This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft File: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json) Hash identifier: bfZCoLvqmsalR8i0GgL5uSXOt1RZRaEmz/QiHlUO2Gk= Subject key identifier: 4E:40:8B:8A:A1:01:9E:56:B7:B4:A2:A7:72:59:DD:D8:00:4A:42:CE Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E Certificate issuer: /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft Manifest number: 0152 Signing time: Fri 05 Dec 2025 02:18:37 +0000 Manifest this update: Fri 05 Dec 2025 02:18:36 +0000 Manifest next update: Fri 12 Dec 2025 02:18:36 +0000 Files and hashes: 1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: ADQSbLB08lSJd9yg8IgQYEuKsUawx4ZBNm/k9k4QafI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Validity Not Before: Dec 5 02:18:36 2025 GMT Not After : Dec 12 02:18:36 2025 GMT Subject: CN=693240fc-4c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:4b:5e:43:5a:b1:2e:df:ca:e5:61:5d:49: a7:41:11:db:a2:79:5d:a0:f0:00:3c:2d:2d:00:7a: ab:77:dc:09:15:01:f6:7a:24:d6:79:f4:88:9f:fc: 8c:66:1d:88:59:c9:7b:cd:86:96:0a:f9:88:38:4e: 0f:e7:1f:32:c0:57:19:22:b6:0b:bf:4f:21:63:95: 5c:4c:03:03:28:2b:ea:cc:40:d6:2e:67:09:59:65: f8:2e:76:e0:11:d8:6b:67:04:39:49:af:55:96:c8: 2a:c0:d4:91:fa:bb:6a:f7:54:79:67:1f:a1:5c:37: 30:f6:ff:89:be:06:d0:3e:79:86:29:d6:dc:5a:35: 90:1c:09:a9:64:5f:b8:c3:f9:76:5f:52:e8:2c:02: 1b:49:b4:15:47:29:e4:1b:2a:d8:c6:1b:fa:2b:94: 69:d9:30:31:6c:d7:bb:ac:52:17:47:f9:a2:91:a6: d3:e0:a6:6b:f3:75:d3:c7:b8:96:ec:ad:c8:8c:ca: d1:59:3c:97:18:f5:eb:ce:d8:0a:c0:0b:b7:3d:d0: d1:6d:a8:3a:b3:f2:59:d1:e8:79:f4:9f:06:1d:f6: 4d:de:7c:93:71:47:9a:9e:ae:df:d8:93:7d:45:f7: 46:31:1a:83:f6:5c:94:2e:f1:55:2d:86:38:c8:7c: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:40:8B:8A:A1:01:9E:56:B7:B4:A2:A7:72:59:DD:D8:00:4A:42:CE X509v3 Authority Key Identifier: keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:23:98:12:fd:84:20:9a:2d:3a:79:d7:a6:8b:da:62:14:9d: c8:40:8f:b9:dd:ca:26:b2:a8:19:66:b5:0e:f7:15:bf:54:b8: dd:a9:25:9b:e1:49:44:75:ee:a5:bd:81:02:3f:a3:e3:90:ec: 1d:84:d8:87:e3:a2:bf:e2:e0:5c:d1:83:68:6c:d0:52:ee:34: 80:2a:04:92:17:2e:e8:58:3b:2b:34:91:14:82:2e:b4:3c:a5: ec:4e:bc:3f:c2:15:eb:19:67:b7:70:2f:d6:0f:30:65:76:06: d3:42:15:98:35:af:20:b5:18:6f:a8:1e:94:c5:6a:00:36:1c: fb:31:c6:68:19:62:01:b1:0c:bc:9f:74:b5:2f:01:ee:fd:a5: 14:9e:a5:4c:f6:6a:69:a6:6f:f8:6b:c1:8d:af:f6:d6:a2:bf: 64:ca:53:d8:39:de:68:9b:20:ae:95:1f:e4:e8:6e:b2:04:8c: 1f:06:58:f7:2b:7b:07:ba:f6:5d:d1:a7:87:bb:73:55:d7:41: 5e:02:9a:c8:0c:cb:6e:b2:32:9c:09:19:bc:98:12:5a:bf:12: d1:65:2e:4f:30:03:dc:3a:92:ab:e9:86:f4:19:fc:54:6e:13: 17:1c:4a:61:52:e9:83:e7:16:e6:16:3d:97:81:f6:a6:06:ae: 12:fa:9c:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDBFMUY2MjRBMjM1OTUxOTkwODZFMTgyQjVGQzdDNTI0 NjNBOUU1NUUwHhcNMjUxMjA1MDIxODM2WhcNMjUxMjEyMDIxODM2WjAYMRYwFAYD VQQDEw02OTMyNDBmYy00YzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC9LXkNasS7fyuVhXUmnQRHbonldoPAAPC0tAHqrd9wJFQH2eiTWefSIn/yM Zh2IWcl7zYaWCvmIOE4P5x8ywFcZIrYLv08hY5VcTAMDKCvqzEDWLmcJWWX4Lnbg EdhrZwQ5Sa9VlsgqwNSR+rtq91R5Zx+hXDcw9v+JvgbQPnmGKdbcWjWQHAmpZF+4 w/l2X1LoLAIbSbQVRynkGyrYxhv6K5Rp2TAxbNe7rFIXR/mikabT4KZr83XTx7iW 7K3IjMrRWTyXGPXrztgKwAu3PdDRbag6s/JZ0eh59J8GHfZN3nyTcUeanq7f2JN9 RfdGMRqD9lyULvFVLYY4yHyxCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5Ai4qh AZ5Wt7Sip3JZ3dgASkLOMB8GA1UdIwQYMBaAFA4fYkojWVGZCG4YK1/HxSRjqeVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi83N0E3N0QzMEM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVaa0liaGdyWDhmRkpHT3A1 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RoOWlTaU5aVVprSWJoZ3JYOGZGSkdPcDVWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi83N0E3N0QzMEM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVa a0liaGdyWDhmRkpHT3A1VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUI5gS/YQgmi06edemi9piFJ3IQI+53comsqgZZrUO9xW/VLjdqSWb 4UlEde6lvYECP6PjkOwdhNiH46K/4uBc0YNobNBS7jSAKgSSFy7oWDsrNJEUgi60 PKXsTrw/whXrGWe3cC/WDzBldgbTQhWYNa8gtRhvqB6UxWoANhz7McZoGWIBsQy8 n3S1LwHu/aUUnqVM9mpppm/4a8GNr/bWor9kylPYOd5omyCulR/k6G6yBIwfBlj3 K3sHuvZd0aeHu3NV10FeAprIDMtusjKcCRm8mBJavxLRZS5PMAPcOpKr6Yb0GfxU bhMXHEphUumD5xbmFj2XgfamBq4S+pzO -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:58 2025 by rpki-client