This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft File: _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json) Hash identifier: hJMp/6H4ZjFKp2GQhtXAPx0UHDzSoF0KPjOu6mXxOXs= Subject key identifier: FB:D5:AE:E5:41:FB:82:8D:86:35:59:02:AC:D2:01:A4:2D:62:1C:D0 Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 Certificate issuer: /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft Manifest number: 66 Signing time: Fri 19 Dec 2025 06:01:34 +0000 Manifest this update: Fri 19 Dec 2025 06:01:33 +0000 Manifest next update: Fri 26 Dec 2025 06:01:33 +0000 Files and hashes: 1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: lxBj8zMCLXsxAxR5CIp8VhnQ6LOyvBz/70+QsbEMh7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Validity Not Before: Dec 19 06:01:33 2025 GMT Not After : Dec 26 06:01:33 2025 GMT Subject: CN=6944ea3d-1900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:63:cf:f4:81:bd:6e:d5:2f:16:3f:27:10:5f: 13:24:ab:7c:9f:74:d9:55:cc:7f:57:a9:97:ec:bf: e0:c6:53:07:7a:e9:6e:f3:17:15:b4:dc:69:94:79: 17:d3:7a:2a:ff:53:c9:ae:7d:bd:e1:f8:dc:7c:13: 47:48:85:ae:c1:5e:05:42:89:2b:b7:2c:d1:2d:7a: 3f:ba:8f:28:f1:66:9f:5d:20:4f:98:d2:f0:5c:5b: 55:f9:41:55:13:73:c4:d2:25:93:c9:df:cf:fa:2b: 58:1d:cc:e1:6e:17:b4:60:f7:e5:61:10:75:7d:ee: d5:c8:54:ba:d8:41:de:a5:5a:93:59:cd:d8:31:0a: 35:7e:c0:33:05:0a:99:bc:3f:c0:c6:76:06:17:99: b8:c6:a1:5f:1c:9f:88:a9:35:24:58:42:cd:79:14: fa:5d:3b:8e:04:47:12:54:c1:46:99:4c:af:cb:1b: c6:ea:48:70:39:88:63:db:9b:8f:d8:05:de:0b:8b: 28:ff:94:f5:28:21:05:f0:4b:12:ce:a7:bf:2f:e2: 88:38:d3:26:f8:e1:3b:d9:eb:fa:3d:75:9b:8e:bc: 21:0b:73:ad:33:56:16:b8:76:55:43:f2:4d:8f:d0: 4b:49:b7:09:d1:3f:95:37:ad:e4:b2:5f:39:1c:03: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D5:AE:E5:41:FB:82:8D:86:35:59:02:AC:D2:01:A4:2D:62:1C:D0 X509v3 Authority Key Identifier: keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:10:96:e2:8a:a7:26:43:e0:ce:67:60:67:6f:d2:78:26:05: 1a:2b:00:41:9b:85:38:34:e8:35:9f:67:24:38:83:20:a5:3f: 99:4e:17:bd:2b:66:84:32:ad:f6:08:33:2f:06:5c:a0:7b:f4: 9d:41:6f:08:30:fe:3b:8a:54:97:29:87:cd:58:67:cb:2e:00: 7e:dc:d1:7d:99:ed:04:57:34:34:28:4e:07:17:99:7d:9d:ee: 4f:82:0c:ae:96:7b:78:29:e5:4a:e7:72:27:19:12:65:f5:d1: 37:66:14:ff:8a:64:ee:24:d8:5a:a1:88:31:26:c8:94:b2:c3: a4:d4:b9:ee:69:b7:25:1f:a7:a8:80:2d:c7:63:0b:8d:3d:88: 4d:f9:d9:f4:1d:72:68:0a:6b:6a:89:ca:8a:43:9b:35:76:58: 68:38:d6:7b:6c:f4:1b:ed:40:37:34:49:47:b4:76:e9:ef:be: 75:42:52:3f:34:4d:f5:ae:09:b5:d5:af:28:b9:8e:6e:4f:6d: 35:7b:ff:cb:13:cd:28:4d:bd:4e:80:56:90:15:5c:c6:c0:aa: 5b:d4:38:e3:08:97:e1:87:b4:15:90:5c:e2:14:74:eb:ac:80: d6:6f:37:0f:bc:90:86:7a:76:0d:7e:a4:6d:28:ee:e8:7c:1f: 3d:c8:47:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG N0VGQzExMC8GA1UEBRMoRkMzNDdGOTlGQUQ0Q0ZFRUNBQjMxNTIxMDI0Mjc3MUFF QjA4NkQ3NTAeFw0yNTEyMTkwNjAxMzNaFw0yNTEyMjYwNjAxMzNaMBgxFjAUBgNV BAMMDTY5NDRlYTNkLTE5MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNY8/0gb1u1S8WPycQXxMkq3yfdNlVzH9XqZfsv+DGUwd66W7zFxW03GmUeRfT eir/U8mufb3h+Nx8E0dIha7BXgVCiSu3LNEtej+6jyjxZp9dIE+Y0vBcW1X5QVUT c8TSJZPJ38/6K1gdzOFuF7Rg9+VhEHV97tXIVLrYQd6lWpNZzdgxCjV+wDMFCpm8 P8DGdgYXmbjGoV8cn4ipNSRYQs15FPpdO44ERxJUwUaZTK/LG8bqSHA5iGPbm4/Y Bd4Liyj/lPUoIQXwSxLOp78v4og40yb44TvZ6/o9dZuOvCELc60zVha4dlVD8k2P 0EtJtwnRP5U3reSyXzkcA9BRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+9Wu5UH7 go2GNVkCrNIBpC1iHNAwHwYDVR0jBBgwFoAU/DR/mfrUz+7KsxUhAkJ3GusIbXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RUZDLzFEOTM4MkVDNDVC QzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03S3N4VWhBa0ozR3VzSWJY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0RSX21mclV6LTdLc3hVaEFrSjNHdXNJYlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 RUZDLzFEOTM4MkVDNDVCQzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03 S3N4VWhBa0ozR3VzSWJYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABgQluKKpyZD4M5nYGdv0ngmBRorAEGbhTg06DWfZyQ4gyClP5lOF70r ZoQyrfYIMy8GXKB79J1Bbwgw/juKVJcph81YZ8suAH7c0X2Z7QRXNDQoTgcXmX2d 7k+CDK6We3gp5UrncicZEmX10TdmFP+KZO4k2FqhiDEmyJSyw6TUue5ptyUfp6iA LcdjC409iE352fQdcmgKa2qJyopDmzV2WGg41nts9BvtQDc0SUe0dunvvnVCUj80 TfWuCbXVryi5jm5PbTV7/8sTzShNvU6AVpAVXMbAqlvUOOMIl+GHtBWQXOIUdOus gNZvNw+8kIZ6dg1+pG0o7uh8Hz3IR30= -----END CERTIFICATE-----Generated at Fri Dec 19 23:55:11 2025 by rpki-client