This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft File: SGjuTp_AEUegPCaatSEKj-cnp4s.mft (raw, json) Hash identifier: WQfEvEp+gh58sh0yoAmlHsQDcufEey4V2m7U5Wp7BR0= Subject key identifier: 04:31:EB:6F:95:BB:E2:C2:CE:F1:1F:EC:80:C0:21:05:9B:F7:A6:FC Authority key identifier: 48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B Certificate issuer: /CN=A9131CF4/serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft Manifest number: 1C Signing time: Tue 23 Dec 2025 06:38:47 +0000 Manifest this update: Tue 23 Dec 2025 06:38:47 +0000 Manifest next update: Tue 30 Dec 2025 06:38:47 +0000 Files and hashes: 1: SGjuTp_AEUegPCaatSEKj-cnp4s.crl (hash: xngFA/WzsJNyuTX84xyw3i+2WGYmUMi7pqMEZKd6ldo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131CF4, serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B Validity Not Before: Dec 23 06:38:47 2025 GMT Not After : Dec 30 06:38:47 2025 GMT Subject: CN=694a38f7-5161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:e5:3c:c6:13:2a:cd:5e:88:05:ec:9a:dc: 38:1e:a6:34:14:7e:aa:36:67:06:22:c3:b1:57:91: ca:39:ce:06:3e:57:68:f6:39:e9:d7:87:21:79:60: ea:a9:ff:4e:ce:27:86:69:2f:e1:83:4b:9d:62:a9: e1:92:29:32:66:b2:ae:8a:d0:e7:db:fc:7c:f0:4b: e7:9a:01:e6:ec:e5:91:f4:c2:5c:3c:4f:c7:d5:cd: 86:ac:9a:d0:eb:c2:bc:10:b3:e1:a6:85:71:03:d4: ee:f0:34:80:92:ed:a7:18:67:1e:84:55:31:b0:71: 96:d2:c5:94:5b:5e:29:30:0f:a8:9c:18:d4:70:51: f9:13:9e:e4:47:0b:fd:28:5c:fc:6b:9c:b6:d8:01: d6:36:c0:8b:fa:60:09:80:ba:65:f5:f6:9b:ce:69: d0:22:88:4e:a1:ea:cf:2c:32:5a:7b:48:e6:e9:4f: 03:5e:14:2a:15:cd:69:a8:cd:64:c4:bd:d3:3d:45: cc:06:f0:6b:f5:13:80:22:57:e6:ef:f2:cb:af:da: 1b:38:05:a3:2a:80:3f:54:c1:f2:eb:72:b7:c8:46: 7c:4f:fe:a6:e8:0f:64:90:c4:e7:fa:e0:15:34:43: e2:c8:6a:03:72:2b:a8:fa:96:b1:c0:11:96:ce:8d: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:31:EB:6F:95:BB:E2:C2:CE:F1:1F:EC:80:C0:21:05:9B:F7:A6:FC X509v3 Authority Key Identifier: keyid:48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:5b:9c:7d:57:51:c6:f1:00:95:95:30:9b:40:d1:fc:48:52: 92:0c:31:3e:21:21:bc:f9:41:91:f9:da:94:91:00:c9:3c:02: f7:18:f0:23:89:de:21:38:00:5f:67:91:9a:6e:de:72:7b:0c: 73:f6:79:4e:0d:5e:f2:e6:70:2e:6b:0a:af:af:00:ef:ef:b8: a3:36:78:76:c4:f2:b7:a3:f5:c8:77:69:1c:79:e2:46:d2:61: 78:c4:90:4c:3e:a5:2f:6b:43:c7:4c:85:9f:53:bf:66:e4:b8: b1:6e:16:f9:39:f8:c2:ea:6f:70:93:ed:36:96:9c:94:59:20: 81:a7:86:65:71:1b:70:55:0c:49:7f:2a:43:ab:d8:96:95:e4: c2:18:48:21:15:26:5f:9d:f1:8b:d4:b2:fa:e4:28:ee:e8:a3: 74:3d:18:3f:de:24:e0:37:0f:d3:20:e2:72:c9:66:48:83:47: 51:96:b4:45:de:d2:c3:1a:cf:ee:27:5d:86:95:e4:54:85:85: c1:54:13:bf:c1:02:d8:eb:8a:51:98:e6:15:60:af:34:8e:d4: 22:87:95:bc:ee:b6:e3:8b:76:36:e6:28:7e:2e:5f:f1:d2:b5: 2c:39:e5:09:c7:d3:e2:68:f4:a6:69:c2:53:62:2b:2d:c2:2b: b6:6c:b5:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUNGNDExMC8GA1UEBRMoNDg2OEVFNEU5RkMwMTE0N0EwM0MyNjlBQjUyMTBBOEZF NzI3QTc4QjAeFw0yNTEyMjMwNjM4NDdaFw0yNTEyMzAwNjM4NDdaMBgxFjAUBgNV BAMMDTY5NGEzOGY3LTUxNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIVeU8xhMqzV6IBeya3DgepjQUfqo2ZwYiw7FXkco5zgY+V2j2OenXhyF5YOqp /07OJ4ZpL+GDS51iqeGSKTJmsq6K0Ofb/HzwS+eaAebs5ZH0wlw8T8fVzYasmtDr wrwQs+GmhXED1O7wNICS7acYZx6EVTGwcZbSxZRbXikwD6icGNRwUfkTnuRHC/0o XPxrnLbYAdY2wIv6YAmAumX19pvOadAiiE6h6s8sMlp7SObpTwNeFCoVzWmozWTE vdM9RcwG8Gv1E4AiV+bv8suv2hs4BaMqgD9UwfLrcrfIRnxP/qboD2SQxOf64BU0 Q+LIagNyK6j6lrHAEZbOjSO3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBDHrb5W7 4sLO8R/sgMAhBZv3pvwwHwYDVR0jBBgwFoAUSGjuTp/AEUegPCaatSEKj+cnp4sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQ0Y0LzQ3QkZENERDQjcx MTExRjBBNUMyODA3M0M0RjlBRTAyL1NHanVUcF9BRVVlZ1BDYWF0U0VLai1jbnA0 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0dqdVRwX0FFVWVnUENhYXRTRUtqLWNucDRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx Q0Y0LzQ3QkZENERDQjcxMTExRjBBNUMyODA3M0M0RjlBRTAyL1NHanVUcF9BRVVl Z1BDYWF0U0VLai1jbnA0cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK9bnH1XUcbxAJWVMJtA0fxIUpIMMT4hIbz5QZH52pSRAMk8AvcY8COJ 3iE4AF9nkZpu3nJ7DHP2eU4NXvLmcC5rCq+vAO/vuKM2eHbE8rej9ch3aRx54kbS YXjEkEw+pS9rQ8dMhZ9Tv2bkuLFuFvk5+MLqb3CT7TaWnJRZIIGnhmVxG3BVDEl/ KkOr2JaV5MIYSCEVJl+d8YvUsvrkKO7oo3Q9GD/eJOA3D9Mg4nLJZkiDR1GWtEXe 0sMaz+4nXYaV5FSFhcFUE7/BAtjrilGY5hVgrzSO1CKHlbzutuOLdjbmKH4uX/HS tSw55QnH0+Jo9KZpwlNiKy3CK7Zstck= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:53 2025 by rpki-client