This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: pu0valLiPmDYDI2OyV/IVSMG558y9Bb0l9TuwpSeAdE= Subject key identifier: 66:32:55:7A:9E:AC:07:1B:4E:F8:E2:3C:6C:1B:1A:A0:BC:CD:9B:BA Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 10AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 1098 Signing time: Mon 22 Dec 2025 17:03:19 +0000 Manifest this update: Mon 22 Dec 2025 17:03:19 +0000 Manifest next update: Mon 29 Dec 2025 17:03:19 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: u/8V4aZtH+R+1imws2pOdp+RgNPkBu7GhNmALlhpjSM=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: f+ssEZLOjLj3KCxNpmhhNkb36lPb0XOjNkCdaat32A0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4270 (0x10ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Dec 22 17:03:19 2025 GMT Not After : Dec 29 17:03:19 2025 GMT Subject: CN=694979d7-4604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:1c:c1:2b:1e:0f:87:6d:22:bd:76:bc:89: fa:43:6d:49:8d:da:25:85:f5:b6:a4:8b:89:6d:1b: 5e:8d:4d:22:b0:e9:ee:07:1c:b7:1e:0a:00:5c:d7: c7:1d:8a:36:9c:1a:61:d2:20:90:66:f2:94:9e:b7: 5f:58:b6:34:b8:68:49:9b:e3:d5:71:aa:34:5c:50: 5a:62:0d:33:20:48:c6:40:6c:42:d5:fa:67:1d:6a: 81:ad:91:b4:34:72:7d:4b:27:e0:d6:4e:cd:b1:41: 27:54:2a:dc:5e:7b:67:08:40:25:73:d9:07:29:79: bc:78:7b:14:5f:1d:e7:df:8f:97:aa:50:13:d9:3d: 65:08:d6:f3:bb:5e:38:46:2f:f6:12:a6:0f:ca:9c: 8a:b3:0d:92:af:22:70:c1:e6:f4:3d:41:ac:18:9b: 4b:00:90:53:c3:96:d1:d4:43:f0:26:20:8e:a5:19: d9:4a:93:d9:7a:cd:9a:c2:55:b5:82:05:a0:e9:20: e5:eb:4b:30:dd:ab:ff:09:2e:54:32:42:84:d6:e2: 8b:bf:17:6c:aa:15:fd:76:15:ed:56:09:ab:d6:b4: 40:25:36:1c:a9:2b:61:f5:d5:20:cc:0d:74:bf:9d: fa:32:ea:95:82:bf:4d:ab:98:3e:06:4d:1e:d3:bd: 84:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:32:55:7A:9E:AC:07:1B:4E:F8:E2:3C:6C:1B:1A:A0:BC:CD:9B:BA X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:04:c5:84:22:7d:f6:22:37:84:4c:c4:7d:83:98:4a:c9:67: 5d:af:0f:55:a7:72:4c:f9:10:52:d2:ea:a1:60:46:97:56:09: 77:d0:4c:bd:40:53:b5:59:ae:c8:cb:3e:d1:0b:6d:9c:d7:16: 5a:25:29:66:c7:0e:f6:b0:31:53:0e:3a:08:18:f6:d2:0e:04: 13:da:5c:5c:53:fc:b8:35:26:76:c8:45:5c:18:3c:01:87:ff: 00:27:2f:e6:93:43:73:82:8a:59:e5:00:3d:e5:80:3c:9c:77: 82:91:d5:e3:8b:04:67:d1:89:ed:55:b0:5b:4a:71:37:e9:2a: ff:44:98:8d:f4:32:7b:e3:f6:82:de:29:a5:4a:0d:bd:b5:7e: dd:53:86:26:2f:e9:ac:25:4a:f4:3b:17:4f:42:87:0a:47:3b: 0a:29:95:09:a3:5f:ae:4a:b0:75:37:4d:7c:b9:90:67:08:7d: d9:39:ef:05:01:99:9b:3f:90:47:0e:01:13:ba:f0:dd:fe:be: ec:c9:56:87:1a:17:89:5b:0e:0c:dc:cc:e4:9e:0e:6b:f0:c8: d5:0c:9e:c0:fa:bf:1f:47:b5:0d:46:5c:be:b0:f0:e5:52:53: 8c:04:a4:91:42:63:3e:67:ee:78:4c:15:20:a5:28:bc:ed:0d: 73:11:67:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUxMjIyMTcwMzE5WhcNMjUxMjI5MTcwMzE5WjAYMRYwFAYD VQQDDA02OTQ5NzlkNy00NjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQQcwSseD4dtIr12vIn6Q21JjdolhfW2pIuJbRtejU0isOnuBxy3HgoAXNfH HYo2nBph0iCQZvKUnrdfWLY0uGhJm+PVcao0XFBaYg0zIEjGQGxC1fpnHWqBrZG0 NHJ9Syfg1k7NsUEnVCrcXntnCEAlc9kHKXm8eHsUXx3n34+XqlAT2T1lCNbzu144 Ri/2EqYPypyKsw2SryJwweb0PUGsGJtLAJBTw5bR1EPwJiCOpRnZSpPZes2awlW1 ggWg6SDl60sw3av/CS5UMkKE1uKLvxdsqhX9dhXtVgmr1rRAJTYcqSth9dUgzA10 v536MuqVgr9Nq5g+Bk0e072EgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYyVXqe rAcbTvjiPGwbGqC8zZu6MB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaBMWEIn32IjeETMR9g5hKyWddrw9Vp3JM+RBS0uqhYEaXVgl30Ey9 QFO1Wa7Iyz7RC22c1xZaJSlmxw72sDFTDjoIGPbSDgQT2lxcU/y4NSZ2yEVcGDwB h/8AJy/mk0NzgopZ5QA95YA8nHeCkdXjiwRn0YntVbBbSnE36Sr/RJiN9DJ74/aC 3imlSg29tX7dU4YmL+msJUr0OxdPQocKRzsKKZUJo1+uSrB1N018uZBnCH3ZOe8F AZmbP5BHDgETuvDd/r7syVaHGheJWw4M3Mzkng5r8MjVDJ7A+r8fR7UNRly+sPDl UlOMBKSRQmM+Z+54TBUgpSi87Q1zEWcm -----END CERTIFICATE-----Generated at Mon Dec 22 22:32:51 2025 by rpki-client