This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: fHcS6EOYlfongP9NDNAgg6ynxzosZhgHixrKULeWucs= Subject key identifier: 04:E4:2D:82:AC:38:3D:E7:E6:AF:E3:D0:9F:63:A4:81:72:C2:33:EA Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 0291 Signing time: Fri 19 Dec 2025 00:45:46 +0000 Manifest this update: Fri 19 Dec 2025 00:45:45 +0000 Manifest next update: Fri 26 Dec 2025 00:45:45 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: hTV/ifPuik1hbRYkibNAEQbVNBswPxBHkddOlMr9Zy0=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: 0JYQSMYaFvaLhjpHDbKJtAOfDwR2Txci9jlqVoFvh1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: Dec 19 00:45:45 2025 GMT Not After : Dec 26 00:45:45 2025 GMT Subject: CN=6944a03a-a2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:cd:6e:a7:e7:c2:70:67:9b:5f:ed:31:73:89: 46:ec:71:da:3d:34:80:5c:d7:3e:d8:d4:50:f8:a2: ff:8d:41:20:5e:bd:cf:4e:a9:f5:20:ba:5f:55:b2: d4:be:a1:79:1d:ce:22:67:01:56:68:43:e8:67:2d: ff:6c:53:9f:82:f8:9e:82:28:aa:80:87:26:11:73: 25:6b:31:be:91:e4:81:39:0c:77:34:03:57:27:4b: d2:42:67:1e:52:8e:dc:a1:2a:30:47:7b:59:d2:3f: 3b:50:ac:22:ef:df:9e:23:b0:75:db:bf:a0:49:8f: 2d:c4:eb:68:26:37:a5:34:80:84:db:f3:95:6e:c1: 30:df:36:f3:97:4c:cf:bd:e5:88:c7:97:7f:4c:d0: 78:55:9b:d1:d9:4a:b4:a3:31:88:d5:13:a2:a1:a0: d6:92:0c:18:4b:94:78:52:0f:b7:2c:3b:07:6a:9b: e3:96:76:05:cf:75:99:a1:8a:04:6d:4a:d1:69:d9: 08:62:e7:98:5b:f6:e5:5b:8a:7b:1a:34:a5:61:e0: fe:e5:60:87:c6:a8:96:22:a1:ca:c5:47:c0:c5:2b: d5:0d:8e:f4:d3:c1:24:8b:92:4c:23:58:b5:05:4a: 31:74:4c:36:29:dc:cb:f4:cd:0c:ab:84:91:4f:5d: 98:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E4:2D:82:AC:38:3D:E7:E6:AF:E3:D0:9F:63:A4:81:72:C2:33:EA X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b8:72:49:0f:37:b7:ea:fd:8a:f8:eb:65:58:64:25:34:03: 81:c5:60:10:e6:f2:d6:a1:28:5b:41:d6:42:93:97:69:b8:fc: 75:37:96:a6:da:c2:f7:a3:a7:43:22:95:d9:9e:ee:d4:51:e9: bb:18:22:44:17:bd:58:f1:af:10:3a:61:94:5d:30:0f:9f:67: 47:b3:88:ad:d8:a2:c7:28:54:90:e1:25:1f:1d:51:d1:96:26: 2c:00:97:e4:f6:8a:ea:a4:0c:2f:1e:9e:74:ce:99:86:86:2d: 7d:9b:72:90:7f:f4:c9:d2:c3:42:91:72:42:e7:f5:b5:0c:7f: eb:a1:a1:5f:ff:82:a0:22:5b:b0:28:91:e3:cc:6f:69:ba:b1: 78:6e:53:5f:f8:53:c7:f0:c6:a2:4b:42:08:1a:02:08:eb:58: 96:62:56:7c:0c:7d:ce:4a:1e:c7:02:66:97:98:3f:1e:88:b2: ce:b7:52:39:ed:8c:99:d4:2b:cc:2f:37:65:4c:9b:02:a7:c2: b5:4d:61:ef:a6:83:48:a3:e5:20:91:6f:a0:44:81:dd:b5:64: 9e:7c:02:12:5e:97:e8:55:03:ad:c1:b4:02:91:33:3d:7a:da: bd:8d:fa:5a:43:f7:5d:00:60:f5:f0:49:33:8b:34:43:bf:0f: 1f:4c:4d:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjUxMjE5MDA0NTQ1WhcNMjUxMjI2MDA0NTQ1WjAYMRYwFAYD VQQDDA02OTQ0YTAzYS1hMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9M1up+fCcGebX+0xc4lG7HHaPTSAXNc+2NRQ+KL/jUEgXr3PTqn1ILpfVbLU vqF5Hc4iZwFWaEPoZy3/bFOfgviegiiqgIcmEXMlazG+keSBOQx3NANXJ0vSQmce Uo7coSowR3tZ0j87UKwi79+eI7B127+gSY8txOtoJjelNICE2/OVbsEw3zbzl0zP veWIx5d/TNB4VZvR2Uq0ozGI1ROioaDWkgwYS5R4Ug+3LDsHapvjlnYFz3WZoYoE bUrRadkIYueYW/blW4p7GjSlYeD+5WCHxqiWIqHKxUfAxSvVDY7008Eki5JMI1i1 BUoxdEw2KdzL9M0Mq4SRT12YMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATkLYKs OD3n5q/j0J9jpIFywjPqMB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJuHJJDze36v2K+OtlWGQlNAOBxWAQ5vLWoShbQdZCk5dpuPx1N5am 2sL3o6dDIpXZnu7UUem7GCJEF71Y8a8QOmGUXTAPn2dHs4it2KLHKFSQ4SUfHVHR liYsAJfk9orqpAwvHp50zpmGhi19m3KQf/TJ0sNCkXJC5/W1DH/roaFf/4KgIluw KJHjzG9purF4blNf+FPH8MaiS0IIGgII61iWYlZ8DH3OSh7HAmaXmD8eiLLOt1I5 7YyZ1CvMLzdlTJsCp8K1TWHvpoNIo+UgkW+gRIHdtWSefAISXpfoVQOtwbQCkTM9 etq9jfpaQ/ddAGD18EkzizRDvw8fTE3K -----END CERTIFICATE-----Generated at Fri Dec 19 19:25:33 2025 by rpki-client