This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft File: DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json) Hash identifier: +8CT+urMUt2xr1c2V3GbyGKAXvDzDYhP8sCOaDEU4nQ= Subject key identifier: 5C:F8:E0:F3:5D:C4:19:AC:51:45:99:BB:C6:2F:9F:C2:72:87:1C:ED Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F Certificate issuer: /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F Certificate serial: 0991 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft Manifest number: 098B Signing time: Thu 18 Dec 2025 19:36:26 +0000 Manifest this update: Thu 18 Dec 2025 19:36:26 +0000 Manifest next update: Thu 25 Dec 2025 19:36:26 +0000 Files and hashes: 1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: /oLWJ/se+sX1liQUIDZd7Ob1ULbzxGSjax3v+WL3JR8=) 2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: 8rvezRlfEmng/UgYNLuDBBrL/AQ4sVZHRDguwah88WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F Validity Not Before: Dec 18 19:36:26 2025 GMT Not After : Dec 25 19:36:26 2025 GMT Subject: CN=694457ba-415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:70:b2:17:0c:3f:eb:ad:92:b0:1b:0c:1f:7c: ea:b3:13:34:f0:18:7c:06:3a:50:dd:32:7e:96:9b: 18:c6:3f:00:f5:4c:42:21:e4:17:21:6c:68:54:78: 62:d9:30:7e:57:cb:b7:2a:0c:98:c4:f7:0c:25:ce: 33:b6:43:c4:ef:34:8f:a1:c0:cf:3f:15:9a:2d:50: 4a:46:71:1a:7e:21:ab:e2:6b:23:44:00:32:44:1a: 14:c4:7e:31:56:b4:20:c1:58:e6:47:28:79:95:97: e1:75:c4:e0:a6:25:55:a7:64:7b:67:64:04:c5:7a: db:b6:85:34:0a:df:5e:98:07:3c:eb:f7:04:44:5c: dd:c6:a0:c5:3a:84:54:17:d8:18:25:cd:85:5e:c9: cd:bb:4f:25:11:05:40:e6:d3:c4:ae:2d:cb:ba:a5: c8:28:28:8e:89:09:20:fd:4e:90:54:06:8c:ea:5c: 58:ea:db:91:0c:c8:a7:55:26:2e:5d:11:12:fa:f6: 49:b2:a2:9d:57:86:f0:ad:25:d5:c9:bc:fa:73:b0: ba:b8:52:86:07:2d:9e:93:35:b7:7d:40:c4:2c:e0: f9:e3:9e:c8:6f:16:c2:54:04:74:59:d1:32:67:5e: 6d:b7:3e:b7:94:e1:68:2b:cd:c9:e1:ac:73:7a:43: 9d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F8:E0:F3:5D:C4:19:AC:51:45:99:BB:C6:2F:9F:C2:72:87:1C:ED X509v3 Authority Key Identifier: keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:52:f6:b0:fc:ae:20:ea:1a:dc:67:01:5e:df:f8:0f:ec:c6: cb:6a:8d:65:e0:ab:94:51:54:c5:5e:48:f9:ad:9b:3d:ea:da: df:c2:d6:18:8f:93:bd:08:e5:5d:3c:66:b9:c5:32:79:70:9e: f5:b6:23:28:d0:d1:72:24:7b:77:4f:a2:c9:eb:cf:d1:2d:d5: 9b:90:fe:59:a6:ab:55:8e:50:ea:2b:ec:d4:1f:6a:7b:25:80: 2d:74:cc:c7:36:60:78:d0:22:18:6e:9b:85:e8:08:67:1e:5b: 2c:b8:74:16:75:40:a8:75:a1:eb:0f:a9:ba:27:f3:0f:e4:93: 54:41:87:e0:41:8f:0f:4c:d5:66:48:b9:4e:ee:e4:e6:74:52: dd:10:22:8f:af:86:d1:02:40:ea:09:e2:b0:30:68:64:e4:a1: 36:5d:4b:d9:c3:79:2e:c2:a4:90:89:76:f6:91:e4:40:d8:8a: 37:0b:56:ed:7e:1d:e4:38:6d:22:24:01:aa:a8:f8:cf:49:a8: d7:0e:1a:85:5d:c0:cb:75:d3:f5:30:4d:2d:75:f1:35:db:9c: 14:c3:04:36:a1:87:92:06:bf:e4:6d:8c:1f:68:44:4a:87:1b: 94:aa:6d:18:35:b5:5c:22:e3:93:c4:81:dc:38:1a:c3:e9:05: 70:41:e3:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0MjExMTAvBgNVBAUTKDBDRUY4OTA1REQ2NUU5MUU1MDZCM0IzOTlDMjBBMjIy OEFFNEZEM0YwHhcNMjUxMjE4MTkzNjI2WhcNMjUxMjI1MTkzNjI2WjAYMRYwFAYD VQQDDA02OTQ0NTdiYS00MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAinCyFww/662SsBsMH3zqsxM08Bh8BjpQ3TJ+lpsYxj8A9UxCIeQXIWxoVHhi 2TB+V8u3KgyYxPcMJc4ztkPE7zSPocDPPxWaLVBKRnEafiGr4msjRAAyRBoUxH4x VrQgwVjmRyh5lZfhdcTgpiVVp2R7Z2QExXrbtoU0Ct9emAc86/cERFzdxqDFOoRU F9gYJc2FXsnNu08lEQVA5tPEri3LuqXIKCiOiQkg/U6QVAaM6lxY6tuRDMinVSYu XRES+vZJsqKdV4bwrSXVybz6c7C6uFKGBy2ekzW3fUDELOD5457IbxbCVAR0WdEy Z15ttz63lOFoK83J4axzekOd1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFz44PNd xBmsUUWZu8Yvn8JyhxztMB8GA1UdIwQYMBaAFAzviQXdZekeUGs7OZwgoiKK5P0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQyMS8xMTk4MDYwQUEw QjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZSNVFhenM1bkNDaUlvcmtf VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPLUpCZDFsNlI1UWF6czVuQ0NpSW9ya19UOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQyMS8xMTk4MDYwQUEwQjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZS NVFhenM1bkNDaUlvcmtfVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdUvaw/K4g6hrcZwFe3/gP7MbLao1l4KuUUVTFXkj5rZs96trfwtYY j5O9COVdPGa5xTJ5cJ71tiMo0NFyJHt3T6LJ68/RLdWbkP5ZpqtVjlDqK+zUH2p7 JYAtdMzHNmB40CIYbpuF6AhnHlssuHQWdUCodaHrD6m6J/MP5JNUQYfgQY8PTNVm SLlO7uTmdFLdECKPr4bRAkDqCeKwMGhk5KE2XUvZw3kuwqSQiXb2keRA2Io3C1bt fh3kOG0iJAGqqPjPSajXDhqFXcDLddP1ME0tdfE125wUwwQ2oYeSBr/kbYwfaERK hxuUqm0YNbVcIuOTxIHcOBrD6QVwQeMx -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:45 2025 by rpki-client