This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft File: DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json) Hash identifier: wwIQHi2mdteWeLTBc5t88KRuhzJX15/tzQSlRryJCc8= Subject key identifier: DD:AD:7C:71:6D:61:3A:C6:5D:4D:AC:98:EA:09:18:F2:2A:95:91:82 Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft Manifest number: 01B0 Signing time: Fri 19 Dec 2025 02:20:21 +0000 Manifest this update: Fri 19 Dec 2025 02:20:21 +0000 Manifest next update: Fri 26 Dec 2025 02:20:21 +0000 Files and hashes: 1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: ntD/Qe6Mo/ME5s9TyI3A70scgByVmd9xPY/LXzVrp0Q=) 2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: jXDiNUfmAph8KmmhKCwstWhLejYXnSu0uk3x3qOWIK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Validity Not Before: Dec 19 02:20:21 2025 GMT Not After : Dec 26 02:20:21 2025 GMT Subject: CN=6944b665-3a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:ad:3f:1a:d8:11:d9:fa:07:11:6d:58:66: 9b:05:e1:56:1c:9a:c9:0d:2d:23:b0:0d:6e:e4:5e: 6f:57:ad:ce:e2:54:20:e7:41:fb:66:14:7c:0f:53: 9d:fc:ae:c3:1a:0f:30:0f:3c:73:09:11:1f:ca:b1: 3e:80:23:d3:1a:d4:46:4b:f0:2f:51:1f:8d:24:81: 26:c7:ac:28:6a:77:9e:77:f5:5e:84:8d:34:b4:6f: 83:fe:e0:63:78:b2:e5:3b:ba:ce:1c:98:25:fe:71: db:e0:cb:08:61:de:de:7b:07:fe:1b:8e:91:26:c3: b0:e1:d3:81:af:fb:42:1e:62:41:df:3f:38:75:c9: 73:ed:33:71:d7:f4:58:44:d5:90:61:06:c9:b6:37: 56:e8:51:45:53:9f:76:ff:53:11:34:b6:04:a5:c7: b0:85:ed:89:1f:16:65:ec:70:d9:b5:f5:65:b6:c2: ae:bb:97:b1:df:dd:a1:91:91:18:d3:01:de:32:2a: 6f:10:3c:99:ce:7e:e1:2b:06:6b:78:fc:75:e2:8b: 9c:05:6b:cc:fb:53:f7:4b:b0:54:9f:60:95:aa:a4: 42:c8:53:3c:a8:72:63:15:08:f3:82:72:fe:25:1f: 67:5b:d4:9a:4c:cd:73:c0:12:4d:93:19:e5:2a:5e: cd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AD:7C:71:6D:61:3A:C6:5D:4D:AC:98:EA:09:18:F2:2A:95:91:82 X509v3 Authority Key Identifier: keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:54:8f:54:e5:f1:4a:3a:fa:32:35:e4:e5:2e:2b:32:cf:30: bb:0f:c5:89:cb:52:5d:27:c3:03:f4:2b:3b:42:8b:9b:d8:ca: d5:3b:d8:9f:c0:a0:30:7f:11:76:62:6a:cc:81:08:ce:3c:e4: c3:48:12:c1:b9:e4:0c:44:54:c8:86:5c:31:a0:73:1d:db:db: 7e:69:7a:a3:ed:2d:cb:5d:f2:b4:a1:17:94:e5:f1:eb:a2:d5: bf:3f:92:8a:aa:b0:b4:5c:9d:ee:6c:0f:9e:7c:fa:94:4b:f5: 3d:f1:03:a9:9a:1b:e0:67:b0:8f:ba:0d:e8:97:f8:72:3e:01: f7:9c:7e:62:0f:62:42:3f:0b:d4:79:52:20:21:52:69:41:c7: ed:8a:84:73:c7:72:b0:55:ce:eb:f0:15:e5:b2:99:46:b1:75: 72:0c:00:99:09:16:56:b7:ad:9a:6f:1e:ed:d4:ac:32:29:62: 32:00:45:6b:f5:75:9c:39:a1:20:0b:3e:71:4b:3d:35:af:f2: 9e:c3:22:ca:d7:37:12:05:0d:9b:9a:93:3b:59:5b:00:8e:80: 08:76:5b:ad:6b:fd:ec:30:d8:c9:7c:79:be:38:a2:d3:9f:e0: e3:23:75:ef:b1:3e:cf:fd:e7:ae:55:5f:2d:51:18:b9:37:6a: 69:6f:2e:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NEQxMTAvBgNVBAUTKDBDMzdBMDFDQjYzMzYyMzQ0RkI3Mzk2NzYwRkQ5NEQ5 QzlCOTdDN0EwHhcNMjUxMjE5MDIyMDIxWhcNMjUxMjI2MDIyMDIxWjAYMRYwFAYD VQQDDA02OTQ0YjY2NS0zYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/StPxrYEdn6BxFtWGabBeFWHJrJDS0jsA1u5F5vV63O4lQg50H7ZhR8D1Od /K7DGg8wDzxzCREfyrE+gCPTGtRGS/AvUR+NJIEmx6woaneed/VehI00tG+D/uBj eLLlO7rOHJgl/nHb4MsIYd7eewf+G46RJsOw4dOBr/tCHmJB3z84dclz7TNx1/RY RNWQYQbJtjdW6FFFU592/1MRNLYEpcewhe2JHxZl7HDZtfVltsKuu5ex392hkZEY 0wHeMipvEDyZzn7hKwZrePx14oucBWvM+1P3S7BUn2CVqqRCyFM8qHJjFQjzgnL+ JR9nW9SaTM1zwBJNkxnlKl7N2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2tfHFt YTrGXU2smOoJGPIqlZGCMB8GA1UdIwQYMBaAFAw3oBy2M2I0T7c5Z2D9lNnJuXx6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY0RC8yQkJFNDAxNDQ2 N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellqUlB0emxuWVAyVTJjbTVm SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0REZWdITFl6WWpSUHR6bG5ZUDJVMmNtNWZIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjY0RC8yQkJFNDAxNDQ2N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellq UlB0emxuWVAyVTJjbTVmSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaVI9U5fFKOvoyNeTlLisyzzC7D8WJy1JdJ8MD9Cs7Qoub2MrVO9if wKAwfxF2YmrMgQjOPOTDSBLBueQMRFTIhlwxoHMd29t+aXqj7S3LXfK0oReU5fHr otW/P5KKqrC0XJ3ubA+efPqUS/U98QOpmhvgZ7CPug3ol/hyPgH3nH5iD2JCPwvU eVIgIVJpQcftioRzx3KwVc7r8BXlsplGsXVyDACZCRZWt62abx7t1KwyKWIyAEVr 9XWcOaEgCz5xSz01r/KewyLK1zcSBQ2bmpM7WVsAjoAIdluta/3sMNjJfHm+OKLT n+DjI3XvsT7P/eeuVV8tURi5N2ppby7a -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:20 2025 by rpki-client