This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft File: ssb_p2w86pWbar20kn5QEjIHLWI.mft (raw, json) Hash identifier: gx3TC8y/AvAROCc9YrrskBAMbVj2hbs50glk9BVFkBs= Subject key identifier: 57:E3:07:7A:1C:71:1B:6C:16:8C:C5:95:F0:C1:D8:F3:6E:62:C8:2F Authority key identifier: B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 Certificate issuer: /CN=A911BD0C/serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft Manifest number: 76 Signing time: Tue 23 Dec 2025 05:42:52 +0000 Manifest this update: Tue 23 Dec 2025 05:42:51 +0000 Manifest next update: Tue 30 Dec 2025 05:42:51 +0000 Files and hashes: 1: ssb_p2w86pWbar20kn5QEjIHLWI.crl (hash: B9y32hrP7gQwFzCOn0F67Ohj90z8YJPExAG/ZkLUxVs=) 2: B977F0322B3411F08FD74443C4F9AE02.roa (hash: v+cdW5qRRy42rcVfsQ7WNZFoarz0/H2Wz0ZGcvG0ojI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD0C, serialNumber=B2C6FFA76C3CEA959B6ABDB4927E501232072D62 Validity Not Before: Dec 23 05:42:51 2025 GMT Not After : Dec 30 05:42:51 2025 GMT Subject: CN=694a2bdc-7a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:c1:c2:b9:12:0c:22:4c:33:8f:54:51:eb: 34:f0:95:ec:aa:67:a3:f8:9b:da:8b:0a:3a:cf:f8: 7f:29:24:8a:ed:fa:d3:00:76:8a:5d:28:8c:49:cc: 12:2e:d5:27:0e:37:08:c7:07:09:9f:d0:ec:2a:3c: d4:3a:ec:20:37:db:3a:60:c6:8a:8b:42:e7:e9:9d: 9a:20:fc:7a:96:67:93:83:69:83:bf:98:49:a5:05: 55:8d:c1:4a:fb:44:b4:b9:f1:05:e0:68:4a:9c:49: 62:04:d1:b9:60:d6:65:30:b9:46:d4:2b:5b:8d:cd: 7e:06:c6:7c:6e:ab:c8:16:2f:d9:df:dd:7d:44:5c: 17:8e:95:e6:04:ae:22:78:3c:fc:c0:89:b4:46:c2: 24:3a:73:51:ad:0b:32:fa:e7:02:f2:31:35:71:2b: 8c:7a:a1:3d:4a:c9:23:58:dc:de:39:ba:93:68:03: cc:47:a6:84:9c:5d:cc:fc:44:84:1c:6c:b5:c4:cf: 71:97:02:4d:c8:3a:3d:b6:1f:87:96:6f:80:d1:79: eb:81:b2:e9:f7:85:3e:d3:33:80:d6:7b:43:17:f3: 62:1a:42:58:2b:2f:80:42:93:7f:c0:55:fb:be:c4: 87:94:50:8f:c8:c7:d5:1e:f9:3b:b9:4c:52:44:95: fe:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E3:07:7A:1C:71:1B:6C:16:8C:C5:95:F0:C1:D8:F3:6E:62:C8:2F X509v3 Authority Key Identifier: keyid:B2:C6:FF:A7:6C:3C:EA:95:9B:6A:BD:B4:92:7E:50:12:32:07:2D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssb_p2w86pWbar20kn5QEjIHLWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD0C/BC21415E2B3311F095996941C4F9AE02/ssb_p2w86pWbar20kn5QEjIHLWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ae:5e:54:94:fa:94:6b:8c:66:69:4a:6d:c6:25:79:11:9b: c3:34:51:d5:1f:37:a9:b5:e5:2d:42:fd:cd:0a:df:20:33:cb: 19:7a:ec:26:63:45:7d:e9:eb:c0:a3:9c:fa:76:03:30:be:9d: ff:17:b5:30:bf:41:d6:7b:e3:0f:30:1b:83:37:67:e5:cc:03: 50:42:09:10:38:9b:c3:4c:ac:dc:70:57:82:c0:f4:1a:63:d3: bc:30:62:94:81:a9:a8:cf:ae:51:07:57:24:00:1e:2f:5a:1f: 60:b4:4f:8f:aa:61:79:62:c0:3a:9b:76:70:c2:7d:92:d7:f9: 54:11:06:17:51:57:30:7a:38:75:ac:49:02:3c:05:3f:22:ea: 75:0d:99:5f:51:40:c5:8c:65:f9:de:32:dc:c0:b4:0c:ab:58: 11:c6:5f:af:ff:c3:bc:2c:c3:4d:06:bb:a9:2d:69:c6:7a:09: d5:23:ab:49:b5:e8:16:58:30:5f:7f:6c:07:52:8c:6f:3d:43: d8:41:e2:fd:92:df:c9:39:b8:20:c1:06:02:e0:7c:f3:de:e7: d3:a8:7b:da:0e:e0:b2:51:80:a6:8a:b6:04:ec:8e:23:02:c7: 6d:e4:20:e7:40:96:44:5a:dc:3c:00:95:21:1a:e6:79:d0:8c: bf:d4:b7:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQwQzExMC8GA1UEBRMoQjJDNkZGQTc2QzNDRUE5NTlCNkFCREI0OTI3RTUwMTIz MjA3MkQ2MjAeFw0yNTEyMjMwNTQyNTFaFw0yNTEyMzAwNTQyNTFaMBgxFjAUBgNV BAMMDTY5NGEyYmRjLTdhMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkk8HCuRIMIkwzj1RR6zTwleyqZ6P4m9qLCjrP+H8pJIrt+tMAdopdKIxJzBIu 1ScONwjHBwmf0OwqPNQ67CA32zpgxoqLQufpnZog/HqWZ5ODaYO/mEmlBVWNwUr7 RLS58QXgaEqcSWIE0blg1mUwuUbUK1uNzX4Gxnxuq8gWL9nf3X1EXBeOleYEriJ4 PPzAibRGwiQ6c1GtCzL65wLyMTVxK4x6oT1KySNY3N45upNoA8xHpoScXcz8RIQc bLXEz3GXAk3IOj22H4eWb4DReeuBsun3hT7TM4DWe0MX82IaQlgrL4BCk3/AVfu+ xIeUUI/Ix9Ue+Tu5TFJElf4zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV+MHehxx G2wWjMWV8MHY825iyC8wHwYDVR0jBBgwFoAUssb/p2w86pWbar20kn5QEjIHLWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDBDL0JDMjE0MTVFMkIz MzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBXYmFyMjBrbjVRRWpJSExX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3NiX3Aydzg2cFdiYXIyMGtuNVFFaklITFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDBDL0JDMjE0MTVFMkIzMzExRjA5NTk5Njk0MUM0RjlBRTAyL3NzYl9wMnc4NnBX YmFyMjBrbjVRRWpJSExXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH6uXlSU+pRrjGZpSm3GJXkRm8M0UdUfN6m15S1C/c0K3yAzyxl67CZj RX3p68CjnPp2AzC+nf8XtTC/QdZ74w8wG4M3Z+XMA1BCCRA4m8NMrNxwV4LA9Bpj 07wwYpSBqajPrlEHVyQAHi9aH2C0T4+qYXliwDqbdnDCfZLX+VQRBhdRVzB6OHWs SQI8BT8i6nUNmV9RQMWMZfneMtzAtAyrWBHGX6//w7wsw00Gu6ktacZ6CdUjq0m1 6BZYMF9/bAdSjG89Q9hB4v2S38k5uCDBBgLgfPPe59Ooe9oO4LJRgKaKtgTsjiMC x23kIOdAlkRa3DwAlSEa5nnQjL/Ut7I= -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:41 2025 by rpki-client