This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json) Hash identifier: FwcD6vkPs9E9cFNPDZEfYRxhwQipYzC6vKc+mICd4L8= Subject key identifier: 27:BB:79:3F:F0:36:83:9C:B1:48:88:DA:6E:32:30:83:08:84:A4:5D Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft Manifest number: 022E Signing time: Mon 29 Dec 2025 01:15:48 +0000 Manifest this update: Mon 29 Dec 2025 01:15:48 +0000 Manifest next update: Mon 05 Jan 2026 01:15:48 +0000 Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: E8QKZ0HPBazLM5yl//REOQPvPNbAaxQ3GUE4B29ojtI=) 2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: W0QjuNMkR2tH07pxncoFfLsVRRNFM7JZ6iVRcm37NHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 01:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E Validity Not Before: Dec 29 01:15:48 2025 GMT Not After : Jan 5 01:15:48 2026 GMT Subject: CN=6951d644-fb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d2:40:98:bd:47:5d:d6:9b:c1:3e:f4:e2:9f: 7e:f4:3e:16:b3:d9:45:9b:a0:6b:5e:66:0f:24:ac: d3:0c:d2:e3:bf:04:81:80:6c:be:4e:62:7e:c5:b1: 54:d8:49:41:98:34:ba:80:29:06:6d:b3:ac:7d:ac: ed:24:e8:13:79:94:db:0d:75:ba:0c:20:21:8d:b8: d8:c6:51:cc:4c:87:f5:59:90:42:42:a4:ff:1f:8c: dc:1a:be:b9:51:a2:19:21:5b:27:fd:59:d3:7e:54: 12:0f:d5:ce:d4:b0:c2:fa:49:bb:d3:10:ef:17:4d: ed:38:91:c3:10:f6:53:0e:3b:fe:8d:12:77:97:ae: c1:ad:92:03:68:ff:2c:28:28:83:8d:87:99:c3:9c: 5d:35:9a:59:33:c0:de:c4:bf:bc:5e:60:49:f1:96: e7:c4:56:6f:d4:c5:c9:81:96:d3:7d:3d:03:cb:af: ae:dd:24:34:78:80:39:6d:1c:5a:3d:dc:65:34:7d: f3:ea:37:47:bc:eb:93:a9:ec:5d:dd:45:9f:87:66: e6:c7:67:a3:1a:8c:34:43:92:e7:50:31:55:09:db: 87:d4:70:6d:a3:1f:19:cf:1b:f1:a2:a9:1f:be:c2: d2:50:d5:ab:f9:25:8e:28:98:1c:59:d4:fb:c5:a7: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BB:79:3F:F0:36:83:9C:B1:48:88:DA:6E:32:30:83:08:84:A4:5D X509v3 Authority Key Identifier: keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:37:f0:71:b8:34:65:c5:d2:d9:20:fc:b0:be:e9:d0:5b:ba: 03:ab:fd:f5:0b:4e:2c:a9:9c:99:78:34:e6:26:a7:86:e6:92: e8:ef:f4:8f:a1:05:91:1d:c8:32:3d:98:53:8b:24:9f:73:c0: 6e:63:c8:4f:25:05:fa:d7:e9:d6:ae:6e:0a:f0:21:cf:46:bc: 3f:05:63:1b:3e:38:bc:19:7e:ae:68:23:75:d0:00:03:aa:4d: a2:fb:ba:dd:85:7d:1c:2e:9b:9a:48:f8:52:88:d2:9f:26:0b: 4b:04:97:80:ff:05:a6:a9:e6:07:80:f0:93:f0:39:51:9e:8d: c9:50:7d:f5:aa:9f:6a:fa:6e:c3:e8:de:a1:82:9d:cd:48:10: cc:f0:95:68:1e:62:12:ff:81:d8:3f:91:be:10:6f:f8:0a:f8: 9d:81:d1:4c:06:a6:7a:4a:c6:68:0d:86:aa:e2:44:50:05:9a: c2:94:06:d9:d4:1a:fd:c8:f2:f5:51:fb:aa:42:98:20:89:e9: c3:7a:a8:4d:cb:1a:0a:cc:18:11:79:40:7e:d8:ff:96:09:da: 56:c2:85:ca:6c:99:e0:23:cd:c0:53:48:30:5b:f9:ae:6e:a7: fe:24:5e:11:79:d1:0a:d4:40:c5:d6:70:5b:e2:41:f1:f0:01: a0:77:ac:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0 NzNCNkRFNUUwHhcNMjUxMjI5MDExNTQ4WhcNMjYwMTA1MDExNTQ4WjAYMRYwFAYD VQQDDA02OTUxZDY0NC1mYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NJAmL1HXdabwT704p9+9D4Ws9lFm6BrXmYPJKzTDNLjvwSBgGy+TmJ+xbFU 2ElBmDS6gCkGbbOsfaztJOgTeZTbDXW6DCAhjbjYxlHMTIf1WZBCQqT/H4zcGr65 UaIZIVsn/VnTflQSD9XO1LDC+km70xDvF03tOJHDEPZTDjv+jRJ3l67BrZIDaP8s KCiDjYeZw5xdNZpZM8DexL+8XmBJ8ZbnxFZv1MXJgZbTfT0Dy6+u3SQ0eIA5bRxa PdxlNH3z6jdHvOuTqexd3UWfh2bmx2ejGow0Q5LnUDFVCduH1HBtox8Zzxvxoqkf vsLSUNWr+SWOKJgcWdT7xaecVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe7eT/w NoOcsUiI2m4yMIMIhKRdMB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwRS8wMDA4M0ZBQzlENTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3 bUhKSFM1QndaakJITzIzbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCN/BxuDRlxdLZIPywvunQW7oDq/31C04sqZyZeDTmJqeG5pLo7/SP oQWRHcgyPZhTiySfc8BuY8hPJQX61+nWrm4K8CHPRrw/BWMbPji8GX6uaCN10AAD qk2i+7rdhX0cLpuaSPhSiNKfJgtLBJeA/wWmqeYHgPCT8DlRno3JUH31qp9q+m7D 6N6hgp3NSBDM8JVoHmIS/4HYP5G+EG/4CvidgdFMBqZ6SsZoDYaq4kRQBZrClAbZ 1Br9yPL1UfuqQpggienDeqhNyxoKzBgReUB+2P+WCdpWwoXKbJngI83AU0gwW/mu bqf+JF4RedEK1EDF1nBb4kHx8AGgd6yo -----END CERTIFICATE-----Generated at Tue Dec 30 10:55:25 2025 by rpki-client