This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json) Hash identifier: GJY5xk2+iANiYBIxzbVQUlDoPZa6SdosgsNx8RrzwhM= Subject key identifier: 29:BF:29:8F:B3:83:82:57:CB:58:CF:F6:BC:B6:7E:04:DE:99:99:75 Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft Manifest number: 34 Signing time: Fri 21 Nov 2025 05:30:55 +0000 Manifest this update: Fri 21 Nov 2025 05:30:54 +0000 Manifest next update: Fri 28 Nov 2025 05:30:54 +0000 Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: /9q0hS2BjuU7fUG11vKBMxYa4iRqELOkUWpf2dv1+xE=) 2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: eUyFtijE7ulYYeR6FE4HWasF4D8cnPdrEPGMIUGgb2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Nov 2025 05:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Validity Not Before: Nov 21 05:30:54 2025 GMT Not After : Nov 28 05:30:54 2025 GMT Subject: CN=691ff90e-547a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:fc:2c:22:15:eb:c5:7c:be:3f:e3:08:d8: e6:cf:94:27:15:94:89:b4:90:27:ee:f3:7c:87:7c: d0:a0:fc:30:07:1d:d2:14:47:07:ad:49:05:5f:9b: d6:62:3e:4f:ca:be:4c:67:8a:c1:d9:75:b4:bf:cb: 77:d8:b9:c3:b4:7b:24:cc:c5:29:f3:94:e2:fd:14: a6:2a:10:c6:ec:fb:23:c8:f6:5d:03:d2:18:2d:b5: 80:39:7e:46:60:9c:e8:e9:88:db:af:13:68:bd:5a: 92:d5:b8:7f:34:67:01:d6:81:6d:55:4a:4e:0f:05: a7:fe:cc:3c:d4:e1:2d:66:ca:fb:f4:59:6a:a7:93: 79:c7:ce:e4:47:b4:e9:46:05:78:28:bc:a2:1c:21: 06:9b:76:33:d2:e7:29:50:ea:fd:a2:6c:43:1d:ea: f3:1c:28:5e:7b:75:23:12:30:41:2b:c7:cc:2b:75: af:75:43:70:15:68:b4:02:1e:5a:2f:f3:36:f3:a0: f3:9c:f2:b4:df:ed:17:2c:ef:bb:b5:ee:54:35:c1: 47:7c:0c:9e:24:72:5c:74:02:a2:85:37:d5:95:37: 68:ab:2a:5e:24:19:0f:e9:90:6c:9b:d0:cd:f2:3f: 91:f9:34:3e:64:50:7d:de:15:cd:dc:9d:eb:a4:9b: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BF:29:8F:B3:83:82:57:CB:58:CF:F6:BC:B6:7E:04:DE:99:99:75 X509v3 Authority Key Identifier: keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b2:6b:05:bc:e2:8d:c0:93:55:9a:52:63:84:eb:60:db:98: 16:43:f3:09:80:4d:90:7a:6b:90:5d:2a:61:cd:6d:aa:53:65: 72:3c:b5:93:3e:1e:ad:32:5f:e5:0f:c0:9d:1a:9f:c8:ff:ba: 17:e0:e6:bf:d5:c6:45:62:af:66:72:66:0d:1b:e5:5a:74:d3: a4:bd:fc:62:53:80:e9:06:43:f2:4f:91:b3:33:8c:ed:ca:e2: de:67:71:a8:1d:2e:a5:42:ac:8d:ff:4f:d1:a1:8f:67:66:a1: b8:db:f9:3f:82:56:d6:8e:72:e9:e1:de:66:a5:f4:59:82:1c: c0:a5:ee:a5:23:48:4f:5e:bb:a0:a4:f3:f5:51:d3:20:ac:5d: d0:5f:a0:37:0a:99:05:f0:59:fc:1b:a1:ea:68:6c:71:9e:ca: 11:af:02:f4:d2:05:d2:09:53:b3:21:45:e2:63:7b:15:07:be: c5:e8:e2:d3:e9:4c:a8:e1:0f:fa:3c:d5:73:55:aa:4f:ef:0d: 9f:18:f6:2e:7a:ee:26:45:15:6c:df:55:f5:b5:13:db:0c:94: 75:d2:8e:ea:43:2a:f7:70:de:c7:80:33:b1:3b:fd:5b:ff:1c: c0:5d:62:67:c2:37:36:03:2e:f8:bb:5e:7e:ad:d1:70:02:2f: e2:9e:1b:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNDk3QkI3MjcxODI3OURCQ0M5ODVEQkE2RDM5QjM2NTY3 RjQ0RTdBQTAeFw0yNTExMjEwNTMwNTRaFw0yNTExMjgwNTMwNTRaMBgxFjAUBgNV BAMTDTY5MWZmOTBlLTU0N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvN/wsIhXrxXy+P+MI2ObPlCcVlIm0kCfu83yHfNCg/DAHHdIURwetSQVfm9Zi Pk/KvkxnisHZdbS/y3fYucO0eyTMxSnzlOL9FKYqEMbs+yPI9l0D0hgttYA5fkZg nOjpiNuvE2i9WpLVuH80ZwHWgW1VSk4PBaf+zDzU4S1myvv0WWqnk3nHzuRHtOlG BXgovKIcIQabdjPS5ylQ6v2ibEMd6vMcKF57dSMSMEErx8wrda91Q3AVaLQCHlov 8zbzoPOc8rTf7Rcs77u17lQ1wUd8DJ4kclx0AqKFN9WVN2irKl4kGQ/pkGyb0M3y P5H5ND5kUH3eFc3cneukm70TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKb8pj7OD glfLWM/2vLZ+BN6ZmXUwHwYDVR0jBBgwFoAUSXu3JxgnnbzJhdum05s2Vn9E56ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0IyQ0VBN0Y2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1h1M0p4Z25uYnpKaGR1bTA1czJWbjlFNTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0IyQ0VBN0Y2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6 SmhkdW0wNXMyVm45RTU2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAWyawW84o3Ak1WaUmOE62DbmBZD8wmATZB6a5BdKmHNbapTZXI8tZM+ Hq0yX+UPwJ0an8j/uhfg5r/VxkVir2ZyZg0b5Vp006S9/GJTgOkGQ/JPkbMzjO3K 4t5ncagdLqVCrI3/T9Ghj2dmobjb+T+CVtaOcunh3mal9FmCHMCl7qUjSE9eu6Ck 8/VR0yCsXdBfoDcKmQXwWfwboepobHGeyhGvAvTSBdIJU7MhReJjexUHvsXo4tPp TKjhD/o81XNVqk/vDZ8Y9i567iZFFWzfVfW1E9sMlHXSjupDKvdw3seAM7E7/Vv/ HMBdYmfCNzYDLvi7Xn6t0XACL+KeGyk= -----END CERTIFICATE-----Generated at Sat Nov 22 21:56:59 2025 by rpki-client