This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json) Hash identifier: k2HPtQObBTihkZI+TuouLoc4sIeliwj8SKrh6WGDGRU= Subject key identifier: A8:04:FF:F7:9D:8C:74:20:38:70:5F:09:AE:43:60:8D:61:31:5C:E3 Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft Manifest number: 2F Signing time: Fri 05 Dec 2025 05:28:58 +0000 Manifest this update: Fri 05 Dec 2025 05:28:57 +0000 Manifest next update: Fri 12 Dec 2025 05:28:57 +0000 Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: xZ6qiS3qLOfVLR/1ja41JftLhkmd9tggknhJddcq9Tg=) 2: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: j+lAAPB9v9s39rB3XeTq/mQabzWIrT+uwwVzKJaE2Fw=) 3: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: CNeskz25yAbEaxsLMjegHDJiYGePQTzaDUtY7werUEc=) 4: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: C895awW0iPQoVfIXjTm3Yt6AECnG0w/x1R5StsObe2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Validity Not Before: Dec 5 05:28:57 2025 GMT Not After : Dec 12 05:28:57 2025 GMT Subject: CN=69326d9a-a7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:f9:54:b7:e9:00:1b:ca:5d:c2:53:f8:5e: ac:2e:fb:86:40:9a:13:82:d2:43:93:e2:55:78:56: 51:52:cc:08:5d:fa:a2:0c:48:a6:fe:0c:23:65:1c: 1d:2d:75:04:d2:54:f5:ed:9c:d4:13:00:4b:1b:8c: 4c:f0:d2:c7:6f:dd:58:2d:5e:63:be:fe:2a:bf:f4: 0d:ca:c4:1f:e8:a0:16:05:4c:35:74:c9:40:12:4c: c3:0c:5a:45:d7:e3:12:28:73:4b:c3:34:11:5f:f1: 30:46:23:3e:40:27:b7:24:bb:b3:7d:39:5c:66:db: 4c:e6:87:6c:87:02:63:31:6b:86:95:ff:13:ab:60: 8b:41:16:93:59:4f:ca:3d:85:71:16:30:dd:9a:f1: c7:80:cb:d5:a2:13:32:f0:8a:9d:c1:8b:83:d6:d3: de:14:3f:4a:d5:3a:03:e2:04:f9:78:88:e2:03:e7: 64:38:0e:93:89:3f:b2:01:e2:a4:3d:21:9e:9e:55: 80:1d:8d:64:c5:21:6e:c9:b0:73:c0:dc:f3:d5:61: f8:e2:1b:71:42:78:9d:55:c0:af:e5:28:3c:c6:67: 2a:80:81:c2:f1:c7:66:98:fa:75:1a:41:0e:a6:79: d2:61:73:82:f8:9c:66:3a:48:be:30:76:1e:50:2b: 4e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:04:FF:F7:9D:8C:74:20:38:70:5F:09:AE:43:60:8D:61:31:5C:E3 X509v3 Authority Key Identifier: keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:85:20:67:c2:90:51:d7:28:7b:23:89:25:f9:b8:b2:84:a6: b2:47:8e:e3:32:c7:87:f5:7a:02:42:ed:e9:1a:17:d6:2f:f2: 77:87:ac:7e:4c:eb:63:bd:26:09:8f:d8:83:60:4d:4f:86:d0: 28:9b:fd:eb:2d:97:75:c4:a1:d9:a7:97:44:db:d4:70:07:d0: 4f:7c:f7:3c:3e:54:b7:f7:38:1f:d6:7b:c7:32:b5:27:8b:ee: c3:37:46:d7:80:38:5d:fa:0a:d0:bc:6f:ff:0a:62:e4:91:23: 0f:0f:13:d4:03:74:48:0f:cf:80:f0:b2:c6:7d:43:4b:2e:69: 94:ac:ad:bf:44:9d:b7:66:dd:a6:81:60:92:09:64:f6:0f:a3: eb:83:70:ae:7f:ab:cc:88:26:f1:04:74:5b:b4:04:c6:b7:1a: a4:dd:47:0c:dd:c5:b3:f8:70:01:c5:76:6a:e8:97:4e:97:b5: 4a:5b:0a:6a:d2:1e:52:4a:eb:eb:55:10:56:fc:d4:83:a4:43: ba:64:a8:7b:ab:e2:08:69:3a:c5:4f:84:49:a6:c5:96:99:7c: 20:fe:5a:a5:61:f4:57:b9:6d:fd:a2:a1:7d:22:b8:f2:38:68: de:f8:56:a1:ac:3b:02:96:d5:3a:2b:fb:42:8c:30:dd:d9:1f: 99:c3:c6:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBDQzExMC8GA1UEBRMoMERDQUZBQzE0NUIyMkYxNTYwNzgwMTY2Q0QxRjE1MTUw NEVFRjhBMTAeFw0yNTEyMDUwNTI4NTdaFw0yNTEyMTIwNTI4NTdaMBgxFjAUBgNV BAMTDTY5MzI2ZDlhLWE3ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9WvlUt+kAG8pdwlP4Xqwu+4ZAmhOC0kOT4lV4VlFSzAhd+qIMSKb+DCNlHB0t dQTSVPXtnNQTAEsbjEzw0sdv3VgtXmO+/iq/9A3KxB/ooBYFTDV0yUASTMMMWkXX 4xIoc0vDNBFf8TBGIz5AJ7cku7N9OVxm20zmh2yHAmMxa4aV/xOrYItBFpNZT8o9 hXEWMN2a8ceAy9WiEzLwip3Bi4PW094UP0rVOgPiBPl4iOID52Q4DpOJP7IB4qQ9 IZ6eVYAdjWTFIW7JsHPA3PPVYfjiG3FCeJ1VwK/lKDzGZyqAgcLxx2aY+nUaQQ6m edJhc4L4nGY6SL4wdh5QK04fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqAT/952M dCA4cF8JrkNgjWExXOMwHwYDVR0jBBgwFoAUDcr6wUWyLxVgeAFmzR8VFQTu+KEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMENDLzhGQ0NDN0Y4OEY1 NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1L RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGNyNndVV3lMeFZnZUFGbXpSOFZGUVR1LUtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MENDLzhGQ0NDN0Y4OEY1NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhW Z2VBRm16UjhWRlFUdS1LRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH2FIGfCkFHXKHsjiSX5uLKEprJHjuMyx4f1egJC7ekaF9Yv8neHrH5M 62O9JgmP2INgTU+G0Cib/estl3XEodmnl0Tb1HAH0E989zw+VLf3OB/We8cytSeL 7sM3RteAOF36CtC8b/8KYuSRIw8PE9QDdEgPz4DwssZ9Q0suaZSsrb9Enbdm3aaB YJIJZPYPo+uDcK5/q8yIJvEEdFu0BMa3GqTdRwzdxbP4cAHFdmrol06XtUpbCmrS HlJK6+tVEFb81IOkQ7pkqHur4ghpOsVPhEmmxZaZfCD+WqVh9Fe5bf2ioX0iuPI4 aN74VqGsOwKW1Tor+0KMMN3ZH5nDxqc= -----END CERTIFICATE-----Generated at Sat Dec 6 16:04:22 2025 by rpki-client