This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft File: dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json) Hash identifier: 3KSYEUlPJoBXw6yi0qO9p8Zh4z42GgM1BCiAeqnNXow= Subject key identifier: F1:B3:6D:9D:4E:9E:C1:AC:1F:9B:72:09:0D:90:16:89:C1:68:D3:D3 Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 Certificate issuer: /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688 Certificate serial: 124F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft Manifest number: 1ADA Signing time: Thu 18 Dec 2025 16:58:44 +0000 Manifest this update: Thu 18 Dec 2025 16:58:43 +0000 Manifest next update: Thu 25 Dec 2025 16:58:43 +0000 Files and hashes: 1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: 599G8sPP2OIkjjh/QpeQh+O0wrzGSTVCtJaHhckPmI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4687 (0x124f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=77328994D13E9895419C81066BA61181D182B688 Validity Not Before: Dec 18 16:58:43 2025 GMT Not After : Dec 25 16:58:43 2025 GMT Subject: CN=694432c4-213a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:5a:46:4f:61:04:cb:f6:c8:60:d9:c0:e4: 5b:aa:da:67:a6:b7:e8:15:d5:ac:8f:55:a9:2a:75: 8c:3d:d9:8b:40:de:5b:78:c2:00:76:4b:c9:47:01: 6f:27:f9:c1:09:ac:c7:61:ea:1d:29:cd:d7:7f:03: 91:3f:09:b7:8e:92:23:f8:97:60:f3:d1:31:33:77: 4a:7f:4d:cb:bb:e5:6e:28:c9:0e:a7:f0:95:6d:0c: 74:e9:1e:17:7c:3d:c8:10:06:72:e6:d5:b7:04:2f: 8d:81:84:1d:56:35:d5:26:6b:39:fa:8a:ad:53:36: f8:cb:8d:5e:c8:2b:90:de:b5:18:54:9d:3e:4b:f8: 04:0e:8d:13:fc:ee:6a:f0:62:56:75:84:2e:51:a7: 76:78:1e:25:32:21:14:2f:36:03:4f:4c:b7:38:57: ff:4f:a0:51:9b:d9:36:83:0b:bb:10:3a:4b:b1:76: 81:b2:0e:0a:18:18:10:b0:55:74:1b:32:27:88:f4: af:61:63:cd:bc:6c:7f:69:3d:84:4d:c4:eb:32:65: 59:3b:55:0d:f0:e7:bf:8a:5a:4d:17:d2:9b:1f:9e: 6c:1c:7c:fe:b7:5f:bb:9f:d4:b5:9e:ef:87:bd:f6: a2:6f:e3:5a:4b:19:c7:41:e2:04:d8:ed:e2:ee:73: b8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B3:6D:9D:4E:9E:C1:AC:1F:9B:72:09:0D:90:16:89:C1:68:D3:D3 X509v3 Authority Key Identifier: keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:86:50:9d:fd:a8:66:75:e2:46:28:16:13:d0:9a:fc:3e:6c: 1e:66:73:c7:aa:ff:cb:3b:52:f7:2d:43:ad:32:80:17:61:92: e0:ab:b5:43:87:4d:d0:a8:f1:a3:5f:7c:17:96:52:aa:e4:b8: 0d:76:05:90:cf:0e:5f:2c:d1:8f:9f:2f:8a:b8:38:16:f5:76: 71:fd:99:e7:6c:40:a6:a6:d1:9b:0f:66:d8:81:0b:70:80:82: b1:d6:e8:2a:51:18:48:90:fa:7a:ae:ab:0f:a8:5d:6f:3a:ff: 39:78:be:52:2a:e3:d7:37:f4:fc:96:96:fc:01:29:34:64:f9: af:a5:89:a6:64:70:41:89:53:3b:ae:29:39:76:30:fc:3a:11: aa:55:4c:62:cc:f6:0e:20:ec:44:b3:e5:46:00:6f:19:94:26: 93:5e:0b:64:9a:c6:b1:87:78:48:b8:51:89:69:51:1a:c4:a0: f4:f3:7e:6f:2b:3d:05:a6:48:90:eb:ac:90:1e:72:30:f2:87: 9d:2b:e9:ad:9e:9d:af:e7:3f:44:4b:db:17:07:4d:b2:76:fc: ca:2a:db:9d:47:c3:bb:02:be:0f:d5:3d:33:3b:4f:88:cc:b5: fb:aa:c5:96:80:96:10:bf:6d:9d:da:fc:b8:40:12:41:f3:a3: 33:61:1c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKDc3MzI4OTk0RDEzRTk4OTU0MTlDODEwNjZCQTYxMTgx RDE4MkI2ODgwHhcNMjUxMjE4MTY1ODQzWhcNMjUxMjI1MTY1ODQzWjAYMRYwFAYD VQQDDA02OTQ0MzJjNC0yMTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldpaRk9hBMv2yGDZwORbqtpnprfoFdWsj1WpKnWMPdmLQN5beMIAdkvJRwFv J/nBCazHYeodKc3XfwORPwm3jpIj+Jdg89ExM3dKf03Lu+VuKMkOp/CVbQx06R4X fD3IEAZy5tW3BC+NgYQdVjXVJms5+oqtUzb4y41eyCuQ3rUYVJ0+S/gEDo0T/O5q 8GJWdYQuUad2eB4lMiEULzYDT0y3OFf/T6BRm9k2gwu7EDpLsXaBsg4KGBgQsFV0 GzIniPSvYWPNvGx/aT2ETcTrMmVZO1UN8Oe/ilpNF9KbH55sHHz+t1+7n9S1nu+H vfaib+NaSxnHQeIE2O3i7nO4qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGzbZ1O nsGsH5tyCQ2QFonBaNPTMB8GA1UdIwQYMBaAFHcyiZTRPpiVQZyBBmumEYHRgraI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1KVkJuSUVHYTZZUmdkR0N0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6S0psTkUtbUpWQm5JRUdhNllSZ2RHQ3RvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1K VkJuSUVHYTZZUmdkR0N0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9hlCd/ahmdeJGKBYT0Jr8PmweZnPHqv/LO1L3LUOtMoAXYZLgq7VD h03QqPGjX3wXllKq5LgNdgWQzw5fLNGPny+KuDgW9XZx/ZnnbECmptGbD2bYgQtw gIKx1ugqURhIkPp6rqsPqF1vOv85eL5SKuPXN/T8lpb8ASk0ZPmvpYmmZHBBiVM7 rik5djD8OhGqVUxizPYOIOxEs+VGAG8ZlCaTXgtkmsaxh3hIuFGJaVEaxKD0835v Kz0FpkiQ66yQHnIw8oedK+mtnp2v5z9ES9sXB02ydvzKKtudR8O7Ar4P1T0zO0+I zLX7qsWWgJYQv22d2vy4QBJB86MzYRxo -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:57 2025 by rpki-client