This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json) Hash identifier: m6sxXntYa2VUiHmcvx3yWCwYdMBucuZE1GZsg8df6Ds= Subject key identifier: C4:42:F8:0A:AF:7C:DC:22:60:B2:A6:BA:2F:61:92:2E:42:D3:D5:7B Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft Manifest number: 0451 Signing time: Sun 28 Dec 2025 23:19:24 +0000 Manifest this update: Sun 28 Dec 2025 23:19:23 +0000 Manifest next update: Sun 04 Jan 2026 23:19:23 +0000 Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: 2zUYAADlwAJj9rTFJ6rIR1sJd+h9y5DAu0pwC2OdTMk=) 2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: iIiLthCmbedJRo28SgXjSnyh36vN7rpzHjXfoOnGfcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 23:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Validity Not Before: Dec 28 23:19:23 2025 GMT Not After : Jan 4 23:19:23 2026 GMT Subject: CN=6951bafc-2914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:18:f1:9f:b2:91:fa:cf:ce:19:33:15:44: 80:06:6c:ce:b1:f2:b0:1c:60:a8:6a:48:16:c5:75: 74:1a:65:9e:1d:0f:f4:9b:2e:b4:79:ea:d1:09:8d: 6e:76:c4:9f:6d:26:d9:17:60:d9:fe:e8:79:64:7b: 88:d5:34:41:0c:93:56:74:4b:bc:f7:81:95:6a:03: 82:e4:f0:8b:7d:00:0b:9d:e5:ce:e9:95:5b:7d:97: 87:d1:85:17:87:96:68:e7:92:64:f7:3e:dd:e3:6e: 1d:bc:9c:fe:fa:61:21:e3:ea:91:fe:2c:71:b0:7e: 8e:05:7e:56:2d:b1:9b:f9:99:e0:6a:8f:e0:ec:c1: 42:03:b8:92:f7:30:21:29:36:74:35:94:82:ec:f4: bf:60:69:1b:9b:2a:bf:f4:8a:88:ed:aa:8f:48:2b: cd:cf:84:1c:14:0e:52:9f:fe:99:ee:b6:49:63:8d: 91:5f:23:25:94:70:97:82:42:c6:f2:a3:a4:8e:15: 77:d6:93:1a:78:98:35:a3:e8:48:ec:b2:c9:14:eb: 35:50:f0:41:6e:e4:f4:15:81:6c:75:62:66:34:d5: d2:9c:14:ba:e7:2c:02:01:8e:85:ce:13:7c:dd:15: cd:c2:1a:90:37:fe:4c:00:ca:57:56:b0:7a:86:44: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:42:F8:0A:AF:7C:DC:22:60:B2:A6:BA:2F:61:92:2E:42:D3:D5:7B X509v3 Authority Key Identifier: keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:e5:1b:f6:2c:a5:b0:fb:3b:73:14:74:c2:17:e3:9d:b0:83: 08:b4:10:8e:ca:ed:66:ba:54:2c:84:b1:ab:a7:2e:fd:3e:72: 0e:03:86:98:d3:ea:08:66:77:cb:24:59:f5:65:d4:fc:6e:c5: 76:e7:55:23:5c:1c:9a:66:66:d7:51:3f:a2:9b:7b:b4:2e:85: 49:d8:67:56:4f:20:12:95:ec:20:b5:de:31:b1:b4:bb:09:71: 73:ae:e3:8f:f2:f4:a1:98:da:39:ef:d5:1c:da:11:8f:e6:af: 03:42:0e:96:01:7e:3f:76:2d:de:01:09:d9:87:3d:0d:aa:0a: 92:f5:a4:d5:4f:e7:cf:29:fd:8e:a2:6d:6e:d4:06:e3:78:53: a8:29:9b:30:74:57:c4:1a:67:65:4c:c8:67:53:26:dd:5d:e3: fb:7b:fc:25:1e:99:63:33:ac:56:d1:e6:36:c4:47:55:c6:a3: 8b:68:43:5f:d1:c3:6b:46:25:3e:99:fc:c8:e7:bd:f7:a6:1a: 13:15:9f:e8:b5:37:03:99:04:0a:95:79:4f:ce:92:cb:fa:77: d7:01:54:e4:e4:10:09:4f:1a:b5:57:07:5f:df:cb:68:5f:f9: 81:89:68:fe:01:eb:65:5b:cf:4c:39:2b:9f:d8:98:62:b3:75: 1f:d2:fb:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF Q0M2NjNFRUQwHhcNMjUxMjI4MjMxOTIzWhcNMjYwMTA0MjMxOTIzWjAYMRYwFAYD VQQDDA02OTUxYmFmYy0yOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiYY8Z+ykfrPzhkzFUSABmzOsfKwHGCoakgWxXV0GmWeHQ/0my60eerRCY1u dsSfbSbZF2DZ/uh5ZHuI1TRBDJNWdEu894GVagOC5PCLfQALneXO6ZVbfZeH0YUX h5Zo55Jk9z7d424dvJz++mEh4+qR/ixxsH6OBX5WLbGb+Zngao/g7MFCA7iS9zAh KTZ0NZSC7PS/YGkbmyq/9IqI7aqPSCvNz4QcFA5Sn/6Z7rZJY42RXyMllHCXgkLG 8qOkjhV31pMaeJg1o+hI7LLJFOs1UPBBbuT0FYFsdWJmNNXSnBS65ywCAY6FzhN8 3RXNwhqQN/5MAMpXVrB6hkT7cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRC+Aqv fNwiYLKmui9hki5C09V7MB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVDNS84OTNDNjRGNjdFOUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZY d3Qyb0JJLTZnVFBzeG1QdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC75Rv2LKWw+ztzFHTCF+OdsIMItBCOyu1mulQshLGrpy79PnIOA4aY 0+oIZnfLJFn1ZdT8bsV251UjXByaZmbXUT+im3u0LoVJ2GdWTyASlewgtd4xsbS7 CXFzruOP8vShmNo579Uc2hGP5q8DQg6WAX4/di3eAQnZhz0NqgqS9aTVT+fPKf2O om1u1AbjeFOoKZswdFfEGmdlTMhnUybdXeP7e/wlHpljM6xW0eY2xEdVxqOLaENf 0cNrRiU+mfzI5733phoTFZ/otTcDmQQKlXlPzpLL+nfXAVTk5BAJTxq1Vwdf38to X/mBiWj+AetlW89MOSuf2Jhis3Uf0vt2 -----END CERTIFICATE-----Generated at Mon Dec 29 01:49:59 2025 by rpki-client