This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: q1FRfS0Ay7JJvmJ/fNA5mew0XT5XyieMyF1AdNh4Bhg= Subject key identifier: 9E:14:E0:FF:1C:29:AB:26:A1:A3:BA:A9:BF:5A:71:DD:A4:81:6F:2E Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: 51 Signing time: Sun 21 Dec 2025 06:23:02 +0000 Manifest this update: Sun 21 Dec 2025 06:23:02 +0000 Manifest next update: Sun 28 Dec 2025 06:23:02 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: 4rqi73JdprnaEBRUlzt4u0LqWGTPPHahQppUN/vaFQg=) 2: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: 9Zb0Av6EsVPUvpAr5Wo6+2kZEuOjOMIuyYuVnzvL3ro=) 3: 44C226F2A5B111F095806166C4F9AE02.roa (hash: Z5IARCPdVB3zQ2o9DruEtHimglf8XZQg6KsX+TluqNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Dec 21 06:23:02 2025 GMT Not After : Dec 28 06:23:02 2025 GMT Subject: CN=69479246-5eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:1c:96:10:72:b6:c5:58:63:1f:5c:b3:6c: df:b8:47:f1:fe:8c:86:27:3a:2e:c9:8f:b7:77:5e: e3:cd:f9:43:03:83:87:cf:ab:b7:ae:bf:05:cc:68: 24:97:10:bb:15:67:7d:42:a7:23:cf:3e:ad:b7:1c: 36:02:65:9a:21:80:01:ad:7b:7f:18:cf:27:6c:33: 21:63:6b:23:1d:68:4e:a3:b6:75:f0:2b:28:ce:6b: f5:51:1c:e2:40:05:6a:bc:0d:60:d4:cd:89:e7:d4: 19:b7:42:fa:52:db:0e:9e:91:de:93:22:e3:98:b7: 6e:66:cc:fa:bb:10:2a:ba:6f:97:21:3a:6e:1e:28: 6a:0e:2b:77:9d:3c:4b:46:fe:3d:4d:7c:59:d5:a1: f7:4e:17:af:8f:31:a0:16:11:e3:5d:6f:a0:f7:7c: 06:e5:60:a4:8c:07:09:cf:9a:34:eb:48:5c:7b:58: 81:ed:af:67:ac:11:95:3d:d0:5a:db:6b:1b:4a:a9: 87:a8:e5:64:6f:5b:3c:60:37:f6:e8:45:65:30:14: a8:24:43:32:7d:06:e0:3e:ea:92:10:82:8f:65:90: 6f:57:8a:13:a1:95:8f:33:9d:5f:af:e6:5c:d2:42: 8d:55:80:3b:e6:91:1f:3c:3c:cb:1d:45:93:35:9a: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:14:E0:FF:1C:29:AB:26:A1:A3:BA:A9:BF:5A:71:DD:A4:81:6F:2E X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d6:d3:fe:15:aa:98:5a:5b:4f:f7:48:9c:11:9d:e9:43:db: 32:d9:13:f6:11:dc:59:6a:a6:eb:df:89:2c:9e:b5:4a:1b:4f: 08:90:65:dc:10:fc:8b:cb:82:ad:bd:d4:f3:32:ed:59:00:c4: 0c:4b:15:2e:21:6e:83:38:91:c2:dd:9c:20:62:89:e4:64:5a: 4f:56:23:14:07:f5:85:06:07:3a:63:6d:ef:56:e3:0d:18:5f: 76:55:ba:40:60:29:25:f9:bf:22:24:ac:ee:2f:93:8d:ff:42: 3f:b0:de:ab:03:bd:dd:88:38:f2:9e:45:9b:26:9f:99:0c:e2: d9:ef:5c:79:5f:d0:2b:c0:35:77:b6:0d:f7:a0:96:c4:cb:83: 23:ca:e6:38:f2:ec:bc:93:ea:5d:36:34:4d:57:77:89:e1:4f: 2e:d7:00:24:5b:9a:03:a7:ac:97:ae:67:1e:2d:c4:13:de:53: 02:56:ae:50:45:fa:31:45:f0:bf:60:d3:71:76:f8:91:a3:d5: 4f:b6:ec:4e:37:0a:e5:c5:25:81:3a:ae:ac:32:61:88:5f:28: 2e:90:7f:13:1a:a6:5e:7a:a7:d4:94:26:6f:e5:9b:c8:62:01: 77:5a:62:73:33:14:79:f6:d2:b1:32:58:cf:1c:96:51:e1:40: 8b:3d:6b:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzI0NzExMC8GA1UEBRMoMEREQUJCRjMxRUVDNjg3NjZFRjY2OUFGOTczNTI0MEMz ODk5MzQ1OTAeFw0yNTEyMjEwNjIzMDJaFw0yNTEyMjgwNjIzMDJaMBgxFjAUBgNV BAMMDTY5NDc5MjQ2LTVlYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtaByWEHK2xVhjH1yzbN+4R/H+jIYnOi7Jj7d3XuPN+UMDg4fPq7euvwXMaCSX ELsVZ31CpyPPPq23HDYCZZohgAGte38YzydsMyFjayMdaE6jtnXwKyjOa/VRHOJA BWq8DWDUzYnn1Bm3QvpS2w6ekd6TIuOYt25mzPq7ECq6b5chOm4eKGoOK3edPEtG /j1NfFnVofdOF6+PMaAWEeNdb6D3fAblYKSMBwnPmjTrSFx7WIHtr2esEZU90Frb axtKqYeo5WRvWzxgN/boRWUwFKgkQzJ9BuA+6pIQgo9lkG9XihOhlY8znV+v5lzS Qo1VgDvmkR88PMsdRZM1mrUDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnhTg/xwp qyaho7qpv1px3aSBby4wHwYDVR0jBBgwFoAUDdq78x7saHZu9mmvlzUkDDiZNFkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMjQ3LzMyMDQ0QkZFNzFF RTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5G ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGRxNzh4N3NhSFp1OW1tdmx6VWtERGlaTkZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz MjQ3LzMyMDQ0QkZFNzFFRTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUha dTltbXZselVrRERpWk5Gay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACPW0/4VqphaW0/3SJwRnelD2zLZE/YR3FlqpuvfiSyetUobTwiQZdwQ /IvLgq291PMy7VkAxAxLFS4hboM4kcLdnCBiieRkWk9WIxQH9YUGBzpjbe9W4w0Y X3ZVukBgKSX5vyIkrO4vk43/Qj+w3qsDvd2IOPKeRZsmn5kM4tnvXHlf0CvANXe2 DfeglsTLgyPK5jjy7LyT6l02NE1Xd4nhTy7XACRbmgOnrJeuZx4txBPeUwJWrlBF +jFF8L9g03F2+JGj1U+27E43CuXFJYE6rqwyYYhfKC6QfxMapl56p9SUJm/lm8hi AXdaYnMzFHn20rEyWM8cllHhQIs9a64= -----END CERTIFICATE-----Generated at Sun Dec 21 10:20:24 2025 by rpki-client