This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft File: dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json) Hash identifier: g86WpCjeSjNIgeKipoz2khi0mGNSza+qnEdlNGIIFd4= Subject key identifier: AC:11:91:46:5D:D6:BA:F0:63:38:83:4B:AD:5C:88:D1:F0:D3:74:E6 Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD Certificate issuer: /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft Manifest number: 0CA9 Signing time: Wed 31 Dec 2025 18:07:16 +0000 Manifest this update: Wed 31 Dec 2025 18:07:16 +0000 Manifest next update: Wed 07 Jan 2026 18:07:16 +0000 Files and hashes: 1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: TYUq/gBe8lrxNtM3o/aMymOEYYQNl2IxoiZdWf2801Y=) 2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: lExXs/ZWSysLfoXLqxxqgj7BhKcNAbWDLDuu5558YHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 18:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Validity Not Before: Dec 31 18:07:16 2025 GMT Not After : Jan 7 18:07:16 2026 GMT Subject: CN=69556654-4a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:58:5c:93:1b:e2:d6:4a:75:dc:21:42:02: 51:a4:7a:fa:46:10:6a:cd:d5:76:32:41:f2:f0:1a: 86:ea:3e:9b:e4:58:b1:17:35:12:08:21:cf:bb:3d: f5:a6:67:3b:3c:f9:81:7d:ad:24:3b:d0:a9:62:51: 93:84:b3:85:0a:c5:68:39:b3:ea:98:3d:a4:52:db: e0:94:87:fe:15:d9:4b:a9:1a:e3:86:75:aa:c5:0e: e0:ae:05:ed:7b:5c:d3:85:f5:8e:01:72:87:2d:3d: 4f:bc:e0:6c:72:56:2c:9a:fb:7b:99:08:94:ca:78: 76:13:25:27:cc:4d:9f:ad:50:4e:fa:3f:f7:e5:4a: 2e:db:25:28:ec:44:2b:33:86:31:8d:74:22:e0:b2: 93:75:7d:78:a3:84:8c:3d:b0:a2:68:0c:9f:5e:04: 63:b6:c9:82:5b:ab:9e:96:6d:2c:f5:be:b8:f1:a7: 82:f5:5d:dd:70:53:d9:57:3c:4d:a2:77:8e:85:3b: 23:0e:ab:c9:9a:78:17:9e:04:1d:dc:62:1d:41:2e: 39:15:85:06:a9:7a:d6:53:ae:f3:61:bd:8e:a4:64: 7f:76:a9:e1:59:c2:45:f2:1a:dd:93:48:ad:d2:3f: 83:69:ab:6a:f0:91:a6:e5:54:4f:10:1a:cb:fe:4e: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:11:91:46:5D:D6:BA:F0:63:38:83:4B:AD:5C:88:D1:F0:D3:74:E6 X509v3 Authority Key Identifier: keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:9b:55:ae:96:ca:30:34:e9:96:a9:25:58:e4:39:ca:d9:c9: 1f:36:02:68:92:31:9d:93:67:3e:40:a9:73:14:9a:95:5e:45: c4:ba:4e:f4:6e:43:bf:0c:37:1d:a7:47:35:2f:35:2d:13:77: 2f:b1:25:95:a5:9b:86:8b:dd:46:48:8d:cd:7d:31:a2:04:7b: 5c:32:7a:39:45:db:46:f7:80:60:44:5b:dc:55:60:0c:1d:71: 38:92:e7:47:73:95:df:92:1f:89:1e:db:18:48:e3:1d:4f:6a: f3:5c:a4:67:ac:52:81:34:14:d3:91:6a:f7:41:90:c9:8e:32: 39:96:74:aa:48:fa:43:bc:5a:cc:35:1c:c4:2e:7e:31:61:5a: ce:33:78:01:ef:ba:dd:8a:e3:ba:8c:e8:ea:ed:ee:e1:d3:95: 7c:81:49:0d:0e:cb:74:99:aa:b3:d0:d2:f9:4f:28:e3:9d:ae: bc:ff:91:b8:67:e1:c4:32:80:b6:a8:60:31:51:04:d8:87:3d: 2e:de:b5:12:42:cc:70:22:1b:2c:fa:0b:fe:20:08:d0:dd:3b: 7c:97:c4:38:c9:7a:75:09:dd:cd:52:ef:d5:f4:64:45:32:8c: 60:2a:89:ed:6e:4c:2f:71:a0:5c:60:70:23:88:3f:61:4b:aa: 23:8e:b3:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM0REIxMTAvBgNVBAUTKDc1MDU1RTBEOENEQjE0RUY5RjA0RjhCOTVEQUM4Qjg5 Qzk2OENEREQwHhcNMjUxMjMxMTgwNzE2WhcNMjYwMTA3MTgwNzE2WjAYMRYwFAYD VQQDDA02OTU1NjY1NC00YTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7dYXJMb4tZKddwhQgJRpHr6RhBqzdV2MkHy8BqG6j6b5FixFzUSCCHPuz31 pmc7PPmBfa0kO9CpYlGThLOFCsVoObPqmD2kUtvglIf+FdlLqRrjhnWqxQ7grgXt e1zThfWOAXKHLT1PvOBsclYsmvt7mQiUynh2EyUnzE2frVBO+j/35Uou2yUo7EQr M4YxjXQi4LKTdX14o4SMPbCiaAyfXgRjtsmCW6uelm0s9b648aeC9V3dcFPZVzxN oneOhTsjDqvJmngXngQd3GIdQS45FYUGqXrWU67zYb2OpGR/dqnhWcJF8hrdk0it 0j+Daatq8JGm5VRPEBrL/k4YEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwRkUZd 1rrwYziDS61ciNHw03TmMB8GA1UdIwQYMBaAFHUFXg2M2xTvnwT4uV2si4nJaM3d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzREQi9EN0RGRDZDQTA4 RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZPLWZCUGk1WGF5TGljbG96 ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRVmVEWXpiRk8tZkJQaTVYYXlMaWNsb3pkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzREQi9EN0RGRDZDQTA4RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZP LWZCUGk1WGF5TGljbG96ZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEm1WulsowNOmWqSVY5DnK2ckfNgJokjGdk2c+QKlzFJqVXkXEuk70 bkO/DDcdp0c1LzUtE3cvsSWVpZuGi91GSI3NfTGiBHtcMno5RdtG94BgRFvcVWAM HXE4kudHc5Xfkh+JHtsYSOMdT2rzXKRnrFKBNBTTkWr3QZDJjjI5lnSqSPpDvFrM NRzELn4xYVrOM3gB77rdiuO6jOjq7e7h05V8gUkNDst0maqz0NL5Tyjjna68/5G4 Z+HEMoC2qGAxUQTYhz0u3rUSQsxwIhss+gv+IAjQ3Tt8l8Q4yXp1Cd3NUu/V9GRF MoxgKontbkwvcaBcYHAjiD9hS6ojjrPn -----END CERTIFICATE-----Generated at Fri Jan 2 09:53:26 2026 by rpki-client