This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft File: DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json) Hash identifier: OJBBZHVZT/RBajfkjfNMg1yQfl3QT3/HEs1PZCAD0YA= Subject key identifier: F6:A0:70:74:22:43:81:45:12:75:B8:CE:F5:D5:AF:20:DC:7A:87:4B Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA Certificate issuer: /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Certificate serial: 08B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft Manifest number: 08AE Signing time: Thu 04 Dec 2025 19:38:51 +0000 Manifest this update: Thu 04 Dec 2025 19:38:51 +0000 Manifest next update: Thu 11 Dec 2025 19:38:51 +0000 Files and hashes: 1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: 9jqPVW9hEON4hNOgAJPm388piglMKEnYVW4zGXKQjfg=) 2: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: UBw2PoTevAndZcrQq8icn0bOX1+H9RUk7B/v/OivD1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Validity Not Before: Dec 4 19:38:51 2025 GMT Not After : Dec 11 19:38:51 2025 GMT Subject: CN=6931e34b-a609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:f3:bf:dc:ca:45:72:ee:f7:0d:cb:32:84: 65:04:55:4b:d0:1c:d8:fc:d1:21:b7:20:6c:f2:d0: 28:26:09:77:65:d2:a0:21:ae:cd:ad:b1:4d:56:5f: 5c:80:9c:bc:0d:05:2e:11:41:01:86:e9:e3:9b:08: 7d:0d:94:df:d8:31:c2:7b:6f:d1:3c:f0:f6:76:c9: 8a:07:00:74:b6:f5:4d:04:cf:73:e6:1a:1f:44:9b: 2c:55:c7:ab:90:1f:7f:fc:69:86:6a:89:27:9e:69: 14:72:05:85:a4:b5:95:76:17:9f:76:33:da:84:df: bc:ca:64:25:17:f6:86:5c:e0:0d:8f:a3:81:3c:3f: ef:e3:1a:37:a2:da:be:19:b1:16:b8:bd:34:b8:88: 15:a6:16:73:d9:0c:3f:b5:a2:ea:db:14:e9:63:b5: c9:4e:56:e3:ed:b6:f1:bd:c3:12:a2:e9:4d:ac:c8: 19:5a:7f:9c:aa:2f:c4:35:2b:d8:f7:fe:89:e0:6a: 0d:05:5a:87:0d:a4:15:1a:ea:3b:44:15:e2:72:43: aa:d2:94:61:e5:66:79:00:20:21:7f:53:4c:36:ed: 5e:6e:b2:de:7d:ad:e5:38:4d:5e:07:59:da:84:7c: 3d:a0:32:0f:de:cc:bb:af:7f:3f:dd:4c:43:ad:50: f6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A0:70:74:22:43:81:45:12:75:B8:CE:F5:D5:AF:20:DC:7A:87:4B X509v3 Authority Key Identifier: keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:80:2b:75:9b:3d:b8:98:96:d1:9f:c0:b4:7a:6c:19:4c:78: 8c:5c:f5:f2:15:ae:17:db:97:05:80:ca:f4:a1:90:bc:14:8b: 4f:c5:c2:24:ad:42:16:51:c1:50:60:80:8c:a6:39:d8:2d:24: 29:fe:1e:81:c2:4c:76:cd:bc:d6:8c:a4:c4:f1:30:cf:63:3c: 97:8e:e7:e8:3f:e5:fa:28:99:8d:c4:05:c4:48:a3:de:d6:c1: 52:9f:ba:41:9e:3c:a7:45:18:f6:a0:0a:e4:69:30:e2:bf:d1: f9:54:0b:8a:7c:48:ca:58:5e:a3:42:d9:bb:cd:5b:7b:42:f2: b5:7e:c8:d3:0a:ab:d0:53:86:ee:ce:58:57:51:2c:6a:cf:c1: 5b:06:c2:d3:51:10:65:e8:2b:a5:64:31:ba:22:0e:98:52:94: 75:4f:ce:e9:68:29:20:5b:fe:45:15:28:03:1a:f1:be:fc:34: c0:6b:7a:30:d2:b0:af:4c:86:10:02:7c:8b:ec:e7:80:f7:9f: ea:7c:78:c1:64:36:56:00:98:32:69:d9:db:8d:30:56:8b:51: 29:5e:f7:07:3f:e9:43:ad:ee:ad:c5:3b:45:12:0d:38:7d:a2: 90:06:a7:4f:4d:0f:80:4f:60:97:c6:2d:eb:c2:33:cb:ee:87: ae:25:1d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEQxMTAvBgNVBAUTKDBENjhEQkFENjAwRjhCRDkwQjM1NUI5OEY0QjIzOEZC OUU5QTU3RkEwHhcNMjUxMjA0MTkzODUxWhcNMjUxMjExMTkzODUxWjAYMRYwFAYD VQQDEw02OTMxZTM0Yi1hNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkTzv9zKRXLu9w3LMoRlBFVL0BzY/NEhtyBs8tAoJgl3ZdKgIa7NrbFNVl9c gJy8DQUuEUEBhunjmwh9DZTf2DHCe2/RPPD2dsmKBwB0tvVNBM9z5hofRJssVcer kB9//GmGaoknnmkUcgWFpLWVdhefdjPahN+8ymQlF/aGXOANj6OBPD/v4xo3otq+ GbEWuL00uIgVphZz2Qw/taLq2xTpY7XJTlbj7bbxvcMSoulNrMgZWn+cqi/ENSvY 9/6J4GoNBVqHDaQVGuo7RBXickOq0pRh5WZ5ACAhf1NMNu1ebrLefa3lOE1eB1na hHw9oDIP3sy7r38/3UxDrVD2/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPagcHQi Q4FFEnW4zvXVryDceodLMB8GA1UdIwQYMBaAFA1o261gD4vZCzVbmPSyOPuemlf6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwRC81Nzk2NEQ0QUNC MEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5a0xOVnVZOUxJNC01NmFW X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXamJyV0FQaTlrTE5WdVk5TEk0LTU2YVZfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwRC81Nzk2NEQ0QUNCMEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5 a0xOVnVZOUxJNC01NmFWX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqgCt1mz24mJbRn8C0emwZTHiMXPXyFa4X25cFgMr0oZC8FItPxcIk rUIWUcFQYICMpjnYLSQp/h6Bwkx2zbzWjKTE8TDPYzyXjufoP+X6KJmNxAXESKPe 1sFSn7pBnjynRRj2oArkaTDiv9H5VAuKfEjKWF6jQtm7zVt7QvK1fsjTCqvQU4bu zlhXUSxqz8FbBsLTURBl6CulZDG6Ig6YUpR1T87paCkgW/5FFSgDGvG+/DTAa3ow 0rCvTIYQAnyL7OeA95/qfHjBZDZWAJgyadnbjTBWi1EpXvcHP+lDre6txTtFEg04 faKQBqdPTQ+AT2CXxi3rwjPL7oeuJR2O -----END CERTIFICATE-----Generated at Sat Dec 6 16:06:25 2025 by rpki-client