This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft File: DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json) Hash identifier: aJjb27oPk+d+GXmKiqwJx8zBhou8DSafepDSV0vU+6c= Subject key identifier: 44:BC:A3:AE:22:FA:BC:8B:04:CB:9F:8B:4E:41:C7:25:98:C0:50:F3 Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 Certificate issuer: /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Certificate serial: 11B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft Manifest number: 11AE Signing time: Wed 31 Dec 2025 16:58:05 +0000 Manifest this update: Wed 31 Dec 2025 16:58:04 +0000 Manifest next update: Wed 07 Jan 2026 16:58:04 +0000 Files and hashes: 1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: zxfCTiYxxQ4GKFgW6UZc/5PtinHm7TXD407jm0fD6hc=) 2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: Spm004TXuVGOEFLldkv6JM6JGz/wok2Xo213QhmJOo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 16:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4536 (0x11b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Validity Not Before: Dec 31 16:58:04 2025 GMT Not After : Jan 7 16:58:04 2026 GMT Subject: CN=6955561d-00e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:99:c9:b9:1e:1d:2c:ac:5c:21:21:7e:39: 62:a9:5b:3a:33:b1:2d:36:b5:1d:87:40:f3:d4:7f: 52:04:df:29:d0:24:c9:f0:87:7d:8f:d0:af:b6:4b: 8a:1c:f5:64:f4:50:7e:ba:64:26:61:9e:8e:3c:16: 60:7a:db:30:ec:85:09:87:23:85:e3:88:77:5f:0a: 24:88:c2:dc:d5:30:ed:35:cb:0c:17:04:71:a7:28: 0a:fb:19:28:6c:18:75:6f:55:f7:cc:69:5f:18:60: 00:73:2d:67:bb:f6:81:61:f3:fb:ae:1a:24:48:93: 9b:69:80:37:8a:eb:d6:1d:6f:14:fc:41:7f:e4:85: 10:92:89:45:be:68:c9:57:7e:00:d8:1d:36:07:bd: 59:43:46:11:79:94:e5:a6:30:3e:a0:39:2a:89:56: f8:62:3c:a2:03:c3:e7:e8:06:e5:9b:29:97:c6:d3: 23:92:28:50:38:c8:ba:2e:85:3c:72:a1:80:ce:c2: 1e:9e:f0:84:29:0b:76:13:b6:dc:58:cc:54:61:bc: 98:ea:43:a4:56:30:1c:b2:d6:2c:75:b1:71:56:19: 66:95:e3:07:17:53:6c:f7:b2:dd:2b:f7:26:f9:1b: 33:fc:1d:ba:b9:69:32:44:14:d3:3c:d9:26:43:1a: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BC:A3:AE:22:FA:BC:8B:04:CB:9F:8B:4E:41:C7:25:98:C0:50:F3 X509v3 Authority Key Identifier: keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fb:b7:a0:d7:f4:e3:02:be:40:7c:a4:11:cb:9c:63:e7:4c: c7:ed:4a:f5:fb:a6:27:c6:06:8e:69:9d:70:ab:a8:89:cb:5f: c4:91:fa:73:30:f7:2f:04:ff:15:be:4d:b5:0d:ad:93:26:91: 9b:5e:15:57:38:f2:3d:2c:c2:bf:02:33:93:9d:36:72:56:f3: 6d:63:f3:56:11:80:53:ed:a1:ac:40:bf:f9:72:8b:5f:51:ac: fc:65:78:11:1e:e2:8e:fe:e0:da:07:b2:57:8d:a2:d9:cd:0e: 7e:a9:80:f2:0e:e4:1e:9c:1e:02:11:1e:f7:78:2c:ad:2e:e9: 79:93:3c:01:fd:01:5c:70:cb:cd:4e:a6:23:74:4a:5c:64:8d: 58:65:4a:cb:ae:16:f2:2e:07:ce:80:08:77:4a:a7:2b:60:11: f2:e8:0c:16:40:ad:2f:5e:35:69:14:1a:4c:f0:f1:e3:fa:a5: 9b:3e:62:f7:75:36:37:37:46:f0:c4:fd:63:de:89:54:dd:4c: 87:f0:b0:0e:84:b8:0b:e3:d4:4e:9a:9a:41:b8:11:52:04:10: 70:e6:fa:23:56:64:74:55:3e:15:af:90:4e:0a:7e:84:38:41: 9c:ae:09:75:d5:35:29:27:3c:42:0d:97:9b:7b:18:ae:da:f7: 91:f1:3c:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBNDQxMTAvBgNVBAUTKDBEOEM2REI0ODBGRUY4QkJGNUM2OEIxRDQzOTZERDg1 RjU5M0MxNDYwHhcNMjUxMjMxMTY1ODA0WhcNMjYwMTA3MTY1ODA0WjAYMRYwFAYD VQQDDA02OTU1NTYxZC0wMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsE2ZybkeHSysXCEhfjliqVs6M7EtNrUdh0Dz1H9SBN8p0CTJ8Id9j9CvtkuK HPVk9FB+umQmYZ6OPBZgetsw7IUJhyOF44h3XwokiMLc1TDtNcsMFwRxpygK+xko bBh1b1X3zGlfGGAAcy1nu/aBYfP7rhokSJObaYA3iuvWHW8U/EF/5IUQkolFvmjJ V34A2B02B71ZQ0YReZTlpjA+oDkqiVb4YjyiA8Pn6AblmymXxtMjkihQOMi6LoU8 cqGAzsIenvCEKQt2E7bcWMxUYbyY6kOkVjAcstYsdbFxVhlmleMHF1Ns97LdK/cm +Rsz/B26uWkyRBTTPNkmQxodAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFES8o64i +ryLBMufi05BxyWYwFDzMB8GA1UdIwQYMBaAFA2MbbSA/vi79caLHUOW3YX1k8FG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE0NC83Mzk3NzVDRTBB MzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1MdjF4b3NkUTViZGhmV1R3 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZeHR0SUQtLUx2MXhvc2RRNWJkaGZXVHdVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE0NC83Mzk3NzVDRTBBMzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1M djF4b3NkUTViZGhmV1R3VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8+7eg1/TjAr5AfKQRy5xj50zH7Ur1+6YnxgaOaZ1wq6iJy1/Ekfpz MPcvBP8Vvk21Da2TJpGbXhVXOPI9LMK/AjOTnTZyVvNtY/NWEYBT7aGsQL/5cotf Uaz8ZXgRHuKO/uDaB7JXjaLZzQ5+qYDyDuQenB4CER73eCytLul5kzwB/QFccMvN TqYjdEpcZI1YZUrLrhbyLgfOgAh3SqcrYBHy6AwWQK0vXjVpFBpM8PHj+qWbPmL3 dTY3N0bwxP1j3olU3UyH8LAOhLgL49ROmppBuBFSBBBw5vojVmR0VT4Vr5BOCn6E OEGcrgl11TUpJzxCDZebexiu2veR8TwC -----END CERTIFICATE-----Generated at Fri Jan 2 00:05:23 2026 by rpki-client