This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json) Hash identifier: vSQV0J1D/Iyx9/A9+Eu/DtU554ZGPL00ozNcFrvd/Wg= Subject key identifier: 08:CA:94:F7:5D:2C:81:47:E1:DF:AD:EF:B4:61:67:FB:4E:35:94:5E Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Certificate serial: 08C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft Manifest number: 08C9 Signing time: Thu 18 Dec 2025 19:57:17 +0000 Manifest this update: Thu 18 Dec 2025 19:57:16 +0000 Manifest next update: Thu 25 Dec 2025 19:57:16 +0000 Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: Lui4DSsRIBKO9lKrDIzFWq4hRgj5P5KMnViVkUs0f5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2249 (0x8c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Validity Not Before: Dec 18 19:57:16 2025 GMT Not After : Dec 25 19:57:16 2025 GMT Subject: CN=69445c9d-b575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:4a:c3:08:6a:ff:bc:86:f0:88:5c:32:9d: bf:86:87:89:f2:e7:c3:1e:05:04:d0:88:33:0a:22: 63:f7:1c:32:35:0d:9d:d5:4a:5b:9b:af:ca:de:7e: aa:06:d2:2e:f2:84:1a:7c:1b:87:88:5b:d3:fd:34: fc:46:33:f1:a5:de:c6:ff:3f:b9:44:bb:7a:95:81: d0:63:11:87:61:30:61:2b:43:23:1a:3d:cc:20:22: 70:dd:eb:9f:12:40:a2:1e:3c:25:35:13:1a:56:30: 8e:c7:2f:56:c6:13:41:16:76:e4:ff:ac:b4:37:27: b3:a3:01:25:00:a7:19:f5:ef:93:ea:00:4e:bd:bc: 38:62:b0:02:84:8d:cb:5d:dc:e1:d6:0f:5f:f4:cf: 32:e6:f2:83:62:e7:86:92:b8:91:a9:71:a1:53:51: 67:fb:7b:bf:d9:94:78:46:b0:8c:93:33:7e:00:73: 33:5f:48:53:b7:7e:7f:a0:fe:94:1c:2d:4d:fb:ef: cd:00:99:71:2b:61:6a:16:50:2f:52:7f:37:d9:57: c7:f9:8d:cd:73:af:a1:98:bb:23:4a:d8:b5:5d:95: 13:db:55:d3:9f:bd:92:2d:93:e0:d6:a0:66:a1:f7: 45:ff:33:f1:ae:da:cd:53:54:34:cc:39:ed:93:43: 02:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CA:94:F7:5D:2C:81:47:E1:DF:AD:EF:B4:61:67:FB:4E:35:94:5E X509v3 Authority Key Identifier: keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:32:5a:f2:dd:1c:5d:14:7f:c6:29:c6:09:1b:c1:b0:b3:65: da:ce:74:ae:9f:a1:ea:c8:f8:cc:ca:28:9c:95:dd:ea:32:dd: bc:6b:de:c4:02:04:8b:70:02:4f:2b:d3:76:26:c5:3b:a3:b3: 4c:0b:7f:16:64:74:4d:3a:dc:5b:41:c6:13:95:f9:26:e6:2c: c6:a7:1e:52:d0:7e:e4:54:7a:9f:1b:95:c1:1e:5b:6b:d8:83: 1f:f0:f7:7b:23:16:62:dc:21:46:57:85:7f:35:3a:51:e1:dc: 11:1a:de:b1:1b:9c:4b:cc:35:0f:5c:25:0e:10:18:79:bf:0e: bc:6f:4d:c4:f7:9e:26:bd:7e:9d:90:ba:20:e8:65:e1:0a:e9: 9f:9c:82:4c:66:41:72:e6:82:bf:83:b8:85:44:db:e8:db:12: 83:8c:14:f9:d7:12:cb:22:3b:b5:d3:84:3b:89:31:4a:40:9b: 16:b0:e3:14:05:50:89:13:72:40:e1:c1:1a:8b:62:9f:d6:9f: 89:47:97:5c:c2:ca:f1:24:58:3a:d2:e0:e7:85:60:fa:e9:df: 96:bc:c4:ef:23:fd:e7:33:d5:55:3c:3b:04:57:ba:1c:bf:7a: 6d:97:39:b7:e6:5c:b9:de:1c:10:2a:8b:df:a2:13:d7:45:ab: 7e:47:d8:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF NkU5OUJDQzEwHhcNMjUxMjE4MTk1NzE2WhcNMjUxMjI1MTk1NzE2WjAYMRYwFAYD VQQDDA02OTQ0NWM5ZC1iNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaVKwwhq/7yG8IhcMp2/hoeJ8ufDHgUE0IgzCiJj9xwyNQ2d1Upbm6/K3n6q BtIu8oQafBuHiFvT/TT8RjPxpd7G/z+5RLt6lYHQYxGHYTBhK0MjGj3MICJw3euf EkCiHjwlNRMaVjCOxy9WxhNBFnbk/6y0NyezowElAKcZ9e+T6gBOvbw4YrAChI3L Xdzh1g9f9M8y5vKDYueGkriRqXGhU1Fn+3u/2ZR4RrCMkzN+AHMzX0hTt35/oP6U HC1N++/NAJlxK2FqFlAvUn832VfH+Y3Nc6+hmLsjSti1XZUT21XTn72SLZPg1qBm ofdF/zPxrtrNU1Q0zDntk0MCaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjKlPdd LIFH4d+t77RhZ/tONZReMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0 RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6 QUUwNVZLVjRUb1htNlp2TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCMlry3RxdFH/GKcYJG8Gws2XaznSun6HqyPjMyiicld3qMt28a97E AgSLcAJPK9N2JsU7o7NMC38WZHRNOtxbQcYTlfkm5izGpx5S0H7kVHqfG5XBHltr 2IMf8Pd7IxZi3CFGV4V/NTpR4dwRGt6xG5xLzDUPXCUOEBh5vw68b03E954mvX6d kLog6GXhCumfnIJMZkFy5oK/g7iFRNvo2xKDjBT51xLLIju104Q7iTFKQJsWsOMU BVCJE3JA4cEai2Kf1p+JR5dcwsrxJFg60uDnhWD66d+WvMTvI/3nM9VVPDsEV7oc v3ptlzm35ly53hwQKovfohPXRat+R9i9 -----END CERTIFICATE-----Generated at Sat Dec 20 07:15:58 2025 by rpki-client