This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json) Hash identifier: QjuT/QQHhY/VqhNTdtAoXXrJR7UjM5wjD5qoER2+jcQ= Subject key identifier: 98:7F:95:76:A7:EA:7C:42:B8:85:3B:53:7D:5B:E5:5E:73:17:67:0B Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft Manifest number: 38 Signing time: Tue 23 Dec 2025 06:23:25 +0000 Manifest this update: Tue 23 Dec 2025 06:23:25 +0000 Manifest next update: Tue 30 Dec 2025 06:23:25 +0000 Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: 1riT/3A7iashZ/IYfjDnzGezxoDwy+9zlkMN6rE/aos=) 2: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: j+lAAPB9v9s39rB3XeTq/mQabzWIrT+uwwVzKJaE2Fw=) 3: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: CNeskz25yAbEaxsLMjegHDJiYGePQTzaDUtY7werUEc=) 4: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: C895awW0iPQoVfIXjTm3Yt6AECnG0w/x1R5StsObe2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Validity Not Before: Dec 23 06:23:25 2025 GMT Not After : Dec 30 06:23:25 2025 GMT Subject: CN=694a355d-460e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:69:b4:09:78:1a:dd:df:32:9d:b6:3e:af: 7e:22:35:d4:07:00:10:8c:75:f8:a3:1b:a8:79:57: ef:e1:42:57:99:de:ad:83:12:d5:c9:58:b0:70:b8: 8c:1c:40:af:2a:b8:f9:a4:c0:99:19:bc:95:03:a5: 0d:33:3f:b3:ba:01:41:a0:24:88:99:b7:b9:f8:02: d7:c0:27:19:b5:08:52:11:a5:92:2e:bb:93:65:0f: 4d:31:8c:aa:43:06:fd:ec:d1:26:f6:40:1d:1b:d8: 11:44:32:76:55:ca:c8:38:a2:85:bc:ab:8b:58:b6: 34:fa:24:1d:9e:52:1d:9d:db:c8:5b:97:fc:8f:a4: 66:cf:21:87:3d:93:5a:b0:06:e7:8f:5a:d9:4c:41: db:e5:20:13:d6:25:ec:8c:6b:dd:17:f6:33:67:42: 50:c9:fa:d5:41:17:d1:a3:80:95:60:13:32:dd:0a: e0:b3:73:86:4b:f7:a9:69:70:71:29:40:0e:29:50: ed:cc:54:76:ad:ed:bc:b3:9e:87:b5:24:9c:f3:0a: 0e:d1:7c:9c:8a:ca:42:b8:75:b3:c6:d7:29:34:b5: 77:28:8c:97:4f:5d:44:1e:f8:a4:5b:f9:68:2d:bd: 19:fe:b4:f5:80:86:6e:8a:cf:c2:72:37:63:c0:ac: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7F:95:76:A7:EA:7C:42:B8:85:3B:53:7D:5B:E5:5E:73:17:67:0B X509v3 Authority Key Identifier: keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fe:20:b8:73:f9:a1:32:56:e1:32:86:30:18:1b:5d:0a:1f: ff:77:0b:47:d4:f3:12:32:30:ed:39:f3:1c:ee:21:8a:f6:ea: c6:68:92:55:b1:6c:78:1c:be:13:e1:59:39:53:79:e2:7f:31: ec:10:fc:8b:24:d6:13:0a:c1:6c:bd:c1:e2:50:5b:b2:f4:0d: a5:2b:c9:bd:04:54:04:19:ea:d5:26:71:ac:5e:38:ed:43:fe: 3f:d0:fc:3f:af:e3:dd:b7:42:e5:41:a7:a0:68:17:f6:28:12: 2b:bb:db:c0:2b:fb:89:44:35:3a:14:21:90:e6:9f:a4:00:67: 8c:95:5d:ca:65:f3:28:2a:1c:8f:ab:07:94:84:04:2c:40:18: 9e:5f:ce:86:ae:63:cd:cd:85:41:c0:df:df:15:36:b5:3f:55: 65:2d:e7:0b:05:e7:55:96:be:c7:69:24:0a:84:d1:d0:e3:35: 1f:8c:63:5b:f5:35:5f:d7:17:4b:ae:47:c4:35:db:81:11:c9: e0:c8:63:7f:d5:06:30:65:92:6f:ff:b9:aa:ca:79:27:89:9c: 70:8b:2c:5a:40:ec:02:f4:44:d7:b0:c6:2c:db:e1:0d:f0:bc: 88:b2:e3:07:70:1d:e1:fa:ec:9a:21:0e:04:10:48:aa:9d:2a: 5b:54:9b:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBDQzExMC8GA1UEBRMoMERDQUZBQzE0NUIyMkYxNTYwNzgwMTY2Q0QxRjE1MTUw NEVFRjhBMTAeFw0yNTEyMjMwNjIzMjVaFw0yNTEyMzAwNjIzMjVaMBgxFjAUBgNV BAMMDTY5NGEzNTVkLTQ2MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Emm0CXga3d8ynbY+r34iNdQHABCMdfijG6h5V+/hQleZ3q2DEtXJWLBwuIwc QK8quPmkwJkZvJUDpQ0zP7O6AUGgJIiZt7n4AtfAJxm1CFIRpZIuu5NlD00xjKpD Bv3s0Sb2QB0b2BFEMnZVysg4ooW8q4tYtjT6JB2eUh2d28hbl/yPpGbPIYc9k1qw BuePWtlMQdvlIBPWJeyMa90X9jNnQlDJ+tVBF9GjgJVgEzLdCuCzc4ZL96lpcHEp QA4pUO3MVHat7byznoe1JJzzCg7RfJyKykK4dbPG1yk0tXcojJdPXUQe+KRb+Wgt vRn+tPWAhm6Kz8JyN2PArPcXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmH+Vdqfq fEK4hTtTfVvlXnMXZwswHwYDVR0jBBgwFoAUDcr6wUWyLxVgeAFmzR8VFQTu+KEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMENDLzhGQ0NDN0Y4OEY1 NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1L RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGNyNndVV3lMeFZnZUFGbXpSOFZGUVR1LUtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MENDLzhGQ0NDN0Y4OEY1NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhW Z2VBRm16UjhWRlFUdS1LRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD3+ILhz+aEyVuEyhjAYG10KH/93C0fU8xIyMO058xzuIYr26sZoklWx bHgcvhPhWTlTeeJ/MewQ/Isk1hMKwWy9weJQW7L0DaUryb0EVAQZ6tUmcaxeOO1D /j/Q/D+v4923QuVBp6BoF/YoEiu728Ar+4lENToUIZDmn6QAZ4yVXcpl8ygqHI+r B5SEBCxAGJ5fzoauY83NhUHA398VNrU/VWUt5wsF51WWvsdpJAqE0dDjNR+MY1v1 NV/XF0uuR8Q124ERyeDIY3/VBjBlkm//uarKeSeJnHCLLFpA7AL0RNewxizb4Q3w vIiy4wdwHeH67JohDgQQSKqdKltUm6s= -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:28 2025 by rpki-client