This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft File: DvuCEhc42eyGnjyjzwUA-RKOF6g.mft (raw, json) Hash identifier: x4wdfYEsvajmKdvaCjNNErGsbu0Zo++mK19zn3GJnXc= Subject key identifier: 1B:D1:79:E2:4C:81:AF:EC:90:42:40:37:61:7C:30:A4:8E:A9:05:12 Authority key identifier: 0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8 Certificate issuer: /CN=A91DEDFD/serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft Manifest number: 0D Signing time: Thu 04 Dec 2025 19:31:46 +0000 Manifest this update: Thu 04 Dec 2025 19:31:46 +0000 Manifest next update: Thu 11 Dec 2025 19:31:46 +0000 Files and hashes: 1: DvuCEhc42eyGnjyjzwUA-RKOF6g.crl (hash: 5H5MiVStvIBVLSgsHqAT6lCijaPk7L9AKshS0ABmyXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8 Validity Not Before: Dec 4 19:31:46 2025 GMT Not After : Dec 11 19:31:46 2025 GMT Subject: CN=6931e1a2-379b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:de:f0:df:44:2c:7f:bc:c8:be:50:37:2d: 9e:25:ce:0d:57:ce:81:db:4d:3a:bd:03:06:cf:fb: 6e:5a:06:20:86:d0:de:d5:3b:5b:7c:f2:2a:e4:39: 00:95:ee:00:77:02:a4:e5:0c:de:75:ef:e0:8d:a7: 86:52:20:54:e6:bf:44:d7:76:5f:89:86:70:00:af: bf:8b:8c:66:c8:de:21:f6:9f:34:6d:65:cf:94:39: e9:62:1f:d4:8a:ce:5b:19:47:7c:bc:00:af:f8:b6: 4a:87:37:89:44:c9:ac:9b:31:f9:52:22:c0:8e:11: 9b:cd:74:b2:f3:aa:51:b6:4e:66:16:08:77:80:b5: 4b:99:66:70:65:73:3f:cd:2d:5b:15:46:6c:6c:99: 35:78:2d:d3:2a:72:2e:a8:cd:bf:d6:30:79:27:c4: 75:2e:b1:60:2e:39:b3:c8:28:ca:29:87:3b:1c:85: 90:87:a2:dd:2c:a8:66:9a:e6:a0:a7:d1:54:77:52: d4:d6:8b:67:e4:91:73:af:b2:49:0d:66:3c:e3:3b: 81:84:57:e6:c4:f8:55:52:6b:a2:59:89:06:01:8e: 7f:8b:da:5f:c6:01:6a:4a:72:be:ac:fe:cc:26:ee: aa:cd:2d:d6:31:01:40:a2:da:74:f2:cd:ee:73:25: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D1:79:E2:4C:81:AF:EC:90:42:40:37:61:7C:30:A4:8E:A9:05:12 X509v3 Authority Key Identifier: keyid:0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:a7:65:84:e4:7e:44:5d:7f:df:a3:5b:68:86:59:6c:fd:ce: c6:91:66:b0:74:b0:37:5a:0c:b8:3f:39:55:b8:02:37:8d:1d: 1b:03:09:11:cd:16:94:72:49:dd:ca:4b:93:c0:2a:5e:a8:41: 7b:97:13:98:f8:6f:4a:07:61:f6:ea:37:9c:0e:f7:8d:1e:84: e4:46:bf:3f:fa:d4:c6:aa:63:01:c3:5b:e2:53:0b:dc:f4:97: a3:99:e4:3a:57:f9:0c:f9:2e:03:b8:93:14:1f:f3:55:1d:08: 6b:19:13:4f:9a:83:ef:5a:2f:cb:69:a9:5e:1b:a3:30:f5:5c: a7:aa:2a:df:48:15:52:23:03:24:e5:b8:53:51:dd:21:fb:b8: 1c:be:d2:ac:94:ef:5a:bb:bf:4e:b7:5f:80:20:ba:57:85:3a: 96:8d:b2:4b:3a:99:1f:53:dd:15:87:9b:b4:13:de:2b:b3:3c: 3d:6e:b6:39:d2:4f:cc:8c:f3:ff:6e:c5:8c:37:0a:d4:7c:4c: 9b:62:a8:42:0e:a9:0c:ef:45:d4:20:b3:40:92:55:91:78:e9: d0:4b:d5:62:1e:f0:d1:4e:69:56:0d:a3:f7:18:2e:91:bc:9f: 56:9d:85:ae:39:67:72:40:b7:83:7f:f1:c6:3c:0f:22:ad:d0: 88:76:75:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RURGRDExMC8GA1UEBRMoMEVGQjgyMTIxNzM4RDlFQzg2OUUzQ0EzQ0YwNTAwRjkx MjhFMTdBODAeFw0yNTEyMDQxOTMxNDZaFw0yNTEyMTExOTMxNDZaMBgxFjAUBgNV BAMTDTY5MzFlMWEyLTM3OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Hd7w30Qsf7zIvlA3LZ4lzg1XzoHbTTq9AwbP+25aBiCG0N7VO1t88irkOQCV 7gB3AqTlDN517+CNp4ZSIFTmv0TXdl+JhnAAr7+LjGbI3iH2nzRtZc+UOeliH9SK zlsZR3y8AK/4tkqHN4lEyaybMflSIsCOEZvNdLLzqlG2TmYWCHeAtUuZZnBlcz/N LVsVRmxsmTV4LdMqci6ozb/WMHknxHUusWAuObPIKMophzschZCHot0sqGaa5qCn 0VR3UtTWi2fkkXOvskkNZjzjO4GEV+bE+FVSa6JZiQYBjn+L2l/GAWpKcr6s/swm 7qrNLdYxAUCi2nTyze5zJXaXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG9F54kyB r+yQQkA3YXwwpI6pBRIwHwYDVR0jBBgwFoAUDvuCEhc42eyGnjyjzwUA+RKOF6gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFREZEL0VBMUQ4RTE2QzEz MTExRjBCNDMxNzQzRUM0RjlBRTAyL0R2dUNFaGM0MmV5R25qeWp6d1VBLVJLT0Y2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRHZ1Q0VoYzQyZXlHbmp5anp3VUEtUktPRjZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF REZEL0VBMUQ4RTE2QzEzMTExRjBCNDMxNzQzRUM0RjlBRTAyL0R2dUNFaGM0MmV5 R25qeWp6d1VBLVJLT0Y2Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHCnZYTkfkRdf9+jW2iGWWz9zsaRZrB0sDdaDLg/OVW4AjeNHRsDCRHN FpRySd3KS5PAKl6oQXuXE5j4b0oHYfbqN5wO940ehORGvz/61MaqYwHDW+JTC9z0 l6OZ5DpX+Qz5LgO4kxQf81UdCGsZE0+ag+9aL8tpqV4bozD1XKeqKt9IFVIjAyTl uFNR3SH7uBy+0qyU71q7v063X4AguleFOpaNsks6mR9T3RWHm7QT3iuzPD1utjnS T8yM8/9uxYw3CtR8TJtiqEIOqQzvRdQgs0CSVZF46dBL1WIe8NFOaVYNo/cYLpG8 n1adha45Z3JAt4N/8cY8DyKt0Ih2dcE= -----END CERTIFICATE-----Generated at Sat Dec 6 13:32:46 2025 by rpki-client