This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft File: DKQH8N1TBy-ooGCBaRkpbmV31oI.mft (raw, json) Hash identifier: ZAnzySrvtG4C0YF4zpVdcQ+m1E3Xh3O/krzNqEQmROk= Subject key identifier: FA:1C:D9:87:59:79:07:BA:32:8D:38:47:DD:09:F9:32:D6:D5:1B:54 Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 Certificate issuer: /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Certificate serial: 0CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft Manifest number: 0CA6 Signing time: Mon 22 Dec 2025 17:58:58 +0000 Manifest this update: Mon 22 Dec 2025 17:58:57 +0000 Manifest next update: Mon 29 Dec 2025 17:58:57 +0000 Files and hashes: 1: DKQH8N1TBy-ooGCBaRkpbmV31oI.crl (hash: lrCHOt/SivIDFhZHkZlHUuiVCcn098NduwBm9wOawXE=) 2: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (hash: 6qF9h43DlEql9uVHDmWHQPm/sTRQL95grseNb5kyQF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Validity Not Before: Dec 22 17:58:57 2025 GMT Not After : Dec 29 17:58:57 2025 GMT Subject: CN=694986e2-b52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:b2:92:39:4a:db:4f:49:37:cc:79:0d:21: f6:c4:df:d9:8f:b1:5b:9c:17:6b:e5:52:7d:85:a5: d6:65:89:f9:f1:d5:28:b7:e0:b9:b1:5f:ee:6a:af: d9:4c:7d:ef:e8:35:2d:ee:03:36:21:53:65:d5:b0: 12:80:0c:76:83:65:ac:9c:37:01:5b:d6:a6:b6:f3: 08:e2:f2:ea:1d:f1:57:4d:1c:a7:2d:c2:7e:be:75: b8:22:3e:2f:2a:82:96:7c:97:9a:17:94:06:7e:7d: 7c:70:97:2e:2e:4a:4f:7e:6b:a6:16:47:eb:74:dc: b8:43:6c:90:82:34:3f:4a:9a:bd:ec:f3:94:ba:4c: 0b:cc:30:79:63:bb:f3:6e:7e:f6:af:18:68:c0:9a: 65:a7:53:da:8e:21:23:d9:c5:7c:56:3d:8f:41:3d: ec:4d:2b:e5:09:62:67:6b:55:03:12:b9:69:b7:20: 83:41:75:48:3d:65:b2:a5:86:63:f9:d7:48:07:d3: 24:0d:22:b9:e5:b1:8b:dd:70:e3:71:1c:9e:fa:80: ff:56:50:7f:24:5c:5e:70:ed:8a:30:a8:46:30:09: 03:97:78:60:c0:56:fd:2a:30:ae:28:28:a6:59:96: 9a:66:a1:b6:ae:c8:da:26:51:5c:8d:67:47:6d:e8: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1C:D9:87:59:79:07:BA:32:8D:38:47:DD:09:F9:32:D6:D5:1B:54 X509v3 Authority Key Identifier: keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:62:f2:2c:eb:97:3b:71:5f:a0:d0:4a:e2:8f:d8:12:e3:b5: 52:15:68:5c:f3:ce:c4:5d:81:0d:3d:84:3d:47:7f:8f:c3:4d: fe:b3:0a:ed:d1:6d:e9:78:53:ee:b6:3d:89:d5:8e:b0:d4:c0: c9:39:ca:89:10:37:02:e0:f8:ee:a4:c7:6b:6b:ab:7d:57:cd: 7d:e4:76:ec:6b:b3:7f:19:35:05:b7:be:a9:7e:e6:9f:01:46: b1:76:36:d6:d7:90:9d:22:50:34:d9:36:63:c8:45:47:f4:df: 69:d2:84:48:8f:ff:dc:a7:db:70:01:68:22:1f:f4:4d:7f:f3: ba:8f:f2:c7:8f:e7:e2:c2:c0:a3:ae:fd:d1:d9:02:fc:15:a6: 29:fb:83:1c:ca:7b:58:69:fc:71:9a:23:22:aa:2a:13:42:67: d8:18:6c:4f:33:36:1d:7f:62:98:6e:b7:a6:d1:bd:25:43:ab: bc:28:72:79:36:f6:40:a8:77:0f:f0:a9:42:d8:88:34:83:87: ff:87:dd:d3:1e:0d:e3:b2:17:a2:c8:0b:d2:b4:3a:c4:7c:cb: d5:5e:de:2f:a0:a3:2e:0a:cd:77:3b:dd:70:d5:17:64:42:0e: 7c:bb:b1:90:46:f6:4f:1e:17:d1:97:ae:aa:2e:ef:7f:2a:91: 0f:5d:86:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCREUxMTAvBgNVBAUTKDBDQTQwN0YwREQ1MzA3MkZBOEEwNjA4MTY5MTkyOTZF NjU3N0Q2ODIwHhcNMjUxMjIyMTc1ODU3WhcNMjUxMjI5MTc1ODU3WjAYMRYwFAYD VQQDDA02OTQ5ODZlMi1iNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4yykjlK209JN8x5DSH2xN/Zj7FbnBdr5VJ9haXWZYn58dUot+C5sV/uaq/Z TH3v6DUt7gM2IVNl1bASgAx2g2WsnDcBW9amtvMI4vLqHfFXTRynLcJ+vnW4Ij4v KoKWfJeaF5QGfn18cJcuLkpPfmumFkfrdNy4Q2yQgjQ/Spq97POUukwLzDB5Y7vz bn72rxhowJplp1PajiEj2cV8Vj2PQT3sTSvlCWJna1UDErlptyCDQXVIPWWypYZj +ddIB9MkDSK55bGL3XDjcRye+oD/VlB/JFxecO2KMKhGMAkDl3hgwFb9KjCuKCim WZaaZqG2rsjaJlFcjWdHbeip/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoc2YdZ eQe6Mo04R90J+TLW1RtUMB8GA1UdIwQYMBaAFAykB/DdUwcvqKBggWkZKW5ld9aC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0JERS81MEE5MEUzNjA4 MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5LW9vR0NCYVJrcGJtVjMx b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLUUg4TjFUQnktb29HQ0JhUmtwYm1WMzFvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0JERS81MEE5MEUzNjA4MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5 LW9vR0NCYVJrcGJtVjMxb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqYvIs65c7cV+g0Erij9gS47VSFWhc887EXYENPYQ9R3+Pw03+swrt 0W3peFPutj2J1Y6w1MDJOcqJEDcC4PjupMdra6t9V8195Hbsa7N/GTUFt76pfuaf AUaxdjbW15CdIlA02TZjyEVH9N9p0oRIj//cp9twAWgiH/RNf/O6j/LHj+fiwsCj rv3R2QL8FaYp+4McyntYafxxmiMiqioTQmfYGGxPMzYdf2KYbrem0b0lQ6u8KHJ5 NvZAqHcP8KlC2Ig0g4f/h93THg3jsheiyAvStDrEfMvVXt4voKMuCs13O91w1Rdk Qg58u7GQRvZPHhfRl66qLu9/KpEPXYYa -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:29 2025 by rpki-client