This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json) Hash identifier: SysaVVRKU0fakMqROmhJN+nYftACPohDkJAuCEGozxE= Subject key identifier: F0:79:43:77:7A:AE:E6:A9:AB:CB:1A:1F:17:37:7C:4F:4F:3D:A3:65 Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft Manifest number: 0205 Signing time: Tue 23 Dec 2025 01:25:39 +0000 Manifest this update: Tue 23 Dec 2025 01:25:39 +0000 Manifest next update: Tue 30 Dec 2025 01:25:39 +0000 Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: wrVkpRtZQ4b2UPm0ma47PoMNryqC+f2Wrk3ssQ8T6kU=) 2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: gQgaVP6gsqEmtORlyD8C7NpCpWYfOsLgU2Aae4Tbg5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Validity Not Before: Dec 23 01:25:39 2025 GMT Not After : Dec 30 01:25:39 2025 GMT Subject: CN=6949ef93-9f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:c0:f2:b0:b1:ba:28:66:ec:70:2b:51:f6: 62:66:34:e6:bf:dc:05:e7:af:52:a1:cd:dc:0a:71: f3:7a:d3:70:c9:85:42:66:dc:19:4c:73:f9:7f:a8: 32:70:8b:9b:e9:e9:c8:19:52:ad:0e:08:6c:0c:5f: 83:6d:f7:78:b9:a1:0d:10:6e:b8:2f:99:0d:b7:64: bc:4e:57:ce:88:ad:63:4a:b6:b7:a8:eb:4d:ab:c3: a2:e6:b0:19:1a:f3:8f:f7:9c:d5:cf:bf:18:ae:91: 71:21:ba:e6:d0:9a:ad:da:ab:1c:b5:77:39:08:51: f8:c3:c0:a1:a4:b6:1e:6c:31:8c:b3:c0:34:81:05: ae:2d:9c:67:c4:83:34:bc:2f:14:3c:84:61:fe:da: 81:8a:9e:b8:7d:23:b0:06:e7:ea:fa:ee:70:b7:06: 6e:4f:94:ba:f4:fa:39:4b:62:02:bd:15:4e:a3:13: cd:81:50:74:db:57:90:ff:69:1c:bd:86:93:a4:d9: 89:66:6a:5b:3f:1d:27:9a:6e:57:5a:42:e6:40:df: d3:3e:c0:38:35:55:a8:1d:c4:21:28:ee:b7:92:be: 4c:30:11:f1:b7:f2:5d:1a:06:17:a7:f8:62:04:6a: 40:3c:80:24:35:67:df:3a:b6:ea:d5:8f:f3:b0:fe: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:43:77:7A:AE:E6:A9:AB:CB:1A:1F:17:37:7C:4F:4F:3D:A3:65 X509v3 Authority Key Identifier: keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2f:0b:75:95:07:2e:b2:8f:1d:c3:2a:c1:28:3e:f4:b3:ca: 3d:f7:0e:6e:90:c6:e5:1d:67:73:63:c2:00:01:a2:9e:ab:ce: 5f:9c:ae:9b:6d:c4:90:b2:db:3c:1f:93:87:57:7a:fe:6e:07: 95:61:88:97:97:7a:ed:6a:13:55:24:35:6f:0d:e3:2a:9d:aa: d9:bd:e8:06:5b:62:c9:3a:4d:3c:4c:a7:14:ad:02:b7:e8:36: 01:6b:ae:8b:a5:ff:9d:06:d8:a1:e5:d3:b6:cb:14:d7:2f:8c: 03:f7:10:d1:e1:ed:f4:52:49:55:89:eb:64:49:33:4a:96:37: 47:0e:c8:e5:d2:5a:a9:d5:28:e6:f1:72:8e:b1:e4:60:ac:44: a8:89:fc:04:d4:25:ed:7f:42:38:f0:cd:fb:16:c4:aa:9d:b3: fe:35:84:02:07:29:8a:c6:19:70:a6:a4:06:34:4e:db:de:62: 95:d8:49:bc:56:cc:f7:89:1e:d7:2e:b1:0e:dd:51:d8:56:4f: ad:45:a7:c1:62:40:3f:82:23:80:ab:2c:98:e0:ea:ba:7d:b3: 5e:9c:fe:ed:0e:6b:26:6e:80:c2:4e:83:b8:83:cd:b8:bf:04: 52:f0:b8:a2:9a:59:4e:81:f7:7e:c1:e0:f3:13:7d:e3:b4:12: 53:97:56:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2 OTY1NTg2MEEwHhcNMjUxMjIzMDEyNTM5WhcNMjUxMjMwMDEyNTM5WjAYMRYwFAYD VQQDDA02OTQ5ZWY5My05ZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnPA8rCxuihm7HArUfZiZjTmv9wF569Soc3cCnHzetNwyYVCZtwZTHP5f6gy cIub6enIGVKtDghsDF+Dbfd4uaENEG64L5kNt2S8TlfOiK1jSra3qOtNq8Oi5rAZ GvOP95zVz78YrpFxIbrm0Jqt2qsctXc5CFH4w8ChpLYebDGMs8A0gQWuLZxnxIM0 vC8UPIRh/tqBip64fSOwBufq+u5wtwZuT5S69Po5S2ICvRVOoxPNgVB021eQ/2kc vYaTpNmJZmpbPx0nmm5XWkLmQN/TPsA4NVWoHcQhKO63kr5MMBHxt/JdGgYXp/hi BGpAPIAkNWffOrbq1Y/zsP6YjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPB5Q3d6 ruapq8saHxc3fE9PPaNlMB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5 RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk ODRyTHRxMGUySzVwWlZoZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Lwt1lQcuso8dwyrBKD70s8o99w5ukMblHWdzY8IAAaKeq85fnK6b bcSQsts8H5OHV3r+bgeVYYiXl3rtahNVJDVvDeMqnarZvegGW2LJOk08TKcUrQK3 6DYBa66Lpf+dBtih5dO2yxTXL4wD9xDR4e30UklVietkSTNKljdHDsjl0lqp1Sjm 8XKOseRgrESoifwE1CXtf0I48M37FsSqnbP+NYQCBymKxhlwpqQGNE7b3mKV2Em8 Vsz3iR7XLrEO3VHYVk+tRafBYkA/giOAqyyY4Oq6fbNenP7tDmsmboDCToO4g824 vwRS8LiimllOgfd+weDzE33jtBJTl1Y5 -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:30 2025 by rpki-client