This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: lKWro04nFQzUsGmShlnsLsKP4Nxyc8L3144JZ2katuw= Subject key identifier: 99:C9:6E:25:6E:60:C5:F3:79:FF:23:A1:66:83:74:18:FF:CE:31:96 Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 0298 Signing time: Thu 01 Jan 2026 00:59:58 +0000 Manifest this update: Thu 01 Jan 2026 00:59:58 +0000 Manifest next update: Thu 08 Jan 2026 00:59:58 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: s4MEknZU84KS2rL75bGa5IUS7ZKXC3aonkyqmiHFfqk=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: 0JYQSMYaFvaLhjpHDbKJtAOfDwR2Txci9jlqVoFvh1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 00:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: Jan 1 00:59:58 2026 GMT Not After : Jan 8 00:59:58 2026 GMT Subject: CN=6955c70e-fb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:8b:81:5d:76:0e:c4:6c:0e:6c:33:4a:5b: 1a:dc:71:51:a3:00:8b:07:74:ac:41:db:1d:dd:50: cc:cf:0c:92:cc:3c:27:6b:b3:ad:b0:9e:78:ac:ee: 2a:02:fd:23:f6:98:cf:62:a0:0e:63:fa:35:73:fd: 8e:80:40:bb:11:84:6b:cc:23:86:75:c6:fc:31:56: 42:c7:78:c1:48:35:98:41:27:1c:93:35:61:42:23: 4b:3c:bb:44:6f:ac:53:dd:42:a3:3b:4d:13:29:39: 4c:88:6c:26:d8:bb:75:1b:c1:52:5b:a2:e5:8d:24: d3:d5:fd:60:c7:77:13:a8:9e:2f:1f:b6:96:f1:a5: 11:99:14:04:32:b3:f4:8f:1a:13:5f:67:2c:08:38: 3b:2d:dd:64:d2:32:3a:7c:ba:06:0a:4c:29:2a:a5: 99:83:29:d4:6b:15:6e:e2:5e:07:a0:ae:c3:22:fb: df:8a:31:99:37:5d:6a:33:44:53:38:e0:b2:66:35: 14:a3:b8:9e:11:da:2d:5d:77:11:38:78:70:b7:d6: 89:62:3f:62:31:51:4e:9d:2e:65:61:47:1e:68:41: 9c:55:eb:6f:e4:78:54:fd:ba:5d:5a:e8:13:b3:da: 6d:8b:9a:e4:11:24:c3:66:c3:ed:af:2c:55:b7:1a: cd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C9:6E:25:6E:60:C5:F3:79:FF:23:A1:66:83:74:18:FF:CE:31:96 X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:48:31:05:e7:2c:3f:53:5d:e0:09:c5:73:eb:d9:61:0d:48: 40:16:9a:e4:53:a0:45:02:74:43:5e:89:04:14:d0:a0:0a:21: d7:a0:32:d7:1b:22:f7:2c:5a:de:12:97:a9:10:71:1a:93:b7: 2d:a0:bf:fd:d4:93:50:f0:75:bb:3e:d8:a1:fa:96:1a:5c:c6: cc:05:be:c6:5d:35:be:de:25:90:2c:c9:2d:90:d7:d3:79:0c: 1e:9f:4c:56:b6:f3:a1:fb:3e:11:07:21:f6:41:d8:4a:dd:7a: 26:0b:5e:ec:2e:4a:11:6a:93:3c:0e:5a:1d:1a:6e:6d:23:3d: 38:8a:d0:dc:9d:af:ed:55:58:d8:de:8c:fd:1c:a0:08:c7:2e: 87:83:86:c2:bd:07:c9:17:d8:6f:3a:5c:a8:ba:30:81:09:89: 7c:b9:9c:36:e4:01:df:31:01:1c:e8:4e:81:c6:67:b3:63:44: 75:10:82:ed:02:c3:61:6b:a9:43:87:a4:76:43:35:42:fe:53: 30:e6:2f:61:46:aa:d9:77:25:eb:94:9b:f4:a5:dc:16:98:1d: e0:d1:b2:75:b4:4a:62:e9:6c:1e:73:6a:8f:1f:90:4c:9b:96: c7:d3:18:f1:a6:1e:36:79:e1:cb:9d:2a:49:88:c8:ee:ef:db: 00:a2:ce:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjYwMTAxMDA1OTU4WhcNMjYwMTA4MDA1OTU4WjAYMRYwFAYD VQQDDA02OTU1YzcwZS1mYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lOLgV12DsRsDmwzSlsa3HFRowCLB3SsQdsd3VDMzwySzDwna7OtsJ54rO4q Av0j9pjPYqAOY/o1c/2OgEC7EYRrzCOGdcb8MVZCx3jBSDWYQScckzVhQiNLPLtE b6xT3UKjO00TKTlMiGwm2Lt1G8FSW6LljSTT1f1gx3cTqJ4vH7aW8aURmRQEMrP0 jxoTX2csCDg7Ld1k0jI6fLoGCkwpKqWZgynUaxVu4l4HoK7DIvvfijGZN11qM0RT OOCyZjUUo7ieEdotXXcROHhwt9aJYj9iMVFOnS5lYUceaEGcVetv5HhU/bpdWugT s9pti5rkESTDZsPtryxVtxrNswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnJbiVu YMXzef8joWaDdBj/zjGWMB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHSDEF5yw/U13gCcVz69lhDUhAFprkU6BFAnRDXokEFNCgCiHXoDLX GyL3LFreEpepEHEak7ctoL/91JNQ8HW7Ptih+pYaXMbMBb7GXTW+3iWQLMktkNfT eQwen0xWtvOh+z4RByH2QdhK3XomC17sLkoRapM8DlodGm5tIz04itDcna/tVVjY 3oz9HKAIxy6Hg4bCvQfJF9hvOlyoujCBCYl8uZw25AHfMQEc6E6BxmezY0R1EILt AsNha6lDh6R2QzVC/lMw5i9hRqrZdyXrlJv0pdwWmB3g0bJ1tEpi6Wwec2qPH5BM m5bH0xjxph42eeHLnSpJiMju79sAos5p -----END CERTIFICATE-----Generated at Thu Jan 1 18:06:32 2026 by rpki-client