This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json) Hash identifier: liQ4aqB9sTMJ7x5z5gNmmKR5Srm7bU7tXfzMYygKBkw= Subject key identifier: AB:3A:A1:94:B6:E6:E8:F4:77:FD:99:B5:18:69:9D:97:83:FF:01:6F Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft Manifest number: 066D Signing time: Thu 18 Dec 2025 21:56:25 +0000 Manifest this update: Thu 18 Dec 2025 21:56:25 +0000 Manifest next update: Thu 25 Dec 2025 21:56:25 +0000 Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: QAiLouiZ0dy8x2Pfu8s+oeNhdFcRFuFS3nDjBTOJVPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Validity Not Before: Dec 18 21:56:25 2025 GMT Not After : Dec 25 21:56:25 2025 GMT Subject: CN=69447889-3571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:80:4a:f9:d4:52:18:36:bc:0a:70:45:b5:ef: b2:0d:89:a7:eb:ea:e4:72:32:06:e7:85:b0:a9:5c: 7e:bb:9e:70:59:40:4c:2e:61:4c:5c:70:ea:c3:bd: b0:5a:1e:dc:dc:96:c7:34:86:49:b6:b4:69:9d:3a: 91:fe:a5:ed:45:4a:0a:ee:6c:cf:00:f0:9e:5e:4c: bb:c3:7c:28:b0:20:72:51:dc:08:74:0d:e3:f6:a5: cb:69:77:1b:ad:f4:b2:69:a5:11:5b:ad:2c:03:82: e1:d1:5e:5a:2e:c0:c4:4d:e4:a3:ee:12:a8:48:5e: 28:34:08:f4:89:c7:b1:f4:17:ab:3c:51:2a:b9:86: 07:7c:ed:43:89:8c:66:07:88:b0:9b:b5:28:b3:02: d4:78:97:a2:59:38:6b:30:32:5c:6d:4c:7d:7c:a6: 94:6b:2f:b5:a2:27:cc:02:b2:d4:ce:61:97:54:31: d5:59:25:f4:de:f7:e9:ad:cb:75:b4:61:b9:b4:ba: de:77:01:53:03:8c:56:7d:e3:25:b6:d9:0f:01:91: ab:71:7a:c0:85:47:93:46:e8:41:51:96:e2:b0:2d: 16:82:cc:71:a2:60:79:40:0d:ed:bd:fd:d8:9e:9f: c6:2d:86:1d:db:fb:f5:c3:a0:51:a4:ff:50:5e:9b: a1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3A:A1:94:B6:E6:E8:F4:77:FD:99:B5:18:69:9D:97:83:FF:01:6F X509v3 Authority Key Identifier: keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:94:4b:2b:40:d8:7c:1a:30:29:9f:ef:6a:8f:51:7b:7f:ba: 0a:75:16:69:ce:da:c8:70:b9:43:e4:60:11:02:9c:cb:ea:69: 05:f7:0d:c0:fc:5b:1c:83:b0:38:0a:94:03:38:df:8c:66:4b: 12:2b:03:5c:82:00:e1:19:72:b7:98:01:e9:a5:89:eb:9e:35: bc:b7:f5:c3:2b:0d:53:39:4b:d2:8f:d6:4e:db:a7:fb:47:2e: c6:1b:14:6f:6e:64:c8:0e:87:2f:d8:17:37:d6:18:f9:02:4a: b9:e2:df:97:f6:ae:2b:74:90:95:a1:40:bc:06:d6:f4:00:8e: e3:0e:78:c9:61:28:2e:eb:aa:b9:45:5b:c0:b9:04:97:e6:1c: 5e:0b:d3:74:cd:69:9b:95:af:64:da:e9:95:93:6a:02:d1:8c: b0:bd:0d:54:32:cb:6a:74:4f:04:0e:ae:e4:f5:14:8c:12:77: 88:9a:fa:99:20:83:cb:4f:54:29:19:70:8f:d9:a2:48:9d:ca: 75:2a:a9:d0:b7:a1:df:78:2b:5e:db:1a:60:9e:dc:22:54:b5: 59:d3:3d:ff:ff:88:fd:92:70:9e:45:7b:20:4a:0e:4e:6c:9b: 80:08:b0:3b:88:1a:42:fb:b3:a3:08:ec:f9:17:6d:00:e3:c3: b1:6a:d5:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC MUQ1ODgzNjkwHhcNMjUxMjE4MjE1NjI1WhcNMjUxMjI1MjE1NjI1WjAYMRYwFAYD VQQDDA02OTQ0Nzg4OS0zNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmoBK+dRSGDa8CnBFte+yDYmn6+rkcjIG54WwqVx+u55wWUBMLmFMXHDqw72w Wh7c3JbHNIZJtrRpnTqR/qXtRUoK7mzPAPCeXky7w3wosCByUdwIdA3j9qXLaXcb rfSyaaURW60sA4Lh0V5aLsDETeSj7hKoSF4oNAj0icex9BerPFEquYYHfO1DiYxm B4iwm7UoswLUeJeiWThrMDJcbUx9fKaUay+1oifMArLUzmGXVDHVWSX03vfprct1 tGG5tLredwFTA4xWfeMlttkPAZGrcXrAhUeTRuhBUZbisC0WgsxxomB5QA3tvf3Y np/GLYYd2/v1w6BRpP9QXpuhPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs6oZS2 5uj0d/2ZtRhpnZeD/wFvMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2 MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O OGJBQXBEMGZpUy14MVlnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmlEsrQNh8GjApn+9qj1F7f7oKdRZpztrIcLlD5GARApzL6mkF9w3A /Fscg7A4CpQDON+MZksSKwNcggDhGXK3mAHppYnrnjW8t/XDKw1TOUvSj9ZO26f7 Ry7GGxRvbmTIDocv2Bc31hj5Akq54t+X9q4rdJCVoUC8Btb0AI7jDnjJYSgu66q5 RVvAuQSX5hxeC9N0zWmbla9k2umVk2oC0YywvQ1UMstqdE8EDq7k9RSMEneImvqZ IIPLT1QpGXCP2aJIncp1KqnQt6HfeCte2xpgntwiVLVZ0z3//4j9knCeRXsgSg5O bJuACLA7iBpC+7OjCOz5F20A48OxatXr -----END CERTIFICATE-----Generated at Fri Dec 19 20:32:01 2025 by rpki-client