This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: pTIQ5mEOJFX4W+UV3FM4aKRecn+spR+LWn0wTnWUw18= Subject key identifier: D1:49:3E:15:02:2B:E2:47:65:BD:10:6D:B6:53:95:1B:F1:F7:2F:85 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 07C2 Signing time: Tue 30 Dec 2025 20:41:29 +0000 Manifest this update: Tue 30 Dec 2025 20:41:28 +0000 Manifest next update: Tue 06 Jan 2026 20:41:28 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: i15wtIldpGtIO1ovXlPbv0TFRDmbOp1/RVx6yh5HHg8=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: dCRsUxTYQfbVmR8r076QUZHUhBb4kgZRsGIm5GyZ/CI=) 3: FAA525207A4411EB804B7430C4F9AE02.roa (hash: BhSHDdRG8/0Zm5EF7nED+w+EERbxSAwCaFSs3AEh7LU=) 4: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: lZu5pdaUasH8/fasxCeSUbAtaYZZr63nIN4QhjX8ELY=) 5: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: KN4CWPFNBhIIjqsGJhbyUP98ulbl0SGTkd2fLpRZk+I=) 6: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: D4Cs5JY9tNHVDlAQoZ8zXAojWJ56gds9kQSJUSLXkfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 20:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Dec 30 20:41:28 2025 GMT Not After : Jan 6 20:41:28 2026 GMT Subject: CN=695438f9-24e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:43:6a:ee:d1:b3:50:10:45:d3:0a:20:40:09: 72:13:72:db:da:82:04:06:0c:b8:f2:47:2f:a1:53: 66:64:45:88:1d:24:14:18:37:03:0f:80:40:73:80: 8d:64:cd:d4:97:7a:04:87:2a:84:2b:8a:19:54:84: 9c:02:30:65:54:4e:50:a6:f9:8e:23:8b:10:4e:ff: ba:c9:28:e1:9b:f5:db:6c:61:49:29:9e:25:d1:15: e3:a9:52:2c:e7:80:60:82:7f:bf:e1:1e:87:cc:48: cd:b1:09:bb:49:53:c9:f2:85:42:ad:dd:6f:a1:7b: 71:94:ce:bf:7a:e0:c6:85:73:14:60:4c:5c:20:77: 75:33:eb:c2:8a:22:e7:46:ab:5b:2a:b9:47:e7:3d: a9:30:bd:23:a5:a0:e0:c3:ea:60:a9:5d:2d:41:ab: 88:ec:de:f7:b9:29:57:48:33:0d:e9:c3:69:2e:c8: 7d:7d:e1:0d:46:a8:2d:20:1d:b2:f1:89:2a:4a:07: 4e:a6:35:79:9f:c7:85:a8:65:06:c3:1e:59:85:20: 11:41:72:8c:2a:e3:05:3d:a2:24:91:08:a7:bc:05: c8:d9:e1:12:2e:46:d7:d2:ab:80:18:0b:9b:51:08: f5:74:f9:f9:d4:2d:f5:7d:25:4f:b5:48:18:b7:b5: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:49:3E:15:02:2B:E2:47:65:BD:10:6D:B6:53:95:1B:F1:F7:2F:85 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:75:fe:a6:3a:80:6f:1e:f3:a7:95:d7:62:23:50:cc:a4:d0: a7:1a:48:24:6a:2d:43:85:5b:57:ca:dc:fb:3e:5d:2f:a4:02: 83:3f:45:a0:e0:ff:c3:e5:a6:a5:f8:29:e3:97:dd:a3:0a:8b: 3a:9b:80:a2:17:d1:1a:63:14:09:da:f5:51:96:a4:77:fb:4e: ad:d8:cf:b2:ca:28:d4:b3:47:e5:58:9e:11:67:12:f5:54:1a: a1:c1:4c:96:df:6a:27:1f:57:e9:c0:89:1b:9d:db:2b:43:73: 39:3c:94:10:13:f2:fa:70:b0:7d:8b:34:0e:1c:a6:a5:5a:5e: 45:74:cb:56:8d:0c:a2:3c:60:f1:8b:c5:df:5b:59:1c:e6:ba: e3:9b:e3:07:89:3b:49:38:ad:e5:ca:54:50:4f:19:f0:c9:cf: 05:d9:79:8a:c3:69:0e:e2:da:e2:3e:46:64:44:8b:7a:4e:4d: 48:8c:cf:cb:8c:57:6b:f9:ad:6b:42:13:0c:fd:f3:90:02:c8: 8d:fc:a9:25:77:0e:b5:d1:ad:e8:9e:0e:02:aa:6e:8a:91:15: e1:4f:b3:a0:47:1a:b9:5d:a8:e6:2a:16:05:af:65:2f:3c:a2: 8e:a3:37:80:80:29:8d:ef:d6:b0:a9:50:42:b4:fd:d8:ef:fb: 7e:d5:0b:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjUxMjMwMjA0MTI4WhcNMjYwMTA2MjA0MTI4WjAYMRYwFAYD VQQDDA02OTU0MzhmOS0yNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkNq7tGzUBBF0wogQAlyE3Lb2oIEBgy48kcvoVNmZEWIHSQUGDcDD4BAc4CN ZM3Ul3oEhyqEK4oZVIScAjBlVE5QpvmOI4sQTv+6ySjhm/XbbGFJKZ4l0RXjqVIs 54Bggn+/4R6HzEjNsQm7SVPJ8oVCrd1voXtxlM6/euDGhXMUYExcIHd1M+vCiiLn RqtbKrlH5z2pML0jpaDgw+pgqV0tQauI7N73uSlXSDMN6cNpLsh9feENRqgtIB2y 8YkqSgdOpjV5n8eFqGUGwx5ZhSARQXKMKuMFPaIkkQinvAXI2eESLkbX0quAGAub UQj1dPn51C31fSVPtUgYt7URkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFJPhUC K+JHZb0QbbZTlRvx9y+FMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChdf6mOoBvHvOnlddiI1DMpNCnGkgkai1DhVtXytz7Pl0vpAKDP0Wg 4P/D5aal+Cnjl92jCos6m4CiF9EaYxQJ2vVRlqR3+06t2M+yyijUs0flWJ4RZxL1 VBqhwUyW32onH1fpwIkbndsrQ3M5PJQQE/L6cLB9izQOHKalWl5FdMtWjQyiPGDx i8XfW1kc5rrjm+MHiTtJOK3lylRQTxnwyc8F2XmKw2kO4triPkZkRIt6Tk1IjM/L jFdr+a1rQhMM/fOQAsiN/Kkldw610a3ong4Cqm6KkRXhT7OgRxq5XajmKhYFr2Uv PKKOozeAgCmN79awqVBCtP3Y7/t+1QvP -----END CERTIFICATE-----Generated at Wed Dec 31 19:34:01 2025 by rpki-client