This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: ZRe6jQKi2r48+BWiugJYbIKcH0xadcbojLlLOQiOnnM= Subject key identifier: EE:A8:42:E6:1B:88:77:29:E6:B9:C6:E8:B1:C4:4D:C5:09:B3:6F:1A Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 3562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 352F Signing time: Mon 22 Dec 2025 14:17:20 +0000 Manifest this update: Mon 22 Dec 2025 14:17:20 +0000 Manifest next update: Mon 29 Dec 2025 14:17:20 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: b2a5kkJKTA2M/R0F5tRlQyCxSHpPllIxB7mRYLOgedY=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13666 (0x3562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: Dec 22 14:17:20 2025 GMT Not After : Dec 29 14:17:20 2025 GMT Subject: CN=694952f0-d11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:8c:6e:6a:94:f4:bf:d8:96:81:92:86:77: ee:43:3d:7f:d4:8a:db:bb:69:d9:7a:fa:17:0e:16: b7:27:1f:6f:64:34:da:57:82:aa:b2:1b:50:d0:29: 08:ef:31:29:93:ca:c2:f9:ee:ee:af:89:cf:84:2d: 6c:0c:2b:b1:6c:eb:b9:b2:7a:fc:93:ad:ea:cf:ed: 38:8b:56:f0:a7:25:f2:02:a2:50:65:93:cf:39:16: 0e:4d:c2:93:55:d2:e8:9d:bf:cb:c3:33:4b:fd:73: 94:5c:b0:60:a1:59:d6:e0:63:1d:84:d3:57:ab:16: e0:44:51:cf:4c:49:40:2a:84:df:88:92:0b:97:a0: 84:a0:14:15:96:33:8b:52:55:e6:9e:2b:d1:73:95: a7:33:68:a0:8b:b7:5b:97:3d:93:56:14:85:34:9f: de:b8:25:bb:bb:38:50:e3:c4:c3:b1:fb:c5:a2:a9: 92:3b:58:14:d9:4d:91:60:09:50:64:c5:05:d0:58: 01:21:f0:52:05:26:f8:55:ff:8d:c8:c6:8a:48:c7: 02:36:d1:a3:8c:69:9c:90:cb:7a:a5:62:83:fa:56: 5f:27:77:cf:b8:1f:67:3e:43:a1:59:0f:8c:7c:59: 56:be:4a:7f:67:a5:68:5f:8b:75:8c:36:a9:fb:dc: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A8:42:E6:1B:88:77:29:E6:B9:C6:E8:B1:C4:4D:C5:09:B3:6F:1A X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ad:01:39:1c:bc:95:c3:cc:a9:ae:3d:7a:73:8f:4b:aa:8e: 61:ed:0d:42:9a:bf:8a:15:d1:1b:3f:ad:56:77:f0:8d:fb:56: 3b:5a:a7:c6:9d:58:b5:e1:cc:3c:a0:27:2d:14:9e:2b:69:99: 99:13:3e:42:b2:54:6e:cc:1c:52:29:fe:77:3e:bf:ca:1b:e9: 90:62:2d:d7:50:b5:3e:35:54:21:b0:e2:26:74:0d:cc:cd:10: 99:9f:2d:e9:3c:41:56:cf:d6:26:6e:bd:c7:1c:b8:88:2b:40: 27:05:d8:89:37:a2:41:c7:1c:22:27:82:f7:61:82:7a:55:ff: 2c:d7:05:90:a8:a1:7f:fb:a3:6f:f6:ab:c3:ff:50:ca:27:01: 82:6f:15:15:42:b8:2c:a0:7c:5c:f7:91:c1:bf:0a:a2:0a:40: 6d:d6:a8:da:75:b9:20:a5:58:55:43:9b:50:9b:b9:97:10:78: 42:1f:d6:ef:c7:24:b5:52:2f:b9:07:6a:67:df:7a:ae:d3:3e: ad:32:56:d8:a6:77:cc:e7:f9:ca:83:66:00:da:a3:ff:39:d3: ff:32:15:f2:da:dc:7a:13:f7:ff:b8:67:9a:9a:e9:de:5c:16: 3d:8b:cf:85:83:a1:3c:73:c5:12:49:f9:a9:fd:88:72:45:bb: e3:4a:99:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjUxMjIyMTQxNzIwWhcNMjUxMjI5MTQxNzIwWjAYMRYwFAYD VQQDDA02OTQ5NTJmMC1kMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKWMbmqU9L/YloGShnfuQz1/1Irbu2nZevoXDha3Jx9vZDTaV4KqshtQ0CkI 7zEpk8rC+e7ur4nPhC1sDCuxbOu5snr8k63qz+04i1bwpyXyAqJQZZPPORYOTcKT VdLonb/LwzNL/XOUXLBgoVnW4GMdhNNXqxbgRFHPTElAKoTfiJILl6CEoBQVljOL UlXmnivRc5WnM2igi7dblz2TVhSFNJ/euCW7uzhQ48TDsfvFoqmSO1gU2U2RYAlQ ZMUF0FgBIfBSBSb4Vf+NyMaKSMcCNtGjjGmckMt6pWKD+lZfJ3fPuB9nPkOhWQ+M fFlWvkp/Z6VoX4t1jDap+9xL7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6oQuYb iHcp5rnG6LHETcUJs28aMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3rQE5HLyVw8yprj16c49Lqo5h7Q1Cmr+KFdEbP61Wd/CN+1Y7WqfG nVi14cw8oCctFJ4raZmZEz5CslRuzBxSKf53Pr/KG+mQYi3XULU+NVQhsOImdA3M zRCZny3pPEFWz9Ymbr3HHLiIK0AnBdiJN6JBxxwiJ4L3YYJ6Vf8s1wWQqKF/+6Nv 9qvD/1DKJwGCbxUVQrgsoHxc95HBvwqiCkBt1qjadbkgpVhVQ5tQm7mXEHhCH9bv xyS1Ui+5B2pn33qu0z6tMlbYpnfM5/nKg2YA2qP/OdP/MhXy2tx6E/f/uGeamune XBY9i8+Fg6E8c8USSfmp/YhyRbvjSplP -----END CERTIFICATE-----Generated at Mon Dec 22 17:50:45 2025 by rpki-client