This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: BnHNBSFFEK2/XNYBd+e9wwzxlxcwss2Uy/TXmXLZvqg= Subject key identifier: 5D:C9:E5:7B:B4:96:8F:FF:FF:CC:94:46:BF:9A:01:9C:0A:49:EB:D0 Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 11E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 11DA Signing time: Sat 06 Dec 2025 16:41:47 +0000 Manifest this update: Sat 06 Dec 2025 16:41:46 +0000 Manifest next update: Sat 13 Dec 2025 16:41:46 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: DYlJFwpN/ZNZLELT+aJ8D8sI0DnLNDM98HtvGchsXkg=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4576 (0x11e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Dec 6 16:41:46 2025 GMT Not After : Dec 13 16:41:46 2025 GMT Subject: CN=69345ccb-5319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a1:4e:82:89:b0:a3:a3:f7:32:0f:b8:06:b8: fa:40:65:1c:01:c6:d1:74:53:69:0a:43:22:cc:b2: 97:7a:ff:39:8f:6d:42:28:42:2e:89:4d:6f:71:ae: c7:2f:9a:f0:6d:4a:45:e7:31:e9:8a:92:91:16:ed: 74:ff:26:7c:d5:b2:79:10:ec:8f:75:47:3c:ad:2d: 06:66:4e:ba:38:c0:02:c7:e6:0f:20:c4:4e:2b:20: 29:9d:ea:2c:fd:7a:4e:68:56:c2:1e:db:a6:b3:e6: 5e:56:c4:65:e5:17:42:88:a7:44:24:bc:ad:c9:10: 1a:fc:f1:91:df:53:55:d0:f1:0c:4d:82:7f:88:c1: 6f:86:26:91:62:8d:0d:3f:c3:9b:13:ab:2b:74:0e: 99:4f:cd:7c:95:8b:28:1d:17:97:5e:da:04:22:0d: 0d:c3:5f:33:85:96:17:e3:11:5d:dd:fb:44:08:60: 64:b3:17:9c:92:5c:fe:00:02:88:34:e4:b8:72:2f: ec:8d:b7:30:ac:0d:84:d8:74:8b:e5:fe:7b:eb:b9: d1:46:87:cb:79:d9:52:ea:20:ed:77:f7:c3:73:36: 2b:e7:60:e2:ad:00:e0:ae:de:fc:fe:17:60:e9:cb: 15:ff:46:d5:13:69:af:7a:50:bf:6e:c6:3b:39:7d: 9c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C9:E5:7B:B4:96:8F:FF:FF:CC:94:46:BF:9A:01:9C:0A:49:EB:D0 X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:6f:a2:44:3f:d9:06:b6:e3:b5:5b:2d:1b:dc:67:c9:dd:68: f0:99:34:a9:34:fe:22:17:8c:e6:40:7e:74:fe:c6:c0:5d:9e: e7:4d:85:71:50:b5:83:4a:27:b2:22:05:e1:47:48:d6:d1:2b: 57:29:6d:08:5b:40:db:70:70:82:a9:15:6c:6f:bd:6d:3c:0c: 5d:0b:7e:85:83:76:04:9c:b1:1b:2a:4c:80:26:8b:ff:24:5e: 16:e1:45:32:6b:58:fe:95:73:55:53:6d:2a:81:68:db:9a:ec: 83:45:ab:7b:f7:63:d0:ae:db:94:d4:4d:77:69:d4:6f:33:fd: f6:87:e8:a1:38:c3:a6:bf:d7:71:35:79:71:7b:ce:30:db:88: fb:5c:24:09:75:b8:c9:cd:39:8c:1d:a7:8d:7b:35:63:8a:be: 4a:38:e9:0b:0c:46:45:75:56:b6:23:f0:af:e9:f4:26:c5:b7: 20:e1:fc:ea:bc:62:85:a8:a5:7a:f6:54:f2:f2:08:77:4d:81: e2:f1:a1:51:93:24:55:6b:99:b4:7a:16:3d:0d:56:60:18:6f: 5c:1f:f9:d8:de:52:22:ac:52:54:f8:6e:47:c5:b7:5f:9a:58: 43:10:26:bb:88:01:41:c6:d5:e5:6a:34:a7:aa:a6:a9:c7:f5: a4:69:88:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjUxMjA2MTY0MTQ2WhcNMjUxMjEzMTY0MTQ2WjAYMRYwFAYD VQQDEw02OTM0NWNjYi01MzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+aFOgomwo6P3Mg+4Brj6QGUcAcbRdFNpCkMizLKXev85j21CKEIuiU1vca7H L5rwbUpF5zHpipKRFu10/yZ81bJ5EOyPdUc8rS0GZk66OMACx+YPIMROKyApneos /XpOaFbCHtums+ZeVsRl5RdCiKdEJLytyRAa/PGR31NV0PEMTYJ/iMFvhiaRYo0N P8ObE6srdA6ZT818lYsoHReXXtoEIg0Nw18zhZYX4xFd3ftECGBksxecklz+AAKI NOS4ci/sjbcwrA2E2HSL5f5767nRRofLedlS6iDtd/fDczYr52DirQDgrt78/hdg 6csV/0bVE2mvelC/bsY7OX2cGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3J5Xu0 lo///8yURr+aAZwKSevQMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSb6JEP9kGtuO1Wy0b3GfJ3WjwmTSpNP4iF4zmQH50/sbAXZ7nTYVx ULWDSieyIgXhR0jW0StXKW0IW0DbcHCCqRVsb71tPAxdC36Fg3YEnLEbKkyAJov/ JF4W4UUya1j+lXNVU20qgWjbmuyDRat792PQrtuU1E13adRvM/32h+ihOMOmv9dx NXlxe84w24j7XCQJdbjJzTmMHaeNezVjir5KOOkLDEZFdVa2I/Cv6fQmxbcg4fzq vGKFqKV69lTy8gh3TYHi8aFRkyRVa5m0ehY9DVZgGG9cH/nY3lIirFJU+G5Hxbdf mlhDECa7iAFBxtXlajSnqqapx/WkaYhi -----END CERTIFICATE-----Generated at Sun Dec 7 06:39:04 2025 by rpki-client