This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json) Hash identifier: 6q8tmokYe4b1Re1m/kF2mUI8emPtsVf0PLJJJ/9MDho= Subject key identifier: E3:F4:96:CB:0B:E3:27:EF:F8:17:BF:1E:03:1D:EE:D1:F9:8F:1D:45 Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft Manifest number: 08C2 Signing time: Thu 04 Dec 2025 19:36:14 +0000 Manifest this update: Thu 04 Dec 2025 19:36:13 +0000 Manifest next update: Thu 11 Dec 2025 19:36:13 +0000 Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: C8xYffao9C9MR7Kd2w8wDlXhWjeC4oFyNF1OPYm/L88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Validity Not Before: Dec 4 19:36:13 2025 GMT Not After : Dec 11 19:36:13 2025 GMT Subject: CN=6931e2ae-d23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:25:86:15:9a:7c:54:da:0d:4d:8a:2c:ed: bc:39:89:0c:be:b1:53:df:f8:34:00:9b:c2:b2:71: f1:38:a4:78:60:ce:08:9c:53:2b:da:24:be:67:8b: 8e:80:d2:6d:09:f9:7a:d0:46:15:13:60:be:b3:02: 05:ec:cc:25:a6:5b:ad:de:8c:39:da:22:fe:70:0c: 5e:b6:c1:7d:9b:a3:da:2a:68:4e:67:76:95:64:6b: 28:c4:a2:93:7e:c9:e4:d3:ae:97:ff:32:e0:69:17: 1d:74:cb:68:74:0d:3d:b7:93:55:4c:7d:3c:5a:c7: c1:c2:4f:90:f1:d1:c0:60:ee:39:46:93:6e:20:09: 22:83:25:01:26:7b:4f:70:ef:3e:d1:78:aa:b0:37: 69:67:07:ca:71:57:61:26:17:de:22:93:b8:e1:30: a8:9e:2d:0c:14:b0:2b:7b:8c:9c:35:1a:68:26:39: b3:bc:31:00:82:d4:05:58:5b:68:95:0c:d2:58:06: c8:92:48:88:c7:92:d5:b5:7e:82:aa:83:a6:32:26: b4:53:da:0b:f6:b1:fc:cd:5f:dc:96:f9:84:41:3c: 0a:6e:ee:d0:42:bc:80:ac:3b:46:5c:52:09:40:08: 50:c3:f1:c3:8a:13:4f:80:bf:a6:4a:ae:39:0a:97: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F4:96:CB:0B:E3:27:EF:F8:17:BF:1E:03:1D:EE:D1:F9:8F:1D:45 X509v3 Authority Key Identifier: keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:7d:d6:e1:73:45:14:56:bd:35:de:bb:c6:1c:2c:70:d1: 76:8f:14:9a:c0:ef:67:7c:1c:e6:f5:a3:ad:3a:f7:2f:25:be: 7c:b7:95:2a:f3:c8:55:5e:68:a6:34:2f:32:16:e5:07:0f:58: ff:e8:c5:08:52:23:e4:bd:6b:8e:c4:79:0e:5c:1c:05:7d:52: 57:2b:69:0b:57:57:0c:d2:0c:10:29:9a:fb:7b:81:4a:38:24: a6:4e:73:0b:c2:4b:10:c1:a0:ce:dd:1f:18:5b:99:5f:dd:fb: 07:f1:7c:ed:8e:73:28:4d:a1:5b:67:d9:80:58:48:5f:37:bb: d5:ff:10:f5:ab:4b:b7:ae:a3:30:29:5e:e9:e3:75:38:06:76: e9:0a:73:02:99:2c:4c:28:42:aa:e0:d4:db:e0:29:4f:4b:b2: 0f:8a:16:cf:b1:c2:4e:ab:61:cc:1d:cd:95:02:ef:58:02:c1: b5:2c:d3:a9:8e:39:68:47:0a:48:8a:c8:9f:eb:cb:e4:ed:2d: 35:b8:1a:fc:81:d8:eb:9e:eb:5b:be:98:36:69:d0:f8:f4:27: df:11:7e:d2:04:b2:e4:df:52:b2:22:40:e8:8c:cc:76:44:5b: f7:14:24:dc:54:6c:57:8c:9d:88:ed:d5:59:c9:28:1e:2a:fc: a1:93:41:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF NkU5OUJDQzEwHhcNMjUxMjA0MTkzNjEzWhcNMjUxMjExMTkzNjEzWjAYMRYwFAYD VQQDEw02OTMxZTJhZS1kMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyislhhWafFTaDU2KLO28OYkMvrFT3/g0AJvCsnHxOKR4YM4InFMr2iS+Z4uO gNJtCfl60EYVE2C+swIF7Mwlplut3ow52iL+cAxetsF9m6PaKmhOZ3aVZGsoxKKT fsnk066X/zLgaRcddMtodA09t5NVTH08WsfBwk+Q8dHAYO45RpNuIAkigyUBJntP cO8+0XiqsDdpZwfKcVdhJhfeIpO44TConi0MFLAre4ycNRpoJjmzvDEAgtQFWFto lQzSWAbIkkiIx5LVtX6CqoOmMia0U9oL9rH8zV/clvmEQTwKbu7QQryArDtGXFIJ QAhQw/HDihNPgL+mSq45Cpf1TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP0lssL 4yfv+Be/HgMd7tH5jx1FMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0 RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6 QUUwNVZLVjRUb1htNlp2TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdSH3W4XNFFFa9Nd67xhwscNF2jxSawO9nfBzm9aOtOvcvJb58t5Uq 88hVXmimNC8yFuUHD1j/6MUIUiPkvWuOxHkOXBwFfVJXK2kLV1cM0gwQKZr7e4FK OCSmTnMLwksQwaDO3R8YW5lf3fsH8XztjnMoTaFbZ9mAWEhfN7vV/xD1q0u3rqMw KV7p43U4BnbpCnMCmSxMKEKq4NTb4ClPS7IPihbPscJOq2HMHc2VAu9YAsG1LNOp jjloRwpIisif68vk7S01uBr8gdjrnutbvpg2adD49CffEX7SBLLk31KyIkDojMx2 RFv3FCTcVGxXjJ2I7dVZySgeKvyhk0Fk -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:30 2025 by rpki-client