This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft File: _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json) Hash identifier: gYUS+gBTb9E0ooVlbzUn++PXH0lqRpWfuvWveMsO4VE= Subject key identifier: 43:1B:EF:53:8F:59:44:6A:EB:76:CF:C2:47:0D:AF:46:DB:86:1C:E9 Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Certificate serial: 0301 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft Manifest number: 02FB Signing time: Tue 23 Dec 2025 00:13:08 +0000 Manifest this update: Tue 23 Dec 2025 00:13:08 +0000 Manifest next update: Tue 30 Dec 2025 00:13:08 +0000 Files and hashes: 1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: A6fa30D7Kh0uDsHru37vJ5kTF3Bw7sYMka+png7CWNY=) 2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: ZYQF+B8J3kvs5xBRsxJyyeizflCtkKmYQojiW1ynZsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 769 (0x301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Validity Not Before: Dec 23 00:13:08 2025 GMT Not After : Dec 30 00:13:08 2025 GMT Subject: CN=6949de94-f355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:f7:74:93:a1:90:fb:0a:42:dd:04:37:4d: bf:1a:57:bd:a9:c5:78:ac:c2:24:fa:bb:a9:de:a5: eb:a6:1c:34:13:b2:11:0f:f3:df:55:31:3e:67:e5: 3c:4d:a6:08:e2:6c:e6:68:50:2d:98:d2:7a:5d:80: 46:de:99:c8:2f:74:fd:26:01:ae:df:a3:92:5a:74: 19:bc:35:5f:e7:65:a2:fa:f2:78:60:d7:e6:32:46: 18:4a:1f:6f:63:f7:88:0d:39:e7:a5:95:4f:89:bc: a5:26:92:ff:84:06:1e:8f:15:c7:ca:83:de:af:20: 05:fd:69:3e:56:36:41:8d:8e:23:65:02:92:7d:c0: db:22:02:ce:21:0e:e0:16:7e:a5:e7:cb:ae:7f:ff: 97:14:a4:5f:4c:c2:c8:e3:1b:de:5c:a4:d6:6c:9f: 6d:ba:c4:d7:5b:e2:e7:5c:a5:54:3d:b9:b5:11:d4: ea:cc:fc:73:40:0c:5a:31:8a:8f:4c:bb:c4:70:91: 07:04:36:1d:63:c5:32:e8:5e:20:a3:6d:36:fe:70: f1:6f:4d:6b:10:6f:31:ef:2c:96:bf:3a:66:8e:f5: 55:e6:80:57:0d:73:e9:82:86:3a:36:63:a4:43:26: 78:03:81:13:d8:26:43:c9:0e:2b:c1:f6:40:e7:25: 1c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:EF:53:8F:59:44:6A:EB:76:CF:C2:47:0D:AF:46:DB:86:1C:E9 X509v3 Authority Key Identifier: keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:43:d2:b4:69:99:f0:14:58:77:b9:a2:c5:c5:3d:4d:02:c0: ee:74:08:3b:8e:7f:12:6d:82:5d:00:cd:ce:b1:fc:5e:c9:4d: 70:9a:0b:cb:8f:d5:b0:29:55:34:b3:20:14:bd:f8:94:71:7a: 8e:53:35:50:dc:13:85:a3:b8:ed:0c:86:00:17:a9:af:b7:b3: 58:de:bb:15:e2:9b:dc:3d:f2:da:f2:7d:32:ff:70:9c:1e:43: 8e:6d:72:ee:ab:f1:09:f5:cb:f3:05:a7:14:50:bf:5e:8c:85: cf:77:de:30:f5:28:c7:36:55:51:19:02:27:fd:60:d8:b5:8c: d8:14:da:cf:d1:2f:06:e5:96:d2:7f:01:42:a7:b8:37:a0:b8: a3:40:ad:6b:f0:61:d2:68:f0:a8:bd:29:2b:ad:40:43:ff:61: 88:06:38:ef:6c:2b:c2:d2:7a:2b:00:40:94:0f:ba:6a:a0:dc: 7d:0a:ac:ce:6f:db:c1:74:78:c1:24:ae:66:ea:5c:ab:8f:78: c2:cb:a5:13:86:77:14:fc:84:fd:92:f5:6d:2c:c0:8b:55:9e: 8f:a0:bf:6d:83:cd:15:12:0c:74:b2:46:41:a8:b5:b2:70:bb: 60:c6:08:3c:e2:80:24:e8:a8:8e:d6:f2:3e:3e:2e:69:0a:d3: 9c:03:26:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwOUMxMTAvBgNVBAUTKEZERDU1NzRBQTZCM0EyMzdCNDM2Njk5NTdEODUzMzk1 OTNEQzFFOUEwHhcNMjUxMjIzMDAxMzA4WhcNMjUxMjMwMDAxMzA4WjAYMRYwFAYD VQQDDA02OTQ5ZGU5NC1mMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRH3dJOhkPsKQt0EN02/Gle9qcV4rMIk+rup3qXrphw0E7IRD/PfVTE+Z+U8 TaYI4mzmaFAtmNJ6XYBG3pnIL3T9JgGu36OSWnQZvDVf52Wi+vJ4YNfmMkYYSh9v Y/eIDTnnpZVPibylJpL/hAYejxXHyoPeryAF/Wk+VjZBjY4jZQKSfcDbIgLOIQ7g Fn6l58uuf/+XFKRfTMLI4xveXKTWbJ9tusTXW+LnXKVUPbm1EdTqzPxzQAxaMYqP TLvEcJEHBDYdY8Uy6F4go202/nDxb01rEG8x7yyWvzpmjvVV5oBXDXPpgoY6NmOk QyZ4A4ET2CZDyQ4rwfZA5yUctwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMb71OP WURq63bPwkcNr0bbhhzpMB8GA1UdIwQYMBaAFP3VV0qms6I3tDZplX2FM5WT3B6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA5Qy8wQUE1N0M2QzA0 NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9qZTBObW1WZllVemxaUGNI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kVlhTcWF6b2plME5tbVZmWVV6bFpQY0hwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjA5Qy8wQUE1N0M2QzA0NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9q ZTBObW1WZllVemxaUGNIcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Q9K0aZnwFFh3uaLFxT1NAsDudAg7jn8SbYJdAM3OsfxeyU1wmgvL j9WwKVU0syAUvfiUcXqOUzVQ3BOFo7jtDIYAF6mvt7NY3rsV4pvcPfLa8n0y/3Cc HkOObXLuq/EJ9cvzBacUUL9ejIXPd94w9SjHNlVRGQIn/WDYtYzYFNrP0S8G5ZbS fwFCp7g3oLijQK1r8GHSaPCovSkrrUBD/2GIBjjvbCvC0norAECUD7pqoNx9CqzO b9vBdHjBJK5m6lyrj3jCy6UThncU/IT9kvVtLMCLVZ6PoL9tg80VEgx0skZBqLWy cLtgxgg84oAk6KiO1vI+Pi5pCtOcAyaY -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:07 2025 by rpki-client