This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft File: dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json) Hash identifier: cyod7NVfURZEyD1eyk/EbcSCNmmF050OwlJWefNp98Y= Subject key identifier: E1:6F:45:3B:D6:C8:71:0A:68:05:C7:71:B1:60:F6:9F:E5:AA:A1:BD Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft Manifest number: 017D Signing time: Sun 21 Dec 2025 02:58:05 +0000 Manifest this update: Sun 21 Dec 2025 02:58:04 +0000 Manifest next update: Sun 28 Dec 2025 02:58:04 +0000 Files and hashes: 1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: rotBCWyhLC9vB5welNeehQNa04yslHUrp1ICy7kDGKI=) 2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: Vqca7Dlck5zECijiatjZli/eAV/OHF6vZWtbK8kCw4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Validity Not Before: Dec 21 02:58:04 2025 GMT Not After : Dec 28 02:58:04 2025 GMT Subject: CN=6947623c-c3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:76:e8:b5:f5:2a:a9:3a:48:26:f2:15:66:3f: f3:2a:5b:64:a2:e7:66:f8:30:a1:6e:2c:ec:6f:7d: 9c:06:6f:1b:b4:6b:06:e0:81:59:72:05:84:3d:fd: b3:0e:3e:7b:7f:81:ee:9f:d0:16:6c:b2:4c:6a:3b: d3:70:56:95:10:44:0f:4a:50:ec:18:07:05:db:59: de:82:3b:05:c9:80:cd:6b:10:30:29:a5:b0:ab:fd: b9:68:94:30:d9:07:c5:cb:27:a9:cc:20:eb:db:1f: 64:83:56:a5:e2:12:e7:ec:3d:d4:1c:71:50:c4:36: 22:1b:63:72:72:4b:ef:a8:57:41:bf:0b:c8:74:37: b6:59:4e:25:6a:7d:97:f4:0c:53:cb:97:a7:be:51: 14:0b:60:3d:5a:ce:29:61:b4:57:0c:1a:44:b1:fb: dd:cf:ea:53:87:2f:9f:7d:ce:20:f0:67:9c:69:09: 82:15:36:98:6f:91:26:07:76:27:7b:52:bf:bc:eb: 1b:37:fa:a5:92:d3:1f:45:e2:d6:40:fc:d0:aa:83: 37:5d:aa:11:9a:54:5b:96:ae:1a:4b:32:9f:20:71: aa:87:7f:84:33:67:1b:28:a9:43:5d:16:0a:ae:46: 14:75:30:11:99:f4:a7:12:e5:d6:b3:4a:de:7a:e9: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6F:45:3B:D6:C8:71:0A:68:05:C7:71:B1:60:F6:9F:E5:AA:A1:BD X509v3 Authority Key Identifier: keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:77:3a:4e:22:67:2f:bc:74:4f:08:89:52:71:a8:62:70:3b: 5b:b1:00:79:de:10:72:31:df:a0:1b:f8:85:c7:3f:fa:2f:e6: d5:7d:3a:36:42:6d:c4:07:4e:38:ca:6c:a4:eb:41:b7:67:d6: 48:bf:92:a9:61:c6:e4:94:21:10:3c:56:22:de:b3:c0:61:00: d7:12:3d:5e:9b:07:c3:f0:97:7e:ee:5d:3a:97:39:fb:31:b7: 49:43:2a:79:70:3a:d7:e2:3e:70:45:88:3b:a1:8e:5b:d2:2d: 90:2a:f3:70:e6:3e:ff:70:f0:e9:50:47:2c:57:b4:2e:f3:61: 04:bb:c1:31:16:10:7b:ce:58:26:23:24:f3:86:9e:0f:38:84: cb:0e:76:4b:50:5e:e9:83:61:dc:1d:9b:72:0d:36:3a:c1:3e: a3:a0:e0:d1:1f:0b:30:30:5c:06:a7:d8:f7:82:4b:24:1c:69: 23:e9:eb:0d:bb:67:91:fb:b5:cf:a1:94:8c:9b:f4:a9:0e:74: 13:e7:05:79:fb:28:33:4e:c9:16:71:b9:73:8d:e9:20:60:e2: 32:c4:39:a5:ed:1f:21:30:48:e2:88:50:9f:45:b4:a2:b8:d8: 82:76:71:2b:15:b0:b6:e5:eb:d7:f4:29:3d:ee:76:c2:80:b1: 59:8b:aa:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFREYxMTAvBgNVBAUTKDc3MjNEODU2RTUyMDgyMjRGMkJDODlBMzgwOTc3N0Y1 MjgzMzEyRkMwHhcNMjUxMjIxMDI1ODA0WhcNMjUxMjI4MDI1ODA0WjAYMRYwFAYD VQQDDA02OTQ3NjIzYy1jM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73botfUqqTpIJvIVZj/zKltkoudm+DChbizsb32cBm8btGsG4IFZcgWEPf2z Dj57f4Hun9AWbLJMajvTcFaVEEQPSlDsGAcF21negjsFyYDNaxAwKaWwq/25aJQw 2QfFyyepzCDr2x9kg1al4hLn7D3UHHFQxDYiG2NyckvvqFdBvwvIdDe2WU4lan2X 9AxTy5envlEUC2A9Ws4pYbRXDBpEsfvdz+pThy+ffc4g8GecaQmCFTaYb5EmB3Yn e1K/vOsbN/qlktMfReLWQPzQqoM3XaoRmlRblq4aSzKfIHGqh3+EM2cbKKlDXRYK rkYUdTARmfSnEuXWs0reeunvswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFvRTvW yHEKaAXHcbFg9p/lqqG9MB8GA1UdIwQYMBaAFHcj2FblIIIk8ryJo4CXd/UoMxL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VERi9EOEE3QzczNjk3 MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dpVHl2SW1qZ0pkMzlTZ3pF dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5UFlWdVVnZ2lUeXZJbWpnSmQzOVNnekV2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VERi9EOEE3QzczNjk3MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dp VHl2SW1qZ0pkMzlTZ3pFdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQdzpOImcvvHRPCIlScahicDtbsQB53hByMd+gG/iFxz/6L+bVfTo2 Qm3EB044ymyk60G3Z9ZIv5KpYcbklCEQPFYi3rPAYQDXEj1emwfD8Jd+7l06lzn7 MbdJQyp5cDrX4j5wRYg7oY5b0i2QKvNw5j7/cPDpUEcsV7Qu82EEu8ExFhB7zlgm IyTzhp4POITLDnZLUF7pg2HcHZtyDTY6wT6joODRHwswMFwGp9j3gkskHGkj6esN u2eR+7XPoZSMm/SpDnQT5wV5+ygzTskWcblzjekgYOIyxDml7R8hMEjiiFCfRbSi uNiCdnErFbC25evX9Ck97nbCgLFZi6rb -----END CERTIFICATE-----Generated at Mon Dec 22 11:14:04 2025 by rpki-client