This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json) Hash identifier: wCvDGvB4gmdNXCwzxtXD/Is8cQ7H15vWM/PcXG3Pa2Q= Subject key identifier: B6:22:25:F5:F8:F0:DE:C5:C6:FC:61:47:F1:C0:67:3F:45:C5:6D:69 Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft Manifest number: 010D Signing time: Fri 05 Dec 2025 03:01:24 +0000 Manifest this update: Fri 05 Dec 2025 03:01:24 +0000 Manifest next update: Fri 12 Dec 2025 03:01:24 +0000 Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: zqc68i6PXJTzdu24wrUEImHqgVG5wtaxkEfFO/VBY1Y=) 2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Validity Not Before: Dec 5 03:01:24 2025 GMT Not After : Dec 12 03:01:24 2025 GMT Subject: CN=69324b04-01ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0d:2a:f4:58:9e:d7:f3:dd:01:a5:e1:1d:e4: 06:a9:94:23:3b:68:0f:26:f5:8a:22:bd:47:25:e4: 02:f2:c5:2a:90:ab:b2:4e:20:44:c0:3f:d4:c7:9c: 71:82:d5:9c:5e:d1:d9:c8:21:77:b0:ef:a6:f7:d3: dd:9c:22:81:45:09:dd:62:2f:c2:86:cc:86:93:06: 64:9b:89:c9:5a:70:6e:cb:fe:31:c4:a3:2a:c0:53: 6d:16:ab:4b:49:c9:73:49:18:33:b5:cb:cb:af:e2: 34:d9:e0:a7:24:46:66:8f:65:8d:d1:bd:af:93:03: cf:d3:69:21:69:76:a3:c6:fe:cc:9c:9d:54:02:ea: 31:5b:f9:52:e0:2f:95:07:b4:1a:44:e5:29:7f:7e: a8:ae:04:aa:9f:da:1a:2f:7c:10:39:b2:8a:c5:46: c6:1f:10:16:a2:f6:21:22:46:80:7d:92:ce:fc:ed: cb:98:b9:0c:db:32:dc:a6:3a:9f:93:00:8b:56:27: 66:4d:6c:82:16:20:b8:e8:8a:72:3b:4f:d3:f6:c6: 18:68:cf:d8:f5:3a:19:6f:d4:63:71:d6:c3:25:75: 98:c0:6b:e8:6c:c5:84:33:7e:47:58:6c:90:3e:c5: 14:f0:48:a4:39:11:e4:c3:e4:3b:83:60:5e:8d:05: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:22:25:F5:F8:F0:DE:C5:C6:FC:61:47:F1:C0:67:3F:45:C5:6D:69 X509v3 Authority Key Identifier: keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:dd:4e:7c:cb:be:cb:32:d1:f4:dd:dc:ec:93:5f:66:27:4e: b1:e0:44:15:97:9f:77:a2:c8:45:b6:ae:d2:23:c0:69:41:73: db:a7:85:30:ab:2c:1e:d1:af:d5:f1:5b:0d:f7:46:a3:40:ca: e1:0b:31:b3:de:5d:ec:15:49:09:72:b3:e4:a8:e0:b5:b3:bc: f0:75:41:09:bd:6d:0a:fe:e0:b8:44:07:56:9b:20:22:1c:b5: 1b:80:db:85:76:87:eb:35:cf:75:a7:07:6b:97:67:44:61:73: e8:63:4e:12:94:32:8f:53:a7:f4:0e:5d:e7:41:ef:bf:95:bd: 43:64:e1:de:b4:7d:95:52:79:a0:a7:7b:4b:2d:90:7a:3d:4c: 0d:80:5a:d0:f8:9e:3f:b7:1d:00:ce:33:9d:d5:7c:54:cf:c2: 32:0b:97:88:4b:15:9a:35:5d:7f:28:32:87:72:86:fd:7f:bb: 9f:5b:7a:e2:59:53:70:23:c5:cb:f8:f4:78:49:b1:ac:3c:85: 1d:df:81:df:b6:c6:7e:fd:9f:87:a6:2b:1c:a6:b8:7a:d9:5b: 5d:37:76:4f:82:10:76:52:5c:3e:ab:78:c9:3b:17:5e:6b:fa: 0b:7c:93:7c:05:27:0d:19:71:69:e3:9e:aa:81:c3:e1:62:2b: ee:cb:f6:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDc0QTExNjY5QzQzRTUzQjBGMjFENEI0MTNGOTJEOUVB OTEzMTU1MDMwHhcNMjUxMjA1MDMwMTI0WhcNMjUxMjEyMDMwMTI0WjAYMRYwFAYD VQQDEw02OTMyNGIwNC0wMWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q0q9Fie1/PdAaXhHeQGqZQjO2gPJvWKIr1HJeQC8sUqkKuyTiBEwD/Ux5xx gtWcXtHZyCF3sO+m99PdnCKBRQndYi/ChsyGkwZkm4nJWnBuy/4xxKMqwFNtFqtL SclzSRgztcvLr+I02eCnJEZmj2WN0b2vkwPP02khaXajxv7MnJ1UAuoxW/lS4C+V B7QaROUpf36orgSqn9oaL3wQObKKxUbGHxAWovYhIkaAfZLO/O3LmLkM2zLcpjqf kwCLVidmTWyCFiC46IpyO0/T9sYYaM/Y9ToZb9RjcdbDJXWYwGvobMWEM35HWGyQ PsUU8EikORHkw+Q7g2BejQX9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYiJfX4 8N7FxvxhR/HAZz9FxW1pMB8GA1UdIwQYMBaAFHShFmnEPlOw8h1LQT+S2eqRMVUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC83OTNFQTZEQTM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3RHlIVXRCUDVMWjZwRXhW UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RLRVdhY1EtVTdEeUhVdEJQNUxaNnBFeFZRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC83OTNFQTZEQTM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3 RHlIVXRCUDVMWjZwRXhWUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC3U58y77LMtH03dzsk19mJ06x4EQVl593oshFtq7SI8BpQXPbp4Uw qywe0a/V8VsN90ajQMrhCzGz3l3sFUkJcrPkqOC1s7zwdUEJvW0K/uC4RAdWmyAi HLUbgNuFdofrNc91pwdrl2dEYXPoY04SlDKPU6f0Dl3nQe+/lb1DZOHetH2VUnmg p3tLLZB6PUwNgFrQ+J4/tx0AzjOd1XxUz8IyC5eISxWaNV1/KDKHcob9f7ufW3ri WVNwI8XL+PR4SbGsPIUd34HftsZ+/Z+Hpiscprh62VtdN3ZPghB2Ulw+q3jJOxde a/oLfJN8BScNGXFp456qgcPhYivuy/aB -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:25 2025 by rpki-client