This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: XAqNjRHvv55bQ0oGcDi4/N22Skgu3GpxjL8NFsUYBBg= Subject key identifier: 02:7D:8D:65:19:E1:54:78:3A:B4:D5:51:99:77:F9:8D:CF:EA:5B:91 Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 096C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 0965 Signing time: Thu 18 Dec 2025 19:39:29 +0000 Manifest this update: Thu 18 Dec 2025 19:39:28 +0000 Manifest next update: Thu 25 Dec 2025 19:39:28 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: chVab6qVUhZ9wkp92g+GbWAcsyl9q4pYEn2lVHIsdcE=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Dec 18 19:39:28 2025 GMT Not After : Dec 25 19:39:28 2025 GMT Subject: CN=69445871-75fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:31:81:cf:cf:4f:82:e0:cd:6c:ad:19:28: 87:9c:31:ff:39:62:6d:54:f5:c0:b5:ea:e0:f7:60: fb:41:3c:da:c1:87:04:bb:5a:fd:c8:c1:2e:14:15: 04:b1:98:84:58:52:f8:28:cf:e3:b5:d4:57:2b:20: 82:27:43:25:eb:0a:4a:a9:67:1a:df:d3:c9:4a:52: 70:c1:f5:2c:c9:f7:fb:b8:ea:30:16:d5:67:ef:46: d6:26:f7:30:66:de:60:ef:ec:39:a0:7f:05:b6:8e: b6:11:f8:5c:ae:52:55:d4:9e:8d:35:b9:2b:5a:ed: 24:a0:91:fe:65:b9:d5:c3:66:50:3f:81:19:d5:ad: da:65:e4:db:b7:9e:29:c4:5d:71:ea:f6:d9:0b:1a: eb:d8:8c:e1:73:b6:67:79:e3:be:4f:f4:3d:29:9e: ae:b6:ae:5d:be:9a:ad:87:c4:7e:62:e0:b0:d9:18: f4:70:6e:95:8c:e0:43:7f:67:33:f3:c3:aa:85:5e: ae:8c:80:4c:46:28:26:72:74:03:69:8a:a3:97:a4: 8d:29:5a:59:89:6b:bf:f7:91:02:b0:58:23:11:54: 2c:a9:7a:d8:b0:1b:21:f9:54:19:20:4a:a0:16:d0: d3:cb:d0:30:39:31:46:cc:a7:5b:c3:67:48:25:09: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7D:8D:65:19:E1:54:78:3A:B4:D5:51:99:77:F9:8D:CF:EA:5B:91 X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:07:dd:fb:f4:84:d4:d9:e1:61:f7:1a:aa:3a:2e:f8:d7:c7: 3e:15:8e:84:e4:a2:a9:90:7e:d2:d1:1e:88:95:70:c5:ab:95: 8c:a2:dc:8c:45:bd:72:8e:18:ce:6e:63:fa:e6:55:78:fc:c1: d1:71:6f:6a:52:56:73:19:77:76:66:15:94:06:7f:08:1d:89: 31:73:d8:e3:ed:65:ec:f6:16:47:ff:84:01:b7:2a:44:2d:25: 92:a7:fe:f2:24:bc:7c:11:5d:33:9e:bc:2d:d1:02:82:b6:3d: 0c:3f:c6:80:25:ff:a0:13:d5:d3:0f:20:f4:44:69:43:9d:f6: 6e:dd:71:c7:63:f3:d0:0b:3a:ec:a5:99:bc:eb:c2:63:1a:50: ea:d9:08:e4:59:e7:0e:49:18:3f:a9:bc:e6:45:38:c3:18:5c: 32:fc:9a:17:8d:81:37:47:71:0f:89:2a:d7:9b:2f:f6:b6:33: 4c:5f:0c:27:c4:bf:ea:7c:61:20:83:e9:da:85:5a:cc:e4:ca: 81:e9:6b:36:ab:f0:fc:ef:09:54:f0:89:15:92:97:b5:4b:df: 2c:c9:40:37:19:af:eb:13:52:a2:0e:9f:b2:1b:a8:fa:18:d9: 86:d0:fa:5f:6a:c2:e3:df:1d:a3:91:92:ff:35:06:a0:e6:1c: f2:49:a8:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUxMjE4MTkzOTI4WhcNMjUxMjI1MTkzOTI4WjAYMRYwFAYD VQQDDA02OTQ0NTg3MS03NWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDgxgc/PT4LgzWytGSiHnDH/OWJtVPXAterg92D7QTzawYcEu1r9yMEuFBUE sZiEWFL4KM/jtdRXKyCCJ0Ml6wpKqWca39PJSlJwwfUsyff7uOowFtVn70bWJvcw Zt5g7+w5oH8Fto62EfhcrlJV1J6NNbkrWu0koJH+ZbnVw2ZQP4EZ1a3aZeTbt54p xF1x6vbZCxrr2Izhc7ZneeO+T/Q9KZ6utq5dvpqth8R+YuCw2Rj0cG6VjOBDf2cz 88OqhV6ujIBMRigmcnQDaYqjl6SNKVpZiWu/95ECsFgjEVQsqXrYsBsh+VQZIEqg FtDTy9AwOTFGzKdbw2dIJQnwfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJ9jWUZ 4VR4OrTVUZl3+Y3P6luRMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuB9379ITU2eFh9xqqOi7418c+FY6E5KKpkH7S0R6IlXDFq5WMotyM Rb1yjhjObmP65lV4/MHRcW9qUlZzGXd2ZhWUBn8IHYkxc9jj7WXs9hZH/4QBtypE LSWSp/7yJLx8EV0znrwt0QKCtj0MP8aAJf+gE9XTDyD0RGlDnfZu3XHHY/PQCzrs pZm868JjGlDq2QjkWecOSRg/qbzmRTjDGFwy/JoXjYE3R3EPiSrXmy/2tjNMXwwn xL/qfGEgg+nahVrM5MqB6Ws2q/D87wlU8IkVkpe1S98syUA3Ga/rE1KiDp+yG6j6 GNmG0PpfasLj3x2jkZL/NQag5hzySaiG -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:03 2025 by rpki-client