This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: 94wghj88Bx0fqwdiX5bWLqs344sWLjKB0EEDdS3c5jM= Subject key identifier: CF:43:B6:9B:62:F8:E1:B7:13:51:04:A6:C2:97:D7:4B:E5:AD:11:16 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1F7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 1F6D Signing time: Thu 18 Dec 2025 15:55:22 +0000 Manifest this update: Thu 18 Dec 2025 15:55:21 +0000 Manifest next update: Thu 25 Dec 2025 15:55:21 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: ojjPNjI9L9A6dzWRVyhxbGjXNQkCVD9hMAMszXKTwME=) 2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: OeiUjQjQDPnp0Hc4HqvRxkfSPHq3x3ODdBcjSRZ+2RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8062 (0x1f7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Dec 18 15:55:21 2025 GMT Not After : Dec 25 15:55:21 2025 GMT Subject: CN=694423ea-447e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d6:5b:6f:d6:38:a1:88:35:d6:12:46:4b:91: 76:0a:6a:bd:98:16:f2:9d:61:31:c6:a5:03:c4:a0: cd:03:31:2c:9d:eb:0e:59:60:87:06:f2:d7:82:b9: cd:ad:7b:43:3d:aa:b0:22:da:9f:43:c8:b4:c6:2c: d2:e2:75:ea:98:98:fe:cc:5e:67:c1:12:2f:2c:48: 51:d0:a2:68:ff:be:2c:0a:7e:6d:87:f1:9f:85:84: d7:b5:f6:89:ba:a6:8c:76:20:b0:f3:b5:1c:75:28: a5:ce:55:b2:18:23:b4:d7:5d:32:42:5a:f5:13:fc: 97:3a:e4:08:81:f5:cf:56:68:d7:b7:69:71:70:e3: bf:5e:10:ed:51:bc:b7:fb:26:05:76:a6:f4:7a:11: d9:18:f0:b3:19:54:09:e5:c2:a3:d8:ac:f0:d6:4b: a9:39:4e:af:12:c4:55:e7:66:ed:b9:bc:a1:41:db: 9c:8c:64:28:cf:3d:1c:2a:8f:81:52:68:93:4d:c5: 40:90:18:e4:8c:df:46:9b:40:6a:54:12:af:05:47: f6:43:6f:f6:72:80:0b:e3:e3:38:83:b8:63:10:99: 38:cf:91:84:6d:c4:fb:c0:e4:15:14:a0:a4:e3:7b: db:15:08:15:ba:62:2a:79:d9:61:9a:6d:c5:8e:77: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:43:B6:9B:62:F8:E1:B7:13:51:04:A6:C2:97:D7:4B:E5:AD:11:16 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9a:c5:8f:6a:2b:5a:72:db:1b:fa:22:ac:d1:09:25:2b:da: 44:d0:e7:f9:67:3c:51:6c:c0:97:bd:6b:1d:a0:c3:30:33:13: a8:00:b0:18:04:0a:87:87:da:96:0f:6e:28:10:db:ab:7e:00: eb:db:e3:d2:9a:d8:b9:c8:9f:8c:80:3c:1a:27:f8:20:7e:ec: cb:a9:8f:4e:6a:02:69:03:1d:53:d5:73:08:96:58:9e:06:1a: 5e:ae:d0:49:35:0f:c8:43:f7:ef:73:21:d7:38:67:0c:9f:ed: af:ea:1b:0c:c2:b8:ec:a0:2d:ba:17:a2:a7:92:79:4c:ae:4e: df:93:a4:04:5d:95:e1:84:dd:65:bf:ab:09:79:f7:33:1a:2d: 91:de:8d:87:32:c1:df:4d:b9:98:f6:ac:3c:55:20:10:58:03: 7a:91:b2:88:32:60:91:04:84:77:4e:a5:43:9f:85:d9:4b:4a: 68:9e:15:eb:ea:52:10:9e:86:d3:a1:e7:c7:87:ae:fb:1b:82: e0:6f:5e:65:7d:1c:96:0b:d5:ad:7e:33:bf:e7:fa:92:ec:9a: 36:f2:c0:b2:a6:11:97:4f:28:a6:4e:f1:49:67:ec:a9:24:48: 12:54:56:1a:fa:05:fd:d3:c4:48:fd:34:93:0e:14:6e:5c:23: d1:55:3a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjUxMjE4MTU1NTIxWhcNMjUxMjI1MTU1NTIxWjAYMRYwFAYD VQQDDA02OTQ0MjNlYS00NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dZbb9Y4oYg11hJGS5F2Cmq9mBbynWExxqUDxKDNAzEsnesOWWCHBvLXgrnN rXtDPaqwItqfQ8i0xizS4nXqmJj+zF5nwRIvLEhR0KJo/74sCn5th/GfhYTXtfaJ uqaMdiCw87UcdSilzlWyGCO0110yQlr1E/yXOuQIgfXPVmjXt2lxcOO/XhDtUby3 +yYFdqb0ehHZGPCzGVQJ5cKj2Kzw1kupOU6vEsRV52btubyhQducjGQozz0cKo+B UmiTTcVAkBjkjN9Gm0BqVBKvBUf2Q2/2coAL4+M4g7hjEJk4z5GEbcT7wOQVFKCk 43vbFQgVumIqedlhmm3FjneDmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9Dtpti +OG3E1EEpsKX10vlrREWMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFmsWPaitactsb+iKs0QklK9pE0Of5ZzxRbMCXvWsdoMMwMxOoALAY BAqHh9qWD24oENurfgDr2+PSmti5yJ+MgDwaJ/ggfuzLqY9OagJpAx1T1XMIllie BhpertBJNQ/IQ/fvcyHXOGcMn+2v6hsMwrjsoC26F6KnknlMrk7fk6QEXZXhhN1l v6sJefczGi2R3o2HMsHfTbmY9qw8VSAQWAN6kbKIMmCRBIR3TqVDn4XZS0ponhXr 6lIQnobToefHh677G4Lgb15lfRyWC9WtfjO/5/qS7Jo28sCyphGXTyimTvFJZ+yp JEgSVFYa+gX908RI/TSTDhRuXCPRVToV -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:41 2025 by rpki-client