This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft File: DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json) Hash identifier: cLPMkH1vzcVuT6yiuP8TLWOxF4Qwy8nz4+S5BFhaauY= Subject key identifier: D4:DF:0C:85:40:85:AC:2A:45:FC:99:ED:C8:E0:CF:18:1A:45:84:46 Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 Certificate issuer: /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft Manifest number: 0366 Signing time: Mon 22 Dec 2025 23:56:02 +0000 Manifest this update: Mon 22 Dec 2025 23:56:01 +0000 Manifest next update: Mon 29 Dec 2025 23:56:01 +0000 Files and hashes: 1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: 7mEJxexkG+eMO0j1t1x9zjVIVOm+1eNrX66KbbIvGVs=) 2: 32F44056DB1911EC87E56C0DC4F9AE02.roa (hash: dymLbJxwcC+zoVbs1raLnxC102YzGfBqYVissSmUr50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Validity Not Before: Dec 22 23:56:01 2025 GMT Not After : Dec 29 23:56:01 2025 GMT Subject: CN=6949da92-49b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:03:9a:e9:74:ab:3e:1b:cf:bb:db:b5:9b: 12:06:82:f2:58:a6:c5:69:5a:f4:ed:1a:d4:cc:7f: ca:bc:e7:3c:4f:54:5e:62:36:db:7c:a7:b7:a8:75: af:c1:6a:c5:50:d1:5c:6b:11:02:ab:83:35:8f:0f: 0b:bc:98:83:95:61:6b:cb:87:42:7c:b6:93:65:32: 6d:7e:24:d3:27:39:69:22:7d:df:ff:61:b0:13:0c: d9:34:22:21:bc:20:91:c1:23:eb:cf:b8:b2:ce:71: 75:15:ce:61:20:cb:be:6c:48:84:2e:e3:97:0c:bd: 68:76:dd:d9:f3:89:14:29:89:6e:67:c3:b9:e6:e9: 2a:4b:84:42:17:a3:e5:06:83:de:a7:6d:00:f3:83: 3b:71:78:a0:8d:7e:85:2d:8c:b6:c1:78:9d:aa:af: 91:4f:0e:a4:33:4c:e3:92:4d:e3:c0:9f:99:f2:b9: 43:ac:2e:03:24:7b:1b:87:82:71:6d:ba:88:85:03: 6b:82:6c:4f:4b:97:2e:9a:0a:a3:d9:ff:4f:1d:cc: 1a:f7:e2:36:1f:65:f0:ad:db:b6:ae:af:02:40:a1: 5a:d3:86:98:f5:00:82:6f:1e:07:28:c3:b3:db:14: 80:e0:5c:6e:7c:1d:97:94:52:40:0d:23:31:3a:ce: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DF:0C:85:40:85:AC:2A:45:FC:99:ED:C8:E0:CF:18:1A:45:84:46 X509v3 Authority Key Identifier: keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:fb:2e:f1:b1:eb:c8:d7:fe:c7:57:4d:2b:c2:f2:3e:3e:e8: 6e:1a:91:23:f6:6b:41:3c:21:dd:59:43:82:3f:24:43:4f:95: 00:7e:cc:92:dd:54:4e:9f:1f:83:04:6f:4e:85:cf:68:ab:d2: 19:aa:94:2e:ad:e6:80:60:e9:50:9d:84:07:59:e8:81:b2:e5: 78:39:e6:d2:c1:cf:33:d1:e5:48:4a:99:68:1b:a4:d3:bf:3b: 87:58:3b:aa:53:61:56:51:2e:80:27:dc:1c:3f:a1:b5:44:f0: 29:1a:4f:ee:d3:78:ef:51:60:6c:96:8a:6e:01:c8:29:ac:71: 0e:45:45:a6:dd:67:44:b6:c6:9e:24:5d:76:3c:b1:7b:0c:b2: 06:68:2d:92:e0:bb:7e:75:55:4d:cb:4e:1c:cd:b0:26:99:75: d1:3e:1d:0a:89:47:b7:93:9a:25:b1:8a:51:2f:0e:2d:1a:c8: e2:f6:31:e7:bd:19:d4:f3:a0:32:90:a3:89:71:1c:0e:b8:a1: 90:35:0b:5b:98:49:e8:6b:9b:f9:66:0f:96:d4:de:57:d6:52: 4e:35:d5:c9:d3:74:e0:a2:41:ca:06:ab:69:af:5f:7f:3b:10: a8:84:e8:e7:c9:4d:3e:6f:32:cb:57:ae:be:ff:d1:9e:50:ed: 71:75:16:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0 MUY1NTlCMDIwHhcNMjUxMjIyMjM1NjAxWhcNMjUxMjI5MjM1NjAxWjAYMRYwFAYD VQQDDA02OTQ5ZGE5Mi00OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMgDmul0qz4bz7vbtZsSBoLyWKbFaVr07RrUzH/KvOc8T1ReYjbbfKe3qHWv wWrFUNFcaxECq4M1jw8LvJiDlWFry4dCfLaTZTJtfiTTJzlpIn3f/2GwEwzZNCIh vCCRwSPrz7iyznF1Fc5hIMu+bEiELuOXDL1odt3Z84kUKYluZ8O55ukqS4RCF6Pl BoPep20A84M7cXigjX6FLYy2wXidqq+RTw6kM0zjkk3jwJ+Z8rlDrC4DJHsbh4Jx bbqIhQNrgmxPS5cumgqj2f9PHcwa9+I2H2Xwrdu2rq8CQKFa04aY9QCCbx4HKMOz 2xSA4FxufB2XlFJADSMxOs5OpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTfDIVA hawqRfyZ7cjgzxgaRYRGMB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlBNC9EQkFCOTM2RURBNzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBh TGZWSkxITWJaTlZCOVZtd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx+y7xsevI1/7HV00rwvI+PuhuGpEj9mtBPCHdWUOCPyRDT5UAfsyS 3VROnx+DBG9Ohc9oq9IZqpQureaAYOlQnYQHWeiBsuV4OebSwc8z0eVISploG6TT vzuHWDuqU2FWUS6AJ9wcP6G1RPApGk/u03jvUWBslopuAcgprHEORUWm3WdEtsae JF12PLF7DLIGaC2S4Lt+dVVNy04czbAmmXXRPh0KiUe3k5olsYpRLw4tGsji9jHn vRnU86AykKOJcRwOuKGQNQtbmEnoa5v5Zg+W1N5X1lJONdXJ03TgokHKBqtpr19/ OxCohOjnyU0+bzLLV66+/9GeUO1xdRbi -----END CERTIFICATE-----Generated at Wed Dec 24 13:55:59 2025 by rpki-client