This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft File: dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json) Hash identifier: ivIe5IfKL1YCBwW1jXWOZgGvsa8exRuwWr53T9s3y+g= Subject key identifier: C6:E1:F3:54:70:27:52:39:4D:C5:DD:B0:23:D7:3A:96:A8:8F:FB:76 Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF Certificate issuer: /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft Manifest number: A3 Signing time: Tue 23 Dec 2025 05:11:50 +0000 Manifest this update: Tue 23 Dec 2025 05:11:49 +0000 Manifest next update: Tue 30 Dec 2025 05:11:49 +0000 Files and hashes: 1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: 1hT5WodFoDCobLu4u1o8xDn/9z057o/Dy2qKuedyzKs=) 2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: cprKT/vfUwI6vjvLZuHXw1YhqI0bQrhQTc7WaG1olUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Validity Not Before: Dec 23 05:11:49 2025 GMT Not After : Dec 30 05:11:49 2025 GMT Subject: CN=694a2496-bd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9a:9c:dc:cf:69:4f:85:96:8d:0f:a6:a4:10: bc:ae:0e:06:84:55:b1:6f:c6:53:f1:e2:d5:60:3b: 84:b5:db:e7:d9:7b:0a:6f:8e:55:85:e8:06:dd:d4: 0d:ba:36:2b:12:54:00:4b:1c:4e:d7:b5:e2:08:a9: 29:0f:ef:07:5e:bf:a1:b3:71:24:1c:72:1f:49:7f: 35:b9:cd:ca:08:b7:41:71:a6:00:e7:50:31:23:d7: 6f:06:33:c7:05:5e:ac:d0:b3:bb:ea:7e:95:85:03: b3:d1:46:74:9f:0e:c9:34:7d:07:66:59:58:d5:f7: a7:ba:e4:92:33:78:b4:a0:75:1e:c8:53:84:08:64: bf:9d:f0:41:c9:fa:2e:49:96:6d:45:fa:1a:79:f1: d0:b3:4c:5a:57:82:0f:40:a8:4b:59:98:37:d1:c5: 44:b6:68:68:39:8b:8e:f0:d0:ac:7a:fc:63:55:e0: c8:9c:f4:d9:e4:49:80:fb:24:c3:23:ef:e6:3d:9e: 72:40:96:9f:c7:d4:c1:7e:2d:6c:73:92:53:24:77: a2:52:8a:3a:6a:df:0a:76:a9:1e:58:49:bf:11:6d: 0c:aa:ad:d4:6c:ca:b7:a3:d7:2e:5f:59:fb:c8:3a: 08:41:ed:d9:b5:23:35:1c:5a:3e:3f:43:69:c1:b2: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E1:F3:54:70:27:52:39:4D:C5:DD:B0:23:D7:3A:96:A8:8F:FB:76 X509v3 Authority Key Identifier: keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:a4:11:04:88:2e:73:69:e4:a1:50:96:59:ac:1c:1f:b2:d2: 9d:01:b4:23:ee:16:b2:9a:b7:67:01:b3:37:0a:a6:f2:5b:e2: f3:e7:59:89:ba:39:38:c8:3d:c3:01:01:d1:fe:4c:fa:17:8b: 44:39:e6:40:eb:22:84:65:83:06:58:fd:86:e7:d7:45:df:ee: 4c:23:b7:8c:ca:f3:48:d2:83:41:66:6c:72:3a:d7:5d:48:0a: da:d4:2c:ff:79:d2:9c:ee:58:d0:8d:76:70:05:ad:5c:57:1c: 1d:a5:84:cf:51:3b:0d:33:9e:d6:01:a7:88:ba:e1:37:ce:fe: c3:a9:81:6a:3c:e6:4d:7b:05:02:cc:54:bb:e9:a5:0a:b2:ad: 59:c5:2f:cb:f3:2b:a9:04:e2:93:68:f1:19:96:b5:11:c1:80: 3c:15:d0:a9:6d:62:25:95:8e:4e:1c:c5:be:61:45:f2:5f:d3: 5e:15:14:d0:9b:8e:a3:41:52:bc:40:5d:e8:b6:c1:d2:a5:29: 1a:19:ba:d5:c9:eb:24:12:e9:9d:2f:66:af:d0:32:a3:4b:0f: 55:41:8c:21:29:cc:5c:36:f7:7b:91:a5:9e:55:c9:37:f3:dc: 3b:2c:10:67:8a:1d:b7:7b:1b:a9:9f:06:3f:9b:bc:ab:8b:9c: c8:33:75:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3OUExMTAvBgNVBAUTKDc1OEFDMkJFREFEQ0JBM0FENzM4MTY5RkIzODlENTA4 QjU0RDc0QkYwHhcNMjUxMjIzMDUxMTQ5WhcNMjUxMjMwMDUxMTQ5WjAYMRYwFAYD VQQDDA02OTRhMjQ5Ni1iZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pqc3M9pT4WWjQ+mpBC8rg4GhFWxb8ZT8eLVYDuEtdvn2XsKb45VhegG3dQN ujYrElQASxxO17XiCKkpD+8HXr+hs3EkHHIfSX81uc3KCLdBcaYA51AxI9dvBjPH BV6s0LO76n6VhQOz0UZ0nw7JNH0HZllY1fenuuSSM3i0oHUeyFOECGS/nfBByfou SZZtRfoaefHQs0xaV4IPQKhLWZg30cVEtmhoOYuO8NCsevxjVeDInPTZ5EmA+yTD I+/mPZ5yQJafx9TBfi1sc5JTJHeiUoo6at8KdqkeWEm/EW0Mqq3UbMq3o9cuX1n7 yDoIQe3ZtSM1HFo+P0NpwbLy2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbh81Rw J1I5TcXdsCPXOpaoj/t2MB8GA1UdIwQYMBaAFHWKwr7a3Lo61zgWn7OJ1Qi1TXS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc5QS8yRTEwRURCMkUz NzkxMUVGQjQ2NjZCMzFDNEY5QUUwMi9kWXJDdnRyY3VqclhPQmFmczRuVkNMVk5k TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RZckN2dHJjdWpyWE9CYWZzNG5WQ0xWTmRMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc5QS8yRTEwRURCMkUzNzkxMUVGQjQ2NjZCMzFDNEY5QUUwMi9kWXJDdnRyY3Vq clhPQmFmczRuVkNMVk5kTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgpBEEiC5zaeShUJZZrBwfstKdAbQj7haymrdnAbM3CqbyW+Lz51mJ ujk4yD3DAQHR/kz6F4tEOeZA6yKEZYMGWP2G59dF3+5MI7eMyvNI0oNBZmxyOtdd SAra1Cz/edKc7ljQjXZwBa1cVxwdpYTPUTsNM57WAaeIuuE3zv7DqYFqPOZNewUC zFS76aUKsq1ZxS/L8yupBOKTaPEZlrURwYA8FdCpbWIllY5OHMW+YUXyX9NeFRTQ m46jQVK8QF3otsHSpSkaGbrVyeskEumdL2av0DKjSw9VQYwhKcxcNvd7kaWeVck3 89w7LBBnih23exupnwY/m7yri5zIM3VB -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:29 2025 by rpki-client