:a0:69:60:24: 8c:e9:7a:fc:9f:80:6a:b4:40:74:7c:15:9d:c9:f3:06:96:78: b8:1f:5d:d8:44:37:c6:25:0b:dd:3b:49:08:69:38:8d:cf:49: 01:9d:05:e5:ee:4f:ef:7b:3f:8c:91:23:67:5e:80:5c:78:ad: 9e:87:fa:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF Q0M2NjNFRUQwHhcNMjUxMjIyMjMxNTU1WhcNMjUxMjI5MjMxNTU1WjAYMRYwFAYD VQQDDA02OTQ5ZDEyYi05ZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzCO2s1ZAtOiDWWbl+swzV7+KV0cu92rStTZLHXvYx+j9VZoephQSqKIvPOc +9ZE/acDGWyJ+I1tlpfqSWyWQybvDY6RUEcsQZE5MyEu2Aw6obwPm3kq+ruYfiUb 2+eZpZW4EC2WHJlVY0bpR9diov+TDs8YjRhzQCiCzbz54FmpTPWUA6mSHpVgMut5 uPTk7UkQj3mLXCIJ3AKhghIRgKHSlE+E+5bkI+nz9lSDyQNsvm2IJZ/D4JMF75SA FQVlXT9KMBcaif2+9RNLvUKJU96VIVKtjqQB1X4+chKUk0bRCrNaoHKLTkqPm4GJ 11AyGbgs9r31qdyqrBHTlk9JQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlo4Tr+ ouNeMqIKMoRnRyThO6RSMB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVDNS84OTNDNjRGNjdFOUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZY d3Qyb0JJLTZnVFBzeG1QdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7BxY/TDMtOEhHTq8qplGEfEcTFeW3Q8FZdP6H9DeiUBdj+zK5aSzT VkDkWHbMd8LrJelNn0dksU822ADF8jenGSrcbLC39jKZzW80JavXswMLdGEbbM/5 gr7Mpk5Au1/LgAnLPiYxiecH5UNYL6tcXAAJAdKUkcLjhGXvOL3AYX2YzUHOCURK vARC3ReY1Zn8/xQ7THauLfueMptE16mZOG2ufT4zNFDvyNiaXSLHVfULXMhcZ01Y 5otEERdJNrX2Q6BpYCSM6Xr8n4BqtEB0fBWdyfMGlni4H13YRDfGJQvdO0kIaTiN z0kBnQXl7k/vez+MkSNnXoBceK2eh/pH -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:30 2025 by rpki-client