This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json) Hash identifier: oN/mOgtwFDSxgUN8utqd5lLG4bIeGcipIllj66gpwFQ= Subject key identifier: 19:68:B1:65:A3:D3:EB:D9:EB:C2:9F:6E:6C:F8:64:4A:B5:5A:F2:F5 Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 1730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft Manifest number: 171F Signing time: Sat 20 Dec 2025 16:24:19 +0000 Manifest this update: Sat 20 Dec 2025 16:24:19 +0000 Manifest next update: Sat 27 Dec 2025 16:24:19 +0000 Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: dlkpVO/jmCHhb4m9lAMNkY8vZSJAxJnMwgxeimvhOhg=) 2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: UklyO+zUtTPQ+1U54UPe5WnHbws0xqnE6hJtphNdrmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5936 (0x1730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Validity Not Before: Dec 20 16:24:19 2025 GMT Not After : Dec 27 16:24:19 2025 GMT Subject: CN=6946cdb3-bbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:9c:6a:8a:c4:c5:6b:2d:ea:a5:92:1b:14: 71:47:33:49:b9:0d:0a:84:25:ca:4c:38:dc:e2:16: fa:ab:73:04:91:a0:f7:f0:76:fb:53:fd:32:ee:04: 7f:78:22:19:d0:c4:b9:ed:1b:67:82:0f:31:8c:7d: 20:2f:99:f9:ab:2c:62:0f:c2:d8:64:66:9e:8b:ff: 67:44:16:ea:28:a4:f7:ec:ee:7a:30:fa:76:e1:ff: 6a:ee:b5:d8:42:8a:6b:87:ff:20:19:3e:a6:1c:8c: 69:15:0a:6a:f4:9c:89:a2:e7:06:71:29:37:d1:4f: 76:ff:73:9d:7f:32:d8:78:8e:d3:33:26:62:1f:03: 38:c7:8a:7b:1c:ed:13:96:33:75:ae:86:88:f2:98: d9:17:89:2c:8e:62:ef:d3:1e:1d:78:88:cc:4b:79: c9:e6:1a:98:72:72:8f:99:9b:47:f8:f0:a1:eb:9a: 0b:c4:fa:8e:0d:c6:27:9f:45:ff:23:ec:31:fd:6a: 6e:69:46:ee:8c:8a:7f:21:48:a9:5f:4b:4f:a7:91: 0b:78:ca:4f:cb:80:f6:83:cf:36:21:8b:46:ba:23: f8:da:e5:63:23:e8:71:fa:63:53:14:20:36:ee:bf: 84:bc:52:eb:53:8c:9c:a9:5d:99:0e:80:ec:77:4c: 32:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:68:B1:65:A3:D3:EB:D9:EB:C2:9F:6E:6C:F8:64:4A:B5:5A:F2:F5 X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ad:5c:3c:79:c7:9a:ec:0e:ba:e9:91:68:09:81:eb:d1:5b: 38:b6:57:7d:e4:f0:7d:1f:65:35:08:d3:dc:e4:e5:47:bc:81: f1:50:4a:77:39:3b:96:8d:35:8a:3a:9e:a6:c9:f5:33:1d:83: ea:15:7b:b5:4f:a8:3d:f3:b0:a8:64:73:d4:be:be:5e:c0:43: 7c:82:94:43:c3:79:14:3d:00:5b:a9:ba:d0:97:f9:07:8b:91: 58:f1:b2:7a:14:8b:9e:6f:e6:63:cd:16:60:3a:61:8b:02:c2: d5:17:49:df:74:e9:08:c8:70:20:59:3c:68:eb:8f:c4:0a:62: 47:7b:82:10:74:5c:54:72:f0:de:34:d3:27:83:e2:15:0a:b6: 2d:29:1c:3d:99:5c:cb:d8:5e:b8:a7:dd:fc:62:8f:94:14:85: a2:ed:38:f4:57:92:87:b4:f7:b4:65:59:32:2a:56:af:f1:50: f2:da:bb:72:71:74:32:1a:dd:c6:50:38:71:de:2f:da:4a:1e: fc:e0:93:14:71:1b:c3:2f:62:d5:c7:0a:55:eb:94:81:8d:11: 84:0e:f9:59:c5:00:29:28:b6:45:1f:55:f7:0c:90:16:2c:1b: 75:74:0f:12:fe:a5:1b:04:a2:89:ac:a2:c0:72:c8:a9:af:fa: 10:37:2a:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjUxMjIwMTYyNDE5WhcNMjUxMjI3MTYyNDE5WjAYMRYwFAYD VQQDDA02OTQ2Y2RiMy1iYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzn+caorExWst6qWSGxRxRzNJuQ0KhCXKTDjc4hb6q3MEkaD38Hb7U/0y7gR/ eCIZ0MS57Rtngg8xjH0gL5n5qyxiD8LYZGaei/9nRBbqKKT37O56MPp24f9q7rXY Qoprh/8gGT6mHIxpFQpq9JyJoucGcSk30U92/3OdfzLYeI7TMyZiHwM4x4p7HO0T ljN1roaI8pjZF4ksjmLv0x4deIjMS3nJ5hqYcnKPmZtH+PCh65oLxPqODcYnn0X/ I+wx/WpuaUbujIp/IUipX0tPp5ELeMpPy4D2g882IYtGuiP42uVjI+hx+mNTFCA2 7r+EvFLrU4ycqV2ZDoDsd0wypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlosWWj 0+vZ68Kfbmz4ZEq1WvL1MB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4rVw8ecea7A666ZFoCYHr0Vs4tld95PB9H2U1CNPc5OVHvIHxUEp3 OTuWjTWKOp6myfUzHYPqFXu1T6g987CoZHPUvr5ewEN8gpRDw3kUPQBbqbrQl/kH i5FY8bJ6FIueb+ZjzRZgOmGLAsLVF0nfdOkIyHAgWTxo64/ECmJHe4IQdFxUcvDe NNMng+IVCrYtKRw9mVzL2F64p938Yo+UFIWi7Tj0V5KHtPe0ZVkyKlav8VDy2rty cXQyGt3GUDhx3i/aSh784JMUcRvDL2LVxwpV65SBjRGEDvlZxQApKLZFH1X3DJAW LBt1dA8S/qUbBKKJrKLAcsipr/oQNyoQ -----END CERTIFICATE-----Generated at Sun Dec 21 13:25:20 2025 by rpki-client