This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json) Hash identifier: 33C+MtjyvK+OBFdzZCI7sdc6rQ83jA2trQc090UoJPQ= Subject key identifier: C8:C4:58:4A:87:DD:E8:09:B1:E1:C6:50:42:00:70:7D:87:25:C8:E0 Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft Manifest number: 9A Signing time: Fri 19 Dec 2025 05:27:25 +0000 Manifest this update: Fri 19 Dec 2025 05:27:24 +0000 Manifest next update: Fri 26 Dec 2025 05:27:24 +0000 Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: kazuUn1+Bv7GB48bUgWMXCG+FxGBe2eL88Kkdj/hlqI=) 2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: H0Gt6hkw2JpHPGPBgwlKru1+nCswYpwJdtuwdjPnKvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Validity Not Before: Dec 19 05:27:24 2025 GMT Not After : Dec 26 05:27:24 2025 GMT Subject: CN=6944e23d-418a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:05:90:5c:d0:01:62:de:25:27:ee:45:63: 45:97:01:e6:34:34:96:ce:c2:08:85:d0:45:90:76: b2:e2:1c:52:50:d9:96:55:6d:19:d4:19:07:95:ea: af:fb:ae:0e:ae:8c:b9:ec:78:ba:d2:3f:05:30:b1: 14:18:60:39:a3:6a:e5:cd:2f:b6:de:25:54:ff:41: 26:3e:92:0e:10:72:0b:f2:50:c3:24:64:63:7e:94: f5:94:e9:f4:58:5f:24:a7:b1:8a:ea:a7:24:bf:16: c5:d3:13:3b:16:36:3a:07:ae:ad:75:cb:26:d9:92: c8:98:6a:ec:85:1f:30:77:fe:b2:27:71:34:62:df: ca:c5:e6:67:1c:4d:cf:26:96:ea:87:a8:fb:30:ba: a0:3a:10:d5:54:33:37:9c:10:72:ff:cd:0f:ad:44: 2b:41:84:28:84:de:b6:d5:0a:cc:cf:fa:9d:fc:d2: 1c:10:c6:5d:ea:33:c4:11:4f:78:0c:48:b6:2b:68: dd:e5:1a:33:bf:9d:15:0d:af:ec:df:55:12:59:69: 2a:69:16:ec:29:48:be:42:3e:21:34:21:08:97:2a: fe:07:f5:39:16:73:e4:24:60:fe:0e:c8:82:92:43: c5:34:59:a4:5f:12:06:77:19:ab:fa:32:6d:5b:2f: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C4:58:4A:87:DD:E8:09:B1:E1:C6:50:42:00:70:7D:87:25:C8:E0 X509v3 Authority Key Identifier: keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:8b:c6:93:d8:8f:61:3c:04:4b:e2:d1:be:7d:32:f4:b9:7a: 1e:9c:7f:a4:8a:93:92:85:af:d8:67:05:40:9e:93:ac:b2:28: 31:f0:ca:9f:bb:ec:9e:d3:a8:83:53:d4:d2:e9:02:72:ea:92: 22:52:2e:45:3d:ba:25:b0:35:00:4a:d2:d6:eb:31:59:c9:d3: 82:d1:2f:cd:67:ff:b9:f5:b8:23:aa:e3:04:1c:4a:c5:5e:41: e8:20:8c:e6:6e:8e:00:16:58:4e:d1:d1:14:ad:4a:c0:4f:23: 9b:26:e6:5a:2e:c4:37:b1:b6:a3:a2:b9:a7:df:39:b6:f2:e6: 0d:6d:05:5d:34:4a:a7:c8:a5:93:3e:90:e9:ce:e4:cc:c4:f0: ea:ea:40:0c:4b:56:c1:1a:d4:20:e6:8b:4a:bb:16:d5:a3:fa: d3:48:f1:6b:27:8d:41:4e:0d:07:cf:58:13:5e:f2:be:47:08: 36:67:61:de:81:c7:73:cf:77:5f:87:c5:01:f7:02:6c:e5:81: 00:60:fb:20:13:a8:50:dd:e1:1a:0d:19:27:90:92:b7:fc:fc: f6:d4:db:1a:cc:1c:d5:20:15:ea:af:3e:02:fc:63:b9:f2:08: 74:1d:da:90:31:ee:fd:cc:36:d2:6e:e6:74:52:a8:9c:13:2a: 45:3b:85:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QyODExMTAvBgNVBAUTKDc0MTY2NjY4QkU3NkI3Mzc1NzYzMTZFNTVEOUU2NDM5 RTY3MUNGNDcwHhcNMjUxMjE5MDUyNzI0WhcNMjUxMjI2MDUyNzI0WjAYMRYwFAYD VQQDDA02OTQ0ZTIzZC00MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZwFkFzQAWLeJSfuRWNFlwHmNDSWzsIIhdBFkHay4hxSUNmWVW0Z1BkHleqv +64Oroy57Hi60j8FMLEUGGA5o2rlzS+23iVU/0EmPpIOEHIL8lDDJGRjfpT1lOn0 WF8kp7GK6qckvxbF0xM7FjY6B66tdcsm2ZLImGrshR8wd/6yJ3E0Yt/KxeZnHE3P Jpbqh6j7MLqgOhDVVDM3nBBy/80PrUQrQYQohN621QrMz/qd/NIcEMZd6jPEEU94 DEi2K2jd5Rozv50VDa/s31USWWkqaRbsKUi+Qj4hNCEIlyr+B/U5FnPkJGD+DsiC kkPFNFmkXxIGdxmr+jJtWy8qbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjEWEqH 3egJseHGUEIAcH2HJcjgMB8GA1UdIwQYMBaAFHQWZmi+drc3V2MW5V2eZDnmcc9H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDI4MS9GQjQyMTZFOEYy NzAxMUVGOUJGOEI1MzVDNEY5QUUwMi9kQlptYUw1MnR6ZFhZeGJsWFo1a09lWnh6 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHowYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDI4MS9GQjQyMTZFOEYyNzAxMUVGOUJGOEI1MzVDNEY5QUUwMi9kQlptYUw1MnR6 ZFhZeGJsWFo1a09lWnh6MGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhi8aT2I9hPARL4tG+fTL0uXoenH+kipOSha/YZwVAnpOssigx8Mqf u+ye06iDU9TS6QJy6pIiUi5FPbolsDUAStLW6zFZydOC0S/NZ/+59bgjquMEHErF XkHoIIzmbo4AFlhO0dEUrUrATyObJuZaLsQ3sbajormn3zm28uYNbQVdNEqnyKWT PpDpzuTMxPDq6kAMS1bBGtQg5otKuxbVo/rTSPFrJ41BTg0Hz1gTXvK+Rwg2Z2He gcdzz3dfh8UB9wJs5YEAYPsgE6hQ3eEaDRknkJK3/Pz21NsazBzVIBXqrz4C/GO5 8gh0HdqQMe79zDbSbuZ0UqicEypFO4Wx -----END CERTIFICATE-----Generated at Sat Dec 20 03:27:04 2025 by rpki-client