This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft File: Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json) Hash identifier: b8+bTzxn+OOf8wji7TK36/bf4Zk12PJQcJVE+9a79NY= Subject key identifier: 35:41:DE:2A:72:26:49:5A:E1:FB:0F:80:D7:C5:A3:D0:05:EC:EC:D2 Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 Certificate issuer: /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft Manifest number: CC Signing time: Tue 23 Dec 2025 04:45:34 +0000 Manifest this update: Tue 23 Dec 2025 04:45:34 +0000 Manifest next update: Tue 30 Dec 2025 04:45:34 +0000 Files and hashes: 1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: EC0AyWyTkLsGXsc5+TmGoPxXCQsb8TWq6zBlLPl4G+Q=) 2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: mTvWjDqRpjoE4gToiz3x8YclXADkkIN+m00HGh0rTzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Validity Not Before: Dec 23 04:45:34 2025 GMT Not After : Dec 30 04:45:34 2025 GMT Subject: CN=694a1e6e-c932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:13:a7:4e:73:db:1b:c9:01:bc:5b:95:4c: e2:9c:a8:4e:df:c1:e8:b8:a1:05:ef:05:c1:ef:3b: 5f:24:d2:00:c1:07:f0:20:8a:8a:5d:fb:12:14:e7: 9d:52:64:7b:98:0b:0f:0f:24:be:af:04:5c:74:a1: fa:1a:b6:4c:43:29:48:b7:10:7b:e8:b9:ae:68:5d: 50:c7:e7:c8:60:09:ef:2d:40:42:40:86:46:8a:73: 38:09:6b:de:9a:3f:be:ba:79:cb:ca:bb:e7:20:ed: b9:e9:4a:81:e5:4c:fd:a0:2f:51:02:71:0c:e5:58: cb:85:d2:d9:0f:96:04:b8:cb:d3:f2:9c:be:59:45: 1e:92:75:dd:04:4f:36:2d:d2:c7:93:f8:11:88:0b: 5e:e7:90:cb:d9:59:40:aa:bd:1b:13:6d:15:2c:ef: d9:60:b9:5a:ff:a8:f0:da:28:90:dc:6f:32:99:4d: 14:be:ca:01:82:fb:14:4b:60:5d:aa:11:c1:cc:99: ad:7b:8e:75:13:c4:f5:b9:34:72:6a:79:19:58:18: 42:b6:3b:8c:7f:78:9f:ba:64:21:f1:42:da:c4:30: 34:98:df:9a:68:b8:34:87:93:4b:a1:b1:c0:7a:b4: 3d:fa:98:c5:16:dd:73:1e:8a:6e:48:6f:68:62:f9: 0a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:DE:2A:72:26:49:5A:E1:FB:0F:80:D7:C5:A3:D0:05:EC:EC:D2 X509v3 Authority Key Identifier: keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:cb:f9:c0:86:df:f5:b2:02:85:38:0e:b0:70:4d:39:5c:06: 11:c6:e9:e3:25:ea:ad:9d:9b:36:5b:7b:43:bc:07:70:88:f5: 26:b3:2f:9d:ef:da:36:97:91:1c:d8:a3:2f:53:9f:86:07:26: fb:22:ee:0d:7b:11:95:9d:53:36:f9:e0:d9:d2:90:fd:8c:9e: 81:da:a9:0a:8d:01:16:8e:33:1f:d0:cd:1d:2a:92:61:18:b5: 63:7b:7d:ba:bf:5f:77:52:e7:0f:8b:06:ff:cb:14:81:92:95: ca:75:93:8d:41:9c:41:17:71:d8:a4:82:98:5c:59:f5:d8:c3: cf:c2:08:51:5c:1b:42:38:bd:ea:56:71:86:1d:b9:13:ef:50: 43:e3:a0:a9:19:99:bc:99:1b:aa:74:b8:2f:c2:8a:8d:94:93: 1a:c0:33:8b:79:ac:a6:c3:a1:2c:f9:71:e4:f7:00:01:29:c1: 4a:a6:d2:f9:a9:89:28:60:e4:0f:3c:4d:ae:de:b8:41:58:76: 50:f0:e4:65:15:07:5d:a8:af:cf:6a:bf:e6:7a:cc:67:f3:9f: b4:2c:db:cf:e4:2b:82:21:1f:53:cd:e8:ef:89:b5:83:e2:04: 1a:a1:45:3f:4d:8e:46:34:33:55:c1:d3:b1:a3:1a:e8:aa:46: 38:94:04:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM5Q0YxMTAvBgNVBAUTKDRBN0QyNkM0Q0JGMTY3MDAyNDVENjdGQkY2OTUwQjcx MjkxODk5MzkwHhcNMjUxMjIzMDQ0NTM0WhcNMjUxMjMwMDQ0NTM0WjAYMRYwFAYD VQQDDA02OTRhMWU2ZS1jOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjt4Tp05z2xvJAbxblUzinKhO38HouKEF7wXB7ztfJNIAwQfwIIqKXfsSFOed UmR7mAsPDyS+rwRcdKH6GrZMQylItxB76LmuaF1Qx+fIYAnvLUBCQIZGinM4CWve mj++unnLyrvnIO256UqB5Uz9oC9RAnEM5VjLhdLZD5YEuMvT8py+WUUeknXdBE82 LdLHk/gRiAte55DL2VlAqr0bE20VLO/ZYLla/6jw2iiQ3G8ymU0UvsoBgvsUS2Bd qhHBzJmte451E8T1uTRyankZWBhCtjuMf3ifumQh8ULaxDA0mN+aaLg0h5NLobHA erQ9+pjFFt1zHopuSG9oYvkKLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVB3ipy Jkla4fsPgNfFo9AF7OzSMB8GA1UdIwQYMBaAFEp9JsTL8WcAJF1n+/aVC3EpGJk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzlDRi80REYyQkU1MkE5 OEMxMUVGQkEwNjg4NjRDNEY5QUUwMi9TbjBteE12eFp3QWtYV2Y3OXBVTGNTa1lt VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuMG14TXZ4WndBa1hXZjc5cFVMY1NrWW1Uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzlDRi80REYyQkU1MkE5OEMxMUVGQkEwNjg4NjRDNEY5QUUwMi9TbjBteE12eFp3 QWtYV2Y3OXBVTGNTa1ltVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4y/nAht/1sgKFOA6wcE05XAYRxunjJeqtnZs2W3tDvAdwiPUmsy+d 79o2l5Ec2KMvU5+GByb7Iu4NexGVnVM2+eDZ0pD9jJ6B2qkKjQEWjjMf0M0dKpJh GLVje326v193UucPiwb/yxSBkpXKdZONQZxBF3HYpIKYXFn12MPPwghRXBtCOL3q VnGGHbkT71BD46CpGZm8mRuqdLgvwoqNlJMawDOLeaymw6Es+XHk9wABKcFKptL5 qYkoYOQPPE2u3rhBWHZQ8ORlFQddqK/Par/mesxn85+0LNvP5CuCIR9TzejvibWD 4gQaoUU/TY5GNDNVwdOxoxroqkY4lARW -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:50 2025 by rpki-client