This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: XVLB7O21rzpwmM7uFwf8kXHPEEOgqHVosXSiwBJDuY0= Subject key identifier: A6:88:46:EC:66:3B:3F:46:91:6B:0F:85:61:7F:A0:1C:E1:2E:D9:C1 Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 0380 Signing time: Sun 21 Dec 2025 00:04:25 +0000 Manifest this update: Sun 21 Dec 2025 00:04:24 +0000 Manifest next update: Sun 28 Dec 2025 00:04:24 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: gsYWsfbczCzjNE964xcreq9hhFn3OzLAxdC56XDUR9c=) 2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: U/JXwEqtoHC/7jQ68sFwAQsy+SIpyQHakkosmR6Gtvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: Dec 21 00:04:24 2025 GMT Not After : Dec 28 00:04:24 2025 GMT Subject: CN=69473989-14be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:72:6b:79:5e:f5:05:49:f6:8a:d6:78:28: c5:8e:75:87:5c:70:72:de:69:f2:97:89:7e:46:08: 17:07:60:91:1d:3c:92:a0:d5:fd:62:a6:96:18:1a: ae:1b:ad:52:6e:f5:c0:aa:cd:aa:e9:17:54:02:54: 28:a0:c7:69:e9:23:73:37:4d:0c:09:64:07:e8:65: 60:99:62:9f:b8:82:c8:3b:b4:b1:a0:72:67:21:ef: d6:5b:a6:ed:b1:29:9f:04:60:27:fa:a9:23:79:58: d3:fd:ac:86:5d:a8:8e:25:46:35:9b:f9:32:d8:e7: 1b:f4:bc:15:f6:a4:af:d5:46:54:57:a0:71:08:79: 14:d0:1c:6f:94:c8:94:04:28:f9:c1:a4:73:25:7c: 18:60:20:81:fc:c5:fa:4b:22:a6:34:97:ce:03:1d: 6f:0b:bf:84:62:3e:c4:0f:95:8a:b9:ba:fc:54:cc: 17:c7:d0:79:43:79:d6:7e:fb:a9:02:f2:12:0e:06: c3:32:9b:e2:9f:48:1c:3d:e6:ba:4d:ca:13:66:fd: a3:ca:98:68:58:fd:d4:2d:cd:44:6e:16:0d:43:85: 75:49:fa:4a:d7:ac:e2:4a:74:48:c2:36:e0:e2:7a: db:f5:bc:bb:56:4f:f4:08:8d:66:c0:13:4e:72:2d: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:88:46:EC:66:3B:3F:46:91:6B:0F:85:61:7F:A0:1C:E1:2E:D9:C1 X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e0:04:6d:3f:ff:1d:31:bf:5d:f5:68:0e:b2:ca:08:7b:21: ed:d0:b8:52:87:f6:9a:68:e8:39:75:f8:eb:ab:f6:de:af:d7: 66:78:29:e0:c8:be:78:16:e6:63:c5:f7:03:76:5f:4d:35:b4: c8:69:12:a7:1b:27:18:5f:0c:a7:9a:a1:12:1c:35:e2:cc:2d: 93:56:2f:e2:f4:0a:57:22:32:0e:a2:22:6c:bd:8c:46:fb:16: 74:7e:d4:3b:2f:37:05:e1:94:44:b1:7a:57:c1:da:6d:02:65: 20:32:69:66:74:ec:da:2a:fd:04:fa:f3:0c:ab:8f:53:57:79: c1:04:9a:8a:d6:b6:d8:09:e7:07:7c:85:92:2b:1e:8c:c3:88: f8:01:13:83:c8:e5:6d:c7:be:58:26:d8:42:d1:0b:b6:7c:e2: d0:ac:74:71:62:99:fc:8c:47:e0:0c:af:ab:81:04:53:62:90: 52:e2:9a:c8:c4:99:20:34:1b:b4:f5:71:55:12:a7:e9:be:83: 76:57:4e:be:80:03:bf:2f:7b:78:3d:69:9e:73:f5:84:9b:c9: fe:54:f9:3b:3c:54:5a:c0:3e:da:e4:6b:cd:07:09:bf:76:4d: ec:d7:11:1c:ad:5b:f3:fb:2a:24:e7:46:52:21:f3:d0:3c:04: d9:e0:85:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjUxMjIxMDAwNDI0WhcNMjUxMjI4MDAwNDI0WjAYMRYwFAYD VQQDDA02OTQ3Mzk4OS0xNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0pya3le9QVJ9orWeCjFjnWHXHBy3mnyl4l+RggXB2CRHTySoNX9YqaWGBqu G61SbvXAqs2q6RdUAlQooMdp6SNzN00MCWQH6GVgmWKfuILIO7SxoHJnIe/WW6bt sSmfBGAn+qkjeVjT/ayGXaiOJUY1m/ky2Ocb9LwV9qSv1UZUV6BxCHkU0BxvlMiU BCj5waRzJXwYYCCB/MX6SyKmNJfOAx1vC7+EYj7ED5WKubr8VMwXx9B5Q3nWfvup AvISDgbDMpvin0gcPea6TcoTZv2jyphoWP3ULc1EbhYNQ4V1SfpK16ziSnRIwjbg 4nrb9by7Vk/0CI1mwBNOci2ShwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaIRuxm Oz9GkWsPhWF/oBzhLtnBMB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB84ARtP/8dMb9d9WgOssoIeyHt0LhSh/aaaOg5dfjrq/ber9dmeCng yL54FuZjxfcDdl9NNbTIaRKnGycYXwynmqESHDXizC2TVi/i9ApXIjIOoiJsvYxG +xZ0ftQ7LzcF4ZREsXpXwdptAmUgMmlmdOzaKv0E+vMMq49TV3nBBJqK1rbYCecH fIWSKx6Mw4j4ARODyOVtx75YJthC0Qu2fOLQrHRxYpn8jEfgDK+rgQRTYpBS4prI xJkgNBu09XFVEqfpvoN2V06+gAO/L3t4PWmec/WEm8n+VPk7PFRawD7a5GvNBwm/ dk3s1xEcrVvz+yok50ZSIfPQPATZ4IW1 -----END CERTIFICATE-----Generated at Mon Dec 22 00:05:43 2025 by rpki-client