This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json) Hash identifier: FO/HpMYIFUN2VN3uQ43Z+e3GMmQ2bf8Pk+rZZZXPXA8= Subject key identifier: 20:A1:25:53:12:BE:6F:84:1B:E4:73:F3:5A:90:53:E5:C0:B1:73:BC Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft Manifest number: 0594 Signing time: Thu 04 Dec 2025 21:50:16 +0000 Manifest this update: Thu 04 Dec 2025 21:50:16 +0000 Manifest next update: Thu 11 Dec 2025 21:50:16 +0000 Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: Kla9T2/INUIRZubhz+eHJtTvwaH76iHvB4E6uFMMSsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Validity Not Before: Dec 4 21:50:16 2025 GMT Not After : Dec 11 21:50:16 2025 GMT Subject: CN=69320218-593a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:c9:43:11:a5:3c:c4:42:ab:48:46:f5:2c: 15:f5:b6:74:18:34:c2:a0:a6:05:74:39:7a:04:15: a2:2a:ad:e7:2b:43:a1:57:d8:69:10:f9:b3:7d:86: 74:98:ba:c2:7a:01:ca:91:11:49:bd:aa:ec:09:f6: 8a:38:10:46:3e:fe:8e:c5:95:4c:b0:03:14:a5:08: c0:50:b9:60:c2:f7:85:43:c4:c8:e4:47:f1:fd:aa: be:eb:5e:74:d8:b1:94:88:8e:46:a6:f9:eb:9f:fc: 89:29:22:80:cc:21:0a:41:e0:e5:34:cc:0d:65:45: b2:ea:21:76:bc:f5:e9:17:9d:d0:e4:46:99:58:f8: 33:25:07:5b:07:b8:67:3e:7b:ea:07:01:ab:02:b8: 17:b1:68:93:da:5f:c7:ea:37:d9:a9:80:da:52:5d: 07:57:aa:bc:b3:17:be:58:8c:94:ad:81:ee:d2:46: f7:88:d8:eb:8e:19:66:02:89:0e:33:b2:e7:63:97: e6:e5:92:c4:d0:35:1b:20:bf:6c:8f:18:66:6a:e8: e6:24:a6:71:e6:b6:28:71:14:bb:c2:47:41:66:22: 56:31:8a:df:01:37:94:c9:c2:da:d7:ba:ec:3b:67: 58:61:ca:a4:84:d7:b8:5c:1d:c2:b6:b7:9a:c6:85: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A1:25:53:12:BE:6F:84:1B:E4:73:F3:5A:90:53:E5:C0:B1:73:BC X509v3 Authority Key Identifier: keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e3:26:ef:5d:5b:ce:95:94:d9:70:16:6b:9c:f7:9d:c3:77: 32:67:9e:92:a0:d8:ee:33:fb:98:a2:8f:1a:19:b0:67:73:2b: c3:82:de:6f:a2:77:cf:89:37:b6:40:48:03:ff:9e:97:ea:df: db:45:c2:20:85:91:e3:ca:a9:95:a0:0c:b9:dc:b0:89:b3:18: f0:0f:3c:eb:b9:8c:db:f3:ee:70:66:d1:97:c6:12:5b:85:0b: a1:4f:7d:a4:3b:ac:58:c1:75:72:f2:cb:15:61:49:86:b7:57: 11:fb:f6:1f:1b:9d:d8:7b:b8:92:24:47:c6:9f:0f:bd:aa:32: d6:b6:01:47:8d:c8:54:62:f8:da:8c:b1:95:0a:dd:0b:56:93: 2b:ac:95:17:f1:42:3f:9a:e1:4c:73:23:a6:28:9e:cf:84:9d: 7f:99:32:ca:cb:31:c3:0b:ff:44:e0:1d:99:61:ce:82:13:df: c3:3b:87:4d:5d:87:9a:d1:23:7b:f1:0e:9e:08:01:f5:d7:c8: aa:a1:42:8b:96:ce:2c:35:c3:4c:45:20:27:71:bb:a6:8d:26: 2e:c6:84:42:89:0e:d6:45:f7:a9:b5:58:85:d8:ba:b1:61:d5: 61:fa:c5:75:2a:74:c3:e8:f2:28:1b:7d:70:3d:6f:7d:31:7d: 06:b2:2a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3MDUxMTAvBgNVBAUTKDc1Rjc3MkU0MDZDNUY0NkQzRThCRjI3QUMxRjI1RkNG NjRFOTc5OTcwHhcNMjUxMjA0MjE1MDE2WhcNMjUxMjExMjE1MDE2WjAYMRYwFAYD VQQDEw02OTMyMDIxOC01OTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD3JQxGlPMRCq0hG9SwV9bZ0GDTCoKYFdDl6BBWiKq3nK0OhV9hpEPmzfYZ0 mLrCegHKkRFJvarsCfaKOBBGPv6OxZVMsAMUpQjAULlgwveFQ8TI5Efx/aq+6150 2LGUiI5Gpvnrn/yJKSKAzCEKQeDlNMwNZUWy6iF2vPXpF53Q5EaZWPgzJQdbB7hn PnvqBwGrArgXsWiT2l/H6jfZqYDaUl0HV6q8sxe+WIyUrYHu0kb3iNjrjhlmAokO M7LnY5fm5ZLE0DUbIL9sjxhmaujmJKZx5rYocRS7wkdBZiJWMYrfATeUycLa17rs O2dYYcqkhNe4XB3CtreaxoX11QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCChJVMS vm+EG+Rz81qQU+XAsXO8MB8GA1UdIwQYMBaAFHX3cuQGxfRtPovyesHyX89k6XmX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzcwNS82RTI3N0JCMkY1 QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlHMC1pX0o2d2ZKZnoyVHBl WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmZHk1QWJGOUcwLWlfSjZ3ZkpmejJUcGVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzcwNS82RTI3N0JCMkY1QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlH MC1pX0o2d2ZKZnoyVHBlWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe4ybvXVvOlZTZcBZrnPedw3cyZ56SoNjuM/uYoo8aGbBncyvDgt5v onfPiTe2QEgD/56X6t/bRcIghZHjyqmVoAy53LCJsxjwDzzruYzb8+5wZtGXxhJb hQuhT32kO6xYwXVy8ssVYUmGt1cR+/YfG53Ye7iSJEfGnw+9qjLWtgFHjchUYvja jLGVCt0LVpMrrJUX8UI/muFMcyOmKJ7PhJ1/mTLKyzHDC/9E4B2ZYc6CE9/DO4dN XYea0SN78Q6eCAH118iqoUKLls4sNcNMRSAncbumjSYuxoRCiQ7WRfeptViF2Lqx YdVh+sV1KnTD6PIoG31wPW99MX0GsirC -----END CERTIFICATE-----Generated at Sat Dec 6 22:08:38 2025 by rpki-client