This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: VkHcGDGnDj+uZRLqts/A0/ta2TrmY8FobawZ/CBsA8E= Subject key identifier: B1:9A:90:F8:E0:D5:52:67:0C:48:AC:0B:52:69:6B:8C:81:85:27:CD Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 2064 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 18E3 Signing time: Sat 06 Dec 2025 16:44:24 +0000 Manifest this update: Sat 06 Dec 2025 16:44:23 +0000 Manifest next update: Sat 13 Dec 2025 16:44:23 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: zh95mCp0UJT6jlFcXb9E2d+YCp9A2iS9vt/hGKKteO8=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: EHblWN/sQZKLg9HDhv2zyoanKhtnruUlRN2jtd5a8fY=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: vkLbx3UKTR9g9Nkc39hdbcDwUn28d/ORpVf5hXTtd6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8292 (0x2064) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Dec 6 16:44:23 2025 GMT Not After : Dec 13 16:44:23 2025 GMT Subject: CN=69345d68-2717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:d3:e4:4c:65:50:f0:43:cc:7f:2f:8b:f5: 1b:2b:a7:5a:3e:03:26:d4:96:f3:d0:e5:dc:e8:d2: 0a:eb:4f:37:d1:8b:2c:00:81:ad:e9:37:d9:7d:e0: 15:1b:24:54:75:c6:76:ca:2f:53:48:5a:30:b9:d9: b8:b0:8f:3b:bf:c1:cc:91:04:d3:b5:ce:9c:d9:a1: b2:44:3f:d1:74:86:ca:2a:41:1a:d0:78:40:2e:c7: a8:35:49:41:ce:a3:5e:be:c7:75:49:43:33:66:12: 1b:0d:40:f3:e7:20:22:d3:ce:74:8f:a5:4e:65:bc: 74:77:37:3f:2e:14:ed:0a:50:ed:2a:c3:e1:38:5b: bc:67:29:dc:9c:c4:86:78:55:52:40:56:b2:f2:00: 6b:24:10:f5:c8:97:6b:a1:07:33:29:b7:23:3c:93: b1:d3:11:65:9a:ea:7d:c9:09:25:9e:3a:d0:d9:be: bb:3b:3f:c1:e9:81:63:53:37:e1:ad:74:13:f1:c5: 17:98:5e:99:09:32:8c:e1:16:35:24:a8:79:5b:0b: e6:89:56:29:f8:44:22:10:b2:9b:04:86:b3:f8:67: bf:73:f8:a9:ad:fa:22:c9:8b:4a:3d:01:1c:23:f6: 02:4f:02:c5:1f:75:bd:76:a9:a7:75:58:ce:7b:86: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9A:90:F8:E0:D5:52:67:0C:48:AC:0B:52:69:6B:8C:81:85:27:CD X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a3:69:fe:7d:cb:fa:a0:2d:d6:69:66:46:91:34:fc:b0:4c: c0:e9:01:ea:c1:23:d5:bd:6f:9f:4f:27:7b:a7:e4:f8:38:f0: c7:0c:a3:6e:d2:54:bf:c6:56:b9:c9:5e:18:b0:d9:af:30:d5: a3:ae:9e:9a:76:cf:3d:56:a5:41:27:bf:92:12:04:ec:b8:b0: 6b:3b:f9:6a:57:b0:d4:ad:49:75:7e:e3:0c:8a:6e:62:6b:41: 9b:0d:30:62:16:2a:56:3d:d7:f1:44:01:e9:b5:00:d6:c0:0d: b5:70:9c:18:65:8d:67:f1:da:6f:4e:2c:7f:6f:1d:56:c0:90: cd:12:50:23:c8:23:cf:d5:dc:29:4d:7b:02:c9:63:fb:f3:17: 1a:cd:0b:17:f0:e8:11:17:2e:0a:7c:26:61:98:d7:01:5f:28: a5:9d:33:16:67:71:ec:14:c9:d1:34:c8:75:71:12:d2:6b:d3: 63:56:b1:81:e0:bd:1c:35:45:00:1d:4c:0d:a0:9d:a2:79:51: 01:e6:84:85:0b:64:fd:41:b3:e0:49:ee:a3:06:68:cd:a1:63: bc:c7:0f:11:1f:f2:bf:fb:b5:d9:0d:98:59:76:8b:1e:b0:3c: 18:8e:b1:f5:69:4a:5f:f7:c5:ec:8e:ab:5f:d9:a7:b5:3d:af: 7d:0f:3e:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjUxMjA2MTY0NDIzWhcNMjUxMjEzMTY0NDIzWjAYMRYwFAYD VQQDEw02OTM0NWQ2OC0yNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyXT5ExlUPBDzH8vi/UbK6daPgMm1Jbz0OXc6NIK60830YssAIGt6TfZfeAV GyRUdcZ2yi9TSFowudm4sI87v8HMkQTTtc6c2aGyRD/RdIbKKkEa0HhALseoNUlB zqNevsd1SUMzZhIbDUDz5yAi0850j6VOZbx0dzc/LhTtClDtKsPhOFu8ZyncnMSG eFVSQFay8gBrJBD1yJdroQczKbcjPJOx0xFlmup9yQklnjrQ2b67Oz/B6YFjUzfh rXQT8cUXmF6ZCTKM4RY1JKh5WwvmiVYp+EQiELKbBIaz+Ge/c/iprfoiyYtKPQEc I/YCTwLFH3W9dqmndVjOe4aQwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGakPjg 1VJnDEisC1Jpa4yBhSfNMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNo2n+fcv6oC3WaWZGkTT8sEzA6QHqwSPVvW+fTyd7p+T4OPDHDKNu 0lS/xla5yV4YsNmvMNWjrp6ads89VqVBJ7+SEgTsuLBrO/lqV7DUrUl1fuMMim5i a0GbDTBiFipWPdfxRAHptQDWwA21cJwYZY1n8dpvTix/bx1WwJDNElAjyCPP1dwp TXsCyWP78xcazQsX8OgRFy4KfCZhmNcBXyilnTMWZ3HsFMnRNMh1cRLSa9NjVrGB 4L0cNUUAHUwNoJ2ieVEB5oSFC2T9QbPgSe6jBmjNoWO8xw8RH/K/+7XZDZhZdose sDwYjrH1aUpf98Xsjqtf2ae1Pa99Dz4o -----END CERTIFICATE-----Generated at Sun Dec 7 02:20:19 2025 by rpki-client