This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft File: rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json) Hash identifier: rNWVjxrn876whVTh8ORJkz6WgPGhKgJ9TOEkwEixX+s= Subject key identifier: 9C:B4:EF:EE:C0:3D:4B:7D:57:86:E4:5A:7F:49:CD:D0:E7:16:C4:A4 Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Certificate serial: 079C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft Manifest number: 0785 Signing time: Thu 04 Dec 2025 20:32:08 +0000 Manifest this update: Thu 04 Dec 2025 20:32:07 +0000 Manifest next update: Thu 11 Dec 2025 20:32:07 +0000 Files and hashes: 1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: sME4snV8UUhkF0u4Id0qnHCUXnxE0IxqjG5VwDRIwBM=) 2: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: Y4IjgROza7hbC5Ch8I7v3zCuAkrKDxCGPUvc5F2ZkfI=) 3: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jLprJlYDgAu74jqVf0KhRr49j5tKUoWp/CVQN/GM+MQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1948 (0x79c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Validity Not Before: Dec 4 20:32:07 2025 GMT Not After : Dec 11 20:32:07 2025 GMT Subject: CN=6931efc7-bc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:f8:37:2c:f5:f4:f5:50:1d:aa:1f:1b:b2: 87:0e:0f:50:0d:26:e9:94:61:15:84:13:bc:dd:9f: b5:4c:a9:2e:b1:72:3e:7c:a5:2b:d1:3f:fd:83:d9: f7:54:c6:b7:99:5d:09:4f:03:30:9a:46:69:7d:d7: fe:cd:8e:1f:2a:09:23:4b:4e:5e:09:56:5c:3b:a8: 78:e6:db:69:bc:a4:eb:55:2b:0a:c8:b2:3e:9a:86: 10:c4:01:6e:ea:a4:04:8e:6c:aa:ea:85:0c:98:58: 8f:0a:07:4f:35:7c:33:fe:1a:d0:62:f6:0c:19:12: cf:99:8e:05:d5:f6:0d:af:35:5d:a2:0b:51:f8:49: d1:7d:d1:45:a3:76:bb:c9:e1:ee:a7:0e:40:fb:34: 85:43:00:1d:1f:b3:28:8c:f1:08:c4:01:b7:b0:9d: 3c:d1:78:86:15:da:3c:8c:80:f0:33:8b:62:ad:50: 3c:45:df:71:7f:d4:b3:15:29:14:5d:99:d6:53:fa: f7:78:66:8e:58:64:7b:9d:34:f0:66:e0:e5:a3:76: 8d:ce:c9:96:36:9a:da:d0:df:50:7d:30:ef:60:91: dc:89:99:16:96:2a:51:39:0d:7e:6e:1c:a2:37:98: 68:1b:a8:d3:43:32:d5:71:76:38:b4:fb:de:56:56: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B4:EF:EE:C0:3D:4B:7D:57:86:E4:5A:7F:49:CD:D0:E7:16:C4:A4 X509v3 Authority Key Identifier: keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:1f:61:a6:70:cd:6b:06:c2:d1:6a:78:dd:60:64:26:68:d8: 2f:6d:5c:65:75:a4:3c:9e:eb:8c:55:72:21:10:22:b5:4f:06: d1:88:01:1f:eb:f3:69:3f:0a:dd:84:c1:db:26:1f:9b:ac:18: f0:79:6c:ae:c6:71:4f:70:08:12:68:dc:b5:1d:c8:4e:0f:a4: 32:63:e9:cb:85:a4:61:65:14:6d:b2:84:13:e1:71:b0:0c:e5: 06:45:71:d7:c3:9f:a6:c7:d3:03:e9:b5:45:59:5b:04:d7:3d: 2c:8a:32:a8:8f:2f:ad:11:71:ef:56:93:a2:d2:f8:1c:28:89: 6d:45:6b:9c:58:0b:c0:b4:d7:1b:7f:da:49:f9:5f:01:08:f6: 0e:c6:a9:f7:26:cf:df:72:d0:2c:13:0b:9e:37:4c:3d:0e:96: c2:a2:08:94:d4:aa:c9:e9:6f:a2:f7:d4:f2:99:3e:e6:07:e0: 9b:0a:a8:31:02:bd:ea:f8:b2:fc:aa:03:6c:2f:90:91:0f:da: 6c:76:c7:6e:21:72:44:1d:58:26:8c:7f:83:4f:ac:17:5e:05: 58:be:ad:ec:07:99:75:6f:29:91:c6:4f:00:01:df:f9:0f:b0: 93:15:c9:4b:bd:37:5a:a0:72:36:c5:31:76:f2:aa:da:91:90: 6f:ea:31:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3 M0Q1QUFGM0UwHhcNMjUxMjA0MjAzMjA3WhcNMjUxMjExMjAzMjA3WjAYMRYwFAYD VQQDEw02OTMxZWZjNy1iYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xX4Nyz19PVQHaofG7KHDg9QDSbplGEVhBO83Z+1TKkusXI+fKUr0T/9g9n3 VMa3mV0JTwMwmkZpfdf+zY4fKgkjS05eCVZcO6h45ttpvKTrVSsKyLI+moYQxAFu 6qQEjmyq6oUMmFiPCgdPNXwz/hrQYvYMGRLPmY4F1fYNrzVdogtR+EnRfdFFo3a7 yeHupw5A+zSFQwAdH7MojPEIxAG3sJ080XiGFdo8jIDwM4tirVA8Rd9xf9SzFSkU XZnWU/r3eGaOWGR7nTTwZuDlo3aNzsmWNpra0N9QfTDvYJHciZkWlipROQ1+bhyi N5hoG6jTQzLVcXY4tPveVlb1KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJy07+7A PUt9V4bkWn9JzdDnFsSkMB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzIzQy8wOTA3NDRDMjNBM0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVp NDZ5aGgwWTlxWjV6MWFyejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIH2GmcM1rBsLRanjdYGQmaNgvbVxldaQ8nuuMVXIhECK1TwbRiAEf 6/NpPwrdhMHbJh+brBjweWyuxnFPcAgSaNy1HchOD6QyY+nLhaRhZRRtsoQT4XGw DOUGRXHXw5+mx9MD6bVFWVsE1z0sijKojy+tEXHvVpOi0vgcKIltRWucWAvAtNcb f9pJ+V8BCPYOxqn3Js/fctAsEwueN0w9DpbCogiU1KrJ6W+i99TymT7mB+CbCqgx Ar3q+LL8qgNsL5CRD9psdsduIXJEHVgmjH+DT6wXXgVYvq3sB5l1bymRxk8AAd/5 D7CTFclLvTdaoHI2xTF28qrakZBv6jE8 -----END CERTIFICATE-----Generated at Sat Dec 6 21:10:26 2025 by rpki-client