This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: UDQXU80KuykPu/ZmupP6OzqA5InKKOltxPGL6lACLVo= Subject key identifier: A6:C6:8C:3C:85:D5:8A:40:5D:5B:CB:D0:35:6A:30:B8:D9:1E:34:F1 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 138E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 1384 Signing time: Mon 22 Dec 2025 16:42:11 +0000 Manifest this update: Mon 22 Dec 2025 16:42:11 +0000 Manifest next update: Mon 29 Dec 2025 16:42:11 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: uUehi8Y3D1+4KflvsL5UkYUdXQyreMpcEvWU2x4SKHs=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5006 (0x138e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Dec 22 16:42:11 2025 GMT Not After : Dec 29 16:42:11 2025 GMT Subject: CN=694974e3-dba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b5:62:d7:8f:e2:5b:da:cd:14:81:40:2a:58: 5e:2e:25:b6:cd:02:2c:9f:4d:c1:58:a0:fe:b8:33: eb:0b:3a:4a:38:69:ca:1a:d0:11:a1:31:0a:a3:75: c1:4e:c7:0a:73:8e:b7:5c:c7:cc:92:e4:76:b4:26: 7d:cd:a4:d4:75:c0:3e:1b:cb:c3:74:de:4c:f8:b3: 04:16:5a:71:12:a7:ca:af:04:59:da:81:60:a3:8b: 67:18:33:93:ec:2a:10:95:cf:68:b9:e2:26:3a:39: a9:4d:1e:a7:c6:f6:98:11:cd:f0:c4:42:13:70:61: 5f:ac:96:db:8c:0a:d6:9e:63:11:55:f2:34:02:7c: 14:d0:99:cc:32:1b:13:a0:bc:84:fc:b7:14:b1:de: bd:48:05:fc:45:3e:e8:7d:94:49:cc:5e:b6:88:ec: 68:43:a0:09:1e:83:da:1c:fd:cd:1d:ff:04:07:73: 5c:9b:d1:de:7b:ef:c7:d5:e5:c1:e8:5c:e8:6d:48: 61:12:09:25:97:0e:a1:99:6f:45:4c:97:89:af:a3: 22:f0:3a:12:04:ea:46:00:76:13:1b:d5:0e:49:10: 0b:99:99:1f:04:17:f8:e6:77:82:97:4b:13:82:f3: 48:9f:2e:da:cf:4f:16:d8:90:fa:5c:f0:53:15:c4: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C6:8C:3C:85:D5:8A:40:5D:5B:CB:D0:35:6A:30:B8:D9:1E:34:F1 X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a8:79:21:50:43:69:af:fc:f2:2b:58:a1:33:a6:0c:14:9a: b7:10:7d:ff:0e:34:0e:1b:8b:b2:c7:38:6b:ce:81:c1:0a:5f: 15:cd:80:58:a8:5e:9d:88:9c:a2:40:1a:fa:13:03:b9:f8:d3: 2f:3f:4e:42:d5:8f:59:f7:fd:a4:69:07:e1:8e:ef:4d:11:5a: 64:b0:bd:00:1e:28:f0:95:18:2f:7f:8a:84:2d:65:6c:27:84: db:5b:06:f4:2f:4c:81:f0:8d:18:8b:d8:ea:da:d0:ce:d5:60: f5:c7:6f:4d:3d:f2:1f:cb:09:34:b4:44:16:e6:6a:f5:1d:7d: e5:8a:10:20:83:89:8b:76:cc:b5:10:16:56:6d:0b:fc:e7:56: 20:a2:69:64:38:2a:eb:ab:6e:bc:40:85:97:09:46:7a:12:30: f8:2c:11:5c:c0:8c:75:8f:88:d1:13:90:8d:2d:b0:21:1a:b2: 46:6e:61:77:71:01:ca:62:6a:5d:db:be:c6:8b:a3:fe:51:18: 3c:a7:aa:b4:55:8f:01:5a:35:d7:df:1c:40:a8:6e:d2:d0:77: f5:88:09:2f:4a:65:00:67:df:b9:bc:0a:91:43:63:8d:e9:a0: 36:7d:85:ad:8c:ad:0d:ca:b2:ca:31:7b:b4:40:97:7a:8e:a4: 22:bd:8d:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUxMjIyMTY0MjExWhcNMjUxMjI5MTY0MjExWjAYMRYwFAYD VQQDDA02OTQ5NzRlMy1kYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9rVi14/iW9rNFIFAKlheLiW2zQIsn03BWKD+uDPrCzpKOGnKGtARoTEKo3XB TscKc463XMfMkuR2tCZ9zaTUdcA+G8vDdN5M+LMEFlpxEqfKrwRZ2oFgo4tnGDOT 7CoQlc9oueImOjmpTR6nxvaYEc3wxEITcGFfrJbbjArWnmMRVfI0AnwU0JnMMhsT oLyE/LcUsd69SAX8RT7ofZRJzF62iOxoQ6AJHoPaHP3NHf8EB3Ncm9Hee+/H1eXB 6FzobUhhEgkllw6hmW9FTJeJr6Mi8DoSBOpGAHYTG9UOSRALmZkfBBf45neCl0sT gvNIny7az08W2JD6XPBTFcTG9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbGjDyF 1YpAXVvL0DVqMLjZHjTxMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIqHkhUENpr/zyK1ihM6YMFJq3EH3/DjQOG4uyxzhrzoHBCl8VzYBY qF6diJyiQBr6EwO5+NMvP05C1Y9Z9/2kaQfhju9NEVpksL0AHijwlRgvf4qELWVs J4TbWwb0L0yB8I0Yi9jq2tDO1WD1x29NPfIfywk0tEQW5mr1HX3lihAgg4mLdsy1 EBZWbQv851YgomlkOCrrq268QIWXCUZ6EjD4LBFcwIx1j4jRE5CNLbAhGrJGbmF3 cQHKYmpd277Gi6P+URg8p6q0VY8BWjXX3xxAqG7S0Hf1iAkvSmUAZ9+5vAqRQ2ON 6aA2fYWtjK0NyrLKMXu0QJd6jqQivY0o -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:17 2025 by rpki-client