This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json) Hash identifier: BBwLmfiQE5YrJwVDfJQB1LgsBcRvaCYftRSy4OEQ/po= Subject key identifier: D4:88:61:4F:30:43:81:20:79:63:EC:D3:F8:66:FD:C3:04:9B:F5:ED Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Certificate serial: 01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft Manifest number: 01 Signing time: Fri 19 Dec 2025 05:39:07 +0000 Manifest this update: Fri 19 Dec 2025 05:39:06 +0000 Manifest next update: Fri 26 Dec 2025 05:39:06 +0000 Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: /RKKlEdzvHXqlMMASYP4fwy4OTuRr6heZvotdsN/8S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Validity Not Before: Dec 19 05:39:06 2025 GMT Not After : Dec 26 05:39:06 2025 GMT Subject: CN=6944e4fb-dd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:30:21:06:bc:1f:60:1a:6c:bb:fd:5e:34: 64:cb:29:c6:e6:47:0f:d0:19:14:97:40:c8:10:7e: cd:30:f2:62:a9:c7:ec:e4:5e:46:a3:8a:55:54:26: 69:9b:cd:5c:70:0b:ee:4e:7e:5e:43:b8:db:ea:23: 0e:66:ce:6c:04:5a:2e:8c:d5:91:94:8a:75:e5:66: f2:24:c0:8e:09:85:a2:64:1b:95:c9:78:61:e9:77: aa:d9:8a:2e:ef:79:16:89:c1:dd:49:02:64:0b:ac: ac:34:17:1c:fe:b2:e6:b2:43:c8:0e:ae:87:a8:0a: fc:31:86:af:cf:02:67:40:1a:c5:c1:be:91:56:bc: 4f:37:67:6a:62:31:ac:8c:f2:41:65:fc:fe:2c:18: d9:34:49:b9:29:15:f6:ac:98:54:96:4e:a0:b4:66: 94:81:f3:5a:c2:c0:78:71:11:09:ac:68:40:db:d2: ea:57:b1:43:a2:45:66:31:ec:77:f7:87:ea:16:90: 67:ad:11:da:0f:81:22:1b:16:1e:52:c2:4f:7a:64: 0b:a1:33:b3:5d:74:58:20:33:eb:3b:19:db:ef:ec: 55:a9:c3:24:6e:e1:6f:80:84:ff:59:4b:69:14:1c: 18:58:70:ed:61:cc:8f:1e:a6:74:5e:9c:d5:46:bc: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:88:61:4F:30:43:81:20:79:63:EC:D3:F8:66:FD:C3:04:9B:F5:ED X509v3 Authority Key Identifier: keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a5:bc:1b:22:1a:bb:67:89:08:12:a4:30:f9:f6:7b:f4:d7: 7e:d1:ca:ab:01:62:db:27:8c:6c:99:f2:6e:80:21:0b:13:85: 80:2b:d5:f1:be:34:64:79:ee:8f:25:82:31:57:a8:d4:97:21: 00:0c:f5:1f:03:c8:57:eb:f5:ed:2e:32:17:ca:a5:9d:26:e6: 99:c0:43:33:e8:0a:66:89:e2:76:dc:bd:72:4d:71:b3:20:d4: 61:92:18:33:c5:23:3f:6e:25:06:2b:1c:e9:33:c1:d4:35:5c: 8a:35:93:cf:49:30:3c:23:ce:b4:34:7e:d8:fc:49:d7:c8:7e: f1:5c:43:cc:2c:fe:e6:36:63:18:46:77:9f:f3:e4:94:bb:cb: d1:92:9c:4d:0b:a8:43:fd:70:01:49:21:bb:63:70:99:21:cb: 5c:4f:88:94:e6:2b:82:1e:b1:58:d9:9b:45:3f:ad:5a:d6:83: 07:05:5d:f0:44:a2:89:0a:9b:64:7f:9c:15:a0:b4:17:8d:9b: f1:49:27:c6:c7:ac:c4:c8:37:8f:fc:8c:17:d5:9c:0d:09:b3: 85:ee:9c:a4:75:5e:72:e4:2a:c5:32:5c:eb:f7:ef:c9:77:0a: fa:1a:37:d3:6d:02:6d:68:a1:02:a0:94:d4:c6:cc:5a:c6:d2: 86:de:67:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBATANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx MkZFMTExMC8GA1UEBRMoMEM1OEM2OTY5RUU2NEM0MTkxQUFCNjY5NjNGNDA5RDQ1 QUVBRjY5ODAeFw0yNTEyMTkwNTM5MDZaFw0yNTEyMjYwNTM5MDZaMBgxFjAUBgNV BAMMDTY5NDRlNGZiLWRkMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsiDAhBrwfYBpsu/1eNGTLKcbmRw/QGRSXQMgQfs0w8mKpx+zkXkajilVUJmmb zVxwC+5Ofl5DuNvqIw5mzmwEWi6M1ZGUinXlZvIkwI4JhaJkG5XJeGHpd6rZii7v eRaJwd1JAmQLrKw0Fxz+suayQ8gOroeoCvwxhq/PAmdAGsXBvpFWvE83Z2piMayM 8kFl/P4sGNk0SbkpFfasmFSWTqC0ZpSB81rCwHhxEQmsaEDb0upXsUOiRWYx7Hf3 h+oWkGetEdoPgSIbFh5Swk96ZAuhM7NddFggM+s7Gdvv7FWpwyRu4W+AhP9ZS2kU HBhYcO1hzI8epnRenNVGvMWpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1IhhTzBD gSB5Y+zT+Gb9wwSb9e0wHwYDVR0jBBgwFoAUDFjGlp7mTEGRqrZpY/QJ1Frq9pgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0ZCMjhEOUYwREM5 QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREZqR2xwN21URUdScXJacFlfUUoxRnJxOXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0ZCMjhEOUYwREM5QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVH UnFyWnBZX1FKMUZycTlwZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+lvBsiGrtniQgSpDD59nv0137RyqsBYtsnjGyZ8m6AIQsThYAr1fG+ NGR57o8lgjFXqNSXIQAM9R8DyFfr9e0uMhfKpZ0m5pnAQzPoCmaJ4nbcvXJNcbMg 1GGSGDPFIz9uJQYrHOkzwdQ1XIo1k89JMDwjzrQ0ftj8SdfIfvFcQ8ws/uY2YxhG d5/z5JS7y9GSnE0LqEP9cAFJIbtjcJkhy1xPiJTmK4IesVjZm0U/rVrWgwcFXfBE ookKm2R/nBWgtBeNm/FJJ8bHrMTIN4/8jBfVnA0Js4XunKR1XnLkKsUyXOv378l3 CvoaN9NtAm1ooQKglNTGzFrG0obeZxc= -----END CERTIFICATE-----Generated at Sat Dec 20 00:34:45 2025 by rpki-client