This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: xrfo4JTmadnnJ0s6zqCRtgYKUzat7fqFD/puzsLbCjo= Subject key identifier: 21:32:78:84:55:07:14:5A:58:0C:4B:6C:79:66:DB:C2:5B:9C:1D:D1 Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1AD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1AC5 Signing time: Sat 06 Dec 2025 15:57:26 +0000 Manifest this update: Sat 06 Dec 2025 15:57:26 +0000 Manifest next update: Sat 13 Dec 2025 15:57:26 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: 4M5BBbGK8HaHQXYMgQ2AqADFWkfthtMmYoVkabyNfxs=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: XzGkPPqSTC5CeDxEAOY4CC7n2iKvE4CetGVSiQJeAZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6866 (0x1ad2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Dec 6 15:57:26 2025 GMT Not After : Dec 13 15:57:26 2025 GMT Subject: CN=69345266-6df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:5f:32:05:94:6f:4b:bd:8d:ce:de:5e:8c: bb:fe:b9:a3:3a:9b:80:ee:f5:da:8f:ce:f7:e0:ac: 86:9b:81:62:f2:b4:eb:c0:bf:c5:b3:05:16:e4:e2: 0d:b2:10:09:84:e6:fb:cd:34:55:f6:ee:e2:48:68: 1b:dd:bc:4f:dd:18:dc:f0:0c:c8:0b:70:52:97:bf: 85:f6:8b:c3:3e:5e:96:4d:ef:ed:0d:45:79:c9:be: 46:93:80:8a:9c:a4:4c:45:51:54:c7:02:c1:df:f7: d2:f6:a3:ea:26:8c:10:91:7e:98:de:30:ae:25:c6: c2:7c:8d:fb:47:47:83:ed:bf:32:b5:62:2b:7a:b0: 2d:c9:d7:af:05:1a:d9:4c:e6:94:35:0f:33:60:5d: df:c3:3c:27:20:9b:1f:e4:86:bf:21:e0:8e:b1:71: 87:fc:2a:68:7c:8e:cc:4b:24:95:1e:46:da:88:b3: c8:ca:33:e6:fb:33:b9:22:84:8b:8d:54:51:c1:56: 0e:a2:27:50:4a:cc:bc:5d:90:f2:27:88:e0:44:0e: 72:56:2a:d2:03:5e:83:dd:33:c2:87:3f:a7:39:5b: c9:a1:5c:2d:7a:b3:de:14:64:19:28:d2:9c:78:4d: 26:fa:3b:27:d3:2e:2e:a8:1e:6b:0c:e4:7c:9a:0f: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:32:78:84:55:07:14:5A:58:0C:4B:6C:79:66:DB:C2:5B:9C:1D:D1 X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1e:c9:59:f9:e0:e6:95:05:89:e4:72:de:a7:98:01:b6:4b: 23:da:d4:67:53:a0:44:9d:12:5e:31:f6:ff:e1:52:39:8d:f6: 26:88:90:e9:d9:95:93:ee:ba:01:6f:16:8c:32:ca:0c:2c:93: 5e:fa:0b:d1:5c:8d:8a:c6:4e:dc:a8:79:dc:27:7c:44:5a:5d: 7d:39:b5:94:02:ad:e3:67:24:77:00:27:e7:c7:b4:d8:53:cb: 9c:c7:2b:ef:6a:49:44:b5:13:56:5a:a1:74:47:1f:c3:95:31: 78:4e:04:a4:6f:0a:42:a5:ac:e0:4e:65:21:ed:6c:d1:05:d4: 18:41:6b:b3:c8:79:0c:18:c5:e5:bf:df:a3:f7:6c:f9:5e:ef: b0:4f:37:1d:0a:22:31:e1:9e:dc:fc:6e:29:24:63:1d:b0:cd: da:12:f7:b5:bc:d4:98:87:f3:5f:fc:b7:e1:7b:3a:d2:20:58: d8:ea:ba:56:46:8e:18:b1:15:eb:dd:0f:2f:58:8f:5b:5c:01: a9:dc:04:61:cd:17:b6:0d:0a:3d:49:aa:be:55:27:07:bf:8b: c3:d9:9a:2b:2f:5a:82:ce:c2:31:9d:0f:04:74:d2:c5:e3:76: 31:5e:f5:cb:f7:70:97:8b:a9:91:73:9c:6f:39:a0:df:73:65: 0a:d6:4c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjUxMjA2MTU1NzI2WhcNMjUxMjEzMTU1NzI2WjAYMRYwFAYD VQQDEw02OTM0NTI2Ni02ZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jBfMgWUb0u9jc7eXoy7/rmjOpuA7vXaj8734KyGm4Fi8rTrwL/FswUW5OIN shAJhOb7zTRV9u7iSGgb3bxP3Rjc8AzIC3BSl7+F9ovDPl6WTe/tDUV5yb5Gk4CK nKRMRVFUxwLB3/fS9qPqJowQkX6Y3jCuJcbCfI37R0eD7b8ytWIrerAtydevBRrZ TOaUNQ8zYF3fwzwnIJsf5Ia/IeCOsXGH/CpofI7MSySVHkbaiLPIyjPm+zO5IoSL jVRRwVYOoidQSsy8XZDyJ4jgRA5yVirSA16D3TPChz+nOVvJoVwterPeFGQZKNKc eE0m+jsn0y4uqB5rDOR8mg+vYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEyeIRV BxRaWAxLbHlm28JbnB3RMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDHslZ+eDmlQWJ5HLep5gBtksj2tRnU6BEnRJeMfb/4VI5jfYmiJDp 2ZWT7roBbxaMMsoMLJNe+gvRXI2Kxk7cqHncJ3xEWl19ObWUAq3jZyR3ACfnx7TY U8ucxyvvaklEtRNWWqF0Rx/DlTF4TgSkbwpCpazgTmUh7WzRBdQYQWuzyHkMGMXl v9+j92z5Xu+wTzcdCiIx4Z7c/G4pJGMdsM3aEve1vNSYh/Nf/LfhezrSIFjY6rpW Ro4YsRXr3Q8vWI9bXAGp3ARhzRe2DQo9Saq+VScHv4vD2ZorL1qCzsIxnQ8EdNLF 43YxXvXL93CXi6mRc5xvOaDfc2UK1kw+ -----END CERTIFICATE-----Generated at Sun Dec 7 13:53:00 2025 by rpki-client