This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: MqKFNjYMazmFUfZYVM67uqLgyDAYxviHC2Bdd0cOZ6M= Subject key identifier: 74:85:D8:95:3D:7B:A8:9D:F0:B2:C5:88:15:6D:B4:04:B7:CB:64:55 Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1AD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1ACB Signing time: Thu 18 Dec 2025 16:12:03 +0000 Manifest this update: Thu 18 Dec 2025 16:12:03 +0000 Manifest next update: Thu 25 Dec 2025 16:12:03 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: 3xjeDtTp0aYxUXyTjwc79JYFk00zLCSbd+wizEj4+4w=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: XzGkPPqSTC5CeDxEAOY4CC7n2iKvE4CetGVSiQJeAZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6872 (0x1ad8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Dec 18 16:12:03 2025 GMT Not After : Dec 25 16:12:03 2025 GMT Subject: CN=694427d3-fc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:69:9f:26:42:d6:5a:a7:8f:c9:7f:39:f0: 43:e1:e9:52:be:ad:3d:fc:88:cb:57:e3:5c:bd:a6: 9c:44:05:25:2d:df:72:e8:ce:f0:2f:d3:6f:15:95: db:52:c7:f6:94:59:a7:07:a3:c8:50:2e:c4:80:bf: 8c:db:e9:b0:d7:6c:0c:7d:10:8e:f8:4f:d3:f7:fb: 80:22:89:96:0b:48:bd:7f:d7:59:63:1f:2c:59:a3: 15:79:9b:66:7a:43:c8:f8:ef:50:7f:26:92:1c:dd: 7d:89:2e:22:a4:20:cf:49:27:c7:51:4e:66:e7:76: b7:35:5a:f6:e6:58:08:d2:44:c7:2f:c8:9e:42:10: 28:d4:60:cd:79:d7:b6:45:b4:18:b1:4d:6f:04:13: 6b:23:82:29:59:ae:b1:45:dd:6b:bf:90:70:59:e2: 7b:09:31:87:81:bd:a1:26:03:e9:53:78:84:61:db: a6:14:47:55:70:37:1c:7b:81:b7:21:5a:2b:8e:f0: 9e:3c:ee:d9:16:9d:12:af:a9:4a:65:97:44:e4:68: bf:05:14:a8:ed:f4:35:67:df:ed:79:06:9c:22:54: cf:50:a4:0a:54:99:a8:96:ad:11:7d:c2:5f:b5:25: 37:31:d4:cb:61:78:0f:3f:ae:b1:03:17:70:52:51: 8b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:85:D8:95:3D:7B:A8:9D:F0:B2:C5:88:15:6D:B4:04:B7:CB:64:55 X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:37:63:56:29:bc:bf:19:36:1f:59:bc:d0:43:f5:69:b1:b5: 90:2d:02:5b:26:56:ae:07:be:77:6c:0e:9a:e0:77:d1:63:7d: 4f:59:91:79:3b:9f:e9:1c:2d:b2:04:a2:85:b9:96:bf:30:7e: 3a:5a:b4:1a:c5:56:89:75:78:1b:f9:eb:eb:31:24:23:64:36: d8:38:3f:18:3f:11:fa:0d:c0:62:f2:b5:44:af:da:13:02:8e: ec:3e:2b:ea:c6:39:83:10:6d:60:1c:50:a7:f4:06:86:de:bb: cd:7e:c0:a9:a1:ec:f1:38:e4:87:21:4f:e4:5d:6d:c5:7e:f9: 63:46:e1:66:b9:73:10:be:67:e4:93:52:82:bb:c3:d3:d8:b7: 0e:80:66:48:4f:a0:31:ec:a7:98:f7:9e:45:29:09:5d:37:45: 81:90:a2:4d:ba:05:02:09:70:ba:d9:86:bf:67:c4:26:0e:4f: 32:ad:84:c0:d2:48:43:16:cb:16:02:52:a6:fa:63:02:53:d5: 6f:9a:79:5e:61:27:67:e6:04:8a:d5:27:ac:81:0d:8b:99:93: 08:49:a9:c1:22:63:0d:b9:f2:e1:29:cd:1a:84:2b:ef:54:04: ca:4c:e0:f8:5d:17:8c:64:7b:9b:b5:ac:29:60:12:04:a1:aa: a7:cc:85:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjUxMjE4MTYxMjAzWhcNMjUxMjI1MTYxMjAzWjAYMRYwFAYD VQQDDA02OTQ0MjdkMy1mYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA615pnyZC1lqnj8l/OfBD4elSvq09/IjLV+NcvaacRAUlLd9y6M7wL9NvFZXb Usf2lFmnB6PIUC7EgL+M2+mw12wMfRCO+E/T9/uAIomWC0i9f9dZYx8sWaMVeZtm ekPI+O9QfyaSHN19iS4ipCDPSSfHUU5m53a3NVr25lgI0kTHL8ieQhAo1GDNede2 RbQYsU1vBBNrI4IpWa6xRd1rv5BwWeJ7CTGHgb2hJgPpU3iEYdumFEdVcDcce4G3 IVorjvCePO7ZFp0Sr6lKZZdE5Gi/BRSo7fQ1Z9/teQacIlTPUKQKVJmolq0RfcJf tSU3MdTLYXgPP66xAxdwUlGLjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSF2JU9 e6id8LLFiBVttAS3y2RVMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/N2NWKby/GTYfWbzQQ/VpsbWQLQJbJlauB753bA6a4HfRY31PWZF5 O5/pHC2yBKKFuZa/MH46WrQaxVaJdXgb+evrMSQjZDbYOD8YPxH6DcBi8rVEr9oT Ao7sPivqxjmDEG1gHFCn9AaG3rvNfsCpoezxOOSHIU/kXW3FfvljRuFmuXMQvmfk k1KCu8PT2LcOgGZIT6Ax7KeY955FKQldN0WBkKJNugUCCXC62Ya/Z8QmDk8yrYTA 0khDFssWAlKm+mMCU9VvmnleYSdn5gSK1SesgQ2LmZMISanBImMNufLhKc0ahCvv VATKTOD4XReMZHubtawpYBIEoaqnzIUM -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:51 2025 by rpki-client