This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: jFlFsTEEvDwl0hHK1NwjikFuV0Afi6sM+xxIciXCS/c= Subject key identifier: CC:AB:B1:8F:26:72:46:E1:31:39:09:19:AB:B5:41:77:BE:50:DB:90 Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 0252 Signing time: Fri 19 Dec 2025 00:57:38 +0000 Manifest this update: Fri 19 Dec 2025 00:57:38 +0000 Manifest next update: Fri 26 Dec 2025 00:57:38 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: ngKB9B6SjP/+RtaYxaLpeRRRH7e1hMibPvJmLAG9SbM=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: bOGEQWkjWP/dvCJ1j/ghNiM2Oq9BXSpQyiuK+H739J8=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: cYmjxjr2zCNaWLx4X+HqEsc/ORV7xUqJQkbxG3kk3GE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Dec 19 00:57:38 2025 GMT Not After : Dec 26 00:57:38 2025 GMT Subject: CN=6944a302-bc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:1b:a9:18:f8:86:c9:65:a5:be:a6:d0:43: 0d:4b:05:db:0f:8d:76:9d:76:26:4a:f0:e4:6c:68: dc:f8:e5:74:71:4c:44:23:55:33:7c:1d:0c:68:71: 80:e3:34:e8:c9:ad:0c:26:50:d6:d7:ad:2f:78:6b: f0:b5:13:2e:c4:c7:a4:31:6d:af:82:8a:af:ca:0e: 72:fc:94:2f:f0:dc:e0:45:8a:ed:20:db:79:eb:9b: 2a:ed:57:9a:ad:11:8e:79:45:9e:f7:a1:ad:2e:93: ca:8b:da:f2:2a:bb:35:20:51:4a:4d:74:9e:44:50: 81:ec:3e:c0:d4:b8:bd:e4:85:6d:ca:38:19:56:c3: 2c:26:64:fc:a5:3e:2e:97:c8:58:01:a5:cb:c9:22: 1a:a1:89:f7:0e:25:59:50:1b:3a:e3:33:e7:e5:fb: ae:f2:bb:bf:e0:e5:06:d5:b1:cb:7b:95:6f:18:e6: e9:96:12:f5:d3:d2:4a:4a:59:33:43:e0:a8:eb:d7: dd:9b:7a:4f:f1:bc:32:df:99:f2:09:9a:d9:35:6e: 1b:39:25:06:c4:6d:44:bc:26:6c:35:cc:19:bb:b8: 8b:f7:01:d5:fc:e4:60:b6:51:95:f2:c4:8b:d8:94: 64:23:d0:f2:3b:e8:03:b4:9f:90:1d:f1:6b:79:cb: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AB:B1:8F:26:72:46:E1:31:39:09:19:AB:B5:41:77:BE:50:DB:90 X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ed:03:c9:9e:80:63:dc:4f:60:58:f9:80:2f:d7:0f:d9:b2: 8d:69:8b:6e:5a:83:c6:6f:9f:96:50:81:5d:27:19:8c:a0:da: de:e2:23:e9:3c:c8:36:02:ba:42:42:05:9d:90:50:a6:86:cb: d7:aa:cd:b9:df:bc:9a:bb:8b:30:75:10:f9:eb:ca:e7:12:20: 00:56:ed:f9:07:29:c6:13:45:d0:cd:3e:84:55:12:49:68:4d: da:8b:00:e5:54:8a:2d:73:99:e8:6d:c9:4f:ab:64:5d:30:52: 73:ed:9e:55:e7:ac:9f:1f:88:f1:d6:4f:5f:59:26:9b:26:6d: 82:4b:c0:1f:1d:ee:a7:2e:28:2c:65:68:b2:04:a4:50:a5:19: d4:52:50:a8:e9:aa:18:96:68:61:14:52:2b:29:96:ad:80:85: e4:50:78:c8:29:2e:f5:a1:29:81:61:7d:16:2a:ff:64:c1:09: a6:dc:9a:5a:cf:fb:a8:bf:0d:50:33:3a:72:63:f6:d1:f8:01: 19:50:cf:57:84:11:d6:cc:b1:1e:9f:30:ba:22:68:cb:51:13: c8:a4:83:22:8b:8e:5c:b2:2d:c6:35:22:e8:35:2a:4b:3e:21: f3:e2:48:23:25:09:b0:fd:87:42:48:50:b7:03:8d:91:c1:bc: 75:aa:3f:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjUxMjE5MDA1NzM4WhcNMjUxMjI2MDA1NzM4WjAYMRYwFAYD VQQDDA02OTQ0YTMwMi1iYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqr8bqRj4hsllpb6m0EMNSwXbD412nXYmSvDkbGjc+OV0cUxEI1UzfB0MaHGA 4zToya0MJlDW160veGvwtRMuxMekMW2vgoqvyg5y/JQv8NzgRYrtINt565sq7Vea rRGOeUWe96GtLpPKi9ryKrs1IFFKTXSeRFCB7D7A1Li95IVtyjgZVsMsJmT8pT4u l8hYAaXLySIaoYn3DiVZUBs64zPn5fuu8ru/4OUG1bHLe5VvGObplhL109JKSlkz Q+Co69fdm3pP8bwy35nyCZrZNW4bOSUGxG1EvCZsNcwZu7iL9wHV/ORgtlGV8sSL 2JRkI9DyO+gDtJ+QHfFrecu78wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyrsY8m ckbhMTkJGau1QXe+UNuQMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz7QPJnoBj3E9gWPmAL9cP2bKNaYtuWoPGb5+WUIFdJxmMoNre4iPp PMg2ArpCQgWdkFCmhsvXqs2537yau4swdRD568rnEiAAVu35BynGE0XQzT6EVRJJ aE3aiwDlVIotc5nobclPq2RdMFJz7Z5V56yfH4jx1k9fWSabJm2CS8AfHe6nLigs ZWiyBKRQpRnUUlCo6aoYlmhhFFIrKZatgIXkUHjIKS71oSmBYX0WKv9kwQmm3Jpa z/uovw1QMzpyY/bR+AEZUM9XhBHWzLEenzC6ImjLURPIpIMii45csi3GNSLoNSpL PiHz4kgjJQmw/YdCSFC3A42Rwbx1qj86 -----END CERTIFICATE-----Generated at Sat Dec 20 11:31:36 2025 by rpki-client