This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: prDnQwjAssjcqAXId4CfZKKhfbBU+hZD5mmNN95AACw= Subject key identifier: 4D:A7:F1:49:63:0E:4D:C0:49:29:ED:C2:AF:81:0D:4D:85:F1:2C:17 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 07BC Signing time: Thu 18 Dec 2025 20:48:47 +0000 Manifest this update: Thu 18 Dec 2025 20:48:47 +0000 Manifest next update: Thu 25 Dec 2025 20:48:47 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: J4Eb4z00yA2Ppw2n6bYCavwpcDCQ0SDOp/HKKrBxygY=) 2: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: D4Cs5JY9tNHVDlAQoZ8zXAojWJ56gds9kQSJUSLXkfU=) 3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: KN4CWPFNBhIIjqsGJhbyUP98ulbl0SGTkd2fLpRZk+I=) 4: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: lZu5pdaUasH8/fasxCeSUbAtaYZZr63nIN4QhjX8ELY=) 5: FAA525207A4411EB804B7430C4F9AE02.roa (hash: BhSHDdRG8/0Zm5EF7nED+w+EERbxSAwCaFSs3AEh7LU=) 6: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: dCRsUxTYQfbVmR8r076QUZHUhBb4kgZRsGIm5GyZ/CI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Dec 18 20:48:47 2025 GMT Not After : Dec 25 20:48:47 2025 GMT Subject: CN=694468af-b231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:f0:03:25:33:20:f9:31:10:b9:cc:e6:7f: b6:5e:98:02:a3:66:70:0c:66:5c:bf:d2:eb:46:ea: fb:a8:af:33:26:2f:5e:84:1d:b0:d6:2f:1b:c3:6b: d9:bb:9d:8d:30:62:33:90:a4:8f:33:44:85:e4:e1: 0c:82:3a:b8:18:7c:e6:f8:39:bb:9c:91:ee:57:da: 1d:7a:87:31:b1:e8:b8:aa:44:76:7c:37:1e:8d:b9: 2f:f3:3c:e5:fa:98:09:3d:cf:32:7e:f1:f8:56:72: c5:c6:ff:dc:32:cc:cf:7c:32:4a:2f:c8:cd:18:af: 9a:e9:5a:cc:3e:ca:33:c4:a8:49:15:46:e0:a0:2e: c4:d8:4d:0e:8f:af:f0:4a:1b:ac:27:3d:eb:f1:ff: ae:39:0b:20:13:3d:18:8e:fa:aa:c9:6b:7a:83:c6: bc:b4:c6:b5:7b:c3:d1:2c:66:76:a3:65:8f:c7:57: 33:f8:e0:1b:23:ee:4a:e1:4c:e1:25:e0:f8:b3:2e: b8:89:dd:a6:11:da:f3:e6:51:8d:d8:b2:75:5c:8d: 44:51:c8:18:41:30:0f:ef:76:be:cf:db:2c:4f:7b: c5:bf:42:9f:13:7f:03:c8:18:be:08:dc:d9:a2:45: 65:a3:be:18:03:97:c3:5d:8d:4b:58:4e:26:1b:f0: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A7:F1:49:63:0E:4D:C0:49:29:ED:C2:AF:81:0D:4D:85:F1:2C:17 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:60:a3:4f:82:d3:6f:60:f4:6c:ea:1a:25:9d:9c:37:9a:8d: 98:4f:89:ed:66:bb:e5:54:c1:be:ce:bc:59:b3:1e:9f:4b:88: c0:0c:92:7d:b0:ab:bc:11:4d:a9:3c:0c:3a:35:12:b1:d5:39: c4:37:5a:8f:12:c2:02:2b:2a:63:eb:d9:ba:22:3d:3b:0c:22: 92:3a:8f:f8:87:27:2e:e9:e8:78:70:39:27:00:46:ae:09:15: 6a:62:86:dc:d1:b7:1d:26:f8:26:af:d2:7b:ab:a0:fd:de:92: 6d:fc:74:ea:e7:d0:b7:b6:22:97:9d:f1:93:77:52:de:79:d4: a1:a2:f2:16:71:62:42:06:ef:67:d3:13:80:e4:58:10:02:ed: ce:cb:c0:f7:c6:e7:86:6e:e2:80:d5:29:ca:4c:a8:87:46:b2: 9a:40:a4:01:c8:f8:ae:0c:a9:d3:a0:67:b7:b8:50:a0:c3:1d: 5a:2f:82:54:c3:ec:c8:28:1d:87:26:22:75:af:6e:8e:f3:9f: 23:a4:d0:80:1c:10:b0:ff:c7:d7:55:0e:f2:a1:f9:27:ce:cf: e9:34:c8:93:71:0c:a3:32:ea:99:ab:ba:57:c9:4f:9b:bc:c1: 18:dc:ab:84:1a:ce:46:ef:29:f2:fe:31:dd:20:61:81:aa:42: 4e:6d:80:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjUxMjE4MjA0ODQ3WhcNMjUxMjI1MjA0ODQ3WjAYMRYwFAYD VQQDDA02OTQ0NjhhZi1iMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ejwAyUzIPkxELnM5n+2XpgCo2ZwDGZcv9LrRur7qK8zJi9ehB2w1i8bw2vZ u52NMGIzkKSPM0SF5OEMgjq4GHzm+Dm7nJHuV9odeocxsei4qkR2fDcejbkv8zzl +pgJPc8yfvH4VnLFxv/cMszPfDJKL8jNGK+a6VrMPsozxKhJFUbgoC7E2E0Oj6/w ShusJz3r8f+uOQsgEz0YjvqqyWt6g8a8tMa1e8PRLGZ2o2WPx1cz+OAbI+5K4Uzh JeD4sy64id2mEdrz5lGN2LJ1XI1EUcgYQTAP73a+z9ssT3vFv0KfE38DyBi+CNzZ okVlo74YA5fDXY1LWE4mG/DZaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2n8Ulj Dk3ASSntwq+BDU2F8SwXMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbYKNPgtNvYPRs6holnZw3mo2YT4ntZrvlVMG+zrxZsx6fS4jADJJ9 sKu8EU2pPAw6NRKx1TnEN1qPEsICKypj69m6Ij07DCKSOo/4hycu6eh4cDknAEau CRVqYobc0bcdJvgmr9J7q6D93pJt/HTq59C3tiKXnfGTd1LeedShovIWcWJCBu9n 0xOA5FgQAu3Oy8D3xueGbuKA1SnKTKiHRrKaQKQByPiuDKnToGe3uFCgwx1aL4JU w+zIKB2HJiJ1r26O858jpNCAHBCw/8fXVQ7yofknzs/pNMiTcQyjMuqZq7pXyU+b vMEY3KuEGs5G7yny/jHdIGGBqkJObYDf -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:02 2025 by rpki-client