This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: ZGfxBu3E8y9t9LMIVorUPO2wJbWV79g5kxJJQmL7hCU= Subject key identifier: 85:0F:FC:01:40:AC:60:0A:EB:A0:EF:73:45:8B:84:C9:3F:8F:E5:4B Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0D2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0D12 Signing time: Thu 18 Dec 2025 17:52:03 +0000 Manifest this update: Thu 18 Dec 2025 17:52:02 +0000 Manifest next update: Thu 25 Dec 2025 17:52:02 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: 4YA9J5f2Mcm0nDoHMSbO1SggBzE/hiKuQM/6HQ/m9bM=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: wRhoUuLabNYzTY9DDaSK06ADTxBJOvjSTEtu7/sVqes=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3375 (0xd2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Dec 18 17:52:02 2025 GMT Not After : Dec 25 17:52:02 2025 GMT Subject: CN=69443f43-8080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:27:48:c0:ba:49:40:25:d9:d9:1f:22:f1: 06:bb:3f:4c:53:b8:b9:45:09:4d:90:90:a8:23:67: f9:e1:88:56:a2:8d:15:96:ae:9e:76:7b:38:88:d8: f4:29:87:cb:9a:a9:00:a4:ea:8f:61:09:c3:fc:1a: 70:6c:f7:ab:a5:4a:9b:74:41:4b:ce:96:27:b3:be: 0d:33:64:7c:d4:e9:53:67:43:5e:eb:74:45:a3:19: 5e:12:1f:a7:3e:5a:0e:65:49:56:cf:7e:76:8e:8c: da:6a:82:a1:81:6e:02:81:1c:0f:5d:4a:de:ba:e5: 70:4e:8e:0f:23:22:ad:25:7e:b1:f1:b4:7d:ee:d4: ad:de:5a:69:ac:40:f6:02:ac:f0:d6:3c:99:d2:ae: 89:a9:5e:8a:5c:31:f5:51:7f:ce:51:c7:7d:e9:f4: 14:bc:f2:ca:b0:ac:3d:70:69:b1:9e:ba:1c:6e:fb: 72:8d:a1:8e:1a:90:bb:cd:50:fe:0a:01:12:a6:b4: c6:09:1c:e6:27:6c:f6:9b:96:e1:b0:a5:70:83:72: d4:28:f4:c8:1d:8f:6e:27:ba:bb:83:c8:a5:aa:ad: 76:7c:8e:ce:ff:41:02:4e:2b:e8:17:01:02:7e:9c: fa:cd:69:3c:9d:99:6b:91:88:77:66:a5:4b:5f:33: c5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0F:FC:01:40:AC:60:0A:EB:A0:EF:73:45:8B:84:C9:3F:8F:E5:4B X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:07:55:18:a2:d3:47:de:66:f1:93:85:f1:11:ef:fd:d5:58: 4a:15:f2:23:68:df:6d:18:a8:c3:fd:bc:b4:94:c7:87:bd:3c: 39:7f:bf:d6:2e:ad:aa:c1:30:85:9a:ce:a3:29:05:22:f1:9d: c4:ca:c1:ae:22:0e:c8:5f:49:3d:4b:f3:2c:18:a3:a9:8b:fb: 9a:14:73:05:86:00:70:92:3e:99:4e:7d:88:42:14:51:e5:b9: e2:46:bb:1e:d5:2b:40:00:3f:c1:12:3b:e6:b8:a9:3b:eb:33: 6b:b8:21:92:03:85:9a:1a:13:57:68:c3:eb:f0:4a:e1:f9:68: 6f:8b:eb:48:66:93:0e:0b:6e:39:63:8f:8e:00:e1:dc:44:8e: d3:32:28:a8:4a:32:58:24:51:91:48:d9:e3:35:50:f0:a5:7f: df:28:25:5e:8d:25:1a:75:6a:14:c4:26:23:1b:56:c1:70:1e: 05:90:74:b3:88:61:f4:21:79:8e:b7:9e:33:d0:14:0b:8c:18: 04:07:a5:7e:09:99:13:e7:07:f0:d1:cb:c8:10:8b:f0:9a:f9: d1:2e:b0:1a:c6:58:aa:30:53:05:38:39:1f:bd:34:89:38:03: a7:7c:81:b8:54:49:6f:e7:db:9a:64:55:8d:de:ea:c6:72:4b: e9:65:2c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUxMjE4MTc1MjAyWhcNMjUxMjI1MTc1MjAyWjAYMRYwFAYD VQQDDA02OTQ0M2Y0My04MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxC8nSMC6SUAl2dkfIvEGuz9MU7i5RQlNkJCoI2f54YhWoo0Vlq6edns4iNj0 KYfLmqkApOqPYQnD/BpwbPerpUqbdEFLzpYns74NM2R81OlTZ0Ne63RFoxleEh+n PloOZUlWz352jozaaoKhgW4CgRwPXUreuuVwTo4PIyKtJX6x8bR97tSt3lpprED2 Aqzw1jyZ0q6JqV6KXDH1UX/OUcd96fQUvPLKsKw9cGmxnrocbvtyjaGOGpC7zVD+ CgESprTGCRzmJ2z2m5bhsKVwg3LUKPTIHY9uJ7q7g8ilqq12fI7O/0ECTivoFwEC fpz6zWk8nZlrkYh3ZqVLXzPFXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUP/AFA rGAK66Dvc0WLhMk/j+VLMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeB1UYotNH3mbxk4XxEe/91VhKFfIjaN9tGKjD/by0lMeHvTw5f7/W Lq2qwTCFms6jKQUi8Z3EysGuIg7IX0k9S/MsGKOpi/uaFHMFhgBwkj6ZTn2IQhRR 5bniRrse1StAAD/BEjvmuKk76zNruCGSA4WaGhNXaMPr8Erh+Whvi+tIZpMOC245 Y4+OAOHcRI7TMiioSjJYJFGRSNnjNVDwpX/fKCVejSUadWoUxCYjG1bBcB4FkHSz iGH0IXmOt54z0BQLjBgEB6V+CZkT5wfw0cvIEIvwmvnRLrAaxliqMFMFODkfvTSJ OAOnfIG4VElv59uaZFWN3urGckvpZSxo -----END CERTIFICATE-----Generated at Fri Dec 19 22:53:08 2025 by rpki-client