This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: 0kH+RaqGDI09Pa6fFxpoHoujKz4G9KGDyHWmyHL0JzU= Subject key identifier: 8D:37:E5:24:FA:D5:C6:6F:B3:5D:10:14:2D:33:FB:31:F5:35:07:0D Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1AD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1ACC Signing time: Sat 20 Dec 2025 16:06:22 +0000 Manifest this update: Sat 20 Dec 2025 16:06:22 +0000 Manifest next update: Sat 27 Dec 2025 16:06:22 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: zn8SkbousPnJaS42NBopPk0UyB8PPQk6IGDPrWjcL7c=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: XzGkPPqSTC5CeDxEAOY4CC7n2iKvE4CetGVSiQJeAZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6873 (0x1ad9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Dec 20 16:06:22 2025 GMT Not After : Dec 27 16:06:22 2025 GMT Subject: CN=6946c97e-0866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:67:16:ba:ed:c2:ca:c4:9a:00:23:38:f1:06: a5:a9:8d:a9:00:8e:7a:7f:59:5e:c5:fc:49:25:97: 40:b9:49:d1:96:de:66:71:c3:66:06:db:76:c8:56: 40:c5:c3:db:7d:48:86:5d:3e:df:37:62:f8:cc:1f: 3d:9f:b8:35:9d:4a:64:b7:31:9b:e5:20:98:52:ce: b3:b9:5c:3a:b4:4c:7f:90:c6:3b:d3:60:94:6b:3e: c9:86:ed:85:52:dd:cc:a8:a5:ae:e8:cb:90:9b:99: 3c:c0:ad:88:c1:94:00:0a:1d:c2:b7:c4:23:b9:a5: 00:eb:52:47:90:68:ac:2f:0e:f0:d1:24:b2:06:c3: ed:de:43:f2:c1:67:e2:45:66:3e:5c:cc:de:55:90: 25:71:f0:5a:b7:6c:08:bc:f2:c6:09:40:a8:b3:bf: 1d:dc:69:58:ea:f0:d0:e5:8f:71:0c:ad:a7:11:fc: 07:d2:ac:c3:ba:8c:12:8f:b1:6e:33:31:8b:28:c2: 7e:c9:de:bb:d0:7a:0e:a9:71:a6:30:2b:9d:69:bf: 4f:49:4b:6a:23:47:6a:99:a8:3f:04:19:17:bb:ba: cb:7b:2f:ba:06:a5:00:4f:43:ba:25:d0:c2:77:8e: e1:64:dc:c6:91:27:86:d9:fb:75:28:40:29:5f:8e: 28:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:37:E5:24:FA:D5:C6:6F:B3:5D:10:14:2D:33:FB:31:F5:35:07:0D X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e8:97:5d:52:bc:6e:76:d6:7d:80:67:8d:27:3b:59:a2:f4: 5b:a3:56:25:1d:59:27:ba:f4:4c:38:5e:76:b9:c0:5a:de:5b: 70:32:a0:5c:12:9e:23:2b:57:89:f1:bb:8e:38:2a:f4:f7:0a: 17:fe:bc:ad:a9:1c:73:e3:99:cd:db:f9:1b:bb:de:64:42:68: 12:a1:ba:2a:85:5d:f6:c8:99:88:a4:77:2b:3f:c0:4f:13:ba: e6:11:86:06:af:58:58:06:db:ba:a2:25:fa:69:64:6c:f7:4e: 36:44:3c:e9:db:24:fe:2f:55:eb:79:7d:a0:d2:02:c4:bd:3a: c2:86:11:5a:ad:cf:88:9e:61:a4:4f:a5:77:3b:55:e0:c6:91: 56:0d:67:54:be:1b:60:bf:2c:48:81:74:cf:fb:de:04:1c:1a: 6e:24:13:87:62:5f:7b:40:50:d6:f7:06:18:1f:0f:64:87:a7: 21:41:59:7c:1a:d2:d6:e2:f1:0e:c6:37:8a:b4:b8:0e:7b:d2: 92:1e:1a:e0:96:72:ae:44:62:9d:d1:fd:98:ee:09:91:de:27: 8e:55:83:bf:ce:36:45:97:77:2d:66:85:21:8d:7f:94:be:3b: f5:0f:f5:35:26:f6:03:75:5b:e1:57:5b:1a:55:b8:92:73:c3: 14:75:fb:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjUxMjIwMTYwNjIyWhcNMjUxMjI3MTYwNjIyWjAYMRYwFAYD VQQDDA02OTQ2Yzk3ZS0wODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGcWuu3CysSaACM48QalqY2pAI56f1lexfxJJZdAuUnRlt5mccNmBtt2yFZA xcPbfUiGXT7fN2L4zB89n7g1nUpktzGb5SCYUs6zuVw6tEx/kMY702CUaz7Jhu2F Ut3MqKWu6MuQm5k8wK2IwZQACh3Ct8QjuaUA61JHkGisLw7w0SSyBsPt3kPywWfi RWY+XMzeVZAlcfBat2wIvPLGCUCos78d3GlY6vDQ5Y9xDK2nEfwH0qzDuowSj7Fu MzGLKMJ+yd670HoOqXGmMCudab9PSUtqI0dqmag/BBkXu7rLey+6BqUAT0O6JdDC d47hZNzGkSeG2ft1KEApX44ouQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI035ST6 1cZvs10QFC0z+zH1NQcNMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/6JddUrxudtZ9gGeNJztZovRbo1YlHVknuvRMOF52ucBa3ltwMqBc Ep4jK1eJ8buOOCr09woX/rytqRxz45nN2/kbu95kQmgSoboqhV32yJmIpHcrP8BP E7rmEYYGr1hYBtu6oiX6aWRs9042RDzp2yT+L1XreX2g0gLEvTrChhFarc+InmGk T6V3O1XgxpFWDWdUvhtgvyxIgXTP+94EHBpuJBOHYl97QFDW9wYYHw9kh6chQVl8 GtLW4vEOxjeKtLgOe9KSHhrglnKuRGKd0f2Y7gmR3ieOVYO/zjZFl3ctZoUhjX+U vjv1D/U1JvYDdVvhV1saVbiSc8MUdfvG -----END CERTIFICATE-----Generated at Mon Dec 22 01:05:37 2025 by rpki-client