This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: ieXR9rTCldudCflf/jwG+hQI+aGBFkXZCKVDPOnjbPk= Subject key identifier: 37:FC:BD:3F:68:69:0B:BD:7B:76:DD:C6:C4:67:07:1E:F8:71:76:9B Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 096B Signing time: Tue 30 Dec 2025 19:32:10 +0000 Manifest this update: Tue 30 Dec 2025 19:32:09 +0000 Manifest next update: Tue 06 Jan 2026 19:32:09 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: ut2aSSa4M79S4FKjzVgSAZ48UNRJSJmV9eqtCB/ebi8=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 19:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Dec 30 19:32:09 2025 GMT Not After : Jan 6 19:32:09 2026 GMT Subject: CN=695428ba-6c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:d9:9a:b2:73:0e:5a:a3:c9:37:9e:90:f6: b9:24:c1:4a:a9:ee:8d:af:f0:cf:22:63:0f:82:1f: a8:36:e5:ab:09:94:a7:36:04:c2:b6:fe:7b:39:0d: 12:5a:83:a7:79:0b:50:2d:d1:b4:a5:a6:65:24:18: 89:47:df:c7:9a:d6:9b:02:a2:6f:37:42:0e:49:10: d6:ba:bf:49:f9:80:e7:64:7c:39:00:19:5f:06:c9: 19:4a:16:49:e2:b4:99:f3:43:e7:91:b0:ba:ef:bb: 55:77:6a:9a:a2:e1:54:4a:94:f4:7f:24:1a:c9:52: 4f:78:8c:00:bb:1c:a2:b9:f0:5c:6c:91:41:b9:2a: c5:9a:d1:a6:e4:ea:ec:0b:9d:21:93:9a:6a:51:7a: b5:0e:c5:eb:07:6a:7a:84:db:1b:65:40:de:12:16: 2a:82:87:c0:0c:c0:75:52:57:37:cc:08:4b:84:fd: c3:31:7e:09:c9:13:66:a5:c7:2e:d2:6c:c5:04:59: e7:a8:cf:14:f5:a4:6c:56:f3:8d:12:e3:10:b6:ba: 36:53:8f:fc:b9:64:a5:ec:d9:e7:95:2e:13:65:72: 6f:55:b3:a4:11:f3:f7:d7:a6:2a:50:c8:ef:68:76: 03:d0:b7:3a:ba:ef:36:99:96:ec:dc:67:ed:fb:7d: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FC:BD:3F:68:69:0B:BD:7B:76:DD:C6:C4:67:07:1E:F8:71:76:9B X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bf:99:6a:b6:a2:1e:2e:e2:ce:41:b2:a2:2a:28:f6:f2:e3: bd:ee:b0:77:cc:34:27:9c:88:49:c3:8a:ad:94:53:83:7e:69: ee:1b:90:cd:41:7a:28:40:cd:06:6c:c1:e6:7f:e8:94:68:b3: ba:68:df:28:ee:b0:b4:a5:54:fd:63:6c:63:a0:ad:08:10:8f: ed:8c:a8:47:66:f6:81:56:f3:f9:00:ba:ec:9f:f3:6b:de:43: 3b:1b:45:44:e6:3a:f0:8d:04:7c:e0:b0:56:45:1b:ad:0e:5f: e5:29:30:3c:ee:c1:e9:ae:43:4d:10:ee:d1:e5:a2:f7:28:4f: 2c:7b:f2:9d:be:67:fa:63:d8:a7:96:0c:f3:02:74:d2:2c:f5: be:68:f6:1d:15:f5:9b:7b:74:1c:46:96:99:8e:21:13:77:ee: ac:0e:25:f2:94:56:0c:32:bf:d3:78:f7:59:28:10:40:f1:ea: 4e:f4:fd:7f:ac:e4:ac:76:af:24:6a:14:af:e0:a8:ea:15:04: 35:91:f3:94:15:e3:ac:af:86:a2:a3:75:bc:37:5f:e0:4f:6b: 95:42:68:69:5a:9d:da:cc:70:3c:42:dc:bc:d9:e7:ce:3f:0c: 44:f9:d0:44:f8:c6:6d:b1:c5:62:44:64:80:e0:eb:4f:b4:4b: 4b:50:a8:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUxMjMwMTkzMjA5WhcNMjYwMTA2MTkzMjA5WjAYMRYwFAYD VQQDDA02OTU0MjhiYS02YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkLZmrJzDlqjyTeekPa5JMFKqe6Nr/DPImMPgh+oNuWrCZSnNgTCtv57OQ0S WoOneQtQLdG0paZlJBiJR9/HmtabAqJvN0IOSRDWur9J+YDnZHw5ABlfBskZShZJ 4rSZ80PnkbC677tVd2qaouFUSpT0fyQayVJPeIwAuxyiufBcbJFBuSrFmtGm5Ors C50hk5pqUXq1DsXrB2p6hNsbZUDeEhYqgofADMB1Ulc3zAhLhP3DMX4JyRNmpccu 0mzFBFnnqM8U9aRsVvONEuMQtro2U4/8uWSl7NnnlS4TZXJvVbOkEfP316YqUMjv aHYD0Lc6uu82mZbs3Gft+32XaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf8vT9o aQu9e3bdxsRnBx74cXabMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtv5lqtqIeLuLOQbKiKij28uO97rB3zDQnnIhJw4qtlFODfmnuG5DN QXooQM0GbMHmf+iUaLO6aN8o7rC0pVT9Y2xjoK0IEI/tjKhHZvaBVvP5ALrsn/Nr 3kM7G0VE5jrwjQR84LBWRRutDl/lKTA87sHprkNNEO7R5aL3KE8se/Kdvmf6Y9in lgzzAnTSLPW+aPYdFfWbe3QcRpaZjiETd+6sDiXylFYMMr/TePdZKBBA8epO9P1/ rOSsdq8kahSv4KjqFQQ1kfOUFeOsr4aio3W8N1/gT2uVQmhpWp3azHA8Qty82efO PwxE+dBE+MZtscViRGSA4OtPtEtLUKgN -----END CERTIFICATE-----Generated at Wed Dec 31 09:03:18 2025 by rpki-client