This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json) Hash identifier: oh8UwjOUGPH31i2/XytERqGt9x2oRnMFCER07VSKKOg= Subject key identifier: D1:B2:26:FE:98:E6:71:BE:22:83:33:72:91:A1:0E:BE:D5:5F:5C:16 Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft Manifest number: 37 Signing time: Sun 21 Dec 2025 06:33:30 +0000 Manifest this update: Sun 21 Dec 2025 06:33:29 +0000 Manifest next update: Sun 28 Dec 2025 06:33:29 +0000 Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: E+SIDiiSlikm5OhK0qLHg3cKvIHNXX3KuZLmsfhpQic=) 2: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: j+lAAPB9v9s39rB3XeTq/mQabzWIrT+uwwVzKJaE2Fw=) 3: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: C895awW0iPQoVfIXjTm3Yt6AECnG0w/x1R5StsObe2s=) 4: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: CNeskz25yAbEaxsLMjegHDJiYGePQTzaDUtY7werUEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Validity Not Before: Dec 21 06:33:29 2025 GMT Not After : Dec 28 06:33:29 2025 GMT Subject: CN=694794ba-baca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:3e:68:fb:c5:25:d6:a5:e4:95:ed:e9:38: d5:41:b6:1c:37:c5:f4:ef:dd:f2:64:4d:99:dc:7d: ba:93:97:59:70:6b:1f:b7:65:54:d4:43:b7:75:24: 8f:e2:71:b6:02:36:f9:81:69:c0:09:07:59:13:5c: 1f:0d:bf:1e:d2:45:b0:41:87:fd:f9:08:48:e4:3d: 82:c4:b8:57:d7:fc:27:c8:ad:bc:11:5d:a4:1f:6a: e0:38:cc:c8:c5:55:91:c1:f7:66:d2:d5:71:ed:7d: 3e:7e:8a:32:78:20:63:f3:fd:80:e2:1c:ad:83:90: 0d:fb:c5:99:04:ac:9e:47:b5:20:29:bd:ca:f7:dc: a4:52:c2:52:7d:bf:4a:22:aa:a2:b9:07:30:99:d6: 7f:a6:91:64:93:21:94:c1:5b:d2:30:79:92:7e:52: 6c:b1:a3:8d:d2:94:fe:49:68:b9:c9:ab:2a:72:0f: a9:c4:56:96:48:e0:1e:5f:f0:88:c8:00:2a:7d:4a: c5:f4:f2:f6:1c:86:99:25:33:9e:0b:f9:ea:cf:a6: 69:c4:55:07:ae:b7:c4:b7:76:db:e3:0f:b9:7d:0f: 77:1b:d1:0c:20:5b:ef:7c:e1:ce:12:5b:b2:c6:39: 47:9e:27:01:db:75:c5:53:0f:01:b5:84:fd:94:4f: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B2:26:FE:98:E6:71:BE:22:83:33:72:91:A1:0E:BE:D5:5F:5C:16 X509v3 Authority Key Identifier: keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:94:4b:ab:bb:48:9b:4d:72:d5:cf:d4:5d:8d:02:d6:80:d9: 40:91:82:4b:1e:a0:34:28:0e:62:20:18:47:4c:69:cc:a1:cf: 0e:c8:fe:20:1a:ff:93:b4:41:13:0e:6e:89:92:f3:98:50:95: 4f:c5:bb:ce:b8:0e:1d:64:87:8b:53:ea:86:6c:08:e3:e8:cf: 43:71:79:21:68:3d:2a:23:d2:0b:de:57:af:8e:02:3b:46:67: e1:a7:0f:89:11:1c:7e:88:22:1c:66:bd:77:89:5a:3d:af:b1: 01:00:de:74:3a:60:4d:19:60:c8:6e:b2:5d:0a:d4:3a:ac:bb: 59:7b:17:5a:75:9d:62:f3:d1:bd:ab:96:b3:23:2e:10:7f:91: a8:eb:92:02:f9:5e:f8:be:13:a9:bd:a9:25:77:85:13:f6:1e: 67:5a:c0:64:ba:98:92:cb:87:6d:6a:35:3d:a5:ba:1e:2e:2a: de:c2:18:80:7a:e0:d5:10:5b:a7:19:33:7e:30:0b:82:af:c9: ed:36:41:10:f0:59:7b:31:fb:ab:bd:aa:ba:ee:77:bd:06:f9: 27:81:48:8a:dd:23:b2:d6:fe:8b:c1:4a:95:11:56:e7:d8:c4: 22:a8:15:a5:d9:a0:73:43:a7:b2:a3:9f:90:07:18:c0:a9:23: 1e:fa:22:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBDQzExMC8GA1UEBRMoMERDQUZBQzE0NUIyMkYxNTYwNzgwMTY2Q0QxRjE1MTUw NEVFRjhBMTAeFw0yNTEyMjEwNjMzMjlaFw0yNTEyMjgwNjMzMjlaMBgxFjAUBgNV BAMMDTY5NDc5NGJhLWJhY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYeD5o+8Ul1qXkle3pONVBthw3xfTv3fJkTZncfbqTl1lwax+3ZVTUQ7d1JI/i cbYCNvmBacAJB1kTXB8Nvx7SRbBBh/35CEjkPYLEuFfX/CfIrbwRXaQfauA4zMjF VZHB92bS1XHtfT5+ijJ4IGPz/YDiHK2DkA37xZkErJ5HtSApvcr33KRSwlJ9v0oi qqK5BzCZ1n+mkWSTIZTBW9IweZJ+Umyxo43SlP5JaLnJqypyD6nEVpZI4B5f8IjI ACp9SsX08vYchpklM54L+erPpmnEVQeut8S3dtvjD7l9D3cb0QwgW+984c4SW7LG OUeeJwHbdcVTDwG1hP2UT1zLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0bIm/pjm cb4igzNykaEOvtVfXBYwHwYDVR0jBBgwFoAUDcr6wUWyLxVgeAFmzR8VFQTu+KEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMENDLzhGQ0NDN0Y4OEY1 NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1L RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGNyNndVV3lMeFZnZUFGbXpSOFZGUVR1LUtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MENDLzhGQ0NDN0Y4OEY1NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhW Z2VBRm16UjhWRlFUdS1LRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJOUS6u7SJtNctXP1F2NAtaA2UCRgkseoDQoDmIgGEdMacyhzw7I/iAa /5O0QRMObomS85hQlU/Fu864Dh1kh4tT6oZsCOPoz0NxeSFoPSoj0gveV6+OAjtG Z+GnD4kRHH6IIhxmvXeJWj2vsQEA3nQ6YE0ZYMhusl0K1Dqsu1l7F1p1nWLz0b2r lrMjLhB/kajrkgL5Xvi+E6m9qSV3hRP2HmdawGS6mJLLh21qNT2luh4uKt7CGIB6 4NUQW6cZM34wC4Kvye02QRDwWXsx+6u9qrrud70G+SeBSIrdI7LW/ovBSpURVufY xCKoFaXZoHNDp7Kjn5AHGMCpIx76Igs= -----END CERTIFICATE-----Generated at Sun Dec 21 20:34:45 2025 by rpki-client