This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: EpBLfi0ABWrJSYp6RG0Jua58LfXAAlmORCOCcLh8hPI= Subject key identifier: B5:5F:B9:18:E3:B9:7A:E9:0C:7E:F9:26:47:2C:10:7B:D5:2E:21:0B Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: 49 Signing time: Fri 05 Dec 2025 05:17:49 +0000 Manifest this update: Fri 05 Dec 2025 05:17:48 +0000 Manifest next update: Fri 12 Dec 2025 05:17:48 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: OccKIckIp4OOcMSa51IqGR/rpCclIIiBmAdxKMSa5pk=) 2: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: 9Zb0Av6EsVPUvpAr5Wo6+2kZEuOjOMIuyYuVnzvL3ro=) 3: 44C226F2A5B111F095806166C4F9AE02.roa (hash: Z5IARCPdVB3zQ2o9DruEtHimglf8XZQg6KsX+TluqNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Dec 5 05:17:48 2025 GMT Not After : Dec 12 05:17:48 2025 GMT Subject: CN=69326afd-f308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:6c:0f:ac:79:b8:e0:da:60:75:69:ae:f9: bc:00:a9:67:bd:fc:f4:a2:21:86:6d:2f:88:0e:0e: 80:79:da:82:63:93:9c:75:a3:e7:29:ac:1d:b6:5c: e6:0d:f6:23:d3:6d:b1:30:ce:5d:5e:35:58:17:39: 02:6c:db:bf:29:85:05:68:75:7d:b4:eb:67:16:26: e6:5b:ba:ff:95:4d:71:c5:c7:39:04:f5:62:db:6e: 33:1f:0a:54:78:09:3a:c7:8e:1a:cd:e4:dc:c0:4e: 59:3f:1c:36:45:c7:03:92:b9:1c:10:cd:1e:eb:9e: d4:de:02:2e:69:e1:a6:cd:d9:08:b7:94:89:48:c8: 8d:e5:a3:d4:84:13:29:80:0b:ce:d5:ca:0b:20:7d: 46:26:df:4e:62:3b:ce:43:a6:ab:c9:46:1d:41:94: 5b:64:fa:a3:ba:c4:0e:2a:3a:c4:49:04:4c:7d:68: c2:12:92:b5:e6:6f:b6:72:94:4b:20:6d:19:e8:f1: 0d:45:96:5d:14:4f:69:93:3c:43:af:02:a3:d0:79: 7c:c4:1e:82:38:52:33:28:da:04:1b:5e:c9:b6:91: ca:3a:ff:76:f2:fd:11:0e:35:c8:b6:51:d2:17:b0: fa:60:5d:a3:e2:94:d8:df:b7:ad:cb:a6:23:16:8d: 5f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5F:B9:18:E3:B9:7A:E9:0C:7E:F9:26:47:2C:10:7B:D5:2E:21:0B X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:34:e1:19:89:d4:cd:87:dd:fe:84:fd:46:ac:3d:d3:9c:64: b1:20:dc:20:e4:29:cb:c7:ac:7e:b3:5c:52:7b:ba:e8:14:34: 73:bd:38:d3:b9:1f:86:43:1a:6e:b4:fa:3c:1e:61:18:c1:52: 9b:69:b3:62:87:87:4a:73:58:da:08:9e:52:e7:86:47:f5:d6: 3f:8c:f9:d4:9c:e1:45:41:83:9b:68:5f:ce:a4:11:ac:3c:06: 38:18:17:be:5a:df:00:0e:01:65:76:c4:99:06:49:41:8b:25: 0d:e2:b3:65:d9:56:ee:ab:ef:de:7a:f0:99:99:a1:a7:70:08: 37:2b:18:ee:4f:2a:cd:85:26:e1:07:a0:15:08:97:68:ca:e5: cc:02:c7:2f:72:20:d0:77:2f:b6:b5:bf:02:a7:ed:42:36:be: d6:a1:e3:02:f4:a3:87:ff:46:54:0d:c0:56:fd:59:a2:b9:7e: 73:b0:49:f9:49:71:13:c2:84:70:5d:79:8a:0a:1d:cc:a8:7b: 49:64:df:d2:f3:1e:3d:b1:67:7b:79:d0:55:89:86:6a:b4:57: fe:e7:38:99:c8:cd:31:76:d4:ce:00:24:88:4b:bf:c3:c1:0e: ad:af:24:b0:b0:94:77:4f:46:db:f8:51:d6:6b:c3:e3:83:54: fb:98:38:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzI0NzExMC8GA1UEBRMoMEREQUJCRjMxRUVDNjg3NjZFRjY2OUFGOTczNTI0MEMz ODk5MzQ1OTAeFw0yNTEyMDUwNTE3NDhaFw0yNTEyMTIwNTE3NDhaMBgxFjAUBgNV BAMTDTY5MzI2YWZkLWYzMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPWmwPrHm44NpgdWmu+bwAqWe9/PSiIYZtL4gODoB52oJjk5x1o+cprB22XOYN 9iPTbbEwzl1eNVgXOQJs278phQVodX2062cWJuZbuv+VTXHFxzkE9WLbbjMfClR4 CTrHjhrN5NzATlk/HDZFxwOSuRwQzR7rntTeAi5p4abN2Qi3lIlIyI3lo9SEEymA C87VygsgfUYm305iO85DpqvJRh1BlFtk+qO6xA4qOsRJBEx9aMISkrXmb7ZylEsg bRno8Q1Fll0UT2mTPEOvAqPQeXzEHoI4UjMo2gQbXsm2kco6/3by/REONci2UdIX sPpgXaPilNjft63LpiMWjV/3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtV+5GOO5 eukMfvkmRywQe9UuIQswHwYDVR0jBBgwFoAUDdq78x7saHZu9mmvlzUkDDiZNFkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMjQ3LzMyMDQ0QkZFNzFF RTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5G ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGRxNzh4N3NhSFp1OW1tdmx6VWtERGlaTkZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz MjQ3LzMyMDQ0QkZFNzFFRTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUha dTltbXZselVrRERpWk5Gay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHc04RmJ1M2H3f6E/UasPdOcZLEg3CDkKcvHrH6zXFJ7uugUNHO9ONO5 H4ZDGm60+jweYRjBUptps2KHh0pzWNoInlLnhkf11j+M+dSc4UVBg5toX86kEaw8 BjgYF75a3wAOAWV2xJkGSUGLJQ3is2XZVu6r79568JmZoadwCDcrGO5PKs2FJuEH oBUIl2jK5cwCxy9yINB3L7a1vwKn7UI2vtah4wL0o4f/RlQNwFb9WaK5fnOwSflJ cRPChHBdeYoKHcyoe0lk39LzHj2xZ3t50FWJhmq0V/7nOJnIzTF21M4AJIhLv8PB Dq2vJLCwlHdPRtv4UdZrw+ODVPuYODw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:37:47 2025 by rpki-client