This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: Up06IKG4vZDiIdrmb6r7JC5THbqAyzp1hOL861SlyOU= Subject key identifier: 2A:FF:14:AF:42:5D:32:B7:38:92:FC:14:24:57:3D:9B:7C:39:DE:DA Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 0966 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 095F Signing time: Sat 06 Dec 2025 19:18:38 +0000 Manifest this update: Sat 06 Dec 2025 19:18:37 +0000 Manifest next update: Sat 13 Dec 2025 19:18:37 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: FdNcWTji6kHcibfDNtZw6uohd/Iuy+hyxhBB/1oCCLE=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2406 (0x966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Dec 6 19:18:37 2025 GMT Not After : Dec 13 19:18:37 2025 GMT Subject: CN=6934818e-f0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:31:15:c9:49:ec:1a:c6:80:92:03:1e:02: 26:b7:28:6f:09:48:19:97:26:f5:09:ec:a0:8a:a1: f1:8b:6e:b6:87:98:33:d4:c6:48:1f:b3:b2:51:87: 4a:0c:b9:8d:53:8a:66:a9:05:12:19:1a:2b:b9:be: be:7d:be:0d:18:1f:f9:5a:1b:4b:4f:53:ed:57:f3: 39:81:0d:9d:97:c8:2e:82:8d:21:74:81:48:8e:c7: 20:f6:bd:73:22:79:4a:c0:32:60:79:ad:4b:09:5b: 9f:03:53:96:cf:0a:aa:64:bf:be:f6:4d:9d:c4:51: 77:71:12:ff:18:9a:a9:57:4b:c3:e5:fb:47:b5:19: 20:cc:a7:78:aa:3a:70:43:40:ed:4e:a8:68:b4:ac: 5b:5d:be:31:c7:bf:c3:46:44:89:ae:6e:4b:f0:19: 35:3e:0d:6b:02:a4:54:c3:d8:77:4f:3b:17:68:15: 23:a5:fd:3e:4d:cd:09:b3:ff:53:77:82:0a:db:83: c0:f0:40:d0:e4:5f:c8:a6:95:90:c0:7a:91:1c:38: 97:1c:e3:7e:2e:fb:7a:dc:4f:62:2c:0f:37:09:e9: 9a:ab:6d:26:a8:2a:32:1e:da:2a:7e:aa:0c:20:a2: 43:34:51:c5:9e:fb:a5:2b:b5:8e:34:c0:50:35:0c: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FF:14:AF:42:5D:32:B7:38:92:FC:14:24:57:3D:9B:7C:39:DE:DA X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:74:f2:e0:5e:6b:a8:4d:65:88:26:9e:70:ce:44:ef:49:b2: 09:15:d1:f2:c1:78:6d:9b:73:02:98:4d:45:ab:bf:c2:10:51: 8b:3f:ce:9a:51:ba:fb:99:3b:f7:9a:53:27:69:4e:06:15:c4: 82:76:49:a5:2f:95:6f:83:35:8d:cc:ac:6f:7e:20:ac:ae:12: a8:f2:79:1b:00:ca:ee:e4:1b:f8:c8:56:41:11:32:e9:a9:5f: 29:54:b9:c4:37:3c:db:47:fa:53:a1:7f:48:ad:2d:32:ce:99: aa:50:42:7a:49:e4:bf:0d:87:23:d0:d8:cc:9a:7f:bd:89:a5: 8c:65:cb:1f:f8:33:fb:b1:6b:77:ec:2b:1c:b8:66:74:4f:44: de:f6:e7:4c:47:96:60:53:f3:d4:87:ee:22:0a:ab:c0:61:00: d1:8f:1f:ce:4e:d8:dc:a9:ec:4d:f6:f1:25:14:cb:9b:fd:8c: c4:6e:5e:47:b4:aa:07:2d:b2:56:90:e5:17:e0:08:0a:25:67: c1:ed:5b:50:3c:f3:22:92:70:22:f8:80:b6:14:2e:2d:a7:34: 10:12:fb:a1:c0:59:7b:5f:0c:04:bc:b4:14:7d:1f:6c:c3:4a: 6f:e2:84:04:c2:15:89:01:d8:05:9d:e6:17:8a:f7:22:e9:b4: e0:22:15:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUxMjA2MTkxODM3WhcNMjUxMjEzMTkxODM3WjAYMRYwFAYD VQQDEw02OTM0ODE4ZS1mMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kUxFclJ7BrGgJIDHgImtyhvCUgZlyb1CeygiqHxi262h5gz1MZIH7OyUYdK DLmNU4pmqQUSGRorub6+fb4NGB/5WhtLT1PtV/M5gQ2dl8gugo0hdIFIjscg9r1z InlKwDJgea1LCVufA1OWzwqqZL++9k2dxFF3cRL/GJqpV0vD5ftHtRkgzKd4qjpw Q0DtTqhotKxbXb4xx7/DRkSJrm5L8Bk1Pg1rAqRUw9h3TzsXaBUjpf0+Tc0Js/9T d4IK24PA8EDQ5F/IppWQwHqRHDiXHON+Lvt63E9iLA83Cemaq20mqCoyHtoqfqoM IKJDNFHFnvulK7WONMBQNQxJPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr/FK9C XTK3OJL8FCRXPZt8Od7aMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBdPLgXmuoTWWIJp5wzkTvSbIJFdHywXhtm3MCmE1Fq7/CEFGLP86a Ubr7mTv3mlMnaU4GFcSCdkmlL5VvgzWNzKxvfiCsrhKo8nkbAMru5Bv4yFZBETLp qV8pVLnENzzbR/pToX9IrS0yzpmqUEJ6SeS/DYcj0NjMmn+9iaWMZcsf+DP7sWt3 7CscuGZ0T0Te9udMR5ZgU/PUh+4iCqvAYQDRjx/OTtjcqexN9vElFMub/YzEbl5H tKoHLbJWkOUX4AgKJWfB7VtQPPMiknAi+IC2FC4tpzQQEvuhwFl7XwwEvLQUfR9s w0pv4oQEwhWJAdgFneYXivci6bTgIhWG -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:47 2025 by rpki-client