This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: 8JwHgD5Bp4V9PSLhlqX7f4mlPM/QM5hStWkfVK8Beoc= Subject key identifier: D8:BA:89:86:8E:37:E9:56:3F:84:9C:44:06:BE:F0:8C:BD:14:73:5F Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 220F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 21F0 Signing time: Mon 22 Dec 2025 15:42:57 +0000 Manifest this update: Mon 22 Dec 2025 15:42:57 +0000 Manifest next update: Mon 29 Dec 2025 15:42:57 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: dN6I68z7jNGDK63dF6EkVn7WupOordKoV3pZu8Kh8VI=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: 92gAmRF+UjT7qi3HgspO5M3xKNUrfaTQm2Z8Zii+ZFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8719 (0x220f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A, serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Validity Not Before: Dec 22 15:42:57 2025 GMT Not After : Dec 29 15:42:57 2025 GMT Subject: CN=69496701-d007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:e6:94:66:92:6a:40:98:d9:ec:a5:64:cc: 02:06:42:5a:cd:51:6e:f9:bf:69:c2:c5:a4:ce:9e: 7b:72:72:53:4c:cd:ba:71:8c:4f:28:b2:b8:dd:a4: 79:fd:5e:eb:2e:d9:4f:82:41:80:5c:7c:13:cb:92: 03:89:5f:5f:8f:67:3f:e9:a3:a3:71:2e:ac:bd:78: 37:e8:66:58:2e:73:93:41:82:3f:66:ab:cc:15:66: 4a:34:af:9c:d0:2f:3e:a2:6f:d1:4a:b0:c7:6c:a6: 0c:79:60:76:5c:c2:bd:35:db:7a:79:cc:6a:b4:fc: d5:f0:26:ae:99:bb:f9:2c:be:af:48:ab:d8:6a:be: 59:db:26:2f:5a:ff:f4:8c:9f:31:7a:f1:61:f7:48: 2d:bb:7b:64:84:72:15:a0:b3:f0:ce:74:8b:d6:09: 87:12:4d:df:a4:90:c9:d7:7c:a4:76:b4:51:fb:53: f2:07:4c:d2:70:c4:ce:09:b9:c3:ce:d2:3a:63:a4: e5:11:ba:49:26:8f:8b:40:8e:59:23:74:56:63:36: d6:27:26:bf:29:b9:a4:32:cd:f6:70:b1:8c:e0:82: 9a:c5:3b:fe:eb:2b:f7:bb:c7:b8:1b:d0:fa:18:c3: e1:17:d3:53:73:66:30:56:d2:e5:6e:02:d4:22:d4: 8c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BA:89:86:8E:37:E9:56:3F:84:9C:44:06:BE:F0:8C:BD:14:73:5F X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:40:09:30:27:e3:08:a1:fa:ea:bb:36:23:12:b1:9b:c4:c0: 37:c0:9b:0e:ce:d5:fb:ce:f2:02:c2:42:77:39:99:33:66:0e: 61:28:45:33:3f:74:ef:30:87:3b:53:aa:78:28:f8:74:8f:31: ce:82:49:8b:63:ba:49:e9:a3:0c:a2:c6:a9:64:24:92:96:e8: 91:b1:8f:c5:5c:7f:a7:54:06:9a:62:2a:a2:b0:30:87:23:c1: fa:95:27:06:b1:9e:6c:7f:80:14:e5:0a:ba:f9:11:16:3c:32: 44:22:a0:0d:12:77:72:6d:ac:52:0b:a3:f3:1b:e0:9f:90:b7: 1d:95:d7:4c:73:a3:00:1b:45:b1:1e:57:1f:3a:9d:cb:40:ec: 90:d5:e7:c9:2d:eb:55:4f:f8:37:72:7c:fc:17:97:55:5a:97: d4:e1:e2:c5:16:3b:9e:98:c9:3f:26:de:28:c1:1a:04:de:96: 72:db:5a:4d:45:bf:aa:2f:5d:f1:5c:35:ab:f6:c6:ba:f5:3c: 9c:d3:2b:2c:45:c5:81:60:44:30:42:63:9d:ca:8d:c1:4e:d3: 81:7a:a7:19:1a:49:9b:7f:53:84:0e:61:b7:27:b6:e0:de:7e: 65:d7:57:a7:a2:75:b6:95:00:8b:6d:85:39:fc:d2:c4:57:50: 25:9b:89:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjUxMjIyMTU0MjU3WhcNMjUxMjI5MTU0MjU3WjAYMRYwFAYD VQQDDA02OTQ5NjcwMS1kMDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgTmlGaSakCY2eylZMwCBkJazVFu+b9pwsWkzp57cnJTTM26cYxPKLK43aR5 /V7rLtlPgkGAXHwTy5IDiV9fj2c/6aOjcS6svXg36GZYLnOTQYI/ZqvMFWZKNK+c 0C8+om/RSrDHbKYMeWB2XMK9Ndt6ecxqtPzV8Caumbv5LL6vSKvYar5Z2yYvWv/0 jJ8xevFh90gtu3tkhHIVoLPwznSL1gmHEk3fpJDJ13ykdrRR+1PyB0zScMTOCbnD ztI6Y6TlEbpJJo+LQI5ZI3RWYzbWJya/KbmkMs32cLGM4IKaxTv+6yv3u8e4G9D6 GMPhF9NTc2YwVtLlbgLUItSM5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi6iYaO N+lWP4ScRAa+8Iy9FHNfMB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuQAkwJ+MIofrquzYjErGbxMA3wJsOztX7zvICwkJ3OZkzZg5hKEUz P3TvMIc7U6p4KPh0jzHOgkmLY7pJ6aMMosapZCSSluiRsY/FXH+nVAaaYiqisDCH I8H6lScGsZ5sf4AU5Qq6+REWPDJEIqANEndybaxSC6PzG+CfkLcdlddMc6MAG0Wx HlcfOp3LQOyQ1efJLetVT/g3cnz8F5dVWpfU4eLFFjuemMk/Jt4owRoE3pZy21pN Rb+qL13xXDWr9sa69Tyc0yssRcWBYEQwQmOdyo3BTtOBeqcZGkmbf1OEDmG3J7bg 3n5l11enonW2lQCLbYU5/NLEV1Alm4n3 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:09 2025 by rpki-client