This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft File: D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft (raw, json) Hash identifier: JOg/cV1RJeSreZi5cQ8yDE/+9F5NnsH0Dt87EM94Sb8= Subject key identifier: 31:D9:3E:D2:AC:18:09:CE:22:95:08:8B:0B:6E:43:FF:C6:30:03:66 Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 Certificate issuer: /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft Manifest number: 10 Signing time: Fri 19 Dec 2025 06:51:01 +0000 Manifest this update: Fri 19 Dec 2025 06:51:00 +0000 Manifest next update: Fri 26 Dec 2025 06:51:00 +0000 Files and hashes: 1: D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl (hash: LSwYrvmJPYRjkapgKbMNNFrfl/Qgt3Gq4PwHZ+V4tnc=) 2: 970D44E2C54F11F0A154DD09C4F9AE02.roa (hash: o7zQq18IhpXsDy9Xt660Zyl7qDNpUt6Y0sraKZYBzJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Validity Not Before: Dec 19 06:51:00 2025 GMT Not After : Dec 26 06:51:00 2025 GMT Subject: CN=6944f5d5-b873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4e:06:0f:dd:82:29:03:2b:e1:c4:f9:a6:8b: 16:18:d7:df:5c:9b:8f:17:c1:d6:33:f7:d7:c2:1c: 57:84:81:86:92:51:16:9f:fa:69:e6:92:75:9e:44: a7:ab:cd:60:91:77:98:cf:b9:be:4d:fa:16:38:00: 43:ea:4f:99:85:ef:bb:a1:9a:bd:42:4b:6f:11:7f: 44:92:0f:5f:6e:ec:d4:24:28:bd:a8:c0:9c:51:38: 0a:70:33:ee:6f:4c:12:01:4c:89:a8:ab:75:39:d8: f4:b2:c1:5c:c3:e7:2c:7d:03:1d:fd:7b:e4:31:4f: 82:32:e2:ba:f2:9d:dc:93:e6:7c:73:e2:4e:69:44: 91:32:4d:d5:ca:fe:98:3b:3b:01:af:5c:72:f7:53: d6:2d:c6:f7:cb:e4:0f:00:0b:e5:a3:f3:51:ae:e7: 1f:cd:35:05:ff:be:c2:97:81:23:0f:5a:bc:93:8e: 24:16:25:46:a1:47:1f:6c:c0:d7:5d:02:dc:66:ec: 96:06:a5:9a:8d:dc:a9:97:34:b8:14:61:f1:55:00: 19:76:61:7a:2f:99:35:73:ba:32:5f:43:ce:1e:f6: 41:1e:0c:82:b4:7c:ed:e0:d8:10:ea:17:b1:e9:24: 0b:8e:73:54:d1:41:87:09:78:a4:f2:b2:73:d9:50: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D9:3E:D2:AC:18:09:CE:22:95:08:8B:0B:6E:43:FF:C6:30:03:66 X509v3 Authority Key Identifier: keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:aa:7a:c5:31:ca:a7:72:cd:e3:e6:1b:bf:34:51:4a:04:3e: 9a:5c:e6:c4:03:d4:4e:bd:40:02:de:c0:c8:7c:ae:ca:5c:a8: a6:8a:28:97:12:2f:71:51:ac:70:8c:37:d9:f1:b6:1e:3d:4a: b8:67:f5:83:3f:9c:6b:e0:d4:01:2a:77:eb:2d:b1:ad:f3:63: 5f:7a:10:0d:1c:6c:a5:4c:34:23:64:ab:c1:41:49:b8:f1:d6: 92:8e:92:e0:2c:cd:a5:47:dc:20:1a:75:a7:a5:d5:e1:2d:21: fa:cb:87:b8:85:3d:61:98:4e:51:b9:bb:71:06:c3:67:59:23: 23:01:eb:0d:94:39:91:35:c6:ac:79:00:05:2c:63:1a:ce:1b: ee:b2:2a:f4:e4:49:4a:d4:6f:97:d0:87:77:c9:89:f5:f7:10: 3d:d1:7c:40:7e:f7:34:a0:df:03:8f:d1:39:d2:0a:6d:f3:b7: 0c:a8:17:f7:16:da:3b:06:4f:8f:65:a3:fa:2f:20:c1:0d:08: fa:d6:08:ba:28:9a:71:17:5a:28:9d:ef:fb:db:dd:ea:59:61: 28:8a:60:a8:27:b2:2c:25:34:36:30:3b:28:e2:84:ee:ac:dd: 10:41:f2:3a:b4:aa:a5:41:d2:ff:1a:ae:80:0f:54:a5:e9:20: 3c:2b:a1:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzA2RjExMC8GA1UEBRMoMEY1MzIwOTZFN0Y1OERFNDAxRjI2NTA3NkRFRkI1Qzgy RTcxRjNFMjAeFw0yNTEyMTkwNjUxMDBaFw0yNTEyMjYwNjUxMDBaMBgxFjAUBgNV BAMMDTY5NDRmNWQ1LWI4NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbTgYP3YIpAyvhxPmmixYY199cm48XwdYz99fCHFeEgYaSURaf+mnmknWeRKer zWCRd5jPub5N+hY4AEPqT5mF77uhmr1CS28Rf0SSD19u7NQkKL2owJxROApwM+5v TBIBTImoq3U52PSywVzD5yx9Ax39e+QxT4Iy4rryndyT5nxz4k5pRJEyTdXK/pg7 OwGvXHL3U9YtxvfL5A8AC+Wj81Gu5x/NNQX/vsKXgSMPWryTjiQWJUahRx9swNdd Atxm7JYGpZqN3KmXNLgUYfFVABl2YXovmTVzujJfQ84e9kEeDIK0fO3g2BDqF7Hp JAuOc1TRQYcJeKTysnPZUMc9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMdk+0qwY Cc4ilQiLC25D/8YwA2YwHwYDVR0jBBgwFoAUD1Mgluf1jeQB8mUHbe+1yC5x8+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzMDZGLzYxQzI2OEQ2QzU0 RTExRjA4ODU4NEY4NkM0RjlBRTAyL0QxTWdsdWYxamVRQjhtVUhiZS0xeUM1eDgt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFNZ2x1ZjFqZVFCOG1VSGJlLTF5QzV4OC1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz MDZGLzYxQzI2OEQ2QzU0RTExRjA4ODU4NEY4NkM0RjlBRTAyL0QxTWdsdWYxamVR QjhtVUhiZS0xeUM1eDgtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIGqesUxyqdyzePmG780UUoEPppc5sQD1E69QALewMh8rspcqKaKKJcS L3FRrHCMN9nxth49Srhn9YM/nGvg1AEqd+stsa3zY196EA0cbKVMNCNkq8FBSbjx 1pKOkuAszaVH3CAadael1eEtIfrLh7iFPWGYTlG5u3EGw2dZIyMB6w2UOZE1xqx5 AAUsYxrOG+6yKvTkSUrUb5fQh3fJifX3ED3RfEB+9zSg3wOP0TnSCm3ztwyoF/cW 2jsGT49lo/ovIMENCPrWCLoomnEXWiid7/vb3epZYSiKYKgnsiwlNDYwOyjihO6s 3RBB8jq0qqVB0v8aroAPVKXpIDwrocQ= -----END CERTIFICATE-----Generated at Fri Dec 19 19:48:48 2025 by rpki-client