This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft File: dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json) Hash identifier: UDdbnA6O8XXxQf0jEG2S17UsI/dtNuFGv6CfVB71OYo= Subject key identifier: 53:5E:64:E9:85:7A:3C:FC:0C:20:EE:16:08:D5:5F:BE:49:A1:33:CF Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 Certificate issuer: /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688 Certificate serial: 1252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft Manifest number: 1AE0 Signing time: Wed 24 Dec 2025 16:52:55 +0000 Manifest this update: Wed 24 Dec 2025 16:52:54 +0000 Manifest next update: Wed 31 Dec 2025 16:52:54 +0000 Files and hashes: 1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: tWldGAAE9oBNnX7gb8uwBMQvxjKdlqYeJccJXxRP2iY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4690 (0x1252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=77328994D13E9895419C81066BA61181D182B688 Validity Not Before: Dec 24 16:52:54 2025 GMT Not After : Dec 31 16:52:54 2025 GMT Subject: CN=694c1a67-7146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ef:e5:83:45:f0:ee:e0:53:65:d2:3b:e8:0d: bb:a5:cf:af:56:05:eb:f8:a1:06:42:fa:bf:87:6c: 1c:08:29:a9:8c:93:36:df:a1:69:e2:b5:3b:05:fd: 6b:92:c7:00:da:78:ed:98:a5:c1:69:d0:a1:0d:3d: c7:7f:05:ab:d4:1c:ef:8b:45:ae:7e:f7:69:03:02: b1:11:8f:fc:5c:29:d5:29:5c:fd:8e:8b:25:75:27: dc:f3:e2:df:e7:6e:c8:5d:6d:40:6c:ce:31:26:6f: ae:22:7b:a0:fe:c7:0f:f0:5f:3b:85:0c:1d:19:54: 4b:e6:ea:c0:df:77:e9:aa:09:1a:d8:a5:06:48:f8: 08:1f:d8:47:1e:a2:05:93:3a:0a:c1:f9:ce:0a:bb: c7:6c:2d:a4:5a:9c:16:72:ac:53:d7:8f:2d:6e:4d: 3e:f9:36:87:3f:c3:b3:91:6f:60:8f:f4:07:03:a4: 79:3f:31:df:d7:dc:c7:d9:45:7a:12:b8:15:5d:bb: da:16:62:3c:d1:03:ab:2e:a8:3f:30:26:f6:e6:2e: 2f:f8:0f:16:82:d0:79:4d:a6:d1:2e:a3:03:d6:92: d4:02:52:63:5b:44:60:5f:2f:82:84:bd:84:f7:7b: 58:44:35:54:60:a6:70:96:30:24:4c:f9:67:6b:3e: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5E:64:E9:85:7A:3C:FC:0C:20:EE:16:08:D5:5F:BE:49:A1:33:CF X509v3 Authority Key Identifier: keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b8:cf:2b:74:7c:66:0b:32:bb:c9:a8:9a:78:9b:4f:34:61: aa:1f:3a:b9:90:46:cf:6a:e7:cd:ea:cc:01:56:42:06:28:1d: 49:70:c2:fe:d9:d4:ec:43:23:51:e6:d8:fb:34:14:50:1e:10: e3:8f:5c:83:9a:53:bb:2d:39:a7:43:b4:5d:bb:67:95:ee:c5: 91:8a:24:ef:bc:ec:66:6c:28:44:ce:0d:c0:55:87:64:65:54: 0d:05:c2:2e:86:49:fe:32:a7:bd:9f:e3:ec:0b:18:96:13:5d: 1c:2d:c2:2b:ab:ea:3c:73:16:98:15:fd:82:b2:15:e0:98:57: 54:89:b7:8e:cf:e7:bd:52:3a:19:e4:d5:91:e8:22:f6:a7:c9: 47:6e:42:23:ba:21:50:ca:f8:94:e2:fa:08:c5:be:f9:f8:76: 24:f9:d4:71:63:f1:9a:14:72:c0:a8:3d:fe:76:6d:bd:b2:30: dd:d7:6b:d7:90:eb:76:9a:3c:2d:4d:ad:99:5c:2e:b5:9f:47: 03:27:3a:0e:b9:e6:78:a1:f8:00:2a:c0:9a:44:35:ba:38:ca: c9:41:94:a1:7b:8f:c9:c7:73:48:0a:26:17:6a:f3:1e:04:cb: b0:06:1e:34:b4:1b:1c:b7:aa:7f:a3:dc:be:76:96:c7:66:36: 4f:a9:d0:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICElIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKDc3MzI4OTk0RDEzRTk4OTU0MTlDODEwNjZCQTYxMTgx RDE4MkI2ODgwHhcNMjUxMjI0MTY1MjU0WhcNMjUxMjMxMTY1MjU0WjAYMRYwFAYD VQQDDA02OTRjMWE2Ny03MTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4u/lg0Xw7uBTZdI76A27pc+vVgXr+KEGQvq/h2wcCCmpjJM236Fp4rU7Bf1r kscA2njtmKXBadChDT3HfwWr1Bzvi0WufvdpAwKxEY/8XCnVKVz9josldSfc8+Lf 527IXW1AbM4xJm+uInug/scP8F87hQwdGVRL5urA33fpqgka2KUGSPgIH9hHHqIF kzoKwfnOCrvHbC2kWpwWcqxT148tbk0++TaHP8OzkW9gj/QHA6R5PzHf19zH2UV6 ErgVXbvaFmI80QOrLqg/MCb25i4v+A8WgtB5TabRLqMD1pLUAlJjW0RgXy+ChL2E 93tYRDVUYKZwljAkTPlnaz4bTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNeZOmF ejz8DCDuFgjVX75JoTPPMB8GA1UdIwQYMBaAFHcyiZTRPpiVQZyBBmumEYHRgraI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1KVkJuSUVHYTZZUmdkR0N0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6S0psTkUtbUpWQm5JRUdhNllSZ2RHQ3RvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1K VkJuSUVHYTZZUmdkR0N0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTuM8rdHxmCzK7yaiaeJtPNGGqHzq5kEbPaufN6swBVkIGKB1JcML+ 2dTsQyNR5tj7NBRQHhDjj1yDmlO7LTmnQ7Rdu2eV7sWRiiTvvOxmbChEzg3AVYdk ZVQNBcIuhkn+Mqe9n+PsCxiWE10cLcIrq+o8cxaYFf2CshXgmFdUibeOz+e9UjoZ 5NWR6CL2p8lHbkIjuiFQyviU4voIxb75+HYk+dRxY/GaFHLAqD3+dm29sjDd12vX kOt2mjwtTa2ZXC61n0cDJzoOueZ4ofgAKsCaRDW6OMrJQZShe4/Jx3NICiYXavMe BMuwBh40tBsct6p/o9y+dpbHZjZPqdCI -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:08 2025 by rpki-client