This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: h1uVaNo1hDzMsYunxEbd4KTT3ERpwgB0KKXTMF8PYFg= Subject key identifier: 7E:01:FE:48:04:86:1C:13:72:23:32:EB:AB:4B:12:5B:F9:DF:F7:AC Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 05A6 Signing time: Sat 06 Dec 2025 21:58:37 +0000 Manifest this update: Sat 06 Dec 2025 21:58:37 +0000 Manifest next update: Sat 13 Dec 2025 21:58:37 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: bs2fMCMF+XE5ZJFhu+CHHGhD79+9vMTRKybdiZZdKXk=) 2: 97A9EA446CE211EEA0262334C4F9AE02.roa (hash: O5L0VNBny7pJfYOS9ciWnkG89gWRJAbqHnsSmXbIfoU=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: CJGHkmIeNsyNcyQKQSDuECGqLutAY84BUmcFgCd6XHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Dec 6 21:58:37 2025 GMT Not After : Dec 13 21:58:37 2025 GMT Subject: CN=6934a70d-c757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:15:91:3e:99:06:9b:1a:6e:9d:18:98:ca: cf:c7:50:2f:d6:00:97:a6:a3:12:fd:a3:cf:a0:e7: 84:d9:e8:6b:07:40:0a:32:38:ed:97:fa:7e:91:14: ac:d3:6a:f8:6d:fe:67:6e:72:9e:ea:45:2a:c5:a6: 5b:bb:cc:81:46:c9:bd:2a:d5:87:ac:0c:51:0d:7d: 2a:69:fa:09:5d:5d:eb:2f:77:93:30:39:a9:6b:a8: 5a:0a:1e:db:7a:6c:c8:91:b9:9a:b9:d9:41:3f:2c: cc:7f:5d:2b:ff:cf:d4:c8:95:e7:04:a5:db:57:a0: 09:56:0f:2d:8c:c0:7a:ea:ef:d8:ba:20:8d:fa:eb: a2:4b:15:b1:4f:31:b7:19:1c:35:31:d8:4d:27:a9: bd:07:46:4a:b6:c0:a8:e3:a3:e0:74:b8:01:14:f4: 6e:fe:96:f1:40:51:e4:67:0a:7b:e5:81:56:c1:19: 4f:96:c7:8a:bd:5b:99:ca:25:e9:04:b8:ea:a8:64: 94:be:79:49:bb:ed:6f:13:c4:cf:e3:4a:07:bf:31: 48:3b:ab:4e:9c:7f:63:14:55:9b:be:4b:10:f8:c4: 99:30:e5:78:be:6c:b1:ae:72:e6:75:c9:68:66:15: bc:89:06:8b:c1:56:d0:0b:94:d8:44:a3:6a:28:27: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:01:FE:48:04:86:1C:13:72:23:32:EB:AB:4B:12:5B:F9:DF:F7:AC X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:58:31:a7:6f:3d:f6:d9:3b:2f:dc:58:ff:2e:85:ac:bc:7b: 1f:c0:fa:06:b3:5f:a3:83:27:23:d5:ca:a1:08:14:39:cb:ac: be:86:95:bc:9f:d0:fb:da:dd:0b:e2:f1:dc:11:7d:a3:18:e3: 9d:0b:e9:8d:d7:0d:0a:d9:dc:fe:2e:20:77:10:65:e5:27:45: cc:8c:22:29:c4:1d:b6:68:46:04:fc:80:45:ee:86:fd:ff:d2: cb:33:49:4c:96:7e:23:5f:b8:fb:0f:bf:b1:af:72:65:84:2b: 72:02:5b:16:2f:c5:70:3a:95:34:1a:ee:7a:e8:b5:9d:11:a6: 95:c3:1c:25:15:c5:aa:00:e0:89:82:c0:c6:a6:db:8c:66:23: 85:17:d1:08:01:ea:30:5b:b7:0c:b7:fb:8d:8d:39:c5:2b:95: a5:8b:32:4d:19:eb:5e:f6:4d:b6:b8:37:e0:09:ce:92:cd:fe: 88:6a:b9:fc:41:2f:94:5f:09:3a:40:b0:c1:5e:4b:ef:ce:a3: 91:0f:2f:10:46:78:75:c1:b5:76:a3:ca:b9:4d:fb:35:e1:dd: 7a:5b:92:6b:4c:70:c1:9b:d2:13:9b:10:32:e0:ed:15:4c:d8: 20:3d:f0:ca:4e:08:ce:a2:32:d9:55:42:93:12:40:47:49:30: 40:3b:6f:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjUxMjA2MjE1ODM3WhcNMjUxMjEzMjE1ODM3WjAYMRYwFAYD VQQDEw02OTM0YTcwZC1jNzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTEVkT6ZBpsabp0YmMrPx1Av1gCXpqMS/aPPoOeE2ehrB0AKMjjtl/p+kRSs 02r4bf5nbnKe6kUqxaZbu8yBRsm9KtWHrAxRDX0qafoJXV3rL3eTMDmpa6haCh7b emzIkbmaudlBPyzMf10r/8/UyJXnBKXbV6AJVg8tjMB66u/YuiCN+uuiSxWxTzG3 GRw1MdhNJ6m9B0ZKtsCo46PgdLgBFPRu/pbxQFHkZwp75YFWwRlPlseKvVuZyiXp BLjqqGSUvnlJu+1vE8TP40oHvzFIO6tOnH9jFFWbvksQ+MSZMOV4vmyxrnLmdclo ZhW8iQaLwVbQC5TYRKNqKCfK2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4B/kgE hhwTciMy66tLElv53/esMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACWDGnbz322Tsv3Fj/LoWsvHsfwPoGs1+jgycj1cqhCBQ5y6y+hpW8 n9D72t0L4vHcEX2jGOOdC+mN1w0K2dz+LiB3EGXlJ0XMjCIpxB22aEYE/IBF7ob9 /9LLM0lMln4jX7j7D7+xr3JlhCtyAlsWL8VwOpU0Gu566LWdEaaVwxwlFcWqAOCJ gsDGptuMZiOFF9EIAeowW7cMt/uNjTnFK5WlizJNGete9k22uDfgCc6Szf6Iarn8 QS+UXwk6QLDBXkvvzqORDy8QRnh1wbV2o8q5Tfs14d16W5JrTHDBm9ITmxAy4O0V TNggPfDKTgjOojLZVUKTEkBHSTBAO29U -----END CERTIFICATE-----Generated at Sun Dec 7 10:31:45 2025 by rpki-client