This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft File: dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json) Hash identifier: G/zdtf0T41Ee6D0ws6gWRPSTXqCDLbEUA7T4OEgVPIQ= Subject key identifier: C1:51:58:22:84:47:2A:82:EC:1F:B7:93:8B:27:AE:13:B6:22:43:EC Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 Certificate issuer: /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft Manifest number: 0658 Signing time: Thu 04 Dec 2025 21:25:43 +0000 Manifest this update: Thu 04 Dec 2025 21:25:42 +0000 Manifest next update: Thu 11 Dec 2025 21:25:42 +0000 Files and hashes: 1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: skn5EIJK8qiR+AUsPuT6ZKrJfS5PlT1VJNgQ1OKdkDQ=) 2: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: 6WTlAebSNT3dRwlxKbzoaSgBI3lIZqiUGPWCDMJw06Q=) 3: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: 79HGgLT4UvpWXoWIU4dQI1xmx9s6FLe8XfJ4mBLvcew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Validity Not Before: Dec 4 21:25:42 2025 GMT Not After : Dec 11 21:25:42 2025 GMT Subject: CN=6931fc56-8075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:fb:4f:cf:17:62:e2:4b:cb:28:e5:2a:81: f7:39:f4:bb:1d:d1:09:9c:34:c0:3b:cc:c2:7a:5b: 32:c7:f3:25:38:ae:14:d4:2b:f4:32:85:07:2e:99: be:f3:bb:59:42:0b:69:1b:38:76:f9:fe:ef:a6:97: 2e:1e:1a:dd:ae:41:9a:45:e9:ff:05:74:a2:e2:f2: 67:4d:f6:2b:97:67:b2:43:22:07:41:3a:bd:d1:b2: ff:3f:e1:85:66:03:2f:5b:37:e8:c6:3a:3e:84:4b: 6e:10:b3:40:58:1d:9e:45:ce:e3:d5:3f:28:b4:74: c7:a5:b4:04:5a:43:cb:04:d3:8b:b8:96:12:e9:93: 6f:d6:01:1d:6c:0f:ec:6e:19:84:e4:9b:8c:77:7d: 10:f2:e5:43:47:1f:5e:6f:bc:33:6f:ea:47:d9:f0: fe:a5:69:3a:e5:ef:d9:87:2d:ff:ed:99:12:0e:38: 1d:f4:3b:46:c4:b0:42:6e:fb:f7:2f:9b:ef:13:44: 64:4d:13:6a:36:d1:fb:a6:51:b5:e2:1c:61:82:aa: c4:75:11:48:87:a1:17:2d:00:78:0f:84:0b:ee:5c: 0d:d3:5b:07:ee:c6:3c:e0:8d:d9:f0:d3:12:fb:ec: 57:a5:4c:cc:04:b9:8c:14:9e:22:fb:dd:01:2f:b1: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:51:58:22:84:47:2A:82:EC:1F:B7:93:8B:27:AE:13:B6:22:43:EC X509v3 Authority Key Identifier: keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:30:63:b6:ec:f4:5c:20:dd:ef:96:ad:5a:57:e2:79:bb:1e: 15:3e:3b:31:6b:aa:27:ce:a9:36:e8:4c:a6:23:6a:ca:92:cd: 1c:83:ac:bc:e3:5a:08:cc:12:17:1c:e5:f3:10:fb:3b:41:64: 89:35:a8:3b:3c:e9:a5:c7:04:f8:f7:20:e2:d7:61:c6:8d:0a: cb:f5:f0:b9:52:70:22:01:d0:b3:28:b8:ae:28:58:f2:a2:86: 97:78:c8:8a:db:56:88:08:d7:9e:f8:47:38:0f:bc:61:da:08: 73:38:85:53:7a:ce:8a:0e:3c:10:a9:8c:c9:05:94:ae:11:86: 6c:90:89:ed:78:97:c6:d2:0c:67:9c:cd:08:bc:55:f3:c2:1c: 07:c2:21:74:4d:f5:e6:55:ff:db:4d:10:b9:8e:95:e1:04:59: a8:99:c7:af:6d:93:4c:18:15:09:ab:bd:33:ab:91:0e:0f:d8: 01:3a:be:38:89:29:61:a8:91:e8:6b:04:16:da:5d:03:ae:fa: 78:56:b0:15:0b:a8:4e:d4:d9:e6:b6:e8:29:99:b4:0f:7b:c7: 71:9f:04:fe:86:32:77:64:ff:d0:8d:31:99:f4:d4:b1:09:42: b6:8a:5c:01:b0:8f:90:a5:f1:09:44:41:ac:20:a3:6a:d4:1b: 78:43:bf:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExNzYxMTAvBgNVBAUTKDc2NjFGNTk3RUE2OEVGRjRDOTI5NzM2MzlCQjY3NUQ3 RjAzOTA5NzEwHhcNMjUxMjA0MjEyNTQyWhcNMjUxMjExMjEyNTQyWjAYMRYwFAYD VQQDEw02OTMxZmM1Ni04MDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru77T88XYuJLyyjlKoH3OfS7HdEJnDTAO8zCelsyx/MlOK4U1Cv0MoUHLpm+ 87tZQgtpGzh2+f7vppcuHhrdrkGaRen/BXSi4vJnTfYrl2eyQyIHQTq90bL/P+GF ZgMvWzfoxjo+hEtuELNAWB2eRc7j1T8otHTHpbQEWkPLBNOLuJYS6ZNv1gEdbA/s bhmE5JuMd30Q8uVDRx9eb7wzb+pH2fD+pWk65e/Zhy3/7ZkSDjgd9DtGxLBCbvv3 L5vvE0RkTRNqNtH7plG14hxhgqrEdRFIh6EXLQB4D4QL7lwN01sH7sY84I3Z8NMS ++xXpUzMBLmMFJ4i+90BL7HEKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFRWCKE RyqC7B+3k4snrhO2IkPsMB8GA1UdIwQYMBaAFHZh9ZfqaO/0ySlzY5u2ddfwOQlx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE3Ni9BREQzQUVDRUIy OEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdfVEpLWE5qbTdaMTFfQTVD WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtSDFsLXBvN19USktYTmptN1oxMV9BNUNYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE3Ni9BREQzQUVDRUIyOEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdf VEpLWE5qbTdaMTFfQTVDWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkMGO27PRcIN3vlq1aV+J5ux4VPjsxa6onzqk26EymI2rKks0cg6y8 41oIzBIXHOXzEPs7QWSJNag7POmlxwT49yDi12HGjQrL9fC5UnAiAdCzKLiuKFjy ooaXeMiK21aICNee+Ec4D7xh2ghzOIVTes6KDjwQqYzJBZSuEYZskInteJfG0gxn nM0IvFXzwhwHwiF0TfXmVf/bTRC5jpXhBFmomcevbZNMGBUJq70zq5EOD9gBOr44 iSlhqJHoawQW2l0Drvp4VrAVC6hO1NnmtugpmbQPe8dxnwT+hjJ3ZP/QjTGZ9NSx CUK2ilwBsI+QpfEJREGsIKNq1Bt4Q78s -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:20 2025 by rpki-client