This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json) Hash identifier: gIG5mUCbHYo5iQZf6+j+aSe7o2GlH5vTief9SaHktzM= Subject key identifier: F5:FA:08:78:3F:4C:4B:B6:BB:58:55:08:28:CB:8A:A0:89:0F:A5:D1 Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Certificate serial: 0C74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft Manifest number: 0C66 Signing time: Sat 06 Dec 2025 17:56:30 +0000 Manifest this update: Sat 06 Dec 2025 17:56:29 +0000 Manifest next update: Sat 13 Dec 2025 17:56:29 +0000 Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: FoZqk762ST8aD8HgsciUv6eyjgDp76SISMfx76uxdIk=) 2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: A78SwLmooHlq9R4PbdFEsRScNbphyoHMIpVM4a0cZUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Validity Not Before: Dec 6 17:56:29 2025 GMT Not After : Dec 13 17:56:29 2025 GMT Subject: CN=69346e4e-a133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e8:11:99:1e:42:3b:af:56:6e:e0:f5:83:92: 39:53:10:5f:a8:fb:22:5f:82:07:7e:d2:6e:be:66: ad:62:58:3d:06:28:77:6d:d0:24:d4:b3:a9:f3:0c: 3e:85:57:be:f9:35:75:c6:7a:80:74:56:7d:0a:ea: 70:87:4e:65:42:50:08:8d:d5:6e:82:07:b8:d0:c1: 77:74:bc:89:e3:97:2b:c2:8f:a9:11:ca:7d:4a:8f: 60:ae:c2:e7:88:ab:cb:94:48:1e:bf:1a:58:9b:cc: 99:de:cb:f0:fb:21:00:74:13:aa:17:91:fb:96:b5: 61:d9:4e:46:73:e0:b9:ab:19:9b:da:b1:52:a0:7f: 93:a7:13:f0:89:94:fe:70:a3:1d:73:29:56:8a:5c: 19:95:f9:0f:bf:bb:1d:a0:4d:5e:73:e9:fa:ef:a3: cc:6d:32:8a:ef:b5:b9:41:bf:59:02:0e:67:97:98: de:e7:62:fa:21:46:63:61:91:b0:73:84:63:99:37: 47:d9:f8:af:b7:49:71:e8:32:ea:54:3a:57:c4:f7: 0d:82:1f:03:6c:01:e2:b7:58:ec:49:28:0e:ae:1b: cd:cd:ba:78:3b:ea:7d:0d:b6:0e:3a:ee:51:96:c1: f0:64:89:1d:81:f0:33:d2:e0:44:4b:79:b1:4b:49: f3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FA:08:78:3F:4C:4B:B6:BB:58:55:08:28:CB:8A:A0:89:0F:A5:D1 X509v3 Authority Key Identifier: keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:66:a5:0c:00:30:69:bd:f7:2f:49:b3:ad:dd:09:2a:7c:4f: 3d:1d:82:d9:8a:1f:ba:ca:0d:a4:3d:85:ec:d1:18:3d:f0:1a: 59:ea:3b:77:f0:84:03:74:0a:5e:28:e0:7b:22:0f:43:63:74: 9d:2a:96:3b:80:5a:5c:6a:5e:71:f3:d8:eb:b8:d5:21:38:38: 63:10:87:45:7e:30:e8:5e:30:3e:e5:4b:ec:2f:ad:fa:ba:79: 97:cc:b2:2f:19:f1:6f:d9:f9:ba:3e:35:3f:87:0a:5c:b7:23: d4:94:c9:08:d2:d5:03:4d:75:1e:1b:49:99:36:af:8e:23:a3: e2:c7:6f:2a:31:d8:54:57:8e:7d:9f:f5:47:aa:ee:fa:c6:c6: 28:c3:70:e6:1e:ec:c0:89:e6:b5:0b:7a:68:9b:8b:d6:2e:1b: e6:ce:56:55:cc:22:ef:6e:e2:99:8f:9c:85:78:b5:b9:e6:c6: d3:ce:ef:89:0c:b2:0c:03:11:7c:be:19:94:bd:b8:e0:dd:1c: 29:1b:70:89:55:4b:32:54:85:7e:a1:bb:bd:68:24:65:a8:f1: 65:5b:9c:09:2b:c0:c8:64:9e:ce:73:0a:5d:a4:65:01:97:a9: b7:f1:0b:db:79:f2:f9:f1:00:38:1b:0a:f7:d3:0a:4f:7f:63: 25:9c:0c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB QUZCNzc2Q0MwHhcNMjUxMjA2MTc1NjI5WhcNMjUxMjEzMTc1NjI5WjAYMRYwFAYD VQQDEw02OTM0NmU0ZS1hMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9egRmR5CO69WbuD1g5I5UxBfqPsiX4IHftJuvmatYlg9Bih3bdAk1LOp8ww+ hVe++TV1xnqAdFZ9Cupwh05lQlAIjdVugge40MF3dLyJ45crwo+pEcp9So9grsLn iKvLlEgevxpYm8yZ3svw+yEAdBOqF5H7lrVh2U5Gc+C5qxmb2rFSoH+TpxPwiZT+ cKMdcylWilwZlfkPv7sdoE1ec+n676PMbTKK77W5Qb9ZAg5nl5je52L6IUZjYZGw c4RjmTdH2fivt0lx6DLqVDpXxPcNgh8DbAHit1jsSSgOrhvNzbp4O+p9DbYOOu5R lsHwZIkdgfAz0uBES3mxS0nz7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX6CHg/ TEu2u1hVCCjLiqCJD6XRMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTJBMC80RjFFQUU4NDEzNTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1Jm VXhfMVlUSHJoRldxLTNkc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUZqUMADBpvfcvSbOt3QkqfE89HYLZih+6yg2kPYXs0Rg98BpZ6jt3 8IQDdApeKOB7Ig9DY3SdKpY7gFpcal5x89jruNUhODhjEIdFfjDoXjA+5UvsL636 unmXzLIvGfFv2fm6PjU/hwpctyPUlMkI0tUDTXUeG0mZNq+OI6Pix28qMdhUV459 n/VHqu76xsYow3DmHuzAiea1C3pom4vWLhvmzlZVzCLvbuKZj5yFeLW55sbTzu+J DLIMAxF8vhmUvbjg3RwpG3CJVUsyVIV+obu9aCRlqPFlW5wJK8DIZJ7OcwpdpGUB l6m38QvbefL58QA4Gwr30wpPf2MlnAyz -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:27 2025 by rpki-client