This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json) Hash identifier: N9giYCQgfT4eFVloQAVUFP3bi5UVCgZzTeTZfp1SVXQ= Subject key identifier: 43:D9:DC:F5:6A:78:44:F5:68:2E:F5:A3:03:DB:72:FE:69:1A:4C:F6 Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft Manifest number: 1B Signing time: Fri 05 Dec 2025 05:44:06 +0000 Manifest this update: Fri 05 Dec 2025 05:44:06 +0000 Manifest next update: Fri 12 Dec 2025 05:44:06 +0000 Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: mAR7v7p7gwTqPvvp0dS2BwRCi4z4yXGdiGZshSk+8pQ=) 2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: SdFwkFKVKGQJMPSxRwUazujF8EdEIyRb2qsEHEvHujY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Validity Not Before: Dec 5 05:44:06 2025 GMT Not After : Dec 12 05:44:06 2025 GMT Subject: CN=69327126-0cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:9e:76:dd:00:92:af:ce:cd:5a:ef:49:8b: 0f:2f:5f:d5:6b:0e:80:ca:88:df:80:19:b5:42:74: bb:16:86:7b:7f:e0:16:2d:c1:63:5d:a8:a0:08:cf: e8:38:7e:28:a4:2d:91:9f:e4:21:32:0e:15:1f:c1: 75:0c:a2:58:e0:82:78:23:bc:78:9d:f9:9e:2a:03: e9:d0:63:34:ad:a3:f0:56:75:9b:09:60:be:2e:1e: 1b:13:19:55:83:66:00:ca:21:5d:2b:57:8f:1f:e5: c4:66:09:48:b4:ae:8b:bd:7c:61:e7:1f:09:43:ca: c7:53:7f:40:6d:92:d0:d4:96:3e:d1:33:7c:d7:70: cd:68:72:a4:6b:74:08:c2:fc:22:bf:a1:89:60:d2: 92:e5:6e:9a:c0:28:f4:27:d7:7d:28:86:5b:ca:cf: 04:cd:7e:22:8a:6b:9c:48:14:f7:2e:7a:21:0d:23: 29:eb:58:01:08:f4:0c:79:f3:f5:cb:cc:73:bd:8c: 9f:ac:e1:58:9d:28:7e:bd:30:9f:b1:cd:c9:e7:11: c0:09:71:22:bc:0b:d9:ff:95:22:50:32:91:3e:f4: c0:de:d9:63:4b:39:05:ef:53:9f:45:61:a3:2c:fe: a8:fa:a3:d3:cc:4e:6e:04:3d:fe:60:7c:2f:0f:43: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D9:DC:F5:6A:78:44:F5:68:2E:F5:A3:03:DB:72:FE:69:1A:4C:F6 X509v3 Authority Key Identifier: keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b9:c0:c9:08:e7:9d:b3:c0:13:20:2a:85:31:f0:f4:2c:66: 15:d4:ff:b5:30:6a:f7:3d:b2:03:37:98:ff:e2:76:aa:dc:eb: e4:99:98:63:5d:f5:55:6a:b3:bf:1f:2c:e1:26:36:51:ba:7e: 43:5c:09:17:50:f1:1d:3f:69:be:94:b7:a7:50:5b:66:ef:5e: ca:93:78:cb:a1:f3:ae:b9:9f:73:b4:d4:19:16:9d:5d:34:2d: 18:5a:65:a2:b5:a1:49:52:ec:61:61:81:14:24:0b:4d:cc:bb: 17:a6:fa:be:9b:a4:d5:43:92:8b:e7:c8:ce:fc:74:ae:ce:b2: da:2f:84:50:b1:85:22:40:57:b0:6c:8b:2c:f0:a1:4b:19:4d: db:be:28:8c:ef:38:9f:ba:10:43:71:9e:eb:17:5e:32:4c:d6: 87:92:12:a0:8d:72:88:16:d5:7b:e1:98:d2:17:ed:28:9a:8f: 4a:67:ee:93:a1:d2:a5:0f:0e:40:c5:cc:20:3a:8f:33:9c:e7: 0d:26:78:b7:de:25:f6:04:78:fb:3f:6d:59:c0:c6:6c:30:55: 91:0b:3e:39:ec:88:73:2e:46:7a:17:92:46:d8:b2:d8:e7:6c: 0c:42:1d:b4:fc:d6:2a:82:f2:10:e2:4c:12:10:cc:df:b3:b0: 29:d7:9c:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RkVDMjExMC8GA1UEBRMoNzQ1RDU3N0Y1QjhFN0Q0RjhEQjQ5QThEQjlBQ0IxM0ZD MjVBQTIzMzAeFw0yNTEyMDUwNTQ0MDZaFw0yNTEyMTIwNTQ0MDZaMBgxFjAUBgNV BAMTDTY5MzI3MTI2LTBjZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDyZ523QCSr87NWu9Jiw8vX9VrDoDKiN+AGbVCdLsWhnt/4BYtwWNdqKAIz+g4 fiikLZGf5CEyDhUfwXUMoljggngjvHid+Z4qA+nQYzSto/BWdZsJYL4uHhsTGVWD ZgDKIV0rV48f5cRmCUi0rou9fGHnHwlDysdTf0BtktDUlj7RM3zXcM1ocqRrdAjC /CK/oYlg0pLlbprAKPQn130ohlvKzwTNfiKKa5xIFPcueiENIynrWAEI9Ax58/XL zHO9jJ+s4VidKH69MJ+xzcnnEcAJcSK8C9n/lSJQMpE+9MDe2WNLOQXvU59FYaMs /qj6o9PMTm4EPf5gfC8PQ4OTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ9nc9Wp4 RPVoLvWjA9ty/mkaTPYwHwYDVR0jBBgwFoAUdF1Xf1uOfU+NtJqNuayxP8JaojMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRUMyL0I4MkE5QTFDQjg3 RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUtTnRKcU51YXl4UDhKYW9q TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEYxWGYxdU9mVS1OdEpxTnVheXhQOEphb2pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG RUMyL0I4MkE5QTFDQjg3RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUt TnRKcU51YXl4UDhKYW9qTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIS5wMkI552zwBMgKoUx8PQsZhXU/7Uwavc9sgM3mP/idqrc6+SZmGNd 9VVqs78fLOEmNlG6fkNcCRdQ8R0/ab6Ut6dQW2bvXsqTeMuh8665n3O01BkWnV00 LRhaZaK1oUlS7GFhgRQkC03Muxem+r6bpNVDkovnyM78dK7OstovhFCxhSJAV7Bs iyzwoUsZTdu+KIzvOJ+6EENxnusXXjJM1oeSEqCNcogW1XvhmNIX7Siaj0pn7pOh 0qUPDkDFzCA6jzOc5w0meLfeJfYEePs/bVnAxmwwVZELPjnsiHMuRnoXkkbYstjn bAxCHbT81iqC8hDiTBIQzN+zsCnXnL4= -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:21 2025 by rpki-client