This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: P1Apk/9GvLMt0fPgV0/m4zrsaBx/HdQHeBjPXLjH3j8= Subject key identifier: A1:2A:9B:47:0F:53:AB:C6:C0:BD:77:86:9A:A4:C3:3A:A2:42:8B:EF Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 34EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 34EC Signing time: Mon 22 Dec 2025 15:05:15 +0000 Manifest this update: Mon 22 Dec 2025 15:05:14 +0000 Manifest next update: Mon 29 Dec 2025 15:05:14 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: FPYglai79wXu+cckV3Tec+9EV2cTsulpbcoZ4Z6AqkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13548 (0x34ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Dec 22 15:05:14 2025 GMT Not After : Dec 29 15:05:14 2025 GMT Subject: CN=69495e2a-2293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:9f:d6:97:c1:12:5a:97:b3:0c:90:3f:60: b9:c2:2f:87:26:74:d6:2e:f2:63:e6:02:c1:c9:ad: 59:66:f0:10:d6:9f:c4:ef:aa:80:4f:b3:c8:4b:28: 69:8f:ba:61:7b:8c:99:f0:7f:e2:e6:b8:bf:e5:40: 97:59:1b:4d:76:ef:b5:ee:39:bd:27:b4:f6:5e:84: ba:ba:45:4a:d6:b4:84:00:2d:d9:88:d7:c0:f2:60: 56:e7:f6:c0:6e:a8:e7:6f:b3:5f:f8:db:25:15:47: 6d:e1:bc:84:b9:bc:23:62:6a:78:0a:fc:68:56:49: 62:b8:9d:2d:6a:12:15:46:b2:5a:e9:6d:43:c6:71: 19:b4:a3:61:a7:8c:02:69:d9:86:ab:99:82:09:f1: b9:b0:64:66:9e:78:e7:13:6b:a0:ee:05:1d:b1:55: ac:23:ac:e9:e2:e4:c7:59:23:7a:63:b9:37:b0:6c: 93:f7:f3:ac:ab:61:b4:1b:83:5e:1a:e6:af:9b:53: 54:c2:e1:d1:09:7b:26:5d:1a:f8:b1:92:8b:62:d1: 7e:b9:6a:05:14:22:38:c0:2a:e3:6f:87:bd:90:35: 3f:2c:56:b2:35:e7:0a:b7:57:94:46:15:ae:81:c3: 54:2b:c0:c2:88:17:55:91:84:78:9f:db:49:4e:ff: 68:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:9B:47:0F:53:AB:C6:C0:BD:77:86:9A:A4:C3:3A:A2:42:8B:EF X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f5:12:21:6b:12:c2:88:83:81:aa:d3:8c:ec:55:76:ff:a7: c4:67:57:04:0b:dc:08:a6:5e:e3:f4:c1:27:e9:20:8d:4c:13: e2:25:d6:97:d3:e0:76:ac:3b:60:02:55:46:18:47:70:fb:24: d0:46:55:32:4e:a5:29:91:db:e3:ee:d8:99:87:52:33:2a:f3: 77:2d:ad:c4:fb:88:84:ca:32:bb:b8:fc:48:33:ad:65:75:50: 3a:13:11:28:1f:d2:8a:ec:04:e2:4b:40:9a:88:94:ce:6e:93: 93:dc:a6:97:2e:6f:da:4f:2f:68:94:df:65:cf:7d:13:1e:7e: 52:24:47:6a:d2:39:fd:ee:39:db:20:5d:67:66:63:97:77:23: 46:d3:cf:9d:e5:0e:ee:7f:83:2e:b2:ac:4e:b3:85:a7:33:e2: 11:bc:de:1b:2b:8e:4f:09:01:9b:8f:9c:c0:bb:11:eb:23:57: 5b:7b:ee:86:23:36:51:65:70:bd:d7:99:d1:f7:56:24:90:32: 27:52:94:03:af:b3:59:26:b9:d9:21:94:5d:50:67:8c:45:cf: 4a:7c:df:89:40:62:b9:a9:52:e6:e4:79:95:b1:ca:e2:c9:c2: 2e:33:7e:95:03:c5:f1:9f:02:60:21:ac:e2:ab:34:2c:13:e2: 01:4e:63:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUxMjIyMTUwNTE0WhcNMjUxMjI5MTUwNTE0WjAYMRYwFAYD VQQDDA02OTQ5NWUyYS0yMjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLqf1pfBElqXswyQP2C5wi+HJnTWLvJj5gLBya1ZZvAQ1p/E76qAT7PISyhp j7phe4yZ8H/i5ri/5UCXWRtNdu+17jm9J7T2XoS6ukVK1rSEAC3ZiNfA8mBW5/bA bqjnb7Nf+NslFUdt4byEubwjYmp4CvxoVkliuJ0tahIVRrJa6W1DxnEZtKNhp4wC admGq5mCCfG5sGRmnnjnE2ug7gUdsVWsI6zp4uTHWSN6Y7k3sGyT9/Osq2G0G4Ne Guavm1NUwuHRCXsmXRr4sZKLYtF+uWoFFCI4wCrjb4e9kDU/LFayNecKt1eURhWu gcNUK8DCiBdVkYR4n9tJTv9oEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEqm0cP U6vGwL13hpqkwzqiQovvMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH9RIhaxLCiIOBqtOM7FV2/6fEZ1cEC9wIpl7j9MEn6SCNTBPiJdaX 0+B2rDtgAlVGGEdw+yTQRlUyTqUpkdvj7tiZh1IzKvN3La3E+4iEyjK7uPxIM61l dVA6ExEoH9KK7ATiS0CaiJTObpOT3KaXLm/aTy9olN9lz30THn5SJEdq0jn97jnb IF1nZmOXdyNG08+d5Q7uf4MusqxOs4WnM+IRvN4bK45PCQGbj5zAuxHrI1dbe+6G IzZRZXC915nR91YkkDInUpQDr7NZJrnZIZRdUGeMRc9KfN+JQGK5qVLm5HmVscri ycIuM36VA8XxnwJgIaziqzQsE+IBTmMC -----END CERTIFICATE-----Generated at Tue Dec 23 18:20:00 2025 by rpki-client