This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json) Hash identifier: DsEW3LPifzy23gA40b6/McRu7TX7e/7ISqR9CdAi6Zc= Subject key identifier: 84:2D:95:FB:D5:FB:78:BC:BF:53:8B:E0:23:4A:5C:06:B3:BC:F1:FF Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft Manifest number: 01BD Signing time: Sat 27 Dec 2025 02:04:09 +0000 Manifest this update: Sat 27 Dec 2025 02:04:08 +0000 Manifest next update: Sat 03 Jan 2026 02:04:08 +0000 Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: 708khZQZlZIf6iSQucwu3KUNoR3tko5natr9K5AgFmE=) 2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: GFGPvdmy2vrmiAyM3NUeTKYyq91wUi+ACbGsbCoh47g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 02:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Validity Not Before: Dec 27 02:04:08 2025 GMT Not After : Jan 3 02:04:08 2026 GMT Subject: CN=694f3e98-d4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:62:b5:b7:a7:e3:a1:f1:26:aa:1f:69:bf: 31:0f:3f:44:d1:9a:fe:25:13:ee:63:e1:1d:02:e0: 19:89:23:9c:11:78:1c:f3:ec:f3:2d:65:12:a4:07: d7:08:9d:09:c2:2d:c4:c6:00:3e:9a:00:cd:2b:0d: f8:7f:e6:6d:f1:ce:b0:a2:a9:6b:d4:93:f0:84:dd: f7:ba:c5:ca:f8:4e:9f:c5:a9:49:35:a0:ef:63:b4: 77:99:a0:91:bc:3c:b4:bb:67:e4:5d:1a:d8:3e:8f: 61:bd:fb:bd:ee:2f:22:01:cd:a2:e8:28:cd:63:ed: 6a:a6:86:ca:ec:06:b9:e2:ff:fc:99:33:a8:6d:c5: 1f:dd:45:3b:3b:bb:54:6c:9b:9d:01:de:d4:13:21: 51:1f:e3:1c:c2:56:75:d8:bb:15:d9:35:c9:fa:fd: 00:4b:53:cc:2a:07:73:b1:01:3b:f0:b1:36:c8:3d: 27:61:e0:28:f2:46:ce:ab:a3:1c:2d:3c:4e:69:bb: 17:28:01:58:a0:e1:ee:c6:f3:57:5d:8d:65:62:f6: 27:1a:24:4e:d0:f5:e2:35:f1:ab:ca:f4:0e:95:33: af:39:6d:cd:fb:e6:4c:b2:17:5e:42:63:bf:78:0d: 69:80:3b:9f:65:4e:ab:d6:a0:cb:43:a5:62:10:35: 91:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2D:95:FB:D5:FB:78:BC:BF:53:8B:E0:23:4A:5C:06:B3:BC:F1:FF X509v3 Authority Key Identifier: keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:44:7d:14:cb:8c:ad:d4:46:b0:bf:a7:4d:af:b4:f1:70:03: db:c8:7a:7c:81:8c:cb:c9:0a:b0:99:43:c9:42:7f:37:66:77: c6:ba:62:32:c1:d3:58:2f:05:a7:68:90:2a:8b:45:be:1f:fa: c5:42:a9:f5:f5:ca:d7:92:88:ef:0a:75:91:65:18:ef:96:ac: ae:d2:60:f9:d4:54:9f:72:00:cf:be:05:e5:b1:a9:24:7a:e4: ed:6f:a0:da:cb:84:a3:8e:0f:76:e0:a0:08:3b:80:90:ba:36: da:79:95:f4:f2:d7:a5:87:67:2d:bd:8b:10:b3:94:59:33:5c: 1e:50:91:b4:6e:2d:c2:9f:9d:83:9d:7e:e5:ed:bb:e1:ec:ed: 56:2a:88:2b:43:a0:cf:fb:6c:41:35:d9:28:ec:5b:cb:3a:05: 93:62:62:43:15:d5:e5:dc:df:5e:de:dc:a1:d6:e1:f3:d9:67: 1b:fb:ee:41:2b:bb:ed:b3:0c:83:dd:78:5d:db:ce:7b:33:f3: 6a:51:d8:5f:f9:32:3a:f4:c6:1a:ef:66:4a:1b:5c:d7:50:89: d1:3c:25:70:23:16:ff:d2:7f:7f:ae:e8:7d:d1:2f:2f:2f:21: 5c:28:1d:07:28:df:23:d6:8a:0b:26:4d:95:d8:78:21:a8:d4: de:98:83:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FERDExMTAvBgNVBAUTKDc2NTJBMjJGQzI1MEZBQUFFM0FCMkMwQzJBRkREMDRF MzA0N0U1MDcwHhcNMjUxMjI3MDIwNDA4WhcNMjYwMTAzMDIwNDA4WjAYMRYwFAYD VQQDDA02OTRmM2U5OC1kNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQ5itben46HxJqofab8xDz9E0Zr+JRPuY+EdAuAZiSOcEXgc8+zzLWUSpAfX CJ0Jwi3ExgA+mgDNKw34f+Zt8c6woqlr1JPwhN33usXK+E6fxalJNaDvY7R3maCR vDy0u2fkXRrYPo9hvfu97i8iAc2i6CjNY+1qpobK7Aa54v/8mTOobcUf3UU7O7tU bJudAd7UEyFRH+McwlZ12LsV2TXJ+v0AS1PMKgdzsQE78LE2yD0nYeAo8kbOq6Mc LTxOabsXKAFYoOHuxvNXXY1lYvYnGiRO0PXiNfGryvQOlTOvOW3N++ZMshdeQmO/ eA1pgDufZU6r1qDLQ6ViEDWR6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQtlfvV +3i8v1OL4CNKXAazvPH/MB8GA1UdIwQYMBaAFHZSoi/CUPqq46ssDCr90E4wR+UH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUREMS9EMDA2QzBERTM3 RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1xcmpxeXdNS3YzUVRqQkg1 UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RsS2lMOEpRLXFyanF5d01LdjNRVGpCSDVRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUREMS9EMDA2QzBERTM3RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1x cmpxeXdNS3YzUVRqQkg1UWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqRH0Uy4yt1Eawv6dNr7TxcAPbyHp8gYzLyQqwmUPJQn83ZnfGumIy wdNYLwWnaJAqi0W+H/rFQqn19crXkojvCnWRZRjvlqyu0mD51FSfcgDPvgXlsakk euTtb6Day4Sjjg924KAIO4CQujbaeZX08telh2ctvYsQs5RZM1weUJG0bi3Cn52D nX7l7bvh7O1WKogrQ6DP+2xBNdko7FvLOgWTYmJDFdXl3N9e3tyh1uHz2Wcb++5B K7vtswyD3Xhd2857M/NqUdhf+TI69MYa72ZKG1zXUInRPCVwIxb/0n9/ruh90S8v LyFcKB0HKN8j1ooLJk2V2HghqNTemIN2 -----END CERTIFICATE-----Generated at Sun Dec 28 09:44:57 2025 by rpki-client