This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft File: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft (raw, json) Hash identifier: duQn8sufGqH3K4/D7iiDeikCP8+Y0Pd2e64F8HyGkOQ= Subject key identifier: 69:FE:78:A2:71:42:35:09:04:C9:64:B0:35:27:88:C4:A5:DB:27:08 Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 Certificate issuer: /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft Manifest number: 3C Signing time: Fri 05 Dec 2025 05:21:26 +0000 Manifest this update: Fri 05 Dec 2025 05:21:26 +0000 Manifest next update: Fri 12 Dec 2025 05:21:26 +0000 Files and hashes: 1: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl (hash: Yl7TIhoPos0oM1wDni8AXKa+H/ng3RSiRGwaDeqTjCI=) 2: 62B3880C7E5D11F0ACC14A80C4F9AE02.roa (hash: LMY9Owm9M+jckWwqhTZOVT7R1zK2QNKKxtGjqP1nA+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Validity Not Before: Dec 5 05:21:26 2025 GMT Not After : Dec 12 05:21:26 2025 GMT Subject: CN=69326bd6-a927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:44:b5:33:e4:f6:c7:81:fa:14:02:5f:d1: 68:3a:03:44:fc:d0:a2:b3:28:6f:06:bc:98:99:7a: d8:87:c6:21:02:ed:1a:ee:7e:1b:99:96:de:f2:a0: b2:e7:c5:86:9a:86:15:ae:23:72:ff:21:4a:b3:c5: e6:b0:1e:12:74:94:0a:24:8a:07:59:ab:d3:9b:f2: 48:d4:72:c3:75:94:4d:db:1a:e3:0a:22:79:06:f6: 5e:ea:ea:7a:c4:48:bf:e0:46:17:38:12:8a:b5:06: d5:b9:c3:db:1a:1f:a3:c9:d0:f8:cf:a0:e9:29:42: ff:9d:98:ab:23:9f:c5:08:d5:b3:8e:f8:31:6a:c9: 4a:91:ff:df:da:a2:95:e6:e1:e1:6b:6e:16:57:f3: 52:62:e2:88:1a:c2:08:12:7e:ec:1b:41:0a:a3:bb: 76:5d:34:7f:1a:c2:6d:9a:18:aa:8d:e7:c3:d8:20: 12:05:8b:e3:40:4d:31:8a:b9:97:50:1b:e6:4b:ec: 4a:d6:98:f6:3f:52:d0:91:12:25:45:c5:1b:fa:a6: 3e:16:ce:cc:bf:d3:c8:ef:d6:c4:bf:e7:f9:3f:d9: 90:b5:de:9c:d3:db:b8:3f:0e:4d:b9:45:ab:59:42: 0b:bd:fc:aa:68:2a:85:c8:50:0f:7d:ef:7e:87:d2: ab:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FE:78:A2:71:42:35:09:04:C9:64:B0:35:27:88:C4:A5:DB:27:08 X509v3 Authority Key Identifier: keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:03:05:ec:c6:a0:0f:66:64:e8:2d:75:cc:35:01:48:97:a4: 70:01:7a:38:f9:a9:cd:ea:40:85:65:bc:7a:cf:6c:7a:a2:5a: a8:f3:1b:22:10:c9:f5:3e:c4:16:4e:f9:d4:ca:ea:46:76:54: 3d:c5:02:c8:b7:43:3c:fe:16:d0:d1:f2:ff:73:6b:a3:bb:77: 4c:31:56:b1:5c:dd:6b:48:ee:50:71:43:dc:2c:31:0b:29:10: 3f:2c:15:3d:33:16:5c:1b:e0:7b:ed:47:a3:1b:9c:54:98:d3: cd:da:81:7b:ab:da:28:39:6f:03:c5:f8:b1:4d:47:6c:dc:6f: 15:79:3e:d5:33:45:8c:0f:1e:a9:39:06:5c:3a:c9:e5:1f:20: 11:ab:19:7e:ab:64:f2:1a:e9:2a:de:30:d1:cf:ba:2f:bf:d4: 5b:06:c6:b1:a3:ea:4b:5d:dd:c8:dd:aa:40:4d:4d:86:fe:8e: 61:1b:26:16:3e:63:60:2e:f9:9e:72:ed:b8:ab:77:52:10:d4: 68:2b:16:69:10:df:79:18:6e:b1:53:a5:50:c5:2b:69:f7:0c: 8d:94:41:13:7b:87:16:0b:20:7a:79:e6:e7:88:17:25:30:cc: b8:81:83:43:90:63:35:30:3c:a0:1f:03:d1:65:94:60:58:59: a6:37:ef:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I3QTExMC8GA1UEBRMoMEMyRjQ1QjZDODg2MjIzMjQyRUM5QkY5M0IzNDY5N0Y2 NERERjY4MDAeFw0yNTEyMDUwNTIxMjZaFw0yNTEyMTIwNTIxMjZaMBgxFjAUBgNV BAMTDTY5MzI2YmQ2LWE5MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR9US1M+T2x4H6FAJf0Wg6A0T80KKzKG8GvJiZetiHxiEC7RrufhuZlt7yoLLn xYaahhWuI3L/IUqzxeawHhJ0lAokigdZq9Ob8kjUcsN1lE3bGuMKInkG9l7q6nrE SL/gRhc4Eoq1BtW5w9saH6PJ0PjPoOkpQv+dmKsjn8UI1bOO+DFqyUqR/9/aopXm 4eFrbhZX81Ji4ogawggSfuwbQQqju3ZdNH8awm2aGKqN58PYIBIFi+NATTGKuZdQ G+ZL7ErWmPY/UtCREiVFxRv6pj4Wzsy/08jv1sS/5/k/2ZC13pzT27g/Dk25RatZ Qgu9/KpoKoXIUA99736H0qsdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaf54onFC NQkEyWSwNSeIxKXbJwgwHwYDVR0jBBgwFoAUDC9FtsiGIjJC7Jv5OzRpf2Td9oAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjdBL0MwODUwNjkyN0RC QjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpKQzdKdjVPelJwZjJUZDlv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREM5RnRzaUdJakpDN0p2NU96UnBmMlRkOW9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QjdBL0MwODUwNjkyN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpK QzdKdjVPelJwZjJUZDlvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABoDBezGoA9mZOgtdcw1AUiXpHABejj5qc3qQIVlvHrPbHqiWqjzGyIQ yfU+xBZO+dTK6kZ2VD3FAsi3Qzz+FtDR8v9za6O7d0wxVrFc3WtI7lBxQ9wsMQsp ED8sFT0zFlwb4HvtR6MbnFSY083agXur2ig5bwPF+LFNR2zcbxV5PtUzRYwPHqk5 Blw6yeUfIBGrGX6rZPIa6SreMNHPui+/1FsGxrGj6ktd3cjdqkBNTYb+jmEbJhY+ Y2Au+Z5y7bird1IQ1GgrFmkQ33kYbrFTpVDFK2n3DI2UQRN7hxYLIHp55ueIFyUw zLiBg0OQYzUwPKAfA9FllGBYWaY375A= -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:40 2025 by rpki-client