This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: +g9mdINe8OfWbE+KbuUIPEQQl341SqW801+WCLJw4Qc= Subject key identifier: 33:20:16:8A:83:10:7A:3C:C6:2A:1B:4A:50:37:55:BF:34:44:9C:0C Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D7D Signing time: Sat 20 Dec 2025 17:38:07 +0000 Manifest this update: Sat 20 Dec 2025 17:38:06 +0000 Manifest next update: Sat 27 Dec 2025 17:38:06 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: wrSX3FP4kQGnMwZf60m9CY25iyHuqyJK+N9YNQHelKc=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 0IRldC+hawtZkd2Iq9YFUMYJkucfDEzFvM/nRTLCHH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3470 (0xd8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: Dec 20 17:38:06 2025 GMT Not After : Dec 27 17:38:06 2025 GMT Subject: CN=6946defe-6d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:df:96:37:29:a3:81:cc:62:84:7e:97:24: 95:99:af:9c:18:99:10:67:a5:2f:8b:58:4f:f3:14: 5a:27:c3:2f:53:a2:9b:60:9a:b6:2a:5a:21:e6:24: ec:e5:25:85:4e:1c:fe:d3:c5:c9:0e:7b:cb:a0:71: f9:49:e5:7b:be:ce:e2:47:62:76:4b:71:75:90:75: 82:02:8c:05:e4:e5:f2:b9:1c:8a:b5:ae:15:32:4c: 95:a4:61:37:2d:63:b1:51:70:79:ac:b7:51:e4:97: de:77:cb:3e:fb:ed:62:55:e3:04:c3:96:5e:09:6f: 5c:34:07:c8:93:a5:37:05:7c:de:7d:3e:88:b0:94: c6:b2:b6:69:a7:96:68:b5:ba:8d:f3:94:01:91:a3: ee:c7:e1:70:79:1d:e3:c7:fd:5e:fb:17:e6:4e:5d: c5:fb:2e:da:6f:b5:e0:64:40:90:9e:4d:e4:ab:28: 66:72:90:a2:03:53:c7:96:9c:c8:99:73:53:89:ef: 8e:46:cf:47:25:3a:4b:b1:02:3a:20:da:09:b1:14: 22:a8:2b:49:fb:41:d1:ec:fd:f1:9c:5b:71:b5:c9: df:ef:43:c2:0e:fa:08:b4:96:d3:6f:38:e4:bb:4e: bd:af:3c:63:14:08:b4:d6:b9:a3:e6:44:ad:c5:ff: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:20:16:8A:83:10:7A:3C:C6:2A:1B:4A:50:37:55:BF:34:44:9C:0C X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:2d:c9:16:22:b1:67:aa:88:6b:95:a9:3a:85:4b:7c:ff:e4: c3:20:3e:8a:11:84:bf:d7:84:64:db:bb:f9:10:d9:54:7a:39: 3b:06:9c:59:6c:35:e1:a3:1c:e2:f9:40:78:68:8b:b2:f9:f2: f1:e7:44:40:cb:ae:d0:66:20:0e:9c:f9:e1:6c:5c:50:5e:aa: e8:16:b6:3c:2a:af:2e:e9:69:59:45:5a:15:c0:9d:55:33:25: 7e:70:2e:ed:0d:00:4f:70:c8:4c:66:c4:6b:38:a5:e4:41:b8: b0:a0:de:1a:cd:a2:d7:5d:7a:38:31:3e:eb:14:5b:f8:0b:aa: c2:44:16:47:3f:1e:a4:13:03:10:93:07:3d:5f:e8:d6:e3:69: 58:8a:e4:1c:94:5d:17:e3:4f:24:3c:9b:c9:a0:f3:be:46:53: 5f:87:bf:42:f4:f7:bc:91:05:2e:a0:54:82:45:94:db:5d:2f: 95:64:c8:40:1c:e9:65:2e:37:b4:a0:d6:1c:20:9a:08:fd:e9: 40:39:2d:b6:50:81:78:53:17:1b:cc:cd:42:98:4d:86:02:d5: fe:b5:7d:bf:9f:4e:d3:46:b6:93:0c:0a:54:f3:7b:ce:de:80: 7a:ed:b2:fb:db:87:02:ed:1a:8f:15:04:dc:69:31:48:de:5d: 70:66:e3:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUxMjIwMTczODA2WhcNMjUxMjI3MTczODA2WjAYMRYwFAYD VQQDDA02OTQ2ZGVmZS02ZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJDfljcpo4HMYoR+lySVma+cGJkQZ6Uvi1hP8xRaJ8MvU6KbYJq2Kloh5iTs 5SWFThz+08XJDnvLoHH5SeV7vs7iR2J2S3F1kHWCAowF5OXyuRyKta4VMkyVpGE3 LWOxUXB5rLdR5Jfed8s+++1iVeMEw5ZeCW9cNAfIk6U3BXzefT6IsJTGsrZpp5Zo tbqN85QBkaPux+FweR3jx/1e+xfmTl3F+y7ab7XgZECQnk3kqyhmcpCiA1PHlpzI mXNTie+ORs9HJTpLsQI6INoJsRQiqCtJ+0HR7P3xnFtxtcnf70PCDvoItJbTbzjk u069rzxjFAi01rmj5kStxf8iWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMgFoqD EHo8xiobSlA3Vb80RJwMMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4LckWIrFnqohrlak6hUt8/+TDID6KEYS/14Rk27v5ENlUejk7BpxZ bDXhoxzi+UB4aIuy+fLx50RAy67QZiAOnPnhbFxQXqroFrY8Kq8u6WlZRVoVwJ1V MyV+cC7tDQBPcMhMZsRrOKXkQbiwoN4azaLXXXo4MT7rFFv4C6rCRBZHPx6kEwMQ kwc9X+jW42lYiuQclF0X408kPJvJoPO+RlNfh79C9Pe8kQUuoFSCRZTbXS+VZMhA HOllLje0oNYcIJoI/elAOS22UIF4UxcbzM1CmE2GAtX+tX2/n07TRraTDApU83vO 3oB67bL724cC7RqPFQTcaTFI3l1wZuMT -----END CERTIFICATE-----Generated at Sun Dec 21 13:41:36 2025 by rpki-client