This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft File: dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json) Hash identifier: /zLIFcGKhD80m5MJjB0yCSdHQrV5DZWvHTivP6+bdLE= Subject key identifier: E1:F1:7B:D7:52:89:53:AA:5B:07:83:03:52:03:2D:B4:04:D9:85:F4 Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 Certificate issuer: /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft Manifest number: 0108 Signing time: Fri 05 Dec 2025 03:02:37 +0000 Manifest this update: Fri 05 Dec 2025 03:02:36 +0000 Manifest next update: Fri 12 Dec 2025 03:02:36 +0000 Files and hashes: 1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: qiTuqTDrf4DkTiozhn7OiIFUO5YFJn2QfeD0NsrNlEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Validity Not Before: Dec 5 03:02:36 2025 GMT Not After : Dec 12 03:02:36 2025 GMT Subject: CN=69324b4c-09c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:ea:ca:24:1e:14:91:24:39:d7:46:95:63: de:4c:ec:24:a5:2e:5e:48:96:d4:9d:91:83:d5:7c: d3:d4:fc:b6:92:ab:d0:4b:a9:2f:40:10:5d:52:62: 95:32:9a:fe:4e:bd:3f:6a:43:e6:ad:83:55:a0:2f: bb:3a:24:b4:5b:40:f9:da:a3:6e:d2:05:87:93:71: ec:12:83:e0:04:12:7e:f1:10:0b:c4:ff:21:f5:84: 59:98:e4:ae:c1:27:e9:b0:c0:45:20:8f:1b:08:eb: 7c:25:a4:ee:55:59:1c:16:9e:36:47:dc:b5:26:01: fe:f9:26:f4:2e:5d:48:de:ac:54:87:a5:29:e6:fb: c7:10:16:e1:63:f4:b9:40:ec:49:c0:45:5c:5f:41: 21:c3:3a:79:26:60:57:e5:f0:64:e5:e7:c7:a4:69: 4b:3e:9f:95:d5:5d:4c:28:59:91:25:5f:58:91:08: 8e:68:47:99:f1:b1:b1:a0:b2:78:27:fc:33:87:94: 8b:a7:a6:fd:bb:4a:6e:f2:03:77:72:fc:9b:c6:60: ae:40:a7:3f:66:90:b2:5e:78:8a:9d:31:65:60:aa: ba:45:00:b1:d0:94:22:36:85:2f:61:39:c7:01:33: fb:eb:55:ef:cf:96:39:e4:5b:9d:c7:c2:1e:a3:93: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F1:7B:D7:52:89:53:AA:5B:07:83:03:52:03:2D:B4:04:D9:85:F4 X509v3 Authority Key Identifier: keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:38:d7:f2:70:1e:0d:1c:91:d5:3c:1f:21:9e:2d:9d:8a:de: a6:d9:05:92:c4:0c:86:37:67:87:4f:6f:c5:8f:0f:e9:44:4c: 73:c1:8a:6d:8a:d5:34:a6:41:44:a1:21:3e:80:13:9d:de:d1: 8b:e4:bb:1a:0e:35:2d:92:71:5f:cd:49:27:72:b1:d2:08:0f: 4d:86:6d:ff:ab:cb:43:6f:1a:b7:1a:35:f3:7a:ee:36:1e:05: 7c:f6:f6:33:ca:03:69:79:93:9e:30:c2:8b:e2:81:07:9a:1a: d9:b4:14:ca:ce:d6:d3:83:69:5d:d4:c9:b3:04:3d:ef:57:67: 48:bd:f5:2e:d3:2d:04:a3:c9:ab:0f:a6:3c:13:23:97:72:f1: 23:f6:9e:ca:ec:bd:29:68:24:64:5f:4c:a5:bc:a6:a6:d1:ed: 61:83:9e:5f:39:71:08:ef:b4:2d:10:ff:2d:ee:ca:d7:6a:ee: 2e:be:32:0c:47:f1:ca:a5:09:0a:04:84:20:8b:b3:e1:77:00: f1:f7:fb:30:20:95:f9:e4:0e:d2:7f:6c:5f:17:d1:e1:17:93: d6:52:7e:74:16:b9:ba:2b:99:16:e4:7f:33:93:28:5c:b1:76: 7a:6e:19:e3:01:cf:83:21:22:99:bc:b7:4b:05:62:2a:c9:94: d8:08:36:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFEMTExMTAvBgNVBAUTKDc1QjcxRjU0NkY0N0IyMUVFM0VBOUE4NjUxMTQ2QzFF QzVFQzk1QTYwHhcNMjUxMjA1MDMwMjM2WhcNMjUxMjEyMDMwMjM2WjAYMRYwFAYD VQQDEw02OTMyNGI0Yy0wOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqvqyiQeFJEkOddGlWPeTOwkpS5eSJbUnZGD1XzT1Py2kqvQS6kvQBBdUmKV Mpr+Tr0/akPmrYNVoC+7OiS0W0D52qNu0gWHk3HsEoPgBBJ+8RALxP8h9YRZmOSu wSfpsMBFII8bCOt8JaTuVVkcFp42R9y1JgH++Sb0Ll1I3qxUh6Up5vvHEBbhY/S5 QOxJwEVcX0Ehwzp5JmBX5fBk5efHpGlLPp+V1V1MKFmRJV9YkQiOaEeZ8bGxoLJ4 J/wzh5SLp6b9u0pu8gN3cvybxmCuQKc/ZpCyXniKnTFlYKq6RQCx0JQiNoUvYTnH ATP761Xvz5Y55Fudx8Ieo5N4dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHxe9dS iVOqWweDA1IDLbQE2YX0MB8GA1UdIwQYMBaAFHW3H1RvR7Ie4+qahlEUbB7F7JWm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUQxMS8wNEQ0NzIwNDNB OEExMUVGOTgxN0IyNkFDNEY5QUUwMi9kYmNmVkc5SHNoN2o2cHFHVVJSc0hzWHNs YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RiY2ZWRzlIc2g3ajZwcUdVUlJzSHNYc2xhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUQxMS8wNEQ0NzIwNDNBOEExMUVGOTgxN0IyNkFDNEY5QUUwMi9kYmNmVkc5SHNo N2o2cHFHVVJSc0hzWHNsYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZONfycB4NHJHVPB8hni2dit6m2QWSxAyGN2eHT2/Fjw/pRExzwYpt itU0pkFEoSE+gBOd3tGL5LsaDjUtknFfzUkncrHSCA9Nhm3/q8tDbxq3GjXzeu42 HgV89vYzygNpeZOeMMKL4oEHmhrZtBTKztbTg2ld1MmzBD3vV2dIvfUu0y0Eo8mr D6Y8EyOXcvEj9p7K7L0paCRkX0ylvKam0e1hg55fOXEI77QtEP8t7srXau4uvjIM R/HKpQkKBIQgi7PhdwDx9/swIJX55A7Sf2xfF9HhF5PWUn50Frm6K5kW5H8zkyhc sXZ6bhnjAc+DISKZvLdLBWIqyZTYCDZD -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:36 2025 by rpki-client