This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: jRfESqYTPlU4/yOEHVciiR5y4Bb3wMz51UT5ltuCPmA= Subject key identifier: 07:AD:0B:76:E2:19:F3:D3:D4:52:8B:27:49:08:F8:35:D6:11:D6:9E Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 0434 Signing time: Sat 06 Dec 2025 22:57:58 +0000 Manifest this update: Sat 06 Dec 2025 22:57:58 +0000 Manifest next update: Sat 13 Dec 2025 22:57:58 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: aQqxqHPgsIs6Nh1BvpYXPUmjk067BrWS105hntoBOR4=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: gOa0TpZKNAKtEp1z7Y7hA0Mkc96+IudmzfWq1Ab24PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: Dec 6 22:57:58 2025 GMT Not After : Dec 13 22:57:58 2025 GMT Subject: CN=6934b4f6-7502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:ca:a0:ce:29:82:a2:5c:0a:c0:85:cb:33: 40:40:82:b9:fc:3a:27:3c:68:11:41:46:e1:43:58: 6d:b1:46:ca:37:31:e1:ea:9d:84:e2:78:29:5c:cd: 9a:0e:a3:d1:f8:76:0d:07:e1:38:ad:77:9e:10:70: 92:3d:00:bc:bd:8b:04:3c:97:cc:7a:4b:42:5c:31: bc:e0:76:d7:97:b7:b0:7a:cb:e5:54:22:2b:55:95: 0c:64:f8:bf:94:f0:04:88:05:b6:8f:5a:93:2b:8b: 90:a1:04:b8:70:04:8a:e3:e4:22:b7:ea:32:68:85: 0d:c1:5d:39:3b:10:b3:38:5f:a2:87:57:21:2f:da: 39:7f:f9:7d:9d:3d:57:ba:8b:af:c2:ac:48:85:e3: 03:35:a1:b6:b4:7a:45:ff:e3:d2:31:e9:b0:63:38: 5c:ee:9c:c4:1c:bf:d5:59:02:85:a6:5a:f6:5e:a6: 06:71:9f:43:b0:17:38:db:66:27:dd:32:dc:19:f7: 10:ce:4d:3c:86:e0:0a:a4:8f:9a:51:93:4d:47:a1: 12:2f:e5:a8:69:e5:c4:1c:07:64:8d:66:14:5d:c5: 82:15:e6:23:4c:a1:4e:a3:9b:91:0c:08:a9:2d:85: f5:b0:1d:f1:a7:4d:27:05:0c:59:c9:5a:f7:2b:d0: 68:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AD:0B:76:E2:19:F3:D3:D4:52:8B:27:49:08:F8:35:D6:11:D6:9E X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:01:5e:84:03:df:dc:45:c7:03:d2:b4:b2:93:8c:e0:5c:80: 3c:10:bb:1b:12:1b:fb:c1:f5:92:7f:71:b8:ab:06:64:09:88: 3c:70:50:45:e1:45:4f:79:97:a1:6c:6c:dd:da:44:66:54:28: ee:55:c2:fb:f1:fc:7c:c3:35:6f:34:79:26:f8:f4:03:ad:6b: 71:ed:e5:38:41:02:0a:2c:90:3b:0f:4e:aa:78:7a:f8:e7:93: b3:6f:9a:65:a3:c6:ff:8a:c1:b5:8a:47:9d:c7:8d:93:b1:df: c9:04:6b:7d:11:d8:ff:e0:c5:8a:4d:89:ec:ad:2b:49:a1:9c: 52:d8:b5:b0:57:fd:05:35:e5:7f:0d:0e:a5:e4:23:95:be:0a: 21:36:9c:78:9b:e3:96:c5:b2:dd:29:f4:60:77:fa:7c:a7:45: 8c:00:31:4e:6d:f9:e9:49:db:50:e8:4a:7f:f2:bb:cd:ce:d6: 8c:80:fa:63:ef:ce:70:c4:d3:77:26:10:93:b2:af:6b:95:5b: 92:84:23:6b:04:e0:14:15:42:56:29:c7:bd:3e:50:31:ed:7d: 80:9f:f0:e1:cd:bc:10:88:7c:b1:3d:59:ae:de:98:0a:7e:54: c4:98:9f:81:45:a6:65:cb:46:6b:65:38:dd:23:e6:15:57:85: 9d:98:92:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjUxMjA2MjI1NzU4WhcNMjUxMjEzMjI1NzU4WjAYMRYwFAYD VQQDEw02OTM0YjRmNi03NTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIXKoM4pgqJcCsCFyzNAQIK5/DonPGgRQUbhQ1htsUbKNzHh6p2E4ngpXM2a DqPR+HYNB+E4rXeeEHCSPQC8vYsEPJfMektCXDG84HbXl7ewesvlVCIrVZUMZPi/ lPAEiAW2j1qTK4uQoQS4cASK4+Qit+oyaIUNwV05OxCzOF+ih1chL9o5f/l9nT1X uouvwqxIheMDNaG2tHpF/+PSMemwYzhc7pzEHL/VWQKFplr2XqYGcZ9DsBc422Yn 3TLcGfcQzk08huAKpI+aUZNNR6ESL+WoaeXEHAdkjWYUXcWCFeYjTKFOo5uRDAip LYX1sB3xp00nBQxZyVr3K9BoDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAetC3bi GfPT1FKLJ0kI+DXWEdaeMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDAV6EA9/cRccD0rSyk4zgXIA8ELsbEhv7wfWSf3G4qwZkCYg8cFBF 4UVPeZehbGzd2kRmVCjuVcL78fx8wzVvNHkm+PQDrWtx7eU4QQIKLJA7D06qeHr4 55Ozb5plo8b/isG1ikedx42Tsd/JBGt9Edj/4MWKTYnsrStJoZxS2LWwV/0FNeV/ DQ6l5COVvgohNpx4m+OWxbLdKfRgd/p8p0WMADFObfnpSdtQ6Ep/8rvNztaMgPpj 785wxNN3JhCTsq9rlVuShCNrBOAUFUJWKce9PlAx7X2An/DhzbwQiHyxPVmu3pgK flTEmJ+BRaZly0ZrZTjdI+YVV4WdmJKV -----END CERTIFICATE-----Generated at Sun Dec 7 06:19:08 2025 by rpki-client