This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft File: dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json) Hash identifier: qZLVAMvWXku9DaEDU9j5SUGCq7Dh/Nnj4DOZWGPMdkA= Subject key identifier: 5E:1D:C8:21:F6:ED:03:2A:A0:FF:1E:F5:6C:53:F4:88:23:BE:DD:E9 Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9 Certificate issuer: /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft Manifest number: 01C6 Signing time: Sun 21 Dec 2025 02:16:01 +0000 Manifest this update: Sun 21 Dec 2025 02:16:00 +0000 Manifest next update: Sun 28 Dec 2025 02:16:00 +0000 Files and hashes: 1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: JhVRzmnbu04LUCFY/syAn5TWO/YcYiD/mEyt4DmK/c8=) 2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: w1yfyWSTFZ2T3mamuS/YlpEjcUFBj5Vw4U9ZO7o84Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9 Validity Not Before: Dec 21 02:16:00 2025 GMT Not After : Dec 28 02:16:00 2025 GMT Subject: CN=69475861-d2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:df:90:9a:49:db:a1:34:18:79:11:84:41: 39:8f:08:82:e1:85:6a:a6:d9:63:0a:a6:e7:8b:8b: eb:bc:2e:f5:c1:1f:6d:c5:95:62:6a:b6:fb:fd:d8: 4d:c6:45:41:64:66:8a:04:95:cf:4e:18:87:59:aa: 83:fc:01:87:f1:97:4e:3d:35:63:f4:f6:56:51:05: 07:ba:99:fd:00:b9:b7:47:4d:78:c3:3f:cd:2b:00: dd:4e:9f:20:e4:ab:87:ed:78:20:e7:7b:8e:a1:5a: b1:33:13:7d:c5:6a:72:9f:2b:b2:46:8a:ee:4b:81: 80:28:be:8e:64:68:48:77:c8:84:0d:3d:5a:c6:b1: 30:b9:ed:78:01:7f:18:48:03:36:1f:fb:8f:26:93: e4:8c:83:82:6f:c3:3e:35:be:4d:d6:d4:08:b7:ba: 91:66:72:c9:eb:f5:64:21:70:3b:f5:b4:db:5e:38: 77:ce:9d:df:9a:78:30:6f:93:a5:20:cd:90:8b:2b: e8:cd:76:a0:b2:f6:8a:be:69:94:46:b1:5c:5e:64: 24:d5:dd:8a:97:6b:f6:e6:4e:16:8a:9a:44:fc:a4: e2:7d:3e:7a:e4:8b:92:94:ee:9e:64:7d:2a:e8:16: 56:aa:aa:96:69:43:f2:c9:49:11:39:cc:d4:ca:55: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1D:C8:21:F6:ED:03:2A:A0:FF:1E:F5:6C:53:F4:88:23:BE:DD:E9 X509v3 Authority Key Identifier: keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:78:f2:c9:1c:33:da:d9:bc:80:83:cd:2b:25:3a:34:6d:74: 2d:82:8f:06:b0:b5:75:6d:8f:e0:c3:74:15:94:e1:4e:83:ec: 7a:42:e7:41:58:13:d9:db:5e:20:c9:75:d0:cb:09:58:1d:b1: 53:93:12:23:86:7d:84:d8:ae:9f:ee:a1:cb:89:5c:79:8b:d0: c2:ff:6c:4a:34:ef:4e:7e:78:0b:4c:23:64:68:03:12:5e:da: bd:79:54:eb:32:b0:16:08:ee:2f:b0:fd:9c:35:cc:b8:a0:81: ef:57:0d:20:b2:9c:c1:cc:d5:94:0e:d6:0d:9c:c8:94:c2:11: d1:ed:85:2f:b9:fb:ad:4d:da:2a:ff:19:a4:08:9d:dd:ee:eb: e1:82:16:ff:5c:61:ae:3b:bf:30:de:3a:19:47:39:49:b2:2f: 4f:6e:66:cb:cf:5c:99:46:4a:77:2e:0b:44:97:0c:fc:27:c6: 1f:28:7f:f9:e9:aa:b2:1f:c0:52:8d:2d:6a:69:28:43:ad:16: e0:20:0b:9a:09:37:d1:4b:11:3d:72:92:a1:f5:73:9b:52:31: 54:8e:7e:e0:23:84:9a:41:db:eb:44:a5:c0:66:9b:f1:b9:c4: eb:a1:1e:80:83:a5:a9:fa:fa:e0:d6:10:89:85:55:29:90:12: 9d:88:ab:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQxQTkxMTAvBgNVBAUTKDc0MjE3NEYzMkU2Q0M2RThEMUY5NjVCRkExRDQwQTEw RDZFM0U3QzkwHhcNMjUxMjIxMDIxNjAwWhcNMjUxMjI4MDIxNjAwWjAYMRYwFAYD VQQDDA02OTQ3NTg2MS1kMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1zfkJpJ26E0GHkRhEE5jwiC4YVqptljCqbni4vrvC71wR9txZViarb7/dhN xkVBZGaKBJXPThiHWaqD/AGH8ZdOPTVj9PZWUQUHupn9ALm3R014wz/NKwDdTp8g 5KuH7Xgg53uOoVqxMxN9xWpynyuyRoruS4GAKL6OZGhId8iEDT1axrEwue14AX8Y SAM2H/uPJpPkjIOCb8M+Nb5N1tQIt7qRZnLJ6/VkIXA79bTbXjh3zp3fmngwb5Ol IM2QiyvozXagsvaKvmmURrFcXmQk1d2Kl2v25k4WippE/KTifT565IuSlO6eZH0q 6BZWqqqWaUPyyUkROczUylXgCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4dyCH2 7QMqoP8e9WxT9Igjvt3pMB8GA1UdIwQYMBaAFHQhdPMubMbo0fllv6HUChDW4+fJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDFBOS84RjkxNjk0ODMy ODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1alItV1dfb2RRS0VOYmo1 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RDRjA4eTVzeHVqUi1XV19vZFFLRU5iajU4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDFBOS84RjkxNjk0ODMyODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1 alItV1dfb2RRS0VOYmo1OGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADePLJHDPa2byAg80rJTo0bXQtgo8GsLV1bY/gw3QVlOFOg+x6QudB WBPZ214gyXXQywlYHbFTkxIjhn2E2K6f7qHLiVx5i9DC/2xKNO9OfngLTCNkaAMS Xtq9eVTrMrAWCO4vsP2cNcy4oIHvVw0gspzBzNWUDtYNnMiUwhHR7YUvufutTdoq /xmkCJ3d7uvhghb/XGGuO78w3joZRzlJsi9PbmbLz1yZRkp3LgtElwz8J8YfKH/5 6aqyH8BSjS1qaShDrRbgIAuaCTfRSxE9cpKh9XObUjFUjn7gI4SaQdvrRKXAZpvx ucTroR6Ag6Wp+vrg1hCJhVUpkBKdiKv3 -----END CERTIFICATE-----Generated at Mon Dec 22 17:24:55 2025 by rpki-client