This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json) Hash identifier: fm+/OdQZDuAm9VfUGjcRwxiCFFdqa+mIeKIJfYARGnQ= Subject key identifier: 1C:EF:3F:CA:33:4D:77:48:99:F7:14:22:E5:79:42:EF:E7:F6:A4:70 Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 1412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft Manifest number: 13F1 Signing time: Sat 06 Dec 2025 16:29:45 +0000 Manifest this update: Sat 06 Dec 2025 16:29:44 +0000 Manifest next update: Sat 13 Dec 2025 16:29:44 +0000 Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: TtleID0n0A2SyBHp/apigRuLvSadVYuc3uF9BjT6CTI=) 2: 43A759B0C82811F0B893BE0BC4F9AE02.roa (hash: rbeldU58m4YF2/4dOPbk3su/ZdQtCAeI5lgK94z/0hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5138 (0x1412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Dec 6 16:29:44 2025 GMT Not After : Dec 13 16:29:44 2025 GMT Subject: CN=693459f9-2f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:12:8a:3a:d4:25:9f:9f:6e:6f:51:1a:04: 92:f5:c3:1f:26:75:df:11:71:82:90:89:6d:67:93: 6a:10:14:f3:2b:f9:d4:8a:86:b1:a1:b7:6f:4a:2b: d2:05:e3:6b:66:5c:5c:e9:a7:05:a2:66:93:1a:89: 0c:c3:a0:db:71:ec:8e:67:aa:9f:e5:e4:7f:a2:6f: b6:9a:35:4e:9c:e1:a8:8d:a1:77:aa:60:b4:e1:86: e7:e1:b0:d2:dc:81:3d:39:38:cf:58:77:c2:7d:10: 8f:8e:eb:c8:ba:2f:5d:2f:af:d4:a0:76:f1:fc:8f: 1a:92:5a:db:1e:3d:c9:e4:cf:e2:f5:32:64:e4:68: ac:5b:83:05:03:42:fb:91:94:e8:b0:9f:0a:ce:b5: b8:9e:30:26:d0:30:d0:92:a4:17:da:b7:6a:cf:65: 07:c4:55:c8:0e:d8:e2:45:a5:8f:6b:6f:d0:16:da: 74:7d:dc:de:bb:9d:51:06:c5:88:b6:e6:7c:76:ac: 33:38:ab:4f:82:55:94:7d:b0:ec:61:35:a3:e9:70: f6:c8:e2:c6:d3:21:cb:e3:5e:05:32:24:bc:8f:b2: 14:fc:84:e6:dc:67:77:8c:87:7f:5f:8d:05:80:56: ec:e4:46:ad:8d:f7:93:3b:1c:b6:24:2b:67:b2:63: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EF:3F:CA:33:4D:77:48:99:F7:14:22:E5:79:42:EF:E7:F6:A4:70 X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e1:19:65:bd:6d:ac:44:a5:a6:65:ef:3e:76:1e:18:fc:c4: dd:c7:90:c2:c3:fa:fb:a0:bc:be:ef:4e:0b:82:4e:d0:79:84: 24:6d:a3:0e:e0:2e:3e:54:d9:1b:7c:43:d4:52:73:1e:6a:43: a7:fc:ec:5c:3a:b1:75:61:b6:e3:2c:eb:fe:4d:d4:f6:9f:77: 56:34:f2:dc:34:b6:42:a3:f1:24:a3:f0:a1:c5:b7:26:51:03: 14:25:5f:65:ff:cf:56:8d:5a:ea:86:59:99:55:21:12:11:10: fe:a9:4c:37:3f:6f:10:55:37:9e:b1:99:b5:c8:50:82:bb:5b: 2b:77:f7:fc:a2:9c:b1:32:00:8b:f6:96:aa:33:2d:90:d8:ce: f4:61:c4:ec:60:43:51:77:c9:df:58:66:36:d5:c2:28:9f:4f: 8f:44:d4:05:a5:16:e7:b7:96:57:74:64:10:4e:f0:7d:ee:c0: c0:38:5e:14:bf:17:a0:09:04:de:bc:b6:fc:5a:35:8e:7b:4a: be:12:70:d9:88:8b:f7:50:83:ff:f0:46:cf:15:ac:84:c8:2b: b6:d5:48:9c:81:8e:9f:3b:e2:1f:fe:ed:a4:6c:62:7f:a2:63: 0c:df:24:8c:cb:97:73:5e:41:9e:d2:5c:7d:96:af:4f:78:ab: 79:4b:9f:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjUxMjA2MTYyOTQ0WhcNMjUxMjEzMTYyOTQ0WjAYMRYwFAYD VQQDEw02OTM0NTlmOS0yZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vcSijrUJZ+fbm9RGgSS9cMfJnXfEXGCkIltZ5NqEBTzK/nUioaxobdvSivS BeNrZlxc6acFomaTGokMw6DbceyOZ6qf5eR/om+2mjVOnOGojaF3qmC04Ybn4bDS 3IE9OTjPWHfCfRCPjuvIui9dL6/UoHbx/I8aklrbHj3J5M/i9TJk5GisW4MFA0L7 kZTosJ8KzrW4njAm0DDQkqQX2rdqz2UHxFXIDtjiRaWPa2/QFtp0fdzeu51RBsWI tuZ8dqwzOKtPglWUfbDsYTWj6XD2yOLG0yHL414FMiS8j7IU/ITm3Gd3jId/X40F gFbs5EatjfeTOxy2JCtnsmPq3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzvP8oz TXdImfcUIuV5Qu/n9qRwMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RR dTF4MW1YM2w5OWlsRkMzeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO4RllvW2sRKWmZe8+dh4Y/MTdx5DCw/r7oLy+704Lgk7QeYQkbaMO 4C4+VNkbfEPUUnMeakOn/OxcOrF1YbbjLOv+TdT2n3dWNPLcNLZCo/Eko/Chxbcm UQMUJV9l/89WjVrqhlmZVSESERD+qUw3P28QVTeesZm1yFCCu1srd/f8opyxMgCL 9paqMy2Q2M70YcTsYENRd8nfWGY21cIon0+PRNQFpRbnt5ZXdGQQTvB97sDAOF4U vxegCQTevLb8WjWOe0q+EnDZiIv3UIP/8EbPFayEyCu21UicgY6fO+If/u2kbGJ/ omMM3ySMy5dzXkGe0lx9lq9PeKt5S5/V -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:51 2025 by rpki-client