This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft File: dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json) Hash identifier: FEBBQdAWfJvXj3AgPnkicPk2RFKvH2gVzuEpdAfVq0Y= Subject key identifier: 5C:73:41:C4:E1:28:0F:10:3B:EA:85:23:56:E9:B0:42:0E:3F:26:31 Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft Manifest number: 01C7 Signing time: Fri 05 Dec 2025 01:11:31 +0000 Manifest this update: Fri 05 Dec 2025 01:11:31 +0000 Manifest next update: Fri 12 Dec 2025 01:11:31 +0000 Files and hashes: 1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: YJyB1vwLALss4E5SK7HPNUcmjh+ga7vxZ1Yj87oKvkg=) 2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: 64T0QVyxSFq/Fdklobji66MEyYuHugmocsuY/nRlqQ0=) 3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: i/4qbq1olZ1yrHtpcck4H45nkVfaKLB8DIL2yG7lkLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Validity Not Before: Dec 5 01:11:31 2025 GMT Not After : Dec 12 01:11:31 2025 GMT Subject: CN=69323143-ffec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:84:a9:d1:2e:2e:24:7d:16:ee:33:9b:0d: d1:5e:dd:22:b9:da:73:16:7d:8d:59:4a:26:59:ce: 62:b9:ba:0a:c3:e6:5b:5a:c0:da:94:f2:47:9a:00: 17:64:6a:f5:22:ce:e1:66:05:88:85:8b:a5:01:39: a3:96:0a:c2:d9:68:78:0e:15:61:7f:35:04:1f:22: 4f:bc:08:6e:5f:0b:7f:93:de:99:7d:ad:a0:e3:64: 37:fc:59:ba:df:a6:ab:50:c0:80:f9:4b:98:73:36: ff:25:7a:48:9b:bb:1b:ed:ee:a3:4e:b3:82:6c:ed: 6f:3c:a2:23:69:54:4b:d6:3c:99:4d:bb:f2:93:8e: 13:e5:03:49:9e:2f:11:b9:82:8c:66:31:0d:48:30: b9:38:b5:8b:72:45:97:d6:df:41:d9:e2:92:9e:a5: e3:2a:7c:c3:1a:ad:84:30:d8:65:1e:5e:ad:c5:d5: 2b:7c:3e:24:d4:28:f9:ba:a1:b7:d5:d7:50:29:ef: eb:c8:66:23:26:5a:39:f4:ee:e4:e9:af:11:4c:0e: 14:6c:5b:69:3d:08:a9:92:6c:1f:ea:39:f1:10:92: c3:8a:da:eb:f8:9e:da:92:8d:67:8f:5c:fc:0a:b6: 42:b4:74:24:10:e3:bd:d7:4d:cb:2c:35:9f:47:58: e5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:73:41:C4:E1:28:0F:10:3B:EA:85:23:56:E9:B0:42:0E:3F:26:31 X509v3 Authority Key Identifier: keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e8:20:06:e3:b6:aa:2e:e4:8a:51:44:11:32:80:d3:04:08: a9:f6:89:1d:46:a4:b8:ca:a5:6c:b1:3c:01:75:4a:9d:6f:7d: bb:53:14:2e:00:20:a9:88:fe:6d:48:3e:0a:dc:72:9b:19:e0: c2:7d:e9:36:7c:a9:93:0c:a3:74:83:e8:99:3d:22:b6:55:01: 9d:10:42:68:eb:97:a0:a8:c6:e6:fb:23:0c:c9:ed:59:5c:aa: 8e:bd:ec:fa:ab:94:79:20:25:b3:82:cf:71:db:3b:e5:97:8c: 82:46:c9:7e:f7:19:ea:64:e1:6c:cd:a9:30:e6:d0:fb:37:37: 33:53:b1:d7:ee:e5:59:dc:68:6c:0f:ee:75:ba:93:15:89:f3: b1:05:cc:c0:1d:1b:18:10:c5:10:93:5e:22:8b:d0:10:9b:97: 9d:e1:39:67:11:e9:14:f0:9e:58:91:b7:cb:ba:df:87:27:27: be:15:bf:ed:2a:16:d6:a3:88:13:c1:5a:d1:a8:ec:c6:8a:75: 0e:5f:13:7c:c3:26:84:28:70:d8:6d:02:b3:52:90:e2:8e:f6: bd:fb:5e:39:3e:18:ab:a5:92:e7:f8:9d:65:ae:80:b8:4f:eb: 5a:17:c0:24:63:3f:ec:03:ca:55:b1:76:c4:9e:a5:ef:c0:04: 8c:3e:03:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0 REM1NjRFRjUwHhcNMjUxMjA1MDExMTMxWhcNMjUxMjEyMDExMTMxWjAYMRYwFAYD VQQDEw02OTMyMzE0My1mZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMqEqdEuLiR9Fu4zmw3RXt0iudpzFn2NWUomWc5iuboKw+ZbWsDalPJHmgAX ZGr1Is7hZgWIhYulATmjlgrC2Wh4DhVhfzUEHyJPvAhuXwt/k96Zfa2g42Q3/Fm6 36arUMCA+UuYczb/JXpIm7sb7e6jTrOCbO1vPKIjaVRL1jyZTbvyk44T5QNJni8R uYKMZjENSDC5OLWLckWX1t9B2eKSnqXjKnzDGq2EMNhlHl6txdUrfD4k1Cj5uqG3 1ddQKe/ryGYjJlo59O7k6a8RTA4UbFtpPQipkmwf6jnxEJLDitrr+J7ako1nj1z8 CrZCtHQkEOO9103LLDWfR1jllQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxzQcTh KA8QO+qFI1bpsEIOPyYxMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3 NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa c1hzODdZTVdUdlJOeFdUdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw6CAG47aqLuSKUUQRMoDTBAip9okdRqS4yqVssTwBdUqdb327UxQu ACCpiP5tSD4K3HKbGeDCfek2fKmTDKN0g+iZPSK2VQGdEEJo65egqMbm+yMMye1Z XKqOvez6q5R5ICWzgs9x2zvll4yCRsl+9xnqZOFszakw5tD7NzczU7HX7uVZ3Ghs D+51upMVifOxBczAHRsYEMUQk14ii9AQm5ed4TlnEekU8J5YkbfLut+HJye+Fb/t KhbWo4gTwVrRqOzGinUOXxN8wyaEKHDYbQKzUpDijva9+145PhirpZLn+J1lroC4 T+taF8AkYz/sA8pVsXbEnqXvwASMPgPY -----END CERTIFICATE-----Generated at Sat Dec 6 18:32:18 2025 by rpki-client