This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: aoqpO3XTn+Tm8FysuKc7ZRNxIjX0Dy5gsawysp3XDNY= Subject key identifier: F4:24:F2:D8:D0:A1:35:81:49:CA:79:AE:D2:29:8A:CA:90:02:D8:12 Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: 5F Signing time: Sun 07 Dec 2025 05:11:47 +0000 Manifest this update: Sun 07 Dec 2025 05:11:46 +0000 Manifest next update: Sun 14 Dec 2025 05:11:46 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: H3Dxs81Rojf0IishSwumzSLHVSTXUGV0H9IiY+9eKRo=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: XYs8/TAj1SKjF36KD3+2Mx5R6rHZ3Npg8Y//QV94Wa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Dec 7 05:11:46 2025 GMT Not After : Dec 14 05:11:46 2025 GMT Subject: CN=69350c92-9123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:47:18:35:e7:13:72:ca:44:fb:0c:dd:d1: eb:67:70:a4:c1:f7:66:68:36:1b:3e:2c:08:5b:ba: 49:6e:f2:41:bd:6c:4e:e4:f4:0f:ce:24:98:65:0f: d4:be:38:d6:0a:af:44:bf:52:4d:9c:42:04:f5:9b: 26:16:f7:37:ae:c7:ae:54:61:13:d6:0b:5e:2a:91: c2:d5:55:b6:78:0a:f9:2e:e0:a6:50:dc:6d:ab:72: cf:68:e4:f5:22:5a:af:38:0e:17:81:2a:07:15:41: e2:84:de:3c:f2:d8:95:48:28:56:84:7c:69:b2:37: 08:8c:9d:9a:72:57:d0:f5:30:da:fb:56:08:38:5c: 80:b9:85:81:11:2f:d2:0f:ce:7d:29:5c:15:f2:9f: fe:49:93:85:4c:c1:6d:96:06:42:47:a3:95:60:d1: 28:06:dc:42:c5:54:8a:61:a7:39:ab:d9:f1:71:95: 0b:5f:fe:be:ce:42:59:4c:6a:b5:e4:b3:15:58:7b: 4a:4c:bf:53:67:87:a2:3e:3c:97:c5:4a:df:d1:23: 97:b1:23:53:20:9b:76:2b:79:b2:83:76:29:b4:3e: 15:7c:cb:54:3f:4c:9d:08:a2:b9:fa:57:2f:cf:4a: b6:cd:e1:c5:1e:b9:72:a3:ec:51:d6:d7:53:9a:bb: f4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:F2:D8:D0:A1:35:81:49:CA:79:AE:D2:29:8A:CA:90:02:D8:12 X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d5:cf:d6:fe:c1:fb:e8:76:a3:9c:f9:07:c2:20:78:e2:18: a8:46:3e:5b:ee:b9:9c:91:80:d4:a7:5a:07:63:88:b1:f1:3f: 44:9b:02:e8:b7:c9:f9:d7:02:99:13:9f:4b:7f:07:f0:4f:ce: 96:6d:ea:ab:a6:2a:10:cc:04:27:e4:ca:bd:3c:71:d4:83:98: d5:30:f8:92:d7:d0:34:10:27:e4:fc:af:4a:5a:60:70:c4:7b: fc:fe:6f:0a:10:d4:7a:33:f0:2c:c0:4a:f6:35:bc:bf:db:ac: 9e:ed:37:c2:24:54:04:a6:07:3b:af:35:e9:95:6f:99:a1:3e: 51:7f:b8:77:eb:fe:6c:e0:5a:16:e2:77:33:26:4c:4b:c7:f0: 5e:20:51:7d:2c:bf:90:ae:90:c3:80:c1:10:fd:40:54:61:a4: 0c:eb:b2:62:a0:40:e3:52:21:f6:4d:e6:64:97:69:d1:f5:9c: 3e:a6:66:71:31:5f:01:42:76:0c:da:88:f4:a8:93:d1:76:a3: 5f:85:3e:2a:ad:cb:26:61:ac:91:f6:af:1a:03:36:f0:ce:35: 79:00:ad:56:1d:8d:6e:9d:e8:35:34:5f:80:66:e4:ab:8c:f6: db:20:53:c5:3a:92:16:46:43:76:ee:45:1b:3b:a3:79:5a:bb: 50:65:c6:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDlDMjExMC8GA1UEBRMoNzREQ0VBQTg1MDZBMkIzMjdGODdBNDJEMDc0MUFDMzZF RURFRUI0OTAeFw0yNTEyMDcwNTExNDZaFw0yNTEyMTQwNTExNDZaMBgxFjAUBgNV BAMTDTY5MzUwYzkyLTkxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw1kcYNecTcspE+wzd0etncKTB92ZoNhs+LAhbuklu8kG9bE7k9A/OJJhlD9S+ ONYKr0S/Uk2cQgT1myYW9zeux65UYRPWC14qkcLVVbZ4Cvku4KZQ3G2rcs9o5PUi Wq84DheBKgcVQeKE3jzy2JVIKFaEfGmyNwiMnZpyV9D1MNr7Vgg4XIC5hYERL9IP zn0pXBXyn/5Jk4VMwW2WBkJHo5Vg0SgG3ELFVIphpzmr2fFxlQtf/r7OQllMarXk sxVYe0pMv1Nnh6I+PJfFSt/RI5exI1Mgm3YrebKDdim0PhV8y1Q/TJ0Iorn6Vy/P SrbN4cUeuXKj7FHW11Oau/TlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9CTy2NCh NYFJynmu0imKypAC2BIwHwYDVR0jBBgwFoAUdNzqqFBqKzJ/h6QtB0GsNu7e60kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0OUMyL0UzQTNERUU2NDhD ODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE56cXFGQnFLekpfaDZRdEIwR3NOdTdlNjBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 OUMyL0UzQTNERUU2NDhDODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pK X2g2UXRCMEdzTnU3ZTYway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADvVz9b+wfvodqOc+QfCIHjiGKhGPlvuuZyRgNSnWgdjiLHxP0SbAui3 yfnXApkTn0t/B/BPzpZt6qumKhDMBCfkyr08cdSDmNUw+JLX0DQQJ+T8r0paYHDE e/z+bwoQ1Hoz8CzASvY1vL/brJ7tN8IkVASmBzuvNemVb5mhPlF/uHfr/mzgWhbi dzMmTEvH8F4gUX0sv5CukMOAwRD9QFRhpAzrsmKgQONSIfZN5mSXadH1nD6mZnEx XwFCdgzaiPSok9F2o1+FPiqtyyZhrJH2rxoDNvDONXkArVYdjW6d6DU0X4Bm5KuM 9tsgU8U6khZGQ3buRRs7o3lau1BlxiA= -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:31 2025 by rpki-client