This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft File: DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json) Hash identifier: nzPtSvjp4PqM45GTdz99YfIHYoeQGwcZSLhHiKPIxgM= Subject key identifier: E8:C0:06:7E:DB:42:98:6A:E3:3E:46:8E:75:4B:F1:6C:6E:8D:29:90 Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft Manifest number: 3B Signing time: Tue 23 Dec 2025 06:18:59 +0000 Manifest this update: Tue 23 Dec 2025 06:18:59 +0000 Manifest next update: Tue 30 Dec 2025 06:18:59 +0000 Files and hashes: 1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: iqmmRsTsKbclKY+L0R4i5wzhE+WI6wnhDsg0adLJpHI=) 2: 30A0F15C844211F08D5EDC71C4F9AE02.roa (hash: InIaj/oLsOP7BoW0eQNCHw7tjMCZzbrG21iu4aAkWXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Validity Not Before: Dec 23 06:18:59 2025 GMT Not After : Dec 30 06:18:59 2025 GMT Subject: CN=694a3453-4a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:27:8c:71:40:cc:58:c8:5e:93:75:bd:84: 24:95:ba:46:69:0c:9e:5a:6e:de:1f:08:86:51:fd: 5c:32:ed:51:0a:fd:2e:57:4f:7f:24:40:0c:fa:1d: 51:5e:a2:cc:44:b3:eb:e1:1f:46:17:64:96:39:80: 86:c8:dc:cc:7a:56:b5:55:da:9c:52:28:94:eb:c1: de:c3:0b:95:60:3c:60:f5:1c:fb:cd:7e:cc:77:06: 04:6b:cb:a9:06:d3:af:b7:e3:b2:cd:96:1a:a6:8f: 16:a1:67:65:ab:ac:5a:aa:20:6c:37:a2:54:a7:3b: 4f:ab:45:15:78:02:5b:2c:40:0f:67:de:58:d7:ca: 14:e4:b7:79:70:89:bc:b7:5c:0f:92:22:8c:c0:26: 4d:de:5e:e8:ff:46:51:96:41:b5:87:65:4e:4d:76: d7:c0:7e:d1:46:82:b2:5c:42:84:bf:e8:99:8e:af: 62:56:80:e3:67:7d:8c:7f:d4:b5:29:dd:8e:b7:cd: 23:07:f0:41:3e:2a:58:e2:ab:50:4d:9a:14:68:ae: e0:5c:6b:19:a9:f6:71:fa:b1:2a:34:d9:d1:d8:39: 51:94:2f:89:1e:11:99:e8:f0:14:e3:58:3a:af:98: 15:86:7a:a9:dc:f8:f1:c7:f9:f9:64:27:f0:89:c2: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C0:06:7E:DB:42:98:6A:E3:3E:46:8E:75:4B:F1:6C:6E:8D:29:90 X509v3 Authority Key Identifier: keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:cb:27:e5:7a:ac:a1:40:36:8e:d6:df:94:53:25:5b:22:59: f1:66:41:2d:54:cf:73:72:d8:1d:60:dc:27:d6:58:4f:8a:e7: 78:23:5e:8a:75:80:45:06:fc:7a:18:ca:fe:26:8e:58:7a:b2: 11:fc:ef:6c:4d:85:9e:21:bc:96:7e:d6:38:0f:e2:b9:43:2e: b5:f7:f8:d1:54:bb:53:5f:79:6f:c8:24:df:c0:db:67:1d:ba: 59:a4:70:48:9c:c0:ed:03:ef:2d:14:3c:a3:5c:e6:a7:1f:00: a8:5f:c3:ea:3e:27:f6:82:74:04:52:67:28:bf:3d:a9:b4:eb: e4:f4:e7:e4:8b:2b:80:cd:8a:6b:c5:3e:b7:35:06:af:95:70: 7b:08:2d:f6:2b:15:46:e3:cd:38:60:82:4c:5d:ff:a1:55:9d: bf:18:4b:53:e8:a6:15:e3:d7:c7:a6:7c:84:a7:37:1c:a4:92: 9b:82:ad:51:cb:cb:3b:0c:7f:61:e5:13:18:d0:0b:5e:f7:b1: 4b:bb:0e:17:91:81:44:98:a2:1c:9c:73:b4:61:f3:bd:68:7e: e5:d4:6a:83:e1:60:f9:ba:8c:44:ee:24:f8:92:53:12:ca:6d: cb:71:24:55:2b:65:0b:12:09:e0:5b:8a:f7:4a:ff:3f:da:0d: 01:e7:37:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NERCRjExMC8GA1UEBRMoMENBMzE2MjEyNEVFNjQ2Mjk2NDNGRjI5RUIzMTEwNzJE OTEyODUzMzAeFw0yNTEyMjMwNjE4NTlaFw0yNTEyMzAwNjE4NTlaMBgxFjAUBgNV BAMMDTY5NGEzNDUzLTRhMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtdieMcUDMWMhek3W9hCSVukZpDJ5abt4fCIZR/Vwy7VEK/S5XT38kQAz6HVFe osxEs+vhH0YXZJY5gIbI3Mx6VrVV2pxSKJTrwd7DC5VgPGD1HPvNfsx3BgRry6kG 06+347LNlhqmjxahZ2WrrFqqIGw3olSnO0+rRRV4AlssQA9n3ljXyhTkt3lwiby3 XA+SIozAJk3eXuj/RlGWQbWHZU5NdtfAftFGgrJcQoS/6JmOr2JWgONnfYx/1LUp 3Y63zSMH8EE+Kljiq1BNmhRoruBcaxmp9nH6sSo02dHYOVGUL4keEZno8BTjWDqv mBWGeqnc+PHH+flkJ/CJwsgRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6MAGfttC mGrjPkaOdUvxbG6NKZAwHwYDVR0jBBgwFoAUDKMWISTuZGKWQ/8p6zEQctkShTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REJGL0MxNDU2MDUwODQ0 MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREtNV0lTVHVaR0tXUV84cDZ6RVFjdGtTaFRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 REJGL0MxNDU2MDUwODQ0MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdL V1FfOHA2ekVRY3RrU2hUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADDLJ+V6rKFANo7W35RTJVsiWfFmQS1Uz3Ny2B1g3CfWWE+K53gjXop1 gEUG/HoYyv4mjlh6shH872xNhZ4hvJZ+1jgP4rlDLrX3+NFUu1NfeW/IJN/A22cd ulmkcEicwO0D7y0UPKNc5qcfAKhfw+o+J/aCdARSZyi/Pam06+T05+SLK4DNimvF Prc1Bq+VcHsILfYrFUbjzThggkxd/6FVnb8YS1PophXj18emfISnNxykkpuCrVHL yzsMf2HlExjQC173sUu7DheRgUSYohycc7Rh871ofuXUaoPhYPm6jETuJPiSUxLK bctxJFUrZQsSCeBbivdK/z/aDQHnN3g= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:25 2025 by rpki-client