This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: 35L+/VFgdrBGkKGzVJYaUJx80DE7u4Fir/1ffMh9i8s= Subject key identifier: D6:1F:90:2B:98:CF:F6:04:AF:0E:88:16:32:4C:C7:13:03:77:6A:7B Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 06CE Signing time: Mon 22 Dec 2025 21:19:47 +0000 Manifest this update: Mon 22 Dec 2025 21:19:47 +0000 Manifest next update: Mon 29 Dec 2025 21:19:47 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: MOKi9pMXtfq+SFaa7YbE82L5MxuuCe0OsTshTG4vJEg=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 6Kv6ZSL3MazMHrERvQ2sPcXYF/GKUnOfly5I2XW62pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Dec 22 21:19:47 2025 GMT Not After : Dec 29 21:19:47 2025 GMT Subject: CN=6949b5f3-bc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:d1:1e:df:bb:ea:7f:50:6f:7c:ea:e9:e3: 8d:ed:9e:c5:9c:e5:09:de:66:c3:6e:88:dd:bf:d9: ad:e7:31:0d:6c:2b:5f:38:71:72:fe:b7:c9:c7:e7: 31:e7:bf:5d:73:d2:b4:db:99:68:9e:dd:5c:d1:9a: bf:02:8f:fe:a2:bb:74:4c:46:bf:d2:50:65:fc:b7: 5f:25:3c:01:a2:01:60:e6:4c:97:43:23:ac:04:a0: c3:32:5b:9a:a5:38:c5:96:08:f1:21:7c:1a:37:5e: 33:97:a3:55:0b:c4:aa:c1:93:e5:ec:53:f7:a5:eb: 24:d5:0b:27:91:ea:ca:94:fe:35:67:bd:95:b9:23: d9:49:66:ab:db:01:bf:02:92:46:9d:fe:02:d5:3d: 4b:58:35:36:20:20:2d:c6:8b:e4:1a:b3:56:c2:29: f7:cc:40:73:77:3b:38:63:27:11:8a:47:86:0a:40: 0f:f1:66:c0:f1:66:b3:31:fb:de:23:8a:34:d1:57: 8b:df:55:da:70:70:12:31:e3:37:0f:23:a1:f9:1d: 00:8c:80:f3:ab:ff:3f:2f:c2:21:4d:8a:9e:cd:13: 7f:8d:c9:ff:99:5f:d1:0d:fd:e8:98:22:f2:0f:fb: bb:aa:d5:98:5b:c5:3f:58:10:e0:da:36:e3:2c:73: 6c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1F:90:2B:98:CF:F6:04:AF:0E:88:16:32:4C:C7:13:03:77:6A:7B X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:0b:d0:a9:d4:8b:3f:bc:9a:bc:0a:cb:e9:b5:12:b8:b7:94: 29:2f:d2:6c:e5:be:b8:e6:0d:be:bc:38:56:71:50:01:11:f5: 80:2e:57:14:d5:b5:8f:de:94:6c:78:bf:ce:0d:eb:d8:0f:88: 16:fe:f7:e1:07:85:9e:60:6a:d1:db:ae:27:df:29:c3:b4:0e: 65:6e:79:c8:73:2b:b5:87:08:38:9e:f1:a1:8c:35:0d:f9:b6: a7:a1:ef:b3:32:f4:30:d0:e2:dd:b7:1c:6e:cc:cc:c6:27:da: 08:94:e0:4c:26:c5:85:60:58:a7:b4:4d:e3:73:70:b2:c7:40: 0c:b0:64:52:a6:28:ef:6a:71:a7:2f:2b:f1:8c:45:ae:cb:0f: c3:4d:b5:a5:12:04:45:52:3c:80:ae:f6:2b:29:35:11:00:77: 36:78:84:c4:0d:21:a7:6b:01:fa:34:0c:35:b8:5f:b7:7a:14: 06:b8:a6:74:26:82:29:91:3e:09:40:a4:bb:5b:c0:f4:d2:0b: a0:19:6b:d6:6c:da:a5:46:12:2d:70:d2:55:09:ec:77:1e:7e: fb:a1:28:a5:1b:8b:15:89:7d:2c:28:5c:cb:4b:62:cc:97:d9: 8e:89:a7:36:78:6d:38:f2:c3:a8:ad:4b:80:da:bb:89:2f:df: c1:e6:aa:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjUxMjIyMjExOTQ3WhcNMjUxMjI5MjExOTQ3WjAYMRYwFAYD VQQDDA02OTQ5YjVmMy1iYzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRLRHt+76n9Qb3zq6eON7Z7FnOUJ3mbDbojdv9mt5zENbCtfOHFy/rfJx+cx 579dc9K025lont1c0Zq/Ao/+ort0TEa/0lBl/LdfJTwBogFg5kyXQyOsBKDDMlua pTjFlgjxIXwaN14zl6NVC8SqwZPl7FP3pesk1QsnkerKlP41Z72VuSPZSWar2wG/ ApJGnf4C1T1LWDU2ICAtxovkGrNWwin3zEBzdzs4YycRikeGCkAP8WbA8WazMfve I4o00VeL31XacHASMeM3DyOh+R0AjIDzq/8/L8IhTYqezRN/jcn/mV/RDf3omCLy D/u7qtWYW8U/WBDg2jbjLHNsmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYfkCuY z/YErw6IFjJMxxMDd2p7MB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSC9Cp1Is/vJq8CsvptRK4t5QpL9Js5b645g2+vDhWcVABEfWALlcU 1bWP3pRseL/ODevYD4gW/vfhB4WeYGrR264n3ynDtA5lbnnIcyu1hwg4nvGhjDUN +banoe+zMvQw0OLdtxxuzMzGJ9oIlOBMJsWFYFintE3jc3Cyx0AMsGRSpijvanGn LyvxjEWuyw/DTbWlEgRFUjyArvYrKTURAHc2eITEDSGnawH6NAw1uF+3ehQGuKZ0 JoIpkT4JQKS7W8D00gugGWvWbNqlRhItcNJVCex3Hn77oSilG4sViX0sKFzLS2LM l9mOiac2eG048sOorUuA2ruJL9/B5qqD -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:47 2025 by rpki-client