This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json) Hash identifier: G9mrJ4VqEw5WZd4ZsiYe+YqlhHLmc8un8GmaGkYFitA= Subject key identifier: 70:4B:A6:6F:72:6A:1D:86:02:77:A4:32:96:29:F3:BE:E8:95:E0:F7 Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft Manifest number: 23 Signing time: Fri 05 Dec 2025 05:33:32 +0000 Manifest this update: Fri 05 Dec 2025 05:33:32 +0000 Manifest next update: Fri 12 Dec 2025 05:33:32 +0000 Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: Qj7TUU1qEgNNjSVedvNQ7Ute70Y3GdMuOCg0YHSg2zs=) 2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: /OONPuUDLnHhTMEraEKTABbJUmrt5brSg9FbXWyrZbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Validity Not Before: Dec 5 05:33:32 2025 GMT Not After : Dec 12 05:33:32 2025 GMT Subject: CN=69326eac-d792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d4:b6:de:d9:56:c0:d1:4e:f5:83:c4:c7:ba: 6c:f3:93:8b:59:4b:6e:85:3e:dc:ec:1a:c0:40:04: 71:2f:84:f4:83:b3:46:bf:7a:58:e1:67:bf:c0:91: fa:2a:42:04:06:2d:eb:c7:aa:14:4c:6e:b8:72:6a: 32:49:61:36:ce:97:62:d9:09:c8:1c:be:a2:8b:4c: f5:53:e8:63:6b:b1:2a:30:a0:c1:be:76:21:4e:5a: e6:01:5b:fe:3b:c0:bb:74:55:e4:8b:52:64:38:d1: ad:10:45:26:28:c4:f9:6e:db:c0:63:d9:de:8f:97: ee:f2:09:29:bf:25:b3:54:43:f0:4b:d1:39:43:f2: 24:11:78:dd:58:73:e0:da:17:dd:d4:c5:8b:0f:fc: 70:74:b9:a9:fa:91:59:4a:15:1b:e5:0a:2f:56:57: 75:de:8f:98:6d:b1:ab:a4:0b:52:bf:48:6e:0c:23: be:df:d4:68:9e:bb:18:7a:c8:c2:58:aa:c6:c2:74: 5f:47:da:e3:62:80:9d:35:3b:70:2e:fd:14:62:24: 9d:20:08:32:a7:6b:89:0c:c9:a3:c6:00:71:91:a3: 16:2f:b2:6d:0c:3d:41:0e:a7:b7:92:1e:17:86:3b: c9:a7:32:10:15:b6:49:2f:65:99:5f:f4:40:8d:7f: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4B:A6:6F:72:6A:1D:86:02:77:A4:32:96:29:F3:BE:E8:95:E0:F7 X509v3 Authority Key Identifier: keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f3:e4:89:21:c4:c2:1b:6f:0e:00:c0:d8:64:19:69:81:81: 0d:b0:da:6e:c6:3a:8d:dc:6c:a3:b3:de:60:fb:e7:4b:18:c4: 08:26:bf:ba:bc:f4:3b:05:95:76:b6:0d:d0:a6:76:df:69:eb: f3:f9:b6:96:98:ad:87:5b:bc:a0:b0:a9:56:2a:f0:96:9a:05: 46:a6:22:d1:e8:fa:20:3d:68:87:46:18:08:92:f8:e1:c2:c7: 43:ee:b5:68:ed:fc:b7:cb:40:bb:5a:b4:d2:52:9a:b0:93:a7: 96:6d:2c:35:3a:f0:1a:45:2f:05:59:b4:d3:74:46:2e:c4:4a: 9e:91:2f:5b:4b:22:30:66:68:68:e8:ff:83:eb:20:1c:3a:d2: eb:82:b5:33:9c:ee:98:1f:98:de:43:44:26:75:e0:68:ab:e1: 35:89:e6:0b:0c:04:fe:98:b0:3f:48:6e:6a:09:96:c7:24:e8: ac:6b:00:2c:2d:26:7a:1e:d5:bc:62:70:a8:8b:44:fd:ac:b4: c6:af:96:c5:99:59:83:2d:bf:b7:0d:a7:b2:03:ad:94:86:ad: f1:3a:40:89:1c:01:08:a3:21:5f:41:85:41:9a:a5:4b:70:65: f8:f3:45:69:a3:73:d6:08:ca:ad:e2:ff:08:f6:6f:7f:0b:5c: 7a:7f:05:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTI1OTExMC8GA1UEBRMoNzQ1MDM2MDk3NDI5Q0MxQUM3NkM0Qzk5ODk4RDA2Rjgz RTA3NUMxMzAeFw0yNTEyMDUwNTMzMzJaFw0yNTEyMTIwNTMzMzJaMBgxFjAUBgNV BAMTDTY5MzI2ZWFjLWQ3OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf1Lbe2VbA0U71g8THumzzk4tZS26FPtzsGsBABHEvhPSDs0a/eljhZ7/Akfoq QgQGLevHqhRMbrhyajJJYTbOl2LZCcgcvqKLTPVT6GNrsSowoMG+diFOWuYBW/47 wLt0VeSLUmQ40a0QRSYoxPlu28Bj2d6Pl+7yCSm/JbNUQ/BL0TlD8iQReN1Yc+Da F93UxYsP/HB0uan6kVlKFRvlCi9WV3Xej5htsaukC1K/SG4MI77f1Gieuxh6yMJY qsbCdF9H2uNigJ01O3Au/RRiJJ0gCDKna4kMyaPGAHGRoxYvsm0MPUEOp7eSHheG O8mnMhAVtkkvZZlf9ECNf5XlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcEumb3Jq HYYCd6QylinzvuiV4PcwHwYDVR0jBBgwFoAUdFA2CXQpzBrHbEyZiY0G+D4HXBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5L0ZGOTA5MjhDOUNG ODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJySGJFeVppWTBHLUQ0SFhC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEZBMkNYUXB6QnJIYkV5WmlZMEctRDRIWEJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MjU5L0ZGOTA5MjhDOUNGODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJy SGJFeVppWTBHLUQ0SFhCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbz5IkhxMIbbw4AwNhkGWmBgQ2w2m7GOo3cbKOz3mD750sYxAgmv7q8 9DsFlXa2DdCmdt9p6/P5tpaYrYdbvKCwqVYq8JaaBUamItHo+iA9aIdGGAiS+OHC x0PutWjt/LfLQLtatNJSmrCTp5ZtLDU68BpFLwVZtNN0Ri7ESp6RL1tLIjBmaGjo /4PrIBw60uuCtTOc7pgfmN5DRCZ14Gir4TWJ5gsMBP6YsD9IbmoJlsck6KxrACwt Jnoe1bxicKiLRP2stMavlsWZWYMtv7cNp7IDrZSGrfE6QIkcAQijIV9BhUGapUtw ZfjzRWmjc9YIyq3i/wj2b38LXHp/Baw= -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:44 2025 by rpki-client