This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft File: dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json) Hash identifier: edagqvxjG2lo0dyhh4Wv3ttQLJ+TQXTB/mE47ezDaKs= Subject key identifier: 79:B3:28:13:D0:E1:6B:21:49:A7:B1:97:1A:AA:E5:92:E6:C5:96:D0 Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft Manifest number: 06C5 Signing time: Thu 18 Dec 2025 21:43:12 +0000 Manifest this update: Thu 18 Dec 2025 21:43:11 +0000 Manifest next update: Thu 25 Dec 2025 21:43:11 +0000 Files and hashes: 1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: 3Ebm+ZgG7QO92eToJ7a1kz2CIoR438bFbLFFb98uLIM=) 2: 8158A3A6943211F0843A1075C4F9AE02.roa (hash: 0lN/Ng3NrJ/5kCvRcvb8gFvnW3r3YxhFiq3R/rO55bM=) 3: 4FE5F30290D411F0B8A56049C4F9AE02.roa (hash: tijl1a/Co2BtT46BKoUW7AiBvHenjrU1pgwCiF84Uq0=) 4: 8EFF79AA9C9B11F09188945AC4F9AE02.roa (hash: vjiqIdfdvKZRB8r/txhRVqd+ixYcog2/ptWnbBhNw5A=) 5: 3CEDCE18900D11F0BD65E474C4F9AE02.roa (hash: UlU8FGyIe5T0I0XXCW9XvGGScSrSWkYOAvIkrPLe+o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Validity Not Before: Dec 18 21:43:11 2025 GMT Not After : Dec 25 21:43:11 2025 GMT Subject: CN=69447570-bcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:50:88:87:4e:0c:aa:6d:91:fa:4f:49:0d: c4:28:82:5b:c7:16:35:42:7c:ac:11:a2:c1:4e:8e: 0c:f5:ba:6b:2d:c9:21:ad:0b:27:8b:78:ae:93:dc: d3:ec:5e:76:77:4c:6d:20:9a:d9:86:28:d3:5b:c0: 0f:7d:ec:8e:14:08:6d:0b:a6:21:2a:5f:6f:2f:a0: 53:58:ce:ce:b8:f5:41:06:bd:4d:32:ba:0f:da:0f: 6c:cc:3d:d3:c6:3c:cb:31:14:20:1f:c0:90:a6:a2: 57:b0:2a:5d:21:47:a4:a8:42:80:ce:f8:7a:c8:05: c3:0e:bc:18:e8:1e:a8:56:b8:a5:02:92:10:8a:84: 49:8f:7a:e6:e3:a7:9d:d0:b2:9f:24:b9:b4:ce:c0: aa:6e:e1:eb:f5:a0:0d:c4:a4:fd:2e:06:8c:78:4d: dc:29:43:e3:be:c9:6b:bf:b4:44:fd:8b:ac:1e:cc: 37:bf:4b:d5:12:7c:7b:a3:cd:3d:02:a9:74:7d:3d: 30:98:25:18:98:3c:ef:9b:2b:a7:01:58:be:95:02: 67:a1:0c:69:b8:e8:21:b2:6d:04:a6:82:31:ee:63: 08:6d:78:55:0a:ea:4c:62:d2:c9:91:b7:c3:ae:78: b1:67:77:37:6e:2e:b3:ea:ba:d6:cf:48:c8:ef:54: 57:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B3:28:13:D0:E1:6B:21:49:A7:B1:97:1A:AA:E5:92:E6:C5:96:D0 X509v3 Authority Key Identifier: keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3b:38:33:04:be:94:5a:6f:a1:13:e8:b4:d6:02:ba:de:2d: b6:87:3b:ec:15:dd:03:1f:2b:03:cf:31:fa:84:9c:67:96:28: dd:1c:08:70:04:54:2c:de:fc:33:59:43:62:ec:71:33:93:91: 7b:04:50:31:55:bc:d9:80:c5:2d:22:0b:cd:6c:17:04:b3:a1: b5:4d:7d:03:ef:24:f4:74:b2:0d:9a:e9:ca:b5:dc:ea:a4:0b: bd:bf:fe:c1:f0:3f:66:64:45:2b:23:e3:8b:e6:12:65:8b:48: 0b:2b:70:92:22:d6:04:3d:c5:3f:0b:9e:16:a3:3e:cd:38:6b: 51:89:0c:50:f1:44:26:15:5d:02:0d:c1:54:66:72:18:10:a5: d2:94:3b:c3:e0:b0:32:79:ee:ec:6d:d8:a7:ff:e5:e4:44:82: 9f:ff:ea:1d:46:9d:cc:64:8a:82:6e:a8:ed:c4:14:55:4a:f5: ba:c0:b1:e3:0b:09:56:28:cb:5d:07:3d:a5:ee:40:e6:31:ce: 4d:55:a0:db:87:88:fe:0e:61:87:97:2f:fd:0c:63:bd:43:7d: 69:c8:33:b1:c5:e2:cc:8e:00:36:a1:3f:32:e1:dd:43:cd:df: f2:2c:28:c6:6d:b4:a5:ff:8c:fe:52:6a:54:29:2c:ae:32:7c: a5:14:ec:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB RjA5Rjg0MTEwHhcNMjUxMjE4MjE0MzExWhcNMjUxMjI1MjE0MzExWjAYMRYwFAYD VQQDDA02OTQ0NzU3MC1iY2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgJQiIdODKptkfpPSQ3EKIJbxxY1QnysEaLBTo4M9bprLckhrQsni3iuk9zT 7F52d0xtIJrZhijTW8APfeyOFAhtC6YhKl9vL6BTWM7OuPVBBr1NMroP2g9szD3T xjzLMRQgH8CQpqJXsCpdIUekqEKAzvh6yAXDDrwY6B6oVrilApIQioRJj3rm46ed 0LKfJLm0zsCqbuHr9aANxKT9LgaMeE3cKUPjvslrv7RE/YusHsw3v0vVEnx7o809 Aql0fT0wmCUYmDzvmyunAVi+lQJnoQxpuOghsm0EpoIx7mMIbXhVCupMYtLJkbfD rnixZ3c3bi6z6rrWz0jI71RXcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmzKBPQ 4WshSaexlxqq5ZLmxZbQMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjlGOC85MkQwQkUwMjkwNjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdh a3Q0aUkyb3FXbEN2Q2ZoQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOOzgzBL6UWm+hE+i01gK63i22hzvsFd0DHysDzzH6hJxnlijdHAhw BFQs3vwzWUNi7HEzk5F7BFAxVbzZgMUtIgvNbBcEs6G1TX0D7yT0dLINmunKtdzq pAu9v/7B8D9mZEUrI+OL5hJli0gLK3CSItYEPcU/C54Woz7NOGtRiQxQ8UQmFV0C DcFUZnIYEKXSlDvD4LAyee7sbdin/+XkRIKf/+odRp3MZIqCbqjtxBRVSvW6wLHj CwlWKMtdBz2l7kDmMc5NVaDbh4j+DmGHly/9DGO9Q31pyDOxxeLMjgA2oT8y4d1D zd/yLCjGbbSl/4z+UmpUKSyuMnylFOwv -----END CERTIFICATE-----Generated at Fri Dec 19 23:56:36 2025 by rpki-client