This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json) Hash identifier: 6OnkzfM8TIrS8RTePp2vG/0lthxJgbcpulg2cB84X+I= Subject key identifier: 21:8B:4F:A6:B5:AE:DC:A8:12:A8:D0:AE:C1:D4:1D:E4:BC:DB:EE:9B Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft Manifest number: 0170 Signing time: Fri 05 Dec 2025 02:03:58 +0000 Manifest this update: Fri 05 Dec 2025 02:03:58 +0000 Manifest next update: Fri 12 Dec 2025 02:03:58 +0000 Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: SCVVi62kJD/FmSDRGxVVH6gyAajzu0R2Dc3X9CVj8K8=) 2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: rHpWptnNSPwPKucfIIMI/V8JiXjxCpt50nkyeQwzhKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: Dec 5 02:03:58 2025 GMT Not After : Dec 12 02:03:58 2025 GMT Subject: CN=69323d8e-e2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:c0:4f:12:12:29:87:ec:da:d9:84:21:62: ce:d0:22:2d:70:00:08:9b:3a:b4:71:f7:9c:e5:41: 7b:55:03:4f:b6:f5:6b:71:86:63:2e:c6:af:0e:8d: e8:b1:02:26:0c:02:00:ee:27:0b:0a:f9:11:ce:9b: b5:f1:d0:6f:fe:5c:7f:f2:91:c8:33:9e:f8:b6:be: 84:22:77:07:3e:ee:0d:de:41:1f:20:ba:27:40:59: b3:f7:66:af:8b:86:88:fd:1e:1e:ab:3d:f8:20:e9: ab:a1:2b:a2:a5:7a:fd:83:a5:16:9b:70:1b:ce:55: 63:dc:2b:0e:f8:1d:af:62:1b:e9:c9:ad:d7:d1:53: 6f:ee:f0:54:0c:1a:db:ae:0f:7d:5b:7a:70:b4:00: b1:c2:14:7e:f0:3f:f3:13:51:83:ed:24:1d:ce:07: c8:50:45:85:b0:01:37:64:a6:97:98:d7:57:04:a9: 74:d2:2b:88:da:8b:4a:78:81:2c:01:4b:35:3f:42: f1:aa:14:1a:82:6d:11:86:6c:0b:1c:33:e4:45:77: d6:48:75:3b:bf:d8:06:87:05:a6:64:07:68:5c:ed: 56:7c:46:f6:01:59:17:a6:84:9c:e9:3f:99:d1:73: 77:df:79:e2:50:f8:e0:8a:41:ab:12:76:10:26:a2: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8B:4F:A6:B5:AE:DC:A8:12:A8:D0:AE:C1:D4:1D:E4:BC:DB:EE:9B X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e1:97:09:36:09:70:fd:12:dc:8c:0d:21:db:fa:53:3f:f4: 77:ee:db:eb:c4:b8:0c:0e:0a:9e:5d:5a:d2:46:92:9c:93:a4: c9:66:45:16:6c:cc:02:da:43:2c:6c:5a:5a:78:71:47:d7:72: 6e:22:3c:8a:92:ad:1d:80:b7:20:a1:4a:30:df:d8:14:6f:e3: 57:38:aa:8c:83:af:32:d3:74:fc:3e:eb:28:15:86:58:6f:6c: 42:23:c6:1d:65:17:e3:b3:e7:5d:1b:d2:a7:b8:04:5d:9d:fe: f7:e1:dd:cc:4d:76:f7:00:7e:90:e8:27:61:2e:d8:07:da:bc: 76:89:b3:55:2b:67:ee:44:1f:58:29:97:15:e5:20:36:2c:20: 7c:98:b3:20:cf:59:69:d3:e3:9c:50:df:52:cf:98:7f:4e:a1: 1d:63:0e:20:7d:85:66:0a:cd:db:73:dc:7d:d9:05:a4:f9:25: 67:8d:f0:fb:98:04:eb:bc:63:32:bb:6e:05:f0:1c:6b:be:1b: ca:b0:e8:f1:ae:5b:15:97:9d:14:99:c3:0b:d9:08:77:42:ee: 16:bc:a7:41:f5:9c:59:05:d4:2d:f3:6e:e5:79:b0:27:11:ed: 67:03:8f:7f:d2:26:54:f7:a8:92:be:52:a7:ee:e8:0d:8c:17: 46:2f:71:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhEMzAxMTAvBgNVBAUTKDBENjRDNTZFMEU2MTFBNUNDMUQzNTg4Njc2QzU3NERF MjJENTc1MDEwHhcNMjUxMjA1MDIwMzU4WhcNMjUxMjEyMDIwMzU4WjAYMRYwFAYD VQQDEw02OTMyM2Q4ZS1lMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYTATxISKYfs2tmEIWLO0CItcAAImzq0cfec5UF7VQNPtvVrcYZjLsavDo3o sQImDAIA7icLCvkRzpu18dBv/lx/8pHIM574tr6EIncHPu4N3kEfILonQFmz92av i4aI/R4eqz34IOmroSuipXr9g6UWm3AbzlVj3CsO+B2vYhvpya3X0VNv7vBUDBrb rg99W3pwtACxwhR+8D/zE1GD7SQdzgfIUEWFsAE3ZKaXmNdXBKl00iuI2otKeIEs AUs1P0LxqhQagm0RhmwLHDPkRXfWSHU7v9gGhwWmZAdoXO1WfEb2AVkXpoSc6T+Z 0XN333niUPjgikGrEnYQJqJTAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGLT6a1 rtyoEqjQrsHUHeS82+6bMB8GA1UdIwQYMBaAFA1kxW4OYRpcwdNYhnbFdN4i1XUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEQzMC9DRDgwQUFFNjlG RDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEdsekIwMWlHZHNWMDNpTFZk UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEQzMC9DRDgwQUFFNjlGRDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEds ekIwMWlHZHNWMDNpTFZkUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN4ZcJNglw/RLcjA0h2/pTP/R37tvrxLgMDgqeXVrSRpKck6TJZkUW bMwC2kMsbFpaeHFH13JuIjyKkq0dgLcgoUow39gUb+NXOKqMg68y03T8PusoFYZY b2xCI8YdZRfjs+ddG9KnuARdnf734d3MTXb3AH6Q6CdhLtgH2rx2ibNVK2fuRB9Y KZcV5SA2LCB8mLMgz1lp0+OcUN9Sz5h/TqEdYw4gfYVmCs3bc9x92QWk+SVnjfD7 mATrvGMyu24F8BxrvhvKsOjxrlsVl50UmcML2Qh3Qu4WvKdB9ZxZBdQt827lebAn Ee1nA49/0iZU96iSvlKn7ugNjBdGL3Eh -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:09 2025 by rpki-client