This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: 8wLm0n48+KVczIb2H+WRrncJYzeklbsWnGIMw3IspYM= Subject key identifier: 40:91:BE:D4:3B:BC:5A:33:7E:69:FD:BE:13:B3:3C:67:62:EC:82:2A Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 10B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 109C Signing time: Sat 20 Dec 2025 17:05:09 +0000 Manifest this update: Sat 20 Dec 2025 17:05:09 +0000 Manifest next update: Sat 27 Dec 2025 17:05:09 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: ZpW5bp4YIiVavtQ0tSu+S1Z3hloFTct63RlXlBzDtnw=) 2: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) 3: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4273 (0x10b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Dec 20 17:05:09 2025 GMT Not After : Dec 27 17:05:09 2025 GMT Subject: CN=6946d745-9e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:26:52:de:3b:76:50:ce:94:ee:2a:af:89: e6:7b:21:d7:23:f4:92:4f:7e:87:c0:bd:56:37:e2: 19:e2:df:88:9a:56:3c:2e:f5:a7:77:f5:98:e3:ca: 14:56:42:3c:a9:88:00:84:d6:29:a6:a8:29:38:84: dd:a4:c6:2a:af:57:6f:01:76:a6:0a:14:6d:27:2b: 1d:c6:6b:f2:13:d7:fa:66:07:eb:f1:8a:8c:23:e5: 7c:4f:03:5d:05:ee:2a:45:3e:7f:48:e8:30:98:cd: 95:47:25:c4:b6:24:0d:51:ae:08:77:9e:2c:db:2d: df:e3:35:e6:cf:35:fd:83:8d:6b:d1:40:c6:dd:f6: 3e:1b:56:7c:f2:75:9f:77:b7:20:8a:6c:ff:25:c5: 6a:d3:7d:f4:5b:f2:0c:69:e5:45:bb:c5:46:dd:ae: 52:a1:e5:17:f5:57:a9:f4:fc:dc:ea:8d:cf:fa:2c: d9:92:8f:9d:ec:f8:88:ea:a8:dd:e4:b7:c3:41:80: 00:bf:62:e7:15:fb:ab:47:72:f2:26:d7:46:3b:30: 29:9f:36:60:78:17:2f:23:2c:1d:a3:5e:8e:90:c1: 9e:ae:31:1d:d1:97:41:c9:0e:2b:b9:6d:f9:5e:a0: 95:30:06:0f:62:67:97:41:3d:f6:41:1c:26:1d:0f: 36:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:91:BE:D4:3B:BC:5A:33:7E:69:FD:BE:13:B3:3C:67:62:EC:82:2A X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:86:42:7b:c4:74:7a:e9:5f:41:a6:b5:27:64:57:a4:9f:29: 72:2c:86:89:fe:50:0c:b5:51:a7:30:96:e8:15:94:9b:7a:60: 19:1f:46:4e:c5:09:52:93:a9:98:72:cf:d8:d1:f5:b6:05:2f: 3e:28:84:1f:32:af:fb:92:51:d5:9a:38:a1:6a:a3:81:f2:d2: e2:d4:66:04:8f:ea:52:ab:a2:36:fd:93:75:0f:a5:24:94:2d: 04:bc:51:f5:f0:99:02:99:b3:55:f4:9a:dc:8f:a5:45:5f:38: 68:b3:58:85:0e:8a:06:43:14:99:66:51:45:29:f6:af:86:38: 0f:56:3e:eb:0f:d2:e9:ff:30:61:37:4f:c2:17:c8:9d:2b:40: db:f6:a0:fb:d6:7e:3d:c6:f3:c6:f4:15:a3:83:40:ff:97:85: 2c:82:07:83:9b:0b:50:5a:69:6b:af:00:62:32:c4:32:21:b7: 4c:3d:53:94:91:f9:12:63:af:aa:08:c6:7b:9f:f7:27:e8:9d: 68:43:a0:e5:e7:f3:c7:f0:92:42:e7:a3:d9:81:5a:2a:2a:24: 04:44:bc:06:cc:09:06:65:e6:f9:c5:18:c1:d0:8f:ae:82:76: 60:49:19:29:27:99:79:b8:ac:1e:27:07:42:3a:25:1e:13:ff: 1e:92:4e:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjUxMjIwMTcwNTA5WhcNMjUxMjI3MTcwNTA5WjAYMRYwFAYD VQQDDA02OTQ2ZDc0NS05ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxcmUt47dlDOlO4qr4nmeyHXI/SST36HwL1WN+IZ4t+ImlY8LvWnd/WY48oU VkI8qYgAhNYppqgpOITdpMYqr1dvAXamChRtJysdxmvyE9f6Zgfr8YqMI+V8TwNd Be4qRT5/SOgwmM2VRyXEtiQNUa4Id54s2y3f4zXmzzX9g41r0UDG3fY+G1Z88nWf d7cgimz/JcVq0330W/IMaeVFu8VG3a5SoeUX9Vep9Pzc6o3P+izZko+d7PiI6qjd 5LfDQYAAv2LnFfurR3LyJtdGOzApnzZgeBcvIywdo16OkMGerjEd0ZdByQ4ruW35 XqCVMAYPYmeXQT32QRwmHQ82WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECRvtQ7 vFozfmn9vhOzPGdi7IIqMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbhkJ7xHR66V9BprUnZFeknylyLIaJ/lAMtVGnMJboFZSbemAZH0ZO xQlSk6mYcs/Y0fW2BS8+KIQfMq/7klHVmjihaqOB8tLi1GYEj+pSq6I2/ZN1D6Uk lC0EvFH18JkCmbNV9Jrcj6VFXzhos1iFDooGQxSZZlFFKfavhjgPVj7rD9Lp/zBh N0/CF8idK0Db9qD71n49xvPG9BWjg0D/l4UsggeDmwtQWmlrrwBiMsQyIbdMPVOU kfkSY6+qCMZ7n/cn6J1oQ6Dl5/PH8JJC56PZgVoqKiQERLwGzAkGZeb5xRjB0I+u gnZgSRkpJ5l5uKweJwdCOiUeE/8ekk7b -----END CERTIFICATE-----Generated at Sun Dec 21 01:12:57 2025 by rpki-client