This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft File: daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json) Hash identifier: nDf4cr9PPL6aFNq2oCFNeeOKy5paT/3VsVMq8BY6eKg= Subject key identifier: B8:B2:8E:BA:6C:05:29:DF:4A:7D:1A:7F:EC:20:D0:14:61:1B:A3:C5 Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57 Certificate issuer: /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57 Certificate serial: 1AC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft Manifest number: 1AC8 Signing time: Wed 31 Dec 2025 16:08:15 +0000 Manifest this update: Wed 31 Dec 2025 16:08:14 +0000 Manifest next update: Wed 07 Jan 2026 16:08:14 +0000 Files and hashes: 1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: dV7Y6q6xXUSrMGyAkjOhY1bDO/uuFb6VCy15+wIui0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 16:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6856 (0x1ac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57 Validity Not Before: Dec 31 16:08:14 2025 GMT Not After : Jan 7 16:08:14 2026 GMT Subject: CN=69554a6f-a304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ff:10:9f:88:9e:bf:a4:19:e8:1a:e6:92:61: d4:ca:8a:90:4c:63:b8:69:4a:b1:5e:0d:32:a3:f6: 9c:95:72:c9:c2:a7:fd:4f:bc:f3:7c:b5:b3:e1:02: 27:b4:7b:d8:d9:8e:63:45:27:9c:b6:50:6c:70:04: c8:6f:4a:be:04:2e:25:5b:e2:a9:7c:03:58:d5:94: 21:d6:aa:8d:8a:e3:b7:4c:80:e4:d3:df:96:79:6d: 59:ca:9b:a3:d0:f8:24:10:77:e2:19:e9:c7:66:d9: 18:b6:20:b2:59:bc:dd:14:e4:8d:b6:8f:68:0b:e3: d9:06:c4:7c:4d:8a:e7:b2:9f:7c:ea:43:f2:dd:68: d7:65:2c:ee:25:7e:36:fb:0a:fc:ea:55:a2:c3:57: 00:af:28:b7:12:54:40:e0:6b:b4:37:3a:2c:83:4d: 0e:9e:21:9b:9a:74:ce:73:07:2c:f2:55:cc:bb:6f: 15:09:84:cb:41:4b:c4:d4:84:67:35:18:40:ce:43: 30:6b:41:d2:5e:57:d8:80:17:50:d5:22:ee:43:29: 9a:82:88:0f:2b:48:53:78:a4:77:27:5d:b9:e3:f4: 39:8f:69:3f:21:00:5d:30:a0:35:a5:95:b1:10:6d: bd:40:9c:46:cf:3a:0c:e2:9f:16:b0:32:48:d9:ee: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B2:8E:BA:6C:05:29:DF:4A:7D:1A:7F:EC:20:D0:14:61:1B:A3:C5 X509v3 Authority Key Identifier: keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ce:7c:76:de:f0:12:2e:ea:ee:e5:47:3f:99:e9:12:94:f4: 4b:81:27:d2:9e:e8:41:53:40:c8:31:78:39:8f:83:8e:0a:13: fb:62:5c:b8:74:84:7d:3c:77:b2:39:b0:00:99:b9:a8:75:10: 99:81:49:b7:9d:b4:dc:2a:30:d2:de:62:9e:bb:74:b3:1b:04: 3a:23:7f:72:91:cb:26:b0:3b:1e:1f:0c:d5:2d:69:e2:2e:82: 3d:82:70:e7:54:57:ff:3d:4b:93:23:40:12:bf:5e:ae:bc:75: 90:90:37:14:4b:e9:b4:fb:1f:74:67:a9:69:38:14:74:e9:3c: a4:05:91:d1:1e:5c:74:d6:aa:4b:e3:4d:74:cd:34:4d:a1:cb: 46:86:3f:72:ab:8f:74:14:ff:9a:f0:cf:66:df:aa:34:7a:87: be:91:9d:ef:3f:cd:a8:65:47:bd:c2:af:6d:86:b4:60:aa:79: 63:c0:cf:41:e8:6d:22:68:dc:0e:7e:f0:70:62:6e:1f:8a:e5: 7a:3d:87:15:f0:30:66:3d:94:91:4d:35:a4:81:b2:c3:28:be: 6f:4d:0c:3d:e6:e1:97:f8:31:c6:63:52:c0:fc:92:8a:b1:a3: 54:58:a8:ac:b5:1b:f7:3f:cf:10:e9:af:26:3d:eb:9c:78:8a: 4d:15:b6:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyQzkxMTAvBgNVBAUTKDc1QTc2RUMzOTg0NTJERkEyQzM2Njk5RUM1QTQ3NkND QzU4MURFNTcwHhcNMjUxMjMxMTYwODE0WhcNMjYwMTA3MTYwODE0WjAYMRYwFAYD VQQDDA02OTU1NGE2Zi1hMzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/8Qn4iev6QZ6BrmkmHUyoqQTGO4aUqxXg0yo/aclXLJwqf9T7zzfLWz4QIn tHvY2Y5jRSectlBscATIb0q+BC4lW+KpfANY1ZQh1qqNiuO3TIDk09+WeW1Zypuj 0PgkEHfiGenHZtkYtiCyWbzdFOSNto9oC+PZBsR8TYrnsp986kPy3WjXZSzuJX42 +wr86lWiw1cAryi3ElRA4Gu0Nzosg00OniGbmnTOcwcs8lXMu28VCYTLQUvE1IRn NRhAzkMwa0HSXlfYgBdQ1SLuQymagogPK0hTeKR3J1254/Q5j2k/IQBdMKA1pZWx EG29QJxGzzoM4p8WsDJI2e7sSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiyjrps BSnfSn0af+wg0BRhG6PFMB8GA1UdIwQYMBaAFHWnbsOYRS36LDZpnsWkdszFgd5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjJDOS82RkIwMDA4RTNF N0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxmb3NObW1leGFSMnpNV0Iz bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhZHV3NWhGTGZvc05tbWV4YVIyek1XQjNsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjJDOS82RkIwMDA4RTNFN0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxm b3NObW1leGFSMnpNV0IzbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfznx23vASLuru5Uc/mekSlPRLgSfSnuhBU0DIMXg5j4OOChP7Yly4 dIR9PHeyObAAmbmodRCZgUm3nbTcKjDS3mKeu3SzGwQ6I39ykcsmsDseHwzVLWni LoI9gnDnVFf/PUuTI0ASv16uvHWQkDcUS+m0+x90Z6lpOBR06TykBZHRHlx01qpL 4010zTRNoctGhj9yq490FP+a8M9m36o0eoe+kZ3vP82oZUe9wq9thrRgqnljwM9B 6G0iaNwOfvBwYm4fiuV6PYcV8DBmPZSRTTWkgbLDKL5vTQw95uGX+DHGY1LA/JKK saNUWKistRv3P88Q6a8mPeuceIpNFbas -----END CERTIFICATE-----Generated at Fri Jan 2 08:15:25 2026 by rpki-client