This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json) Hash identifier: zWVowU/zrMpiwG22TFFPtNNKaVOWKRszXriboRVLQQk= Subject key identifier: 93:F3:E9:29:C1:D4:B6:22:6D:08:C3:09:0C:1D:DA:86:7D:9B:F1:1C Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1D94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft Manifest number: 1D85 Signing time: Thu 18 Dec 2025 16:01:47 +0000 Manifest this update: Thu 18 Dec 2025 16:01:47 +0000 Manifest next update: Thu 25 Dec 2025 16:01:47 +0000 Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: gw8HnEKcGCb0QFN6ThDOY398VIXffna/b+XNfkkGiLs=) 2: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: k8TIUAQe/uhiGTZr6cgQAthXD90vdh6WA7DCNugyFL0=) 3: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: KJtFM/La7mL3fu5dlcMqDcraRcAtERap2FuVwdqAgkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7572 (0x1d94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Validity Not Before: Dec 18 16:01:47 2025 GMT Not After : Dec 25 16:01:47 2025 GMT Subject: CN=6944256b-fbb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b5:fb:ea:45:57:8b:07:dd:e8:b6:cb:d8:cf: 8c:c0:07:4c:27:d6:82:35:24:05:67:bc:c1:c9:50: e8:02:7b:f1:ae:63:69:92:86:08:74:40:3d:e6:d3: e3:00:63:35:cc:8a:2a:91:ef:41:08:a2:17:3b:31: 36:de:33:bc:2a:e5:e3:03:bf:16:4f:67:59:43:4a: 02:b5:00:71:84:7b:3e:f1:89:ce:66:08:6b:f3:92: 33:3e:be:a7:42:8d:74:f2:19:e3:92:20:08:66:99: d3:de:e8:ff:85:0d:72:cd:ef:fc:e1:53:45:2b:6b: 99:67:e4:22:a8:10:25:44:16:5b:77:d8:12:85:2d: fb:70:24:99:f5:1c:fe:c1:a7:b0:88:f1:a7:cb:0d: 6e:bf:22:ca:50:58:5a:cc:db:da:5f:c6:19:2d:f1: f6:43:60:62:1b:dc:18:2c:07:34:70:a9:c4:c5:de: b1:8c:4a:95:6e:3a:df:d7:e3:39:20:e6:e1:98:be: 90:9d:65:7a:f9:fc:ec:4d:8d:32:76:09:d9:86:56: de:b8:30:e5:6c:d2:9c:de:93:9f:d9:f6:49:4a:fa: ed:20:14:53:3d:03:45:a9:c6:7e:21:c2:fa:a6:06: 7b:5e:3c:55:cc:2a:c2:bd:10:5f:65:bb:88:eb:f8: 53:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F3:E9:29:C1:D4:B6:22:6D:08:C3:09:0C:1D:DA:86:7D:9B:F1:1C X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ec:0e:e0:c7:da:84:bb:30:f5:8f:3c:d4:6b:58:ed:90:92: 57:64:45:65:d2:56:a3:8d:b0:94:b2:24:bf:b8:c9:e6:b5:34: 9b:bf:02:9c:8a:77:03:ca:ff:28:1f:ce:f5:30:4c:25:15:b3: d7:18:23:61:90:a8:a1:f1:1a:ca:67:fc:63:d8:d9:10:4f:a0: d8:74:ea:87:ed:2d:25:37:ee:25:91:f6:39:54:0d:1b:a5:9d: 05:f6:9a:c7:cc:ca:31:45:ce:aa:bb:0f:b0:fd:a8:8b:cd:86: 2f:a7:2b:cf:fb:73:2c:4b:45:b7:db:dc:57:63:cd:40:44:83: fb:45:ba:35:68:3d:de:dd:51:ce:8f:94:8b:0f:df:25:71:00: 19:e8:61:4e:fc:4d:bb:2d:2f:5f:b2:3a:7c:c3:54:00:7c:5d: 9d:d8:d0:85:67:d3:a1:5d:52:50:11:e6:41:0b:c9:54:71:eb: 17:ee:65:d6:64:22:49:95:ca:08:0d:26:09:6d:83:e5:12:0d: 62:e5:ac:9f:49:ed:7c:19:de:b2:ca:94:06:ae:9c:63:44:3b: 3f:08:10:1d:cd:0a:05:26:36:98:5d:5f:52:30:96:08:95:5b: 03:c1:56:db:13:31:30:0e:63:a5:c9:8b:9f:0c:12:fd:e9:ac: 28:0d:ea:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjUxMjE4MTYwMTQ3WhcNMjUxMjI1MTYwMTQ3WjAYMRYwFAYD VQQDDA02OTQ0MjU2Yi1mYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bX76kVXiwfd6LbL2M+MwAdMJ9aCNSQFZ7zByVDoAnvxrmNpkoYIdEA95tPj AGM1zIoqke9BCKIXOzE23jO8KuXjA78WT2dZQ0oCtQBxhHs+8YnOZghr85IzPr6n Qo108hnjkiAIZpnT3uj/hQ1yze/84VNFK2uZZ+QiqBAlRBZbd9gShS37cCSZ9Rz+ waewiPGnyw1uvyLKUFhazNvaX8YZLfH2Q2BiG9wYLAc0cKnExd6xjEqVbjrf1+M5 IObhmL6QnWV6+fzsTY0ydgnZhlbeuDDlbNKc3pOf2fZJSvrtIBRTPQNFqcZ+IcL6 pgZ7XjxVzCrCvRBfZbuI6/hTpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPz6SnB 1LYibQjDCQwd2oZ9m/EcMB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTg4Ri83ODREOTRCOEI3NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5 SHhld043Qk05TzFVSk84OGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK7A7gx9qEuzD1jzzUa1jtkJJXZEVl0lajjbCUsiS/uMnmtTSbvwKc incDyv8oH871MEwlFbPXGCNhkKih8RrKZ/xj2NkQT6DYdOqH7S0lN+4lkfY5VA0b pZ0F9prHzMoxRc6quw+w/aiLzYYvpyvP+3MsS0W329xXY81ARIP7Rbo1aD3e3VHO j5SLD98lcQAZ6GFO/E27LS9fsjp8w1QAfF2d2NCFZ9OhXVJQEeZBC8lUcesX7mXW ZCJJlcoIDSYJbYPlEg1i5ayfSe18Gd6yypQGrpxjRDs/CBAdzQoFJjaYXV9SMJYI lVsDwVbbEzEwDmOlyYufDBL96awoDepA -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:02 2025 by rpki-client