This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: ImVU1ivDGxVo50+Zd7jIYi1oAfFXLppavaQlP1AzhjQ= Subject key identifier: 9D:DF:4D:AF:60:76:4D:40:1C:5E:FE:22:A3:0B:87:40:E8:D5:77:3C Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 0338 Signing time: Tue 23 Dec 2025 00:01:15 +0000 Manifest this update: Tue 23 Dec 2025 00:01:15 +0000 Manifest next update: Tue 30 Dec 2025 00:01:15 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: piZUQuwGL1ISFl5lWjY27gzhm4wAsKAz/uVDdSpK1DI=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: Dec 23 00:01:15 2025 GMT Not After : Dec 30 00:01:15 2025 GMT Subject: CN=6949dbcb-8e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6c:0d:2a:d6:47:ec:92:5d:e6:58:74:55:bd: 23:95:09:34:9c:53:0f:ca:df:c6:4b:6e:51:31:c9: 4d:0d:aa:06:ae:5c:7a:fb:60:d2:6f:a6:db:4b:25: 23:6b:ea:30:b2:73:ce:63:f5:33:4b:9c:c4:b2:2a: 71:45:fd:81:6b:52:98:9e:21:e9:3e:2a:0e:b0:2f: 05:22:22:14:d4:77:fb:5d:89:b3:03:46:a5:e1:94: 8a:91:f1:d7:a9:2d:cd:f8:1d:b5:6b:87:71:e0:95: 50:75:69:03:cf:32:82:fa:f3:be:fc:c3:5f:c6:cd: ea:5a:32:3c:46:4d:28:f0:47:14:c1:b9:b3:e5:1f: e9:9f:60:f0:d8:ff:7d:ce:48:f9:74:70:d0:26:35: c1:27:c6:12:7b:4d:6f:27:2c:e4:18:77:b3:d8:83: bf:b6:a1:91:4d:e9:9d:87:89:44:55:0b:e7:72:6e: 11:85:7b:ac:30:ec:c8:31:2d:88:16:09:b0:59:24: fa:bf:cb:4e:f6:72:21:7c:43:d4:d7:b5:71:fa:8d: b5:68:95:58:4a:1b:62:e3:ab:19:c5:21:b5:f9:e8: be:41:cf:60:a0:40:e9:1d:f4:6c:5b:73:fd:57:76: a7:22:8f:1e:ea:4b:60:61:f0:5a:46:39:35:08:c1: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DF:4D:AF:60:76:4D:40:1C:5E:FE:22:A3:0B:87:40:E8:D5:77:3C X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ed:1d:86:29:b8:19:1c:c6:69:87:f9:ef:02:f6:01:b7:cd: 22:c2:a5:5a:ad:29:76:33:11:8a:d1:d5:83:26:6e:3b:55:c3: 59:bb:8d:f0:37:43:dd:ae:82:3c:88:4c:c4:ba:e1:b9:09:9c: 4a:40:01:ec:6d:88:46:40:01:63:b6:5b:77:54:23:2b:54:ac: 4e:7f:12:2a:d2:ae:ed:9e:cf:b1:59:55:13:c9:68:96:ab:a7: 4d:bc:ce:46:f1:8c:60:dc:e2:f7:8d:a1:08:02:fc:44:2c:c2: 42:e1:a6:20:d7:f2:dc:60:9b:06:97:61:6d:f4:4a:ec:6e:03: 32:57:68:4c:11:04:08:4f:7a:c2:b7:43:4a:d0:b3:5a:3d:e9: ec:f9:67:ad:36:c1:bc:05:54:b7:18:1a:c3:66:d7:2a:0a:c3: 48:b9:01:36:e0:17:85:97:f5:22:4b:60:60:0f:20:dd:a8:97: 49:9f:ce:d8:52:e1:e8:87:87:79:e8:68:9b:dc:06:d0:87:f0: 31:44:5a:fa:3b:de:ae:bd:27:56:68:39:6b:38:87:8d:bb:45: d1:a3:54:55:b2:7a:27:30:48:79:4d:ec:11:e8:c9:31:ea:5a: b9:3e:7a:e4:8e:ce:1c:ee:29:5d:29:3c:77:dc:26:0a:c7:8b: ea:fe:36:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjUxMjIzMDAwMTE1WhcNMjUxMjMwMDAwMTE1WjAYMRYwFAYD VQQDDA02OTQ5ZGJjYi04ZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8mwNKtZH7JJd5lh0Vb0jlQk0nFMPyt/GS25RMclNDaoGrlx6+2DSb6bbSyUj a+owsnPOY/UzS5zEsipxRf2Ba1KYniHpPioOsC8FIiIU1Hf7XYmzA0al4ZSKkfHX qS3N+B21a4dx4JVQdWkDzzKC+vO+/MNfxs3qWjI8Rk0o8EcUwbmz5R/pn2Dw2P99 zkj5dHDQJjXBJ8YSe01vJyzkGHez2IO/tqGRTemdh4lEVQvncm4RhXusMOzIMS2I FgmwWST6v8tO9nIhfEPU17Vx+o21aJVYShti46sZxSG1+ei+Qc9goEDpHfRsW3P9 V3anIo8e6ktgYfBaRjk1CMHt/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3fTa9g dk1AHF7+IqMLh0Do1Xc8MB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt7R2GKbgZHMZph/nvAvYBt80iwqVarSl2MxGK0dWDJm47VcNZu43w N0PdroI8iEzEuuG5CZxKQAHsbYhGQAFjtlt3VCMrVKxOfxIq0q7tns+xWVUTyWiW q6dNvM5G8Yxg3OL3jaEIAvxELMJC4aYg1/LcYJsGl2Ft9ErsbgMyV2hMEQQIT3rC t0NK0LNaPens+WetNsG8BVS3GBrDZtcqCsNIuQE24BeFl/UiS2BgDyDdqJdJn87Y UuHoh4d56Gib3AbQh/AxRFr6O96uvSdWaDlrOIeNu0XRo1RVsnonMEh5TewR6Mkx 6lq5Pnrkjs4c7ildKTx33CYKx4vq/jYO -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:18 2025 by rpki-client