This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: 4DJW3O2q9//YL8fB+z/pWM5f9G+0x9SBfgVeFlAE4b4= Subject key identifier: E9:7F:01:D5:B4:2B:15:B1:B9:21:AB:CE:E3:42:D3:6B:42:76:85:FA Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: 66 Signing time: Sun 21 Dec 2025 06:05:28 +0000 Manifest this update: Sun 21 Dec 2025 06:05:28 +0000 Manifest next update: Sun 28 Dec 2025 06:05:28 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: +r6NGQesAxn79w9pfCWecKdfh0QC05UoXlaGxNSGsgg=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: XYs8/TAj1SKjF36KD3+2Mx5R6rHZ3Npg8Y//QV94Wa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Dec 21 06:05:28 2025 GMT Not After : Dec 28 06:05:28 2025 GMT Subject: CN=69478e28-1626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:31:55:81:82:a7:e7:5f:bb:b5:4f:9f:15: 48:ce:15:9a:92:cb:ae:db:e7:f8:04:7c:84:40:ae: 7f:c8:96:42:79:df:b9:9d:23:1c:ff:ae:24:46:49: d4:ae:a7:e1:d4:cd:9e:d0:3f:f2:a1:42:4f:2f:7a: 7b:4c:e7:bf:8f:b4:ed:16:f3:a6:c1:0b:6c:7d:82: 85:95:d5:f6:79:d3:6c:a7:ba:f3:97:99:c5:4d:3a: 06:88:cd:27:71:c0:e4:31:9e:01:6d:a8:f9:38:a5: 00:1a:b5:8c:34:c0:0e:1f:06:c4:34:f6:d9:3d:6f: fb:3e:76:ba:2f:06:f2:17:de:06:aa:2e:e8:a7:57: 1b:a6:86:55:8c:c8:41:ad:95:51:ed:8c:b0:35:c7: 0c:fd:df:d9:01:fb:80:15:a6:c1:0e:b6:27:d5:f1: 34:d6:f0:0b:22:0b:77:c9:40:6b:a6:b0:90:df:45: b0:c5:94:57:2a:e2:59:e7:d0:76:aa:b7:47:4a:fc: f2:1d:44:e9:68:13:98:0c:5a:1f:c9:1f:b1:bb:bf: 1e:8c:06:c9:d6:79:69:a2:bb:dd:86:3e:78:2f:14: 11:87:52:36:60:00:a8:f0:fc:3a:06:52:a5:15:90: 92:15:a4:55:5c:97:65:e0:e6:52:8b:84:ad:d6:3b: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:01:D5:B4:2B:15:B1:B9:21:AB:CE:E3:42:D3:6B:42:76:85:FA X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e9:b2:44:f5:eb:2b:84:64:c1:39:db:a8:e0:41:fa:f8:5c: d4:7a:7a:03:3a:cf:46:21:52:bf:52:cb:48:42:32:1e:84:be: 53:86:e4:90:58:bf:aa:ea:71:b5:b4:fb:79:6e:31:91:d5:5c: e4:28:fb:fe:14:22:9b:69:81:17:7e:d0:c9:9c:ef:03:06:d6: 02:e3:b4:24:ed:7b:29:43:8f:df:af:6c:6b:97:f3:03:bc:45: 96:59:79:7c:bb:3f:40:47:13:91:f8:e7:22:fd:89:a4:f6:1a: ab:1c:bc:75:72:b8:e0:c3:09:85:9f:d1:f3:e1:b9:2a:75:52: cd:e9:ab:ac:c8:42:2b:c7:e9:ad:15:e8:68:22:5e:19:cf:86: 29:40:a7:e6:8f:2b:40:76:02:c5:06:26:8b:92:48:b3:e0:be: 79:ab:ea:29:a3:69:96:f4:bb:00:57:70:fa:3a:a0:ed:be:67: a6:c8:ad:dc:b8:ff:7f:3e:c5:95:a8:10:18:b1:48:2f:6b:c0: d1:da:54:50:f7:2b:60:7c:73:f6:e6:75:75:41:16:cb:b3:fd: 4a:fc:f7:fd:ff:1c:e0:9c:c0:4b:ee:3d:88:b0:f3:e5:f8:90: 1f:c5:b3:0a:12:3e:bf:61:d7:98:26:6e:ab:57:a0:ea:c1:0d: 6f:97:f9:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDlDMjExMC8GA1UEBRMoNzREQ0VBQTg1MDZBMkIzMjdGODdBNDJEMDc0MUFDMzZF RURFRUI0OTAeFw0yNTEyMjEwNjA1MjhaFw0yNTEyMjgwNjA1MjhaMBgxFjAUBgNV BAMMDTY5NDc4ZTI4LTE2MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn2TFVgYKn51+7tU+fFUjOFZqSy67b5/gEfIRArn/IlkJ537mdIxz/riRGSdSu p+HUzZ7QP/KhQk8ventM57+PtO0W86bBC2x9goWV1fZ502ynuvOXmcVNOgaIzSdx wOQxngFtqPk4pQAatYw0wA4fBsQ09tk9b/s+drovBvIX3gaqLuinVxumhlWMyEGt lVHtjLA1xwz939kB+4AVpsEOtifV8TTW8AsiC3fJQGumsJDfRbDFlFcq4lnn0Haq t0dK/PIdROloE5gMWh/JH7G7vx6MBsnWeWmiu92GPngvFBGHUjZgAKjw/DoGUqUV kJIVpFVcl2Xg5lKLhK3WO78tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6X8B1bQr FbG5IavO40LTa0J2hfowHwYDVR0jBBgwFoAUdNzqqFBqKzJ/h6QtB0GsNu7e60kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0OUMyL0UzQTNERUU2NDhD ODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE56cXFGQnFLekpfaDZRdEIwR3NOdTdlNjBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 OUMyL0UzQTNERUU2NDhDODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pK X2g2UXRCMEdzTnU3ZTYway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIPpskT16yuEZME526jgQfr4XNR6egM6z0YhUr9Sy0hCMh6EvlOG5JBY v6rqcbW0+3luMZHVXOQo+/4UIptpgRd+0Mmc7wMG1gLjtCTteylDj9+vbGuX8wO8 RZZZeXy7P0BHE5H45yL9iaT2GqscvHVyuODDCYWf0fPhuSp1Us3pq6zIQivH6a0V 6GgiXhnPhilAp+aPK0B2AsUGJouSSLPgvnmr6imjaZb0uwBXcPo6oO2+Z6bIrdy4 /38+xZWoEBixSC9rwNHaVFD3K2B8c/bmdXVBFsuz/Ur89/3/HOCcwEvuPYiw8+X4 kB/FswoSPr9h15gmbqtXoOrBDW+X+UM= -----END CERTIFICATE-----Generated at Mon Dec 22 07:10:36 2025 by rpki-client