This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json) Hash identifier: k+4I6Z09r+9siBKCwhYgmLAKAYYzK1/w3VyCjNu3E3A= Subject key identifier: F6:40:3F:AB:59:68:20:D4:EA:54:31:F1:8B:EC:8C:68:C8:2F:6C:3E Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Certificate serial: 0F1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft Manifest number: 0F13 Signing time: Mon 22 Dec 2025 17:15:47 +0000 Manifest this update: Mon 22 Dec 2025 17:15:47 +0000 Manifest next update: Mon 29 Dec 2025 17:15:47 +0000 Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: JpbKmS40BgTvvLOquJufp46cuXG8IDL+jhB0BXCzUv8=) 2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: IptQh9J7jeiBWTQD/hPt8ei062oDoKw0nZ49KCuQKMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3868 (0xf1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Validity Not Before: Dec 22 17:15:47 2025 GMT Not After : Dec 29 17:15:47 2025 GMT Subject: CN=69497cc3-00d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:4d:22:41:39:6f:c1:65:29:c8:d3:0d:e3: 64:c9:5a:70:ab:1a:07:90:0f:66:25:bd:82:09:a9: 2b:85:0c:cf:0f:18:ce:6e:71:94:7b:7e:70:4e:50: 7f:27:9c:c7:0f:f0:03:85:b7:71:61:0d:fd:7a:3d: 1a:c6:ba:bd:49:95:95:35:ef:3b:b7:85:66:35:92: 82:6f:b2:21:56:17:54:ef:58:70:0f:40:7c:49:49: a6:8b:af:ec:7c:65:fc:df:8a:b1:66:7e:bc:30:ff: c6:e3:02:0e:82:a1:cf:ea:aa:bd:b5:b0:30:1d:9f: 9a:0a:5d:30:2f:c1:84:00:8d:84:ce:d4:ed:4e:55: b7:d1:d3:2f:f0:b5:a8:60:41:c6:dd:61:6d:e2:18: 50:d1:e6:32:19:34:4c:6b:5e:0b:15:b9:bd:e3:fb: a2:2e:ae:b7:e6:74:0f:47:ea:e3:6b:b1:76:2a:3a: 5c:54:63:43:ab:32:b6:e2:23:db:c8:2e:78:bc:24: b0:a3:5b:28:8c:2d:89:68:48:36:4e:2b:00:89:04: ad:14:c4:fb:58:61:99:bc:b9:70:87:4c:34:21:cf: 57:2d:c7:d6:7c:1f:c4:db:7b:ba:f0:76:d9:99:b5: 19:04:bc:4f:52:2f:29:fe:10:98:11:6b:09:40:c5: dc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:40:3F:AB:59:68:20:D4:EA:54:31:F1:8B:EC:8C:68:C8:2F:6C:3E X509v3 Authority Key Identifier: keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ab:50:13:f2:92:6e:de:3f:2f:5c:2e:d4:12:c4:5d:5f:ec: df:4b:ce:e5:e1:92:33:92:46:e8:d0:25:82:10:1b:c7:91:22: 73:9e:52:79:54:68:53:51:84:c8:2e:e8:dd:e0:84:58:f5:9d: 92:e4:dc:69:a5:6f:8d:ae:ea:d6:2a:cf:34:08:9e:c9:97:89: c5:6c:4e:ca:28:1d:00:8e:04:51:75:d8:4a:0f:71:91:32:18: a7:a0:b3:ce:50:38:3f:ad:5a:ab:d3:23:11:25:ce:5b:21:63: 5d:57:2d:90:f6:44:26:ab:d6:f7:8a:91:4a:37:08:60:8c:16: b7:01:db:52:63:c4:3e:a1:c9:1d:b0:15:89:d4:8f:d6:94:98: 84:69:e7:e2:c3:66:7d:80:3c:e1:f4:af:8b:37:90:b8:71:49: 30:31:cc:90:0d:2e:8f:01:08:c4:06:4b:1b:69:05:3e:f6:1d: 0b:6e:df:25:ec:f3:fa:33:ef:b2:b0:f4:97:22:02:8d:b4:cf: b9:26:42:1d:1d:56:c2:35:38:09:9a:08:21:14:86:38:b4:18: c5:5c:37:fc:97:dc:81:47:4f:4e:95:6c:62:c4:72:4f:4d:93: 2d:6c:78:4f:63:dc:36:ca:7e:aa:fd:30:5e:57:d4:ac:d9:85: ae:5e:ce:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0 NDk5NUIxRTAwHhcNMjUxMjIyMTcxNTQ3WhcNMjUxMjI5MTcxNTQ3WjAYMRYwFAYD VQQDDA02OTQ5N2NjMy0wMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzVNIkE5b8FlKcjTDeNkyVpwqxoHkA9mJb2CCakrhQzPDxjObnGUe35wTlB/ J5zHD/ADhbdxYQ39ej0axrq9SZWVNe87t4VmNZKCb7IhVhdU71hwD0B8SUmmi6/s fGX834qxZn68MP/G4wIOgqHP6qq9tbAwHZ+aCl0wL8GEAI2EztTtTlW30dMv8LWo YEHG3WFt4hhQ0eYyGTRMa14LFbm94/uiLq635nQPR+rja7F2KjpcVGNDqzK24iPb yC54vCSwo1sojC2JaEg2TisAiQStFMT7WGGZvLlwh0w0Ic9XLcfWfB/E23u68HbZ mbUZBLxPUi8p/hCYEWsJQMXc1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZAP6tZ aCDU6lQx8YvsjGjIL2w+MB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ R19tUWcyUjQ0WmxFbVZzZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGq1AT8pJu3j8vXC7UEsRdX+zfS87l4ZIzkkbo0CWCEBvHkSJznlJ5 VGhTUYTILujd4IRY9Z2S5NxppW+NrurWKs80CJ7Jl4nFbE7KKB0AjgRRddhKD3GR MhinoLPOUDg/rVqr0yMRJc5bIWNdVy2Q9kQmq9b3ipFKNwhgjBa3AdtSY8Q+ockd sBWJ1I/WlJiEaefiw2Z9gDzh9K+LN5C4cUkwMcyQDS6PAQjEBksbaQU+9h0Lbt8l 7PP6M++ysPSXIgKNtM+5JkIdHVbCNTgJmgghFIY4tBjFXDf8l9yBR09OlWxixHJP TZMtbHhPY9w2yn6q/TBeV9Ss2YWuXs7+ -----END CERTIFICATE-----Generated at Tue Dec 23 19:42:25 2025 by rpki-client