This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft File: DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json) Hash identifier: ysJDMRqbW/s+BSA+HcZ7K5uS09ckybwi1gY6ZOOf7QU= Subject key identifier: F1:1A:5C:60:4A:6E:A9:70:ED:50:FF:DC:B2:03:56:41:F8:91:A5:DE Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 Certificate issuer: /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft Manifest number: 2F Signing time: Fri 05 Dec 2025 05:26:06 +0000 Manifest this update: Fri 05 Dec 2025 05:26:05 +0000 Manifest next update: Fri 12 Dec 2025 05:26:05 +0000 Files and hashes: 1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: 90JkJfVqPIffcO2aqruoDARiFkXj/driHivhqYYQf4M=) 2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: llPDQC2jO2w/FvD6c8zrwk1KVoD3gjXSKUJ2H5qo9rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Validity Not Before: Dec 5 05:26:05 2025 GMT Not After : Dec 12 05:26:05 2025 GMT Subject: CN=69326ced-36d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:15:6f:b1:39:25:90:0d:76:8d:e9:69:ed: cd:f6:ae:ef:e7:cf:82:35:07:ad:50:5c:a2:fe:34: d0:e9:1a:e9:cf:22:8b:b3:02:c8:95:d8:f9:79:ec: 7a:53:2a:ab:7c:24:81:d3:2b:7c:f4:4f:aa:7d:2a: 8e:b0:23:d5:31:02:18:3d:b2:40:61:1a:1e:db:b4: cb:ee:5d:6b:7f:d2:7b:8f:0b:28:9f:60:05:a1:09: 21:47:f2:49:35:76:3d:5a:ea:88:12:b4:c0:43:57: 00:e5:67:7a:61:4d:a0:f9:b3:11:cd:3a:ea:37:86: 2f:9a:51:78:6c:9b:54:81:f6:a3:b0:46:8b:a4:40: 24:5a:17:0c:84:c2:90:c1:ac:fc:86:b3:c7:54:14: 94:2c:3d:7f:1d:53:f7:f2:3c:74:07:bf:72:b3:bb: a2:9c:56:b0:b3:88:bb:42:d7:2e:12:92:7a:6e:ef: 28:c7:31:72:93:fe:c0:cb:f0:f9:ee:05:ff:25:46: 46:d3:f7:35:0a:65:cc:58:2f:9a:44:1a:45:aa:89: e8:91:3b:9f:49:54:7d:99:c5:ad:5b:bb:18:ab:28: 95:5a:8c:fe:e6:37:4d:bb:8b:2b:3d:54:df:d2:c9: 49:0d:a0:d1:07:2e:cf:61:ee:5f:67:97:9a:23:da: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1A:5C:60:4A:6E:A9:70:ED:50:FF:DC:B2:03:56:41:F8:91:A5:DE X509v3 Authority Key Identifier: keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:44:ed:ac:55:0e:ee:ff:8d:25:b8:23:20:98:55:e2:e8:49: 19:5b:a7:9a:3c:e5:24:92:87:2e:1a:eb:ee:95:51:d3:67:57: 0d:26:68:f5:9a:33:9c:59:45:39:c7:ef:62:5f:6f:da:c6:ac: b0:d9:b0:1f:0e:a0:a7:e0:b1:35:34:37:b7:98:aa:53:44:12: ba:df:aa:11:ae:e4:8c:dd:a7:48:86:9e:3b:2a:ab:63:ce:62: df:44:f5:43:0f:0e:17:57:43:02:bc:fc:34:82:b6:41:ae:9d: 63:c3:4b:03:fc:46:7f:41:61:95:5e:18:05:fa:a4:df:3d:50: d5:5a:0c:24:ec:29:fd:0f:e2:42:b1:f1:68:a2:2c:23:bf:64: 0f:2f:63:5c:4a:81:88:f5:4b:c3:a8:91:30:12:3e:54:59:40: fd:93:4a:ec:e2:4c:0b:ec:2c:7d:f8:be:a0:b6:ce:3f:09:7e: aa:90:0e:70:33:0d:e6:3d:40:7d:2e:a9:d0:a1:1c:25:51:c4: bb:84:b0:ee:57:6f:b2:3f:1d:18:25:e3:16:e1:11:8f:28:20: 00:2a:53:70:79:59:b4:db:c7:21:36:cc:eb:6e:f2:b8:8d:56: 0a:5d:b6:a2:b9:c1:38:9b:79:36:8e:0c:3e:11:8f:7d:49:83: 34:a8:ba:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDExNDExMC8GA1UEBRMoMEQ4QzFGMTEwQkRCMzNEMDUzQjY1NkJCQTAwNzNCOTMw QzY0RjMxNDAeFw0yNTEyMDUwNTI2MDVaFw0yNTEyMTIwNTI2MDVaMBgxFjAUBgNV BAMTDTY5MzI2Y2VkLTM2ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHmBVvsTklkA12jelp7c32ru/nz4I1B61QXKL+NNDpGunPIouzAsiV2Pl57HpT Kqt8JIHTK3z0T6p9Ko6wI9UxAhg9skBhGh7btMvuXWt/0nuPCyifYAWhCSFH8kk1 dj1a6ogStMBDVwDlZ3phTaD5sxHNOuo3hi+aUXhsm1SB9qOwRoukQCRaFwyEwpDB rPyGs8dUFJQsPX8dU/fyPHQHv3Kzu6KcVrCziLtC1y4Sknpu7yjHMXKT/sDL8Pnu Bf8lRkbT9zUKZcxYL5pEGkWqieiRO59JVH2Zxa1buxirKJVajP7mN027iys9VN/S yUkNoNEHLs9h7l9nl5oj2tSxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8RpcYEpu qXDtUP/csgNWQfiRpd4wHwYDVR0jBBgwFoAUDYwfEQvbM9BTtla7oAc7kwxk8xQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMTE0Lzc5RDQzMEJDODg5 MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlCVHRsYTdvQWM3a3d4azh4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRFl3ZkVRdmJNOUJUdGxhN29BYzdrd3hrOHhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MTE0Lzc5RDQzMEJDODg5MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlC VHRsYTdvQWM3a3d4azh4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFFE7axVDu7/jSW4IyCYVeLoSRlbp5o85SSShy4a6+6VUdNnVw0maPWa M5xZRTnH72Jfb9rGrLDZsB8OoKfgsTU0N7eYqlNEErrfqhGu5Izdp0iGnjsqq2PO Yt9E9UMPDhdXQwK8/DSCtkGunWPDSwP8Rn9BYZVeGAX6pN89UNVaDCTsKf0P4kKx 8WiiLCO/ZA8vY1xKgYj1S8OokTASPlRZQP2TSuziTAvsLH34vqC2zj8JfqqQDnAz DeY9QH0uqdChHCVRxLuEsO5Xb7I/HRgl4xbhEY8oIAAqU3B5WbTbxyE2zOtu8riN VgpdtqK5wTibeTaODD4Rj31JgzSoujI= -----END CERTIFICATE-----Generated at Sat Dec 6 22:11:55 2025 by rpki-client