This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: /qwYOI64+JwbjH4q2EIdW1S+vdWu5mHt1cuUMCSf04M= Subject key identifier: EE:9D:19:94:8E:62:9B:B4:37:E7:ED:E3:93:7D:6A:07:AA:E4:7C:43 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 17C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 17A3 Signing time: Fri 12 Dec 2025 16:28:17 +0000 Manifest this update: Fri 12 Dec 2025 16:28:16 +0000 Manifest next update: Fri 19 Dec 2025 16:28:16 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: C7/mvg15zrC7u95mUVL33ma6FYKrj8Gl3LO3+w0RozI=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=) 3: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=) 4: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 16:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6087 (0x17c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Dec 12 16:28:16 2025 GMT Not After : Dec 19 16:28:16 2025 GMT Subject: CN=693c42a1-d119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:7b:e4:8d:a6:4d:ef:62:ec:9b:cd:6f:4f: 39:1d:66:88:07:52:94:6b:d9:61:9c:79:87:cb:d3: 8b:b6:ba:13:96:87:cc:8f:1a:00:db:98:3a:45:5e: 08:27:d6:90:df:69:c5:5c:fb:f7:91:8a:b8:27:48: c6:41:ef:c3:43:e1:d8:24:41:21:18:83:1e:41:45: bd:48:a1:5f:23:69:e9:5a:9b:d5:7b:53:3b:21:53: e9:d5:19:bb:9d:a4:15:04:d5:c2:8e:39:67:70:c8: 62:8a:75:f6:cb:4c:47:b1:75:f4:cd:28:27:ee:f8: e1:57:3a:38:80:86:14:5f:d0:6a:9f:c2:8d:1a:81: b4:57:56:64:c0:9a:97:d7:28:76:73:a1:aa:17:de: eb:a1:92:12:4d:63:3f:a5:5a:df:c5:3f:60:e5:00: aa:16:08:00:ec:e0:7b:97:d0:e6:8a:c9:83:64:1f: 5d:b2:98:98:fc:f7:6b:10:ef:77:19:01:c6:8c:6f: 4e:cf:94:17:61:2d:70:33:01:02:b3:76:87:eb:aa: 5e:a4:7f:0e:71:0e:e5:30:64:00:0c:3c:7c:07:3a: e8:08:bb:23:d6:de:48:e6:d4:a9:16:4a:5d:81:8a: b8:ee:4d:69:09:ff:8f:91:7e:29:d4:1e:f9:d7:e2: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9D:19:94:8E:62:9B:B4:37:E7:ED:E3:93:7D:6A:07:AA:E4:7C:43 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:76:67:af:cf:67:32:dd:9a:84:01:2a:c6:fb:a3:43:d7:ea: 3f:2d:8c:bd:8a:75:67:66:0f:5b:6d:89:75:04:5d:26:f5:64: 8c:cf:a3:e7:4b:9f:cf:f3:9e:66:15:0f:ad:05:25:28:13:86: ba:53:06:af:fc:6f:d0:d2:9c:60:37:93:f1:da:1b:31:ef:8e: 47:14:75:4b:00:2b:e0:87:f7:45:2d:0c:dc:b1:18:c9:fc:cb: 84:6d:17:ed:06:db:61:d4:4f:e5:d6:30:e6:5c:a6:72:b4:b5: 4f:29:00:ad:ee:c6:13:be:d4:c5:78:cc:19:6a:27:62:bc:99: 7f:f5:a6:3a:64:0d:9a:b1:a1:40:58:e4:8c:f4:6c:ba:9e:7e: e8:57:96:3a:57:1b:14:9c:31:55:b2:b5:1f:10:1a:fa:bd:b3: 84:45:5f:2d:63:ec:5a:97:fe:32:89:a3:8e:0e:09:d3:7a:67: 91:79:36:35:8d:a7:c6:7b:a4:22:ad:a1:3e:c0:8c:ee:97:d9: 8c:9b:6e:f0:f6:36:8c:02:f9:99:3b:d8:1b:f9:ad:a0:b6:79: 80:1f:d3:69:7d:fd:39:53:88:f7:ea:74:71:31:14:f4:c6:f3: 89:f1:b0:10:74:95:96:b0:e6:4d:b4:19:77:65:07:15:1c:d2: 8e:02:81:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjUxMjEyMTYyODE2WhcNMjUxMjE5MTYyODE2WjAYMRYwFAYD VQQDDA02OTNjNDJhMS1kMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0F75I2mTe9i7JvNb085HWaIB1KUa9lhnHmHy9OLtroTlofMjxoA25g6RV4I J9aQ32nFXPv3kYq4J0jGQe/DQ+HYJEEhGIMeQUW9SKFfI2npWpvVe1M7IVPp1Rm7 naQVBNXCjjlncMhiinX2y0xHsXX0zSgn7vjhVzo4gIYUX9Bqn8KNGoG0V1ZkwJqX 1yh2c6GqF97roZISTWM/pVrfxT9g5QCqFggA7OB7l9DmismDZB9dspiY/PdrEO93 GQHGjG9Oz5QXYS1wMwECs3aH66pepH8OcQ7lMGQADDx8BzroCLsj1t5I5tSpFkpd gYq47k1pCf+PkX4p1B751+LP+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6dGZSO Ypu0N+ft45N9ageq5HxDMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSdmevz2cy3ZqEASrG+6ND1+o/LYy9inVnZg9bbYl1BF0m9WSMz6Pn S5/P855mFQ+tBSUoE4a6Uwav/G/Q0pxgN5Px2hsx745HFHVLACvgh/dFLQzcsRjJ /MuEbRftBtth1E/l1jDmXKZytLVPKQCt7sYTvtTFeMwZaidivJl/9aY6ZA2asaFA WOSM9Gy6nn7oV5Y6VxsUnDFVsrUfEBr6vbOERV8tY+xal/4yiaOODgnTemeReTY1 jafGe6QiraE+wIzul9mMm27w9jaMAvmZO9gb+a2gtnmAH9Npff05U4j36nRxMRT0 xvOJ8bAQdJWWsOZNtBl3ZQcVHNKOAoHS -----END CERTIFICATE-----Generated at Fri Dec 12 21:54:26 2025 by rpki-client