This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: Krc0MuD0kMnO9WGNWT034ujZOy0e0PU0ytveqP6sQBo= Subject key identifier: A9:3B:12:BE:14:E6:ED:1F:50:68:CD:1E:AD:7E:8D:1B:5A:5A:71:35 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 0229 Signing time: Fri 05 Dec 2025 00:41:52 +0000 Manifest this update: Fri 05 Dec 2025 00:41:52 +0000 Manifest next update: Fri 12 Dec 2025 00:41:52 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: GCuM4FrG+DhfqwlLrdsbmnCBHxWf0epDB2y/4GpXoJM=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: OIJRm8GaBU5y1XIhl90QydPQzIYTf07qs+pUpIzxFiU=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: YAG2MNWzPx3qv2gqkqHL4HomQQn9WRVJ3LMr6N4DzO8=) 4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: 531eC6P1epXQqATQkPS1k/QZSAZVi7XE0wwzhV1HGkw=) 5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: p5sOlQdOsm0uuNV7G6DKNuM9BbnStZ2ZIjZVpc+0Hyo=) 6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: VkPzYi2ZNs0vU05onLKrq1O6hJdtK/SNgO3aXYDbRas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Dec 5 00:41:52 2025 GMT Not After : Dec 12 00:41:52 2025 GMT Subject: CN=69322a50-7d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b3:d5:d0:cc:47:db:4d:fe:16:22:d1:ae:f5: c7:6f:b8:c5:6a:78:e0:4b:1f:3a:b2:c5:3b:fe:31: b4:32:5e:e1:e9:53:e6:6f:c8:f8:b9:cf:d5:33:ca: e8:9a:20:3f:4a:22:c5:2e:cd:3d:bd:14:1b:82:1d: 41:fc:9f:7f:17:26:6f:8a:4d:af:10:5b:68:33:ad: 49:25:a4:f0:bf:bb:f7:32:83:76:94:0d:cf:e7:c6: ea:c7:7e:a5:41:de:59:da:d7:47:78:45:04:59:60: 40:7b:d3:f4:8d:63:73:d0:10:92:2d:78:af:6b:cd: 59:48:10:65:26:f0:09:80:5d:12:78:6e:06:ff:2f: 42:ab:ff:e8:be:2b:74:9a:32:ef:f7:89:f8:43:51: 1d:22:4a:7a:99:68:5f:5e:99:49:1a:fb:b7:a4:c2: 79:32:8f:3b:d1:8e:b7:a5:df:8a:23:bc:24:99:73: b4:ec:68:d9:3d:4c:c5:af:74:8f:7e:fe:ed:1f:56: df:9f:e0:a3:b5:e9:54:07:78:f5:ff:59:4d:f2:f9: 77:03:47:ad:2e:33:75:87:28:df:ff:c9:c4:78:40: c1:df:06:e8:98:8b:f7:27:6e:fd:74:f8:9e:f4:03: 0c:e2:28:23:d8:49:a5:da:c5:89:6c:2f:27:af:b8: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3B:12:BE:14:E6:ED:1F:50:68:CD:1E:AD:7E:8D:1B:5A:5A:71:35 X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5d:28:af:01:61:22:13:a8:eb:62:45:b5:ae:52:3e:dd:c1: 89:9b:46:5b:db:c6:8b:3b:a3:39:ce:4a:2e:b1:56:d0:df:d1: c1:28:0e:ee:b8:02:cd:67:02:cc:f5:a2:63:39:87:ab:3c:e4: 07:14:ca:bc:4b:3a:19:ae:31:0d:4b:9c:33:52:05:55:0d:ae: b1:27:e6:a0:61:e6:13:43:6c:7f:c5:16:c0:29:07:a2:a3:83: e2:d1:6a:98:96:cc:ee:21:6a:40:c1:fb:42:c9:68:b6:9b:e1: b4:13:ac:be:ae:30:fd:64:77:5d:ff:00:8c:4b:d8:dc:8a:d7: 25:0f:86:c2:9e:b3:8e:6c:9b:72:96:15:33:89:7a:d9:e3:3d: a0:74:f5:06:ef:b0:56:9e:c7:fe:3e:f8:3b:63:57:ce:9d:2a: 2d:23:c7:77:7c:ca:e8:2f:f9:99:77:91:28:33:04:93:96:dd: 5b:4e:dd:c5:69:f5:f4:5e:a1:7a:ed:ec:96:91:d4:50:21:0d: 4b:2d:0e:3e:25:78:17:c2:be:d2:b3:f2:0e:eb:a4:2f:d1:28: 77:17:01:1b:1e:bc:93:26:4c:f9:26:fa:98:43:35:68:f3:33: 38:17:df:98:04:cd:f8:8d:25:d5:8f:ba:44:10:e1:3c:ae:36: a3:de:ab:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUxMjA1MDA0MTUyWhcNMjUxMjEyMDA0MTUyWjAYMRYwFAYD VQQDEw02OTMyMmE1MC03ZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbPV0MxH203+FiLRrvXHb7jFanjgSx86ssU7/jG0Ml7h6VPmb8j4uc/VM8ro miA/SiLFLs09vRQbgh1B/J9/FyZvik2vEFtoM61JJaTwv7v3MoN2lA3P58bqx36l Qd5Z2tdHeEUEWWBAe9P0jWNz0BCSLXiva81ZSBBlJvAJgF0SeG4G/y9Cq//ovit0 mjLv94n4Q1EdIkp6mWhfXplJGvu3pMJ5Mo870Y63pd+KI7wkmXO07GjZPUzFr3SP fv7tH1bfn+CjtelUB3j1/1lN8vl3A0etLjN1hyjf/8nEeEDB3wbomIv3J279dPie 9AMM4igj2Eml2sWJbC8nr7jnxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKk7Er4U 5u0fUGjNHq1+jRtaWnE1MB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjXSivAWEiE6jrYkW1rlI+3cGJm0Zb28aLO6M5zkousVbQ39HBKA7u uALNZwLM9aJjOYerPOQHFMq8SzoZrjENS5wzUgVVDa6xJ+agYeYTQ2x/xRbAKQei o4Pi0WqYlszuIWpAwftCyWi2m+G0E6y+rjD9ZHdd/wCMS9jcitclD4bCnrOObJty lhUziXrZ4z2gdPUG77BWnsf+Pvg7Y1fOnSotI8d3fMroL/mZd5EoMwSTlt1bTt3F afX0XqF67eyWkdRQIQ1LLQ4+JXgXwr7Ss/IO66Qv0Sh3FwEbHryTJkz5JvqYQzVo 8zM4F9+YBM34jSXVj7pEEOE8rjaj3qua -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:13 2025 by rpki-client