This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft File: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft (raw, json) Hash identifier: CPCTSN8CTwTf7/5duXyF4Uh4196jSaR2SfTe3Pd7Tq8= Subject key identifier: 11:B3:56:15:C3:19:84:8B:97:EC:E0:16:50:FA:D8:E0:CE:0C:72:9F Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 Certificate issuer: /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft Manifest number: 052D Signing time: Mon 22 Dec 2025 22:37:30 +0000 Manifest this update: Mon 22 Dec 2025 22:37:29 +0000 Manifest next update: Mon 29 Dec 2025 22:37:29 +0000 Files and hashes: 1: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl (hash: H2kDbOVC5dDD+4Z9zCPVxtwVjYfL3E4g3FcG2HekHqI=) 2: 1443F7BA200411EE84DAD06BC4F9AE02.roa (hash: t8NYeeOePYob2b/GMp2uUqxxjuXiVF6hVbXFJVOBrpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Validity Not Before: Dec 22 22:37:29 2025 GMT Not After : Dec 29 22:37:29 2025 GMT Subject: CN=6949c82a-9efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:2c:a6:4b:ee:90:d8:4b:62:4c:0b:02:5e: b2:57:bf:ff:1b:72:76:ed:7b:f4:93:d2:9f:19:47: 3a:f9:3b:3b:07:23:33:73:76:38:1b:ef:2d:d5:84: 3b:c0:f3:2a:5e:28:6a:45:47:cc:01:37:81:ae:e7: 08:37:89:b0:64:fa:38:21:c6:16:f5:64:03:05:d2: e8:49:fb:df:27:64:4a:d9:b9:23:72:86:c5:e6:2a: af:9a:f4:c3:21:b9:48:14:7f:39:29:78:64:63:2a: 01:b3:94:49:9b:b2:0e:06:dd:5b:76:13:38:d7:cd: 65:e9:e2:e6:3f:23:85:bf:44:b6:74:48:a7:62:cc: 3c:13:68:5a:b3:c4:1b:48:8d:5f:13:70:e8:f6:1a: 43:26:88:0f:04:79:a9:69:dc:13:ca:fb:9e:f8:f1: 3b:52:19:d1:c3:01:28:13:61:0e:07:21:02:36:6d: 2c:f4:cb:85:47:dd:07:aa:1f:6b:ca:d5:d1:e5:85: 97:77:2e:31:0f:26:00:e1:f2:18:ac:c5:3f:8b:fd: a9:93:55:8b:1f:a0:8b:3c:e2:26:db:15:7c:91:15: 44:88:e3:ac:a3:94:51:f2:47:08:b7:aa:11:8a:e4: 45:9b:cd:cf:26:40:55:fb:af:41:ec:77:7a:51:df: 7a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B3:56:15:C3:19:84:8B:97:EC:E0:16:50:FA:D8:E0:CE:0C:72:9F X509v3 Authority Key Identifier: keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:95:58:d8:41:c2:2b:25:9d:b5:57:e3:5c:23:ac:e9:68:06: f1:c6:b8:3c:73:93:99:fa:f2:80:8c:76:0e:50:84:f4:78:cb: 82:d5:a7:90:73:c4:ec:e0:c7:18:29:6f:a9:27:ad:39:3a:37: cb:cd:24:34:ad:5a:42:50:c6:53:58:c6:a2:17:03:e5:b4:d6: f3:0b:17:bd:1c:ea:8a:70:4c:ef:66:59:b3:e1:d0:2b:66:95: 99:7c:ab:7c:2a:81:18:8a:1d:a4:72:1f:90:2d:48:4f:63:ae: 1c:f4:ab:52:b9:4f:a1:be:5f:8b:a3:21:fe:31:29:6f:dc:26: 93:ef:14:71:7e:96:43:e8:af:43:bf:4f:68:dd:1c:26:5a:0d: 9b:b7:06:8d:57:f9:56:7b:6b:4d:6e:66:8a:96:9d:e5:c2:a7: e7:c5:85:a3:13:2b:a4:a5:11:19:9d:5a:85:c2:e5:ac:03:f6: 9e:c5:13:55:ec:80:4d:7b:1e:93:76:72:06:46:e7:b7:9f:e7: 32:66:b6:10:d3:ba:89:40:4b:d6:8c:73:3d:4b:f7:c2:93:94: 99:c5:29:e4:62:a7:24:60:34:1b:3f:d6:10:c3:fd:bd:58:c2: 68:15:13:b1:fa:3a:40:3f:ab:59:2b:ae:8c:0a:bf:d2:c5:94: fa:1e:7e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFNkYxMTAvBgNVBAUTKDkzRjQ5REQzRURDOUQ1OTI3MUFGRTEzMTNDOTIxREU2 NkMyMjIwNjQwHhcNMjUxMjIyMjIzNzI5WhcNMjUxMjI5MjIzNzI5WjAYMRYwFAYD VQQDDA02OTQ5YzgyYS05ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKwspkvukNhLYkwLAl6yV7//G3J27Xv0k9KfGUc6+Ts7ByMzc3Y4G+8t1YQ7 wPMqXihqRUfMATeBrucIN4mwZPo4IcYW9WQDBdLoSfvfJ2RK2bkjcobF5iqvmvTD IblIFH85KXhkYyoBs5RJm7IOBt1bdhM4181l6eLmPyOFv0S2dEinYsw8E2has8Qb SI1fE3Do9hpDJogPBHmpadwTyvue+PE7UhnRwwEoE2EOByECNm0s9MuFR90Hqh9r ytXR5YWXdy4xDyYA4fIYrMU/i/2pk1WLH6CLPOIm2xV8kRVEiOOso5RR8kcIt6oR iuRFm83PJkBV+69B7Hd6Ud96qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGzVhXD GYSLl+zgFlD62ODODHKfMB8GA1UdIwQYMBaAFJP0ndPtydWSca/hMTySHeZsIiBk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkU2Ri82MkVCMURGRTI2 QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFaSnhyLUV4UEpJZDVtd2lJ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfU2QwLTNKMVpKeHItRXhQSklkNW13aUlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkU2Ri82MkVCMURGRTI2QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFa SnhyLUV4UEpJZDVtd2lJR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZlVjYQcIrJZ21V+NcI6zpaAbxxrg8c5OZ+vKAjHYOUIT0eMuC1aeQ c8Ts4McYKW+pJ605OjfLzSQ0rVpCUMZTWMaiFwPltNbzCxe9HOqKcEzvZlmz4dAr ZpWZfKt8KoEYih2kch+QLUhPY64c9KtSuU+hvl+LoyH+MSlv3CaT7xRxfpZD6K9D v09o3RwmWg2btwaNV/lWe2tNbmaKlp3lwqfnxYWjEyukpREZnVqFwuWsA/aexRNV 7IBNex6TdnIGRue3n+cyZrYQ07qJQEvWjHM9S/fCk5SZxSnkYqckYDQbP9YQw/29 WMJoFROx+jpAP6tZK66MCr/SxZT6Hn6h -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:50 2025 by rpki-client