This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft File: DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json) Hash identifier: /RmD1LHPGxBHnwRTWfXjmLL6OLEDfG25zF2Me+CuRb4= Subject key identifier: 01:BD:3A:EC:D1:B0:0C:E0:48:9E:C1:AE:46:92:33:C0:A5:47:0F:56 Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C Certificate issuer: /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft Manifest number: 021C Signing time: Sun 07 Dec 2025 00:45:37 +0000 Manifest this update: Sun 07 Dec 2025 00:45:37 +0000 Manifest next update: Sun 14 Dec 2025 00:45:37 +0000 Files and hashes: 1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: zKV0s4NKHB9S4PKaltQ78D+x3vv9rVNM9vLKTZzIlnE=) 2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: 0gXG6s1XCg7u3bAeXFvctWsk7n6C+d/n5aBUKeABS1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847B9, serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Validity Not Before: Dec 7 00:45:37 2025 GMT Not After : Dec 14 00:45:37 2025 GMT Subject: CN=6934ce31-8a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:5b:ca:3b:74:3a:81:1d:6c:67:24:4e:06: 41:b6:ac:ee:9e:16:3d:e5:0c:58:8a:50:0e:81:cc: cf:0e:41:dd:19:5f:26:d5:aa:81:64:29:ce:8d:98: 97:7d:4b:f9:c7:b2:2b:85:c5:8e:ed:12:65:b9:1e: f7:de:fd:cb:9e:7d:48:d2:c6:fc:f1:4c:00:31:3c: d2:9f:03:44:af:a9:21:f1:b7:a7:78:94:09:77:83: d2:44:ee:d2:54:e6:a0:b8:4c:12:14:cc:4d:63:3c: fe:d9:ea:62:cc:fc:3c:92:6c:d5:e6:49:41:7b:8a: a3:8b:03:38:9e:ed:86:e2:72:48:ed:dd:ce:e1:c1: 44:db:12:a3:af:9e:07:8b:6d:22:9c:16:ad:6d:df: dd:cb:91:7b:b5:56:f7:54:d8:f9:93:00:b8:11:7b: 3b:ca:8b:22:f4:71:f1:50:27:e4:3d:37:f1:c6:cc: b7:0e:3a:4f:9c:a2:c6:18:a3:3b:21:31:49:8b:e4: 7b:17:3a:ef:a9:05:c9:a7:a3:80:20:4c:d0:85:ec: 35:9c:ef:21:70:fc:0c:c5:91:b0:36:91:fe:e4:60: 47:86:fd:3e:8d:fa:9a:33:6a:56:b2:71:12:1c:86: 27:1f:55:73:a6:08:24:76:28:d7:80:09:4f:80:89: d6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BD:3A:EC:D1:B0:0C:E0:48:9E:C1:AE:46:92:33:C0:A5:47:0F:56 X509v3 Authority Key Identifier: keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:92:08:5e:92:c2:62:53:a8:5e:8a:44:0f:c8:9b:6d:21:59: 4a:e6:d3:4d:fe:27:c1:0a:54:82:b2:b6:4d:82:64:20:fd:11: b3:1e:c0:91:41:6e:99:7b:05:ad:be:9f:ad:4d:78:e4:53:eb: 63:98:24:36:76:4d:00:1c:d8:3b:82:c4:4f:c3:58:a2:02:a4: ed:b9:5f:ac:12:60:2a:02:e5:98:69:13:78:f5:e4:3e:f3:47: 52:34:bf:67:4b:2e:0b:31:4d:6c:c1:3d:b6:c4:47:1f:dc:9d: cb:0a:2c:c6:3f:e8:7e:16:e8:61:ea:52:43:13:a4:cd:40:ac: 7a:bf:fc:f3:38:dc:66:c4:a2:de:a4:07:f0:1f:1c:ad:cd:46: f0:d2:db:c3:b0:06:ed:f8:f5:e0:27:04:61:54:30:4d:41:85: 9e:79:e5:0a:4d:1a:30:be:54:73:6e:d5:69:57:a5:18:39:df: c0:b0:76:c6:e1:1f:e6:b3:98:18:11:52:7a:9b:c9:d0:a4:d3: 04:09:1f:1e:41:69:85:1c:95:fa:0a:c7:30:29:b0:d6:1c:38: 1b:4d:50:0b:1c:7a:95:2e:09:db:bf:d8:6f:fc:50:56:b3:7c: 8a:16:28:b3:d2:60:4c:62:a4:e2:c5:51:59:3f:ec:fc:a6:00: 6e:18:7c:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QjkxMTAvBgNVBAUTKDBFNTgwNTFCMjRCRDVBREIxQkNDOUYzOEUyRDNFNzM3 NEI2OERCN0MwHhcNMjUxMjA3MDA0NTM3WhcNMjUxMjE0MDA0NTM3WjAYMRYwFAYD VQQDEw02OTM0Y2UzMS04YTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYNbyjt0OoEdbGckTgZBtqzunhY95QxYilAOgczPDkHdGV8m1aqBZCnOjZiX fUv5x7IrhcWO7RJluR733v3Lnn1I0sb88UwAMTzSnwNEr6kh8beneJQJd4PSRO7S VOaguEwSFMxNYzz+2epizPw8kmzV5klBe4qjiwM4nu2G4nJI7d3O4cFE2xKjr54H i20inBatbd/dy5F7tVb3VNj5kwC4EXs7yosi9HHxUCfkPTfxxsy3DjpPnKLGGKM7 ITFJi+R7FzrvqQXJp6OAIEzQhew1nO8hcPwMxZGwNpH+5GBHhv0+jfqaM2pWsnES HIYnH1VzpggkdijXgAlPgInWLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG9OuzR sAzgSJ7BrkaSM8ClRw9WMB8GA1UdIwQYMBaAFA5YBRskvVrbG8yfOOLT5zdLaNt8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdCOS9GQzU1ODg4MkEx NDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0c2J6Sjg0NHRQbk4wdG8y M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZ0ZHeVM5V3RzYnpKODQ0dFBuTjB0bzIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdCOS9GQzU1ODg4MkExNDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0 c2J6Sjg0NHRQbk4wdG8yM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvkgheksJiU6heikQPyJttIVlK5tNN/ifBClSCsrZNgmQg/RGzHsCR QW6ZewWtvp+tTXjkU+tjmCQ2dk0AHNg7gsRPw1iiAqTtuV+sEmAqAuWYaRN49eQ+ 80dSNL9nSy4LMU1swT22xEcf3J3LCizGP+h+Fuhh6lJDE6TNQKx6v/zzONxmxKLe pAfwHxytzUbw0tvDsAbt+PXgJwRhVDBNQYWeeeUKTRowvlRzbtVpV6UYOd/AsHbG 4R/ms5gYEVJ6m8nQpNMECR8eQWmFHJX6CscwKbDWHDgbTVALHHqVLgnbv9hv/FBW s3yKFiiz0mBMYqTixVFZP+z8pgBuGHyk -----END CERTIFICATE-----Generated at Mon Dec 8 09:31:27 2025 by rpki-client