This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: dN2V1As9I94UshUEyoftgbG8H6+/nEex8b+oEsxW8fk= Subject key identifier: F4:A0:FF:2D:48:8F:EA:1B:94:2B:F0:4C:9D:F1:92:A2:8A:94:A0:08 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 07F1 Signing time: Thu 18 Dec 2025 20:36:37 +0000 Manifest this update: Thu 18 Dec 2025 20:36:36 +0000 Manifest next update: Thu 25 Dec 2025 20:36:36 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: uH1lYwDgUUpX+AYu3/xHOpA6O7iq+QNKZfm7zVR1eHI=) 2: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: 8JiU8Oos87rOfxfxW5raSyPKQ8t3Ze/tzK20sDot2kI=) 3: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: Qd9yXxs36oF+1VHeMpSuefMICH6l6WaUGPlOLsEYxaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Dec 18 20:36:36 2025 GMT Not After : Dec 25 20:36:36 2025 GMT Subject: CN=694465d5-e831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:e7:b1:dd:7f:83:fc:6d:e9:ed:66:80:a9: 5e:a2:9a:7e:c3:fa:be:d1:d6:a4:63:81:44:bf:f7: f4:04:ce:f6:c2:61:eb:b5:cb:9f:1f:e8:7b:13:86: d8:f5:b0:00:84:58:fd:53:72:60:99:e1:64:39:42: 5f:bc:ee:83:34:43:75:f7:f1:51:5c:76:56:c6:0a: e4:83:52:32:3f:70:44:3a:4e:64:30:e7:29:88:8b: 4a:68:7e:87:6f:ed:2f:f8:7e:86:cf:70:4d:d6:7f: 60:f5:de:6e:1e:47:ca:a4:b8:3b:9e:e9:7f:37:cc: 1a:42:36:9d:d9:fc:4a:fb:1c:54:76:6c:2f:92:7d: 37:7d:9d:9d:7f:6a:38:63:55:36:c0:d4:3a:ee:68: 9a:a4:ab:98:41:ad:25:ba:ef:5d:0a:bd:99:bc:c2: 0c:98:c4:0c:de:9e:90:6e:f4:a1:63:7b:48:82:89: b4:12:8f:93:46:01:65:50:48:83:c8:9a:ac:9e:53: a9:f7:1f:74:d8:08:f8:3d:f4:fe:53:90:38:b6:27: d8:6c:30:ab:56:bf:da:85:77:17:91:a0:6e:5b:19: a6:37:25:65:c6:b0:e4:3f:05:58:a0:63:8f:a4:f5: 81:ec:b9:c7:98:ac:67:8e:41:55:78:e1:d0:54:46: 8c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A0:FF:2D:48:8F:EA:1B:94:2B:F0:4C:9D:F1:92:A2:8A:94:A0:08 X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:09:b2:45:c7:39:e9:30:f8:5b:e1:8c:42:49:a8:73:21:c8: 13:df:f8:55:a1:3f:02:15:87:b8:dd:55:c6:55:d5:56:dd:28: ee:54:bd:89:5e:44:c4:5d:e8:68:33:71:7a:11:71:c4:ca:07: 3e:f8:74:c9:e0:1e:4d:0b:43:02:1b:0b:f9:14:21:75:14:03: df:33:2e:fc:08:1d:c1:66:37:4e:cc:a0:dd:4e:72:29:ee:54: 15:e3:63:9a:f1:b7:fc:05:3b:4b:5a:4d:75:05:dc:4a:e4:c4: f8:06:f2:87:3b:64:da:6b:f6:20:66:e3:c4:56:dc:b7:41:57: e3:e3:e9:0c:55:62:1b:a4:81:42:ca:29:18:28:87:51:4d:13: fb:46:9e:4a:4f:5f:f7:3a:83:ca:22:83:2e:1d:38:aa:df:5b: fd:12:24:09:38:0e:d6:9e:d7:6b:87:03:3a:93:f3:f7:8f:8e: cb:89:88:2a:ea:b9:ac:9c:41:57:2e:00:07:89:f0:38:ab:7c: 2b:20:30:83:f3:55:88:af:d6:e3:87:f1:67:c9:0f:86:0a:11: a6:23:4a:4c:22:a5:9a:6b:74:d6:49:89:ba:16:6f:6e:d8:bf: 10:39:cd:7e:41:5a:01:9f:91:3b:ae:03:30:d3:e3:f2:ef:a9: 3d:59:47:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUxMjE4MjAzNjM2WhcNMjUxMjI1MjAzNjM2WjAYMRYwFAYD VQQDDA02OTQ0NjVkNS1lODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocPnsd1/g/xt6e1mgKleopp+w/q+0dakY4FEv/f0BM72wmHrtcufH+h7E4bY 9bAAhFj9U3JgmeFkOUJfvO6DNEN19/FRXHZWxgrkg1IyP3BEOk5kMOcpiItKaH6H b+0v+H6Gz3BN1n9g9d5uHkfKpLg7nul/N8waQjad2fxK+xxUdmwvkn03fZ2df2o4 Y1U2wNQ67miapKuYQa0luu9dCr2ZvMIMmMQM3p6QbvShY3tIgom0Eo+TRgFlUEiD yJqsnlOp9x902Aj4PfT+U5A4tifYbDCrVr/ahXcXkaBuWxmmNyVlxrDkPwVYoGOP pPWB7LnHmKxnjkFVeOHQVEaMswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSg/y1I j+oblCvwTJ3xkqKKlKAIMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyCbJFxznpMPhb4YxCSahzIcgT3/hVoT8CFYe43VXGVdVW3SjuVL2J XkTEXehoM3F6EXHEygc++HTJ4B5NC0MCGwv5FCF1FAPfMy78CB3BZjdOzKDdTnIp 7lQV42Oa8bf8BTtLWk11BdxK5MT4BvKHO2Taa/YgZuPEVty3QVfj4+kMVWIbpIFC yikYKIdRTRP7Rp5KT1/3OoPKIoMuHTiq31v9EiQJOA7WntdrhwM6k/P3j47LiYgq 6rmsnEFXLgAHifA4q3wrIDCD81WIr9bjh/FnyQ+GChGmI0pMIqWaa3TWSYm6Fm9u 2L8QOc1+QVoBn5E7rgMw0+Py76k9WUdP -----END CERTIFICATE-----Generated at Sat Dec 20 15:06:23 2025 by rpki-client