This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft File: du8ZOVeobWTTw83rngdGdG70KQo.mft (raw, json) Hash identifier: BNYcDX7qXH0k75MswL2yiZ17P0AJbF6t4S++b+7lkQg= Subject key identifier: C8:59:85:9B:EA:5B:24:15:7B:6D:8C:B9:D9:F1:38:E3:F8:62:DA:05 Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft Manifest number: 0167 Signing time: Sun 28 Dec 2025 19:29:20 +0000 Manifest this update: Sun 28 Dec 2025 19:29:19 +0000 Manifest next update: Sun 04 Jan 2026 19:29:19 +0000 Files and hashes: 1: du8ZOVeobWTTw83rngdGdG70KQo.crl (hash: WAlwh0yXeTf/WCm8ebstH4Hi1JZ9Xp1HRAsQgNiXtYE=) 2: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (hash: meGg1NN20MfvaZAVYfetTEGVIcZuhqOuDHstRQMemWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 19:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Validity Not Before: Dec 28 19:29:19 2025 GMT Not After : Jan 4 19:29:19 2026 GMT Subject: CN=69518510-f544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:4b:3d:73:42:8b:75:33:d6:eb:4a:9a:e3: 16:33:77:e3:bc:e9:d1:49:4c:55:13:e2:6c:a2:87: bb:4c:42:f7:13:f9:83:9b:24:d3:5f:21:dc:5f:2e: 5d:a6:ec:5c:0b:06:78:9a:66:49:29:b8:46:f8:54: 1f:8d:6e:f2:8f:09:d8:09:ad:1f:e3:9e:98:41:44: 08:f1:17:c1:a4:fa:25:11:4d:e9:6f:a1:cc:c0:fe: c8:da:e1:66:ff:ee:ff:e8:f8:a5:60:9f:58:50:c4: cc:54:bb:23:4b:e3:ad:a2:e6:54:f7:1f:f9:d3:ed: cc:0b:26:84:6a:a9:b4:e0:7d:21:76:9d:12:13:54: 8a:65:b3:8b:4b:e0:9f:99:be:6a:fb:6d:93:80:45: 22:27:42:ef:7a:50:78:c6:ee:63:11:34:e6:7d:ce: a5:da:de:20:9e:ec:d8:6e:42:61:20:46:08:0f:2e: 15:e2:0c:78:97:b4:e2:d5:fa:36:1f:51:6d:6e:dc: 57:d8:8f:3c:8d:26:8c:b7:15:af:ba:dd:5a:7b:82: c2:f0:b2:05:c0:c7:a7:60:4e:85:02:16:bb:83:d8: 4c:63:67:14:1b:0b:1f:43:e7:83:16:f7:26:b3:9b: 91:bc:5e:6d:b5:2b:7e:ac:61:15:d6:4b:77:c1:fe: 12:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:59:85:9B:EA:5B:24:15:7B:6D:8C:B9:D9:F1:38:E3:F8:62:DA:05 X509v3 Authority Key Identifier: keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:57:d8:28:ff:7f:85:7d:0d:15:96:76:73:1d:90:72:5c:3b: 55:2c:30:d4:90:ba:bc:a2:ad:d0:ec:cc:88:40:70:28:b3:9f: 04:25:f2:9c:51:e6:8a:0b:3c:9d:dd:61:58:a7:5f:aa:54:ee: a5:d4:1b:6c:e4:72:47:c3:65:84:9a:f5:25:15:58:a7:f3:41: 76:3e:35:47:d3:e3:e3:a3:c0:65:8a:7d:2b:b1:ae:21:3e:82: 61:6b:da:e4:e7:70:85:de:23:a6:8c:05:0f:e9:50:bc:b8:40: f6:58:52:b4:4e:42:63:ba:2f:48:ea:1a:66:2c:e6:d7:ea:39: 0a:f1:27:c9:af:46:ab:aa:24:e9:33:16:10:6f:16:6e:85:af: 91:ee:88:7a:70:68:0f:ea:18:9c:22:a0:41:8f:22:47:9c:58: 71:66:bb:4f:1a:08:a6:32:7a:b6:05:fc:d1:4a:4d:1c:75:bc: e7:e3:c9:f2:fc:f3:91:e4:a4:20:e1:4c:19:11:ec:a6:d5:5d: 0c:33:c0:92:bf:2c:b4:09:d8:b0:2d:c4:6b:2e:f1:1b:3a:85: 55:e1:82:f4:b3:ad:4a:01:ea:75:75:e0:09:a3:d5:67:41:a7: 49:f3:87:14:0c:db:08:3e:6f:4f:01:59:83:07:da:5d:d4:33: e5:8d:3b:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDc2RUYxOTM5NTdBODZENjREM0MzQ0RFQjlFMDc0Njc0 NkVGNDI5MEEwHhcNMjUxMjI4MTkyOTE5WhcNMjYwMTA0MTkyOTE5WjAYMRYwFAYD VQQDDA02OTUxODUxMC1mNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfFLPXNCi3Uz1utKmuMWM3fjvOnRSUxVE+Jsooe7TEL3E/mDmyTTXyHcXy5d puxcCwZ4mmZJKbhG+FQfjW7yjwnYCa0f456YQUQI8RfBpPolEU3pb6HMwP7I2uFm /+7/6PilYJ9YUMTMVLsjS+OtouZU9x/50+3MCyaEaqm04H0hdp0SE1SKZbOLS+Cf mb5q+22TgEUiJ0LvelB4xu5jETTmfc6l2t4gnuzYbkJhIEYIDy4V4gx4l7Ti1fo2 H1FtbtxX2I88jSaMtxWvut1ae4LC8LIFwMenYE6FAha7g9hMY2cUGwsfQ+eDFvcm s5uRvF5ttSt+rGEV1kt3wf4S0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhZhZvq WyQVe22MudnxOOP4YtoFMB8GA1UdIwQYMBaAFHbvGTlXqG1k08PN654HRnRu9CkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi8wNUY4NjAxNEM1 MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JXVFR3ODNybmdkR2RHNzBL UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R1OFpPVmVvYldUVHc4M3JuZ2RHZEc3MEtRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi8wNUY4NjAxNEM1MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JX VFR3ODNybmdkR2RHNzBLUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlV9go/3+FfQ0VlnZzHZByXDtVLDDUkLq8oq3Q7MyIQHAos58EJfKc UeaKCzyd3WFYp1+qVO6l1Bts5HJHw2WEmvUlFVin80F2PjVH0+Pjo8Blin0rsa4h PoJha9rk53CF3iOmjAUP6VC8uED2WFK0TkJjui9I6hpmLObX6jkK8SfJr0arqiTp MxYQbxZuha+R7oh6cGgP6hicIqBBjyJHnFhxZrtPGgimMnq2BfzRSk0cdbzn48ny /POR5KQg4UwZEeym1V0MM8CSvyy0CdiwLcRrLvEbOoVV4YL0s61KAep1deAJo9Vn QadJ84cUDNsIPm9PAVmDB9pd1DPljTvR -----END CERTIFICATE-----Generated at Mon Dec 29 16:27:49 2025 by rpki-client