This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json) Hash identifier: fx85neoZA+g2UW9HqHRcpzpGTYSB2ZhUdePLgM4kMoE= Subject key identifier: A3:61:24:79:68:BD:02:83:F1:06:A1:11:3E:89:CD:AB:BB:F1:A5:7F Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Certificate serial: 0CCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft Manifest number: 0C97 Signing time: Thu 18 Dec 2025 18:19:11 +0000 Manifest this update: Thu 18 Dec 2025 18:19:10 +0000 Manifest next update: Thu 25 Dec 2025 18:19:10 +0000 Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: KPjdnMSPcYJ0i4ZqJmYvRIC0U6/ReiLRuHk3v3feRzQ=) 2: C1C279D6997C11F0BDB1853FC4F9AE02.roa (hash: 4mPqfTPQ2fcMHjXPMtWwiqLKnBhl1p74F2zSiB+yYkk=) 3: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: koYkzKfCTAv1tCwfqS1UV81p0eyhkxC28R0kJ+9NqSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3278 (0xcce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Validity Not Before: Dec 18 18:19:10 2025 GMT Not After : Dec 25 18:19:10 2025 GMT Subject: CN=6944459f-44d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:5a:67:13:6a:0f:ef:2c:52:89:95:16:bd: 31:60:48:8c:29:9f:99:2a:be:29:f5:0d:32:18:8c: 0a:61:54:69:e6:c4:5b:63:4a:04:d1:70:d8:a8:30: 77:b9:3c:e6:cf:1b:e3:59:5b:9d:d1:b4:74:e8:05: b1:ac:fc:45:18:fb:4f:80:d0:51:fe:5c:0f:e0:f5: 70:21:30:70:9b:c8:da:ca:ec:a9:ee:ef:d4:62:6e: f0:7c:1f:9f:d5:2d:71:2c:bb:14:21:ea:36:37:1d: 7b:61:e6:b2:c0:b3:47:b1:81:05:5e:01:51:1f:7a: 9a:98:1a:e1:6a:cc:7f:d2:8f:8e:c5:b2:66:ff:fa: 23:3e:7b:29:5d:90:b3:f9:f6:6d:b7:99:fc:f4:59: 96:0c:ec:72:cc:de:c7:ef:08:8f:1d:34:38:6a:11: cf:e6:f7:11:bd:6b:c2:35:8b:50:6d:eb:1c:c4:bb: b3:2f:c0:55:8a:2d:db:ad:e8:0e:64:db:a6:75:50: ff:0b:4f:1b:43:82:13:c9:9f:8c:9c:82:87:5f:52: ea:e2:a8:d0:de:b3:43:c8:3b:f8:18:ce:25:70:62: 9f:5e:4a:c7:54:eb:1f:95:0b:8f:35:cc:3a:c1:f0: ce:8e:cd:53:4b:29:3d:21:60:a3:cd:2a:1a:15:6a: f3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:61:24:79:68:BD:02:83:F1:06:A1:11:3E:89:CD:AB:BB:F1:A5:7F X509v3 Authority Key Identifier: keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:d1:83:e5:86:1b:11:a0:3b:bf:8e:7f:17:98:ff:50:55:13: d4:a4:3e:02:2e:8a:fd:90:67:44:7c:44:c0:d5:5a:a2:d4:1e: d4:e0:02:2f:dd:ab:0d:87:be:9b:b1:8a:84:9b:f1:24:14:43: b8:55:99:9c:d0:ce:23:53:96:6d:3e:e5:4c:8b:0f:16:ed:18: 58:7e:f8:39:2c:bd:9b:3c:69:e6:5b:0b:16:de:de:eb:50:80: 62:ee:6b:18:ed:e8:9b:89:ad:84:64:46:f5:b5:8a:0a:a6:fb: 96:e8:14:20:e3:8a:61:3e:f1:cc:00:7f:1e:2d:2e:c6:46:b5: 32:8e:8d:45:f8:09:ec:b6:06:99:59:78:97:07:20:94:f3:d7: c6:4a:4b:6c:3d:b8:a5:93:0c:00:18:95:d2:6e:a7:d9:40:ed: f2:c4:74:38:2a:ca:89:02:b3:e0:40:6d:b0:99:50:55:d9:14: 45:ed:5a:9b:aa:a5:48:aa:cf:ee:21:d9:8b:a5:ca:fd:b0:f0: b9:7a:25:64:23:4d:5a:5e:ee:cb:6e:fc:cc:70:e8:eb:b5:31: e6:99:91:04:b1:4b:72:a5:56:5f:da:14:8d:86:d7:9c:68:b9: 5c:1c:e6:67:b0:7c:a6:de:99:e7:31:1b:dc:7e:bf:9c:fe:a8: 1e:48:7d:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF QzQ1RUVGNjcwHhcNMjUxMjE4MTgxOTEwWhcNMjUxMjI1MTgxOTEwWjAYMRYwFAYD VQQDDA02OTQ0NDU5Zi00NGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0claZxNqD+8sUomVFr0xYEiMKZ+ZKr4p9Q0yGIwKYVRp5sRbY0oE0XDYqDB3 uTzmzxvjWVud0bR06AWxrPxFGPtPgNBR/lwP4PVwITBwm8jayuyp7u/UYm7wfB+f 1S1xLLsUIeo2Nx17YeaywLNHsYEFXgFRH3qamBrhasx/0o+OxbJm//ojPnspXZCz +fZtt5n89FmWDOxyzN7H7wiPHTQ4ahHP5vcRvWvCNYtQbescxLuzL8BVii3bregO ZNumdVD/C08bQ4ITyZ+MnIKHX1Lq4qjQ3rNDyDv4GM4lcGKfXkrHVOsflQuPNcw6 wfDOjs1TSyk9IWCjzSoaFWrzwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNhJHlo vQKD8QahET6Jzau78aV/MB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2My9BNEQ0NDAwQzEzOUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3Yndu Y1dxejNHcUNfRnJzUmU3MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn0YPlhhsRoDu/jn8XmP9QVRPUpD4CLor9kGdEfETA1Vqi1B7U4AIv 3asNh76bsYqEm/EkFEO4VZmc0M4jU5ZtPuVMiw8W7RhYfvg5LL2bPGnmWwsW3t7r UIBi7msY7eibia2EZEb1tYoKpvuW6BQg44phPvHMAH8eLS7GRrUyjo1F+AnstgaZ WXiXByCU89fGSktsPbilkwwAGJXSbqfZQO3yxHQ4KsqJArPgQG2wmVBV2RRF7Vqb qqVIqs/uIdmLpcr9sPC5eiVkI01aXu7LbvzMcOjrtTHmmZEEsUtypVZf2hSNhtec aLlcHOZnsHym3pnnMRvcfr+c/qgeSH0J -----END CERTIFICATE-----Generated at Fri Dec 19 18:49:41 2025 by rpki-client