This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json) Hash identifier: L3sqzAGuqq0WIOUmHUvCRdn3VN6c0mx39L0IAHL9yWc= Subject key identifier: 75:C1:90:41:8D:75:BE:F2:4F:20:B6:D2:CF:BF:87:CC:13:73:B3:69 Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft Manifest number: 34F7 Signing time: Thu 18 Dec 2025 15:09:51 +0000 Manifest this update: Thu 18 Dec 2025 15:09:50 +0000 Manifest next update: Thu 25 Dec 2025 15:09:50 +0000 Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: AfZCdfTkB6jWsyrs0lL7trSunknHc8xPSpphG2MhcvA=) 2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: Sw4ihe/uH6fmIDPdKoxmP7xAVXuq4ul6aZ2AD9s5AWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Validity Not Before: Dec 18 15:09:50 2025 GMT Not After : Dec 25 15:09:50 2025 GMT Subject: CN=6944193e-f424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:b0:07:a6:7e:cd:c6:43:90:1f:54:63:8c: 93:ad:95:35:67:0f:f9:7f:d7:db:c0:56:21:70:dd: ad:a0:88:e3:36:3d:1a:45:88:cb:d2:10:d0:4c:71: 91:cf:42:2b:7c:f2:da:ac:fb:a8:2c:8d:64:21:08: 3b:9f:49:38:20:79:a7:4a:17:63:c6:81:11:d8:c5: 68:75:f4:04:d9:6a:7e:20:e3:f2:46:ed:78:77:14: 59:56:50:51:e6:1b:e4:bd:46:34:80:b3:d4:8c:df: 90:89:ce:74:60:57:11:2c:b4:c2:1e:88:e7:30:0d: d4:38:ed:23:5e:ae:be:8a:7b:62:de:bb:b9:96:9b: ae:51:5e:68:d3:b4:6c:8e:36:78:94:f8:f9:93:e2: c5:4b:e8:2f:bf:22:5c:8b:cb:30:4e:91:a2:2f:f2: 03:4e:fc:29:5f:a4:9a:eb:2a:9e:a7:68:ac:7b:50: 71:7b:db:d5:f1:72:38:6f:1c:3c:d9:09:2f:7a:c8: 56:97:45:bf:d2:c7:96:09:f5:ca:86:04:ec:8c:21: 2f:f5:a8:b1:2c:36:e9:07:23:8d:44:e2:5e:6e:09: ca:7a:28:3f:df:46:cb:96:cb:01:a8:de:5d:88:02: d4:73:14:ca:8f:0c:c7:0e:6b:be:4d:77:1e:b2:ba: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C1:90:41:8D:75:BE:F2:4F:20:B6:D2:CF:BF:87:CC:13:73:B3:69 X509v3 Authority Key Identifier: keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:00:64:30:a4:8b:4f:47:14:1c:43:b4:90:94:59:0b:22:b4: 4e:7f:51:c9:f8:ed:cc:4d:e8:b0:7b:df:ac:d8:a0:ff:17:9a: 86:9e:4f:f9:95:82:f6:a7:b9:34:d6:82:84:3f:77:72:46:bd: 65:97:bb:de:7d:44:02:cb:19:04:a9:43:22:8d:a6:f5:ea:7f: 01:a1:3c:4e:24:e4:d9:0b:b1:e7:16:3a:4d:9a:a0:b5:9c:35: 37:dd:9e:31:b2:fc:7b:64:7d:c7:bc:9d:5d:a0:67:f8:39:82: 26:7f:8c:fc:64:1f:80:89:ec:11:c8:90:56:8c:cd:76:2f:da: 7c:0d:6d:19:39:43:1c:03:e6:8c:f8:53:19:1a:4b:a0:70:15: 05:aa:36:f9:b0:e2:b4:f5:00:fb:e7:06:00:4e:a5:2b:39:7c: e0:3f:7c:ba:80:7b:64:7b:b0:ec:48:15:dd:ce:39:6a:4c:cd: 69:3f:3a:50:a0:aa:a8:1d:eb:bb:c1:c2:3f:86:b2:92:8f:8d: 50:50:2a:8c:01:1b:6e:fe:6b:20:ea:6a:78:1c:2d:03:12:7c: 66:6d:7e:f3:e8:fd:d0:20:6d:fb:a1:d7:cb:a2:4c:d0:42:d5: 53:57:6f:f3:17:0c:d6:33:98:c4:7f:bd:99:d4:3a:1c:7c:a0: 1d:2d:3b:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI0REIxMTAvBgNVBAUTKDBEQzVDRTRBMjk0RjJDOTM4MEE5MTM1RUUxRjA1MzA3 MjhBNENEQTYwHhcNMjUxMjE4MTUwOTUwWhcNMjUxMjI1MTUwOTUwWjAYMRYwFAYD VQQDDA02OTQ0MTkzZS1mNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxWwB6Z+zcZDkB9UY4yTrZU1Zw/5f9fbwFYhcN2toIjjNj0aRYjL0hDQTHGR z0IrfPLarPuoLI1kIQg7n0k4IHmnShdjxoER2MVodfQE2Wp+IOPyRu14dxRZVlBR 5hvkvUY0gLPUjN+Qic50YFcRLLTCHojnMA3UOO0jXq6+inti3ru5lpuuUV5o07Rs jjZ4lPj5k+LFS+gvvyJci8swTpGiL/IDTvwpX6Sa6yqep2ise1Bxe9vV8XI4bxw8 2QkveshWl0W/0seWCfXKhgTsjCEv9aixLDbpByONROJebgnKeig/30bLlssBqN5d iALUcxTKjwzHDmu+TXcesroVbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXBkEGN db7yTyC20s+/h8wTc7NpMB8GA1UdIwQYMBaAFA3FzkopTyyTgKkTXuHwUwcopM2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjREQi81QzUwMjk2QzFE QTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExKT0FxUk5lNGZCVEJ5aWt6 YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RjWE9TaWxQTEpPQXFSTmU0ZkJUQnlpa3phWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjREQi81QzUwMjk2QzFEQTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExK T0FxUk5lNGZCVEJ5aWt6YVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATAGQwpItPRxQcQ7SQlFkLIrROf1HJ+O3MTeiwe9+s2KD/F5qGnk/5 lYL2p7k01oKEP3dyRr1ll7vefUQCyxkEqUMijab16n8BoTxOJOTZC7HnFjpNmqC1 nDU33Z4xsvx7ZH3HvJ1doGf4OYImf4z8ZB+AiewRyJBWjM12L9p8DW0ZOUMcA+aM +FMZGkugcBUFqjb5sOK09QD75wYATqUrOXzgP3y6gHtke7DsSBXdzjlqTM1pPzpQ oKqoHeu7wcI/hrKSj41QUCqMARtu/msg6mp4HC0DEnxmbX7z6P3QIG37odfLokzQ QtVTV2/zFwzWM5jEf72Z1DocfKAdLTsO -----END CERTIFICATE-----Generated at Fri Dec 19 16:40:58 2025 by rpki-client