This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: 9WEVLECY65TVYq1I10LbJn2WwG/5Cdr1tbAZtB5+a7M= Subject key identifier: 3A:85:21:FA:FB:67:EA:D1:EE:8C:96:EA:15:C7:C1:08:22:08:F0:16 Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 027D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 0266 Signing time: Sun 21 Dec 2025 00:59:11 +0000 Manifest this update: Sun 21 Dec 2025 00:59:11 +0000 Manifest next update: Sun 28 Dec 2025 00:59:11 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: tqVtfF5wLA9+QFKBq3s/IuLLax7TsXsOILc0S7ReSb8=) 2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: yeooqHJnDt6tmtO4WveVbPPLltlUGiqPv+ArId7+Nvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Dec 21 00:59:11 2025 GMT Not After : Dec 28 00:59:11 2025 GMT Subject: CN=6947465f-5d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:9b:08:05:c0:06:a0:b1:da:6e:30:68:91: 10:03:c7:68:b2:34:c8:d4:68:af:d6:a8:54:7a:f6: ac:dd:3a:e3:83:07:90:b3:67:2a:7d:32:ae:f5:45: af:06:5a:93:3a:a5:f8:74:8b:ec:3d:f5:7e:f7:69: 6f:8c:11:33:f6:fc:c2:2a:f2:da:c7:fa:d0:0a:4f: f8:f6:11:f6:c2:76:7d:9f:b2:d7:e7:a0:7e:fb:7d: a2:55:2b:f3:36:4d:28:96:d1:3c:3a:a4:7d:d9:06: c2:2f:7d:b7:b6:42:aa:a2:28:13:8d:48:1e:06:02: a9:f1:29:3c:ca:7c:d5:02:5c:7c:d2:39:22:68:48: 1d:e2:6d:75:13:c0:bc:b8:3c:28:e8:3c:41:56:9c: 4f:72:23:9d:20:63:b7:bc:d6:33:a3:5b:84:c0:c3: 69:24:3a:07:99:ad:0a:f7:da:d5:43:f8:38:89:b4: ec:6f:0b:f4:f0:9e:ba:48:4b:27:83:49:6e:df:af: 1c:3f:ab:ea:89:d5:bf:31:d4:d3:e1:b5:f4:42:3a: 8f:30:df:e6:52:31:1b:29:8a:5a:a1:df:42:54:9b: 17:85:aa:39:fc:30:63:56:86:50:24:85:6e:a6:22: ea:b2:fd:93:33:1c:87:ba:26:94:65:42:4a:d1:45: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:85:21:FA:FB:67:EA:D1:EE:8C:96:EA:15:C7:C1:08:22:08:F0:16 X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:db:d3:47:9e:a5:0d:6f:6b:8c:b0:91:03:93:af:af:ad:2a: c7:da:76:cf:c6:d6:b8:68:ad:82:cf:2b:38:b4:03:89:74:03: aa:a4:c5:f0:b0:6e:f8:b0:a6:69:de:2a:40:75:8a:1e:94:dc: 55:86:63:62:43:59:f6:cb:73:4a:fd:8a:10:5c:c2:bb:17:0b: 71:d7:c4:fd:75:53:11:f3:b7:03:25:04:9d:d1:e2:1b:ee:75: d3:a2:28:59:34:5e:ab:38:d1:05:62:ce:0a:2e:84:79:1c:1f: 4e:db:8d:4c:92:75:12:f7:11:16:16:d8:01:be:68:e9:09:a6: e1:65:57:4d:e0:48:d9:d5:ae:36:26:ad:4f:b1:5e:96:88:67: ec:3f:2c:9d:59:5b:d1:c5:47:b0:4d:94:ba:6e:8c:45:09:93: 59:cf:3c:92:b5:63:fa:c7:88:9d:a2:4a:df:02:ab:e2:ab:89: 67:85:72:7f:97:d8:a5:52:14:07:84:33:d3:1a:67:14:9b:18: e1:07:15:8e:f5:11:3a:8e:c2:29:2f:9f:3e:0a:4f:ea:fc:95: f0:cf:57:57:f6:26:7c:73:e9:d8:68:3b:47:67:e5:21:22:3f: 00:3b:b9:cb:66:83:d0:6a:62:cd:1d:8e:dd:3c:1a:4e:ee:31: b1:8b:95:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUxMjIxMDA1OTExWhcNMjUxMjI4MDA1OTExWjAYMRYwFAYD VQQDDA02OTQ3NDY1Zi01ZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrWbCAXABqCx2m4waJEQA8dosjTI1Giv1qhUevas3TrjgweQs2cqfTKu9UWv BlqTOqX4dIvsPfV+92lvjBEz9vzCKvLax/rQCk/49hH2wnZ9n7LX56B++32iVSvz Nk0oltE8OqR92QbCL323tkKqoigTjUgeBgKp8Sk8ynzVAlx80jkiaEgd4m11E8C8 uDwo6DxBVpxPciOdIGO3vNYzo1uEwMNpJDoHma0K99rVQ/g4ibTsbwv08J66SEsn g0lu368cP6vqidW/MdTT4bX0QjqPMN/mUjEbKYpaod9CVJsXhao5/DBjVoZQJIVu piLqsv2TMxyHuiaUZUJK0UWBzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqFIfr7 Z+rR7oyW6hXHwQgiCPAWMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA29NHnqUNb2uMsJEDk6+vrSrH2nbPxta4aK2Czys4tAOJdAOqpMXw sG74sKZp3ipAdYoelNxVhmNiQ1n2y3NK/YoQXMK7Fwtx18T9dVMR87cDJQSd0eIb 7nXToihZNF6rONEFYs4KLoR5HB9O241MknUS9xEWFtgBvmjpCabhZVdN4EjZ1a42 Jq1PsV6WiGfsPyydWVvRxUewTZS6boxFCZNZzzyStWP6x4idokrfAqviq4lnhXJ/ l9ilUhQHhDPTGmcUmxjhBxWO9RE6jsIpL58+Ck/q/JXwz1dX9iZ8c+nYaDtHZ+Uh Ij8AO7nLZoPQamLNHY7dPBpO7jGxi5VB -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:32 2025 by rpki-client