This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: 6ZF2DfjohUE3tuqnDUzbZgliU0yiYeZmnvePZful8Vw= Subject key identifier: D1:83:EC:4E:69:83:A6:4E:EC:14:21:57:82:73:37:14:4A:82:79:42 Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 028B Signing time: Sun 07 Dec 2025 00:06:27 +0000 Manifest this update: Sun 07 Dec 2025 00:06:26 +0000 Manifest next update: Sun 14 Dec 2025 00:06:26 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: Amx2xk8M0x4U5GK2vtWHvLYV1GhG0+HA+qeSrSf76DI=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: 0JYQSMYaFvaLhjpHDbKJtAOfDwR2Txci9jlqVoFvh1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: Dec 7 00:06:26 2025 GMT Not After : Dec 14 00:06:26 2025 GMT Subject: CN=6934c503-d206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:b9:fd:94:ea:80:39:84:69:5c:fe:53:e4: 6c:50:81:e6:5e:80:9b:ce:b0:79:c2:95:87:dd:88: fc:c9:c7:96:28:09:86:f3:8f:0b:cd:ae:d5:75:c0: 30:fe:6d:4e:4c:a4:08:6a:aa:62:f1:ae:24:23:da: b2:be:7a:e6:e0:69:6f:b1:b4:72:1a:c1:03:a9:e9: 53:18:69:60:d8:04:57:c5:f5:5e:dd:b0:6d:a7:43: 49:f6:fa:ee:89:c1:fa:e9:f1:72:ea:72:59:7f:0d: 27:a8:bf:ae:94:86:6e:a4:ed:9b:4d:3f:1d:e3:d8: d2:0b:80:80:94:3f:e8:f6:d5:ac:53:9b:7f:d6:4b: c0:81:d3:c2:c2:ff:3a:80:1a:29:8e:4a:4c:b5:6a: d8:ff:16:89:ca:7c:0b:9f:80:d0:5f:36:a7:fa:80: 3c:06:dd:06:b3:30:86:71:4e:5e:f0:48:93:8f:d8: a1:17:a6:3b:93:75:23:b7:6d:7b:41:7b:14:9d:93: b0:3b:7d:63:6a:e4:35:50:6c:b1:7b:5a:33:d1:04: 8b:9d:18:3d:0a:b8:36:f0:f7:73:b6:56:d2:89:7a: d5:a0:9e:ba:83:20:81:03:8f:75:1c:50:92:15:a0: 5b:b1:4a:cb:e1:76:78:b3:37:44:9b:13:a9:eb:76: 96:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:83:EC:4E:69:83:A6:4E:EC:14:21:57:82:73:37:14:4A:82:79:42 X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:34:ef:8d:23:17:ca:31:69:fe:34:de:37:3a:47:85:66:8e: 23:c7:56:fb:f4:2f:a9:75:44:9a:e6:bb:31:64:f1:5f:b0:5d: 3a:fa:12:e8:48:ee:8f:b4:d4:33:d7:10:ab:c4:54:87:88:76: 2c:bc:e4:16:f2:9e:ad:82:44:60:04:e4:d1:54:e5:80:23:02: a4:ec:6a:7b:49:20:b8:c0:20:a0:eb:8a:7c:9a:4e:9d:69:da: 5e:ef:12:aa:78:03:3f:b8:34:fe:15:a5:2e:ed:97:5c:9a:1f: cd:34:64:46:7e:cc:77:33:df:2c:9e:26:cb:ec:30:04:4b:82: b5:8c:5b:ff:d3:79:09:f5:0d:48:c0:fc:e4:d1:dd:96:d6:99: 62:48:f1:e5:05:63:d5:32:e4:6c:91:38:9c:30:f7:e2:8b:38: 3c:98:18:b4:21:df:10:61:35:29:f7:ee:79:bc:60:5c:3b:3d: 8b:4e:e2:61:f3:bc:22:48:3b:66:1a:36:b0:20:f9:3f:06:0f: 8a:15:7d:96:45:db:78:a2:45:e2:54:9c:38:78:5f:a5:e7:72: 0a:bb:ed:73:26:29:ad:ef:4b:38:f2:c9:b3:0a:bf:9a:39:84: 2c:e5:0e:b5:37:ca:86:45:68:7c:81:31:b6:4d:a2:6f:38:f1: f2:f1:84:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjUxMjA3MDAwNjI2WhcNMjUxMjE0MDAwNjI2WjAYMRYwFAYD VQQDEw02OTM0YzUwMy1kMjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1+5/ZTqgDmEaVz+U+RsUIHmXoCbzrB5wpWH3Yj8yceWKAmG848Lza7VdcAw /m1OTKQIaqpi8a4kI9qyvnrm4GlvsbRyGsEDqelTGGlg2ARXxfVe3bBtp0NJ9vru icH66fFy6nJZfw0nqL+ulIZupO2bTT8d49jSC4CAlD/o9tWsU5t/1kvAgdPCwv86 gBopjkpMtWrY/xaJynwLn4DQXzan+oA8Bt0GszCGcU5e8EiTj9ihF6Y7k3Ujt217 QXsUnZOwO31jauQ1UGyxe1oz0QSLnRg9Crg28PdztlbSiXrVoJ66gyCBA491HFCS FaBbsUrL4XZ4szdEmxOp63aWIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGD7E5p g6ZO7BQhV4JzNxRKgnlCMB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9NO+NIxfKMWn+NN43OkeFZo4jx1b79C+pdUSa5rsxZPFfsF06+hLo SO6PtNQz1xCrxFSHiHYsvOQW8p6tgkRgBOTRVOWAIwKk7Gp7SSC4wCCg64p8mk6d adpe7xKqeAM/uDT+FaUu7Zdcmh/NNGRGfsx3M98snibL7DAES4K1jFv/03kJ9Q1I wPzk0d2W1pliSPHlBWPVMuRskTicMPfiizg8mBi0Id8QYTUp9+55vGBcOz2LTuJh 87wiSDtmGjawIPk/Bg+KFX2WRdt4okXiVJw4eF+l53IKu+1zJimt70s48smzCr+a OYQs5Q61N8qGRWh8gTG2TaJvOPHy8YRr -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:27 2025 by rpki-client