This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: 681psEmqoekRG9wuauG6FuBrwPE3hjSCYGlFj/c4LS4= Subject key identifier: 21:9E:92:2D:F9:BA:E7:5B:C5:86:E2:FA:4F:EB:69:33:55:52:FA:46 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: 73 Signing time: Fri 19 Dec 2025 05:52:37 +0000 Manifest this update: Fri 19 Dec 2025 05:52:37 +0000 Manifest next update: Fri 26 Dec 2025 05:52:37 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: mc4oWZl795y7l7u7Z9t5CB0M1BXmfvl5HNocfTkFISY=) 2: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: xPkqxoVSxyXeKSaq5jtn4/m5jr8BJckiAgNe5WWb60U=) 3: 570B12E0562611F09F085F44C4F9AE02.roa (hash: CaHNy+5XgMUOPof5CFjhIu8D1eRPSffz8Arg3q0Y77U=) 4: CA5B991430E111F09B76D311C4F9AE02.roa (hash: KDnCMQ2nRjU0Va+lifX6vSdvj7g5AOqm8qx3ZCAL398=) 5: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: tcOXOuYgGu+RB0bUc2Sne4w/DApsR3iV2dNestsnCuc=) 6: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: fV/0Vo51myrGthfe3wjSyvx/kYCAyZZZpPfFqvBV/w4=) 7: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: qvmxAIblo8LoVtJQCEVB0mOCUBhb2PQ/53hCphSqwWE=) 8: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: 4EnYQ2VSNQD0o3dL265fkKkyLcx5j9mcOc/dYLCsIwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Dec 19 05:52:37 2025 GMT Not After : Dec 26 05:52:37 2025 GMT Subject: CN=6944e825-96dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a1:70:7d:aa:90:17:70:e5:c8:93:cb:0e:e0: 1b:af:ec:b0:44:f4:62:41:76:ed:99:4a:cc:2f:5d: a0:fb:8e:27:7c:44:84:57:af:2d:48:48:b9:92:cd: 8a:28:d7:52:07:13:6d:a0:fa:a3:e6:6d:48:51:5a: 04:c8:05:3a:b4:82:0f:b4:40:f6:d0:4b:eb:a8:17: a8:68:bc:fb:af:5e:fd:5c:e8:c8:0f:cb:f3:4f:55: 71:ef:76:26:e4:d5:1d:89:6a:99:a7:ab:b3:f0:2b: e8:e4:7c:50:0b:e3:59:18:42:72:78:c3:f8:a0:18: b9:69:3b:f2:77:e4:3d:ab:2c:ca:1e:93:fe:15:ca: ae:95:a8:1f:32:63:71:9c:5c:bf:86:c4:ea:3e:4f: b9:84:e1:1a:83:51:b5:23:f4:29:69:b3:61:de:05: 14:2b:42:48:b1:2b:c7:db:69:88:97:66:2b:e9:2a: 72:d1:99:39:98:8d:40:37:5e:90:d3:e1:26:2c:66: 71:b8:fd:61:2b:13:92:00:81:99:72:99:96:73:14: f9:63:e4:9d:d8:dd:2d:16:55:23:d0:6d:00:78:a9: 99:f6:ac:e8:7a:20:f4:32:f7:1c:72:af:7c:00:7c: dd:1c:15:e1:22:17:93:e5:46:a2:af:49:9d:f2:7b: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9E:92:2D:F9:BA:E7:5B:C5:86:E2:FA:4F:EB:69:33:55:52:FA:46 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f1:88:d4:2e:6b:df:c1:bd:cb:d3:b6:e0:22:64:ad:7a:89: b7:f3:1f:a1:9f:f9:eb:ff:4f:a1:b3:c4:88:91:0f:c6:4d:13: 97:01:37:9b:44:17:ef:57:ad:e8:8e:6d:2f:b4:0b:28:6e:c2: 0c:98:1b:95:57:23:36:87:b2:6e:77:97:b1:0e:ff:a0:5f:2a: 18:23:3b:ea:5c:ab:ae:a8:80:f9:b7:56:c0:cf:12:0f:b9:5d: 2a:de:c5:be:df:66:0f:41:95:8d:5b:f3:a3:26:cb:b4:bb:58: 65:95:fb:ef:a1:44:4f:a0:14:53:3c:8d:41:aa:76:ff:6b:77: 1c:bd:7b:a7:66:c4:82:d4:9a:f7:c0:f7:1b:b1:15:d6:79:ee: 64:b3:f6:8b:e4:9f:16:d2:bd:0e:54:e3:cc:af:74:c3:1a:d2: 16:21:9c:af:fa:ff:5d:fd:c1:af:87:c6:9d:29:aa:8c:8d:09: 4f:f9:38:84:46:e2:61:45:c7:38:9b:bd:b8:76:e9:eb:85:86: ec:5d:b1:4f:be:14:34:4a:0a:03:09:70:ef:20:09:97:93:1e: 0b:20:66:f8:e6:bb:83:f3:58:e1:08:5c:e6:3a:87:7a:4c:ec: 28:34:de:40:01:13:af:41:62:04:88:84:0a:f9:ce:3f:f4:65: b4:84:3b:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTEyMTkwNTUyMzdaFw0yNTEyMjYwNTUyMzdaMBgxFjAUBgNV BAMMDTY5NDRlODI1LTk2ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmoXB9qpAXcOXIk8sO4Buv7LBE9GJBdu2ZSswvXaD7jid8RIRXry1ISLmSzYoo 11IHE22g+qPmbUhRWgTIBTq0gg+0QPbQS+uoF6hovPuvXv1c6MgPy/NPVXHvdibk 1R2Japmnq7PwK+jkfFAL41kYQnJ4w/igGLlpO/J35D2rLMoek/4Vyq6VqB8yY3Gc XL+GxOo+T7mE4RqDUbUj9Clps2HeBRQrQkixK8fbaYiXZivpKnLRmTmYjUA3XpDT 4SYsZnG4/WErE5IAgZlymZZzFPlj5J3Y3S0WVSPQbQB4qZn2rOh6IPQy9xxyr3wA fN0cFeEiF5PlRqKvSZ3ye5JzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIZ6SLfm6 51vFhuL6T+tpM1VS+kYwHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RkM5LzhEMzVFODJFMzAyQzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlY akhzSkZJaTFMTDM1SVJBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3xiNQua9/BvcvTtuAiZK16ibfzH6Gf+ev/T6GzxIiRD8ZNE5cBN5tE F+9XreiObS+0CyhuwgyYG5VXIzaHsm53l7EO/6BfKhgjO+pcq66ogPm3VsDPEg+5 XSrexb7fZg9BlY1b86Mmy7S7WGWV+++hRE+gFFM8jUGqdv9rdxy9e6dmxILUmvfA 9xuxFdZ57mSz9ovknxbSvQ5U48yvdMMa0hYhnK/6/139wa+Hxp0pqoyNCU/5OIRG 4mFFxzibvbh26euFhuxdsU++FDRKCgMJcO8gCZeTHgsgZvjmu4PzWOEIXOY6h3pM 7Cg03kABE69BYgSIhAr5zj/0ZbSEO2Q= -----END CERTIFICATE-----Generated at Sat Dec 20 00:54:40 2025 by rpki-client