This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft File: fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json) Hash identifier: QmVj08P6Th5lXkmMP7pmqoOnr8BCDHjxsQwxxUkG0mc= Subject key identifier: D6:EC:8A:14:8B:90:55:B8:E7:61:D4:4F:E0:D7:08:97:DD:F8:C9:2D Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft Manifest number: 0225 Signing time: Fri 19 Dec 2025 01:18:51 +0000 Manifest this update: Fri 19 Dec 2025 01:18:51 +0000 Manifest next update: Fri 26 Dec 2025 01:18:51 +0000 Files and hashes: 1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: ulgVB6K5vVyqUmsIfHC9jQVBWbiU9+m2si1xrAnM4IY=) 2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: oBuS5xinsgEEPRO4L87WKgJisQvCYTMja8uyPjXphjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: Dec 19 01:18:51 2025 GMT Not After : Dec 26 01:18:51 2025 GMT Subject: CN=6944a7fb-7bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:ca:e8:81:bd:ef:99:69:23:7f:3b:22:b2: 21:38:a0:d8:38:e8:e3:1a:68:d8:11:24:06:f6:53: 70:44:09:00:ef:42:d8:c3:a1:43:32:4a:66:d0:98: b8:7c:39:43:ef:d1:52:df:19:9e:15:2a:61:ee:ce: 35:73:ab:c5:2e:5d:5f:73:20:b4:64:8e:52:59:fb: 74:2f:2f:18:a4:28:2d:eb:bd:ca:c5:9a:32:ab:c6: e7:c7:f4:db:0c:26:f6:c6:12:5e:f4:6b:3b:be:59: 88:c6:16:86:8f:31:b6:12:d4:e5:20:f1:31:40:f3: 3c:08:30:c5:8b:c9:4d:45:6e:e6:f3:76:15:66:36: a0:e1:0a:09:38:31:f7:46:8e:ca:ac:aa:a4:42:ba: c5:8e:a8:c0:a7:7f:fb:c4:a0:e6:33:73:81:36:b0: 51:e3:e0:3c:46:21:2d:e5:a6:9e:18:fc:0f:59:1c: 91:70:fb:53:3c:ab:71:d1:86:a1:18:46:5c:f9:08: 83:92:64:9b:a3:f7:b3:d2:03:8e:3e:29:6c:24:3e: 90:50:03:f0:1a:9a:1b:5f:d9:43:6e:ab:16:cb:55: 8d:d4:5b:31:07:2a:7a:b4:50:97:6f:b4:ff:f3:21: d2:ea:22:97:c0:ba:a4:cb:ec:0f:9e:32:4b:d5:95: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EC:8A:14:8B:90:55:B8:E7:61:D4:4F:E0:D7:08:97:DD:F8:C9:2D X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ab:8c:74:c2:60:88:4f:82:51:b2:7d:f1:98:6e:f6:74:9f: 46:77:d2:05:62:e1:30:29:d5:fa:25:a1:76:3f:92:9a:cb:50: 6a:e4:e6:c1:7a:f7:27:0f:bc:4d:85:ce:3d:83:eb:38:7b:2b: f2:f8:fc:17:3c:ba:d5:0a:7e:df:e9:f1:00:4e:d2:a4:47:34: b1:fc:18:9b:08:d6:81:87:93:f6:8e:52:c5:6c:ea:76:b4:d9: f1:37:7b:70:24:4f:d2:d9:a6:3b:65:c1:59:30:fc:d2:63:7e: 0f:89:bf:bb:c2:ce:5f:fd:02:63:8f:03:06:02:29:84:3a:b2: 67:7b:64:b1:0a:ad:4a:6c:98:ea:24:60:ca:c4:88:1c:aa:f4: 68:40:58:59:19:c2:73:fd:87:2f:0f:9c:4a:1f:ad:b6:c0:a5: 06:a1:cb:08:cb:ba:42:ff:05:92:6a:a3:92:92:3f:8a:b1:7d: 89:2f:55:af:e9:ea:a8:60:13:a9:6c:71:2c:0a:a2:bb:25:57: 6b:d2:42:7e:17:d4:7c:38:88:65:a1:b7:1e:87:8d:c5:63:11: 81:b8:1b:bc:a4:b3:7e:62:e2:23:62:01:94:89:0e:f4:8a:5a: ed:a5:37:ca:31:d7:0a:48:c4:99:7b:58:5d:0f:09:97:f0:2f: ee:d9:d5:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjUxMjE5MDExODUxWhcNMjUxMjI2MDExODUxWjAYMRYwFAYD VQQDDA02OTQ0YTdmYi03YmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2DK6IG975lpI387IrIhOKDYOOjjGmjYESQG9lNwRAkA70LYw6FDMkpm0Ji4 fDlD79FS3xmeFSph7s41c6vFLl1fcyC0ZI5SWft0Ly8YpCgt673KxZoyq8bnx/Tb DCb2xhJe9Gs7vlmIxhaGjzG2EtTlIPExQPM8CDDFi8lNRW7m83YVZjag4QoJODH3 Ro7KrKqkQrrFjqjAp3/7xKDmM3OBNrBR4+A8RiEt5aaeGPwPWRyRcPtTPKtx0Yah GEZc+QiDkmSbo/ez0gOOPilsJD6QUAPwGpobX9lDbqsWy1WN1FsxByp6tFCXb7T/ 8yHS6iKXwLqky+wPnjJL1ZVQKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbsihSL kFW452HUT+DXCJfd+MktMB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZDNC85RDRCMTA2ODhGQ0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4Mjlu NU1hZ1RySTVBWnJYY3J5eW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVq4x0wmCIT4JRsn3xmG72dJ9Gd9IFYuEwKdX6JaF2P5Kay1Bq5ObB evcnD7xNhc49g+s4eyvy+PwXPLrVCn7f6fEATtKkRzSx/BibCNaBh5P2jlLFbOp2 tNnxN3twJE/S2aY7ZcFZMPzSY34Pib+7ws5f/QJjjwMGAimEOrJne2SxCq1KbJjq JGDKxIgcqvRoQFhZGcJz/YcvD5xKH622wKUGocsIy7pC/wWSaqOSkj+KsX2JL1Wv 6eqoYBOpbHEsCqK7JVdr0kJ+F9R8OIhlobceh43FYxGBuBu8pLN+YuIjYgGUiQ70 ilrtpTfKMdcKSMSZe1hdDwmX8C/u2dXS -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:39 2025 by rpki-client