This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json) Hash identifier: KTw84Rd7fkg7K/228HkNHSrWl6+74xts/kaNcQNxAGw= Subject key identifier: D8:63:B6:41:85:29:D9:37:0A:0E:2B:EA:29:80:8F:DD:24:8F:08:96 Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft Manifest number: 0178 Signing time: Sun 21 Dec 2025 03:01:32 +0000 Manifest this update: Sun 21 Dec 2025 03:01:31 +0000 Manifest next update: Sun 28 Dec 2025 03:01:31 +0000 Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: MUMaIVDqC/c+b8N07GnWpo24a2FWhdhPIzao0y4gTt8=) 2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: rHpWptnNSPwPKucfIIMI/V8JiXjxCpt50nkyeQwzhKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: Dec 21 03:01:31 2025 GMT Not After : Dec 28 03:01:31 2025 GMT Subject: CN=6947630c-4eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:ba:1d:e2:ef:e8:eb:f0:f5:32:2a:5b:18: 5f:a6:3c:79:a7:cf:1f:c4:4a:a6:11:24:d8:5e:68: ca:3f:81:7b:53:7b:b4:cb:6c:8f:d8:47:99:dd:b0: f1:d6:af:e7:48:a4:c6:67:e4:49:7d:92:2e:27:fc: 33:dc:df:3c:f0:d2:d2:be:de:9a:28:ba:0e:60:51: a0:2d:77:0a:8d:6a:2a:f9:d0:a1:0c:22:3c:ed:5e: 5f:92:fd:00:29:4d:11:4c:08:c7:b6:ab:d5:6a:04: 7c:db:6e:9e:3a:1c:1d:6a:92:22:92:9e:dd:f6:38: 19:af:ca:1a:73:f0:68:44:76:a9:be:a7:e6:28:06: 04:f2:c0:26:b1:a0:cd:30:4b:68:ff:07:6c:33:93: 7a:2d:2b:70:b9:a5:5c:11:a7:06:a2:1c:fe:db:16: ef:d7:ff:3d:bd:ea:20:82:7c:c5:2c:45:34:b6:51: 07:a6:61:2f:4d:20:04:81:e1:88:bf:a9:fa:2a:75: 58:dd:81:ae:12:f8:bc:14:5a:c3:fd:8a:7c:94:b9: 8e:db:0e:5f:70:85:d7:2a:e8:8c:65:9e:0b:0d:24: b6:77:b0:07:54:3d:93:c6:5f:93:e6:ec:8b:43:f9: a3:8b:a7:7d:98:f4:5c:48:d2:c5:e0:e1:da:c1:aa: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:63:B6:41:85:29:D9:37:0A:0E:2B:EA:29:80:8F:DD:24:8F:08:96 X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:0f:5a:35:1f:4c:03:56:d3:b5:ba:6d:e9:08:1a:56:16:64: 94:9d:f0:80:1c:23:3f:9b:7a:6d:f2:e3:e8:84:b9:8a:9d:70: 04:74:70:e5:88:fa:02:f1:72:4f:99:32:73:f6:c1:ae:b2:e0: 4a:51:d6:3e:ca:75:6f:5f:bf:bd:a6:a5:de:f6:68:eb:63:3c: 25:dd:02:b5:5a:00:d7:51:19:63:d5:22:ea:e6:e3:99:d9:a2: c2:83:66:e1:d9:39:0d:33:d8:8c:e4:c5:eb:8e:fd:ed:be:c6: a2:5b:bd:bd:df:17:14:e3:21:16:00:e4:03:cf:7d:04:d9:81: 0f:73:c1:d3:f1:c5:ae:48:10:5a:61:49:6a:08:2b:53:a1:66: b0:77:de:ad:d8:af:82:aa:16:f2:12:97:2f:d5:9b:19:4e:1d: d2:40:af:77:6f:c9:05:a6:de:3c:d6:49:e2:87:0d:e3:4f:4b: 0b:43:14:ca:2c:80:0f:01:0b:a9:7c:23:43:e7:f5:27:0a:9d: b7:dc:e6:ce:b4:37:20:c8:fc:c2:b7:c3:7d:f8:f8:28:28:84: 4e:10:50:28:01:5c:09:4d:42:70:72:27:40:17:5c:4a:70:89: 9f:74:e3:5d:61:48:c1:de:8b:51:d6:88:01:a4:c1:99:77:26: 02:8e:25:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhEMzAxMTAvBgNVBAUTKDBENjRDNTZFMEU2MTFBNUNDMUQzNTg4Njc2QzU3NERF MjJENTc1MDEwHhcNMjUxMjIxMDMwMTMxWhcNMjUxMjI4MDMwMTMxWjAYMRYwFAYD VQQDDA02OTQ3NjMwYy00ZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIS6HeLv6Ovw9TIqWxhfpjx5p88fxEqmESTYXmjKP4F7U3u0y2yP2EeZ3bDx 1q/nSKTGZ+RJfZIuJ/wz3N888NLSvt6aKLoOYFGgLXcKjWoq+dChDCI87V5fkv0A KU0RTAjHtqvVagR8226eOhwdapIikp7d9jgZr8oac/BoRHapvqfmKAYE8sAmsaDN MEto/wdsM5N6LStwuaVcEacGohz+2xbv1/89veoggnzFLEU0tlEHpmEvTSAEgeGI v6n6KnVY3YGuEvi8FFrD/Yp8lLmO2w5fcIXXKuiMZZ4LDSS2d7AHVD2Txl+T5uyL Q/mji6d9mPRcSNLF4OHawaraeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhjtkGF Kdk3Cg4r6imAj90kjwiWMB8GA1UdIwQYMBaAFA1kxW4OYRpcwdNYhnbFdN4i1XUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEQzMC9DRDgwQUFFNjlG RDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEdsekIwMWlHZHNWMDNpTFZk UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEQzMC9DRDgwQUFFNjlGRDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEds ekIwMWlHZHNWMDNpTFZkUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUD1o1H0wDVtO1um3pCBpWFmSUnfCAHCM/m3pt8uPohLmKnXAEdHDl iPoC8XJPmTJz9sGusuBKUdY+ynVvX7+9pqXe9mjrYzwl3QK1WgDXURlj1SLq5uOZ 2aLCg2bh2TkNM9iM5MXrjv3tvsaiW7293xcU4yEWAOQDz30E2YEPc8HT8cWuSBBa YUlqCCtToWawd96t2K+CqhbyEpcv1ZsZTh3SQK93b8kFpt481knihw3jT0sLQxTK LIAPAQupfCND5/UnCp233ObOtDcgyPzCt8N9+PgoKIROEFAoAVwJTUJwcidAF1xK cImfdONdYUjB3otR1ogBpMGZdyYCjiXJ -----END CERTIFICATE-----Generated at Sun Dec 21 08:39:30 2025 by rpki-client