This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft File: SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json) Hash identifier: DKjaQ1Rrvoo6ucMemhkPaQpLSHabreY6pLJYlqhzNZc= Subject key identifier: ED:6A:BB:83:5D:41:6D:34:99:BF:9B:D7:4B:CA:61:BD:4A:ED:C1:3A Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0 Certificate issuer: /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft Manifest number: 41 Signing time: Tue 23 Dec 2025 06:16:45 +0000 Manifest this update: Tue 23 Dec 2025 06:16:45 +0000 Manifest next update: Tue 30 Dec 2025 06:16:45 +0000 Files and hashes: 1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: I1kcHsK5IDievsoLYuc2plreV1ycldlUGR5ZdKFraiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0 Validity Not Before: Dec 23 06:16:45 2025 GMT Not After : Dec 30 06:16:45 2025 GMT Subject: CN=694a33cd-3318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:56:a6:b6:2f:2d:71:49:64:93:e9:7b:2c: 8e:aa:ff:9c:95:04:9c:e0:9c:78:33:a8:97:f3:10: b4:76:a9:ec:96:1b:57:04:fa:3d:67:59:f3:01:6d: 96:3d:80:28:a1:88:de:e2:e2:00:f4:1a:b9:17:75: 16:cd:92:45:22:6c:b5:1c:cd:da:ce:79:a2:0c:2e: 20:7a:ce:95:97:28:03:fb:d3:07:90:be:81:3b:39: e4:1b:90:bf:67:0f:3c:01:bf:67:69:69:37:6e:50: e1:1a:f0:ff:21:64:32:ea:fa:02:4b:8e:72:bd:0b: ac:01:eb:55:41:74:47:45:7e:fc:1f:76:48:d0:86: 3a:79:b3:e9:cc:ce:59:fb:d7:8f:ac:66:d4:30:dd: 69:e3:3f:15:06:bd:37:de:b4:f9:e4:7c:1b:2d:74: 39:8f:5f:8d:61:df:85:63:bc:da:e0:13:a8:8f:50: 32:1e:08:99:26:02:70:42:27:6d:42:d0:4d:fe:a8: d2:1a:c7:98:1c:13:0d:4a:ec:aa:72:90:9e:b1:d2: b4:71:61:7b:da:86:b1:c4:15:39:24:11:5b:4b:0c: 44:9a:2f:01:40:6e:2b:b5:83:3e:f1:79:f4:0c:70: c0:ec:fd:af:9f:40:88:dd:2a:b1:9f:45:35:1f:57: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6A:BB:83:5D:41:6D:34:99:BF:9B:D7:4B:CA:61:BD:4A:ED:C1:3A X509v3 Authority Key Identifier: keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:9e:4e:ea:2e:ca:ee:91:0f:37:c9:2f:82:bb:2c:d6:86:08: 3d:9c:e4:34:2e:d8:0f:35:e8:13:88:1f:b2:41:1a:79:42:5c: f2:2b:7e:b1:54:2f:31:f9:6d:00:44:27:00:64:44:2b:db:ea: 08:fa:ba:8e:7a:39:e9:b6:5b:0b:1b:a3:bb:2f:2c:a6:f4:75: cc:be:13:f3:33:01:13:79:9c:1a:17:71:10:d7:41:05:af:b6: 38:4e:28:ab:58:85:af:9c:55:6c:e9:0e:d0:c0:cb:51:71:ca: 0d:21:31:41:26:2d:82:e7:91:f3:86:d4:7b:22:ef:e5:9a:f1: 54:11:87:a5:2a:b0:e7:dd:b2:2b:50:9e:74:2e:24:67:bd:42: fe:a4:41:23:5a:46:e7:c3:ca:a6:4f:b6:1d:35:11:a5:56:af: 78:a5:49:08:5d:a7:8f:c3:e6:5b:c5:48:db:63:67:69:fc:c9: 12:74:21:61:63:f4:de:94:e5:07:18:29:07:ca:f4:31:a7:11: f6:63:f9:32:a7:a3:23:3c:85:ed:64:94:ce:69:3f:f5:74:3f: 46:a3:3c:a8:d6:16:94:b2:2d:50:ff:57:83:f6:95:e1:3d:59: 36:5b:ef:63:ea:0a:b3:2e:99:05:7b:9b:38:33:dc:2b:73:e0: 47:96:e8:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I3QTExMC8GA1UEBRMoNDg4NzA3RTM3NjMxNEFERDU0NUNDNjYwQURFQ0UyMjk4 NjRDMTNFMDAeFw0yNTEyMjMwNjE2NDVaFw0yNTEyMzAwNjE2NDVaMBgxFjAUBgNV BAMMDTY5NGEzM2NkLTMzMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDndlamti8tcUlkk+l7LI6q/5yVBJzgnHgzqJfzELR2qeyWG1cE+j1nWfMBbZY9 gCihiN7i4gD0GrkXdRbNkkUibLUczdrOeaIMLiB6zpWXKAP70weQvoE7OeQbkL9n DzwBv2dpaTduUOEa8P8hZDLq+gJLjnK9C6wB61VBdEdFfvwfdkjQhjp5s+nMzln7 14+sZtQw3WnjPxUGvTfetPnkfBstdDmPX41h34VjvNrgE6iPUDIeCJkmAnBCJ21C 0E3+qNIax5gcEw1K7KpykJ6x0rRxYXvahrHEFTkkEVtLDESaLwFAbiu1gz7xefQM cMDs/a+fQIjdKrGfRTUfVwFdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7Wq7g11B bTSZv5vXS8phvUrtwTowHwYDVR0jBBgwFoAUSIcH43YxSt1UXMZgreziKYZME+Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjdBL0M5OEQ1NUZBN0RC QjExRjBCQzRENzc2MUM0RjlBRTAyL1NJY0g0M1l4U3QxVVhNWmdyZXppS1laTUUt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0ljSDQzWXhTdDFVWE1aZ3JlemlLWVpNRS1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QjdBL0M5OEQ1NUZBN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyL1NJY0g0M1l4U3Qx VVhNWmdyZXppS1laTUUtQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMCeTuouyu6RDzfJL4K7LNaGCD2c5DQu2A816BOIH7JBGnlCXPIrfrFU LzH5bQBEJwBkRCvb6gj6uo56Oem2Wwsbo7svLKb0dcy+E/MzARN5nBoXcRDXQQWv tjhOKKtYha+cVWzpDtDAy1Fxyg0hMUEmLYLnkfOG1Hsi7+Wa8VQRh6UqsOfdsitQ nnQuJGe9Qv6kQSNaRufDyqZPth01EaVWr3ilSQhdp4/D5lvFSNtjZ2n8yRJ0IWFj 9N6U5QcYKQfK9DGnEfZj+TKnoyM8he1klM5pP/V0P0ajPKjWFpSyLVD/V4P2leE9 WTZb72PqCrMumQV7mzgz3Ctz4EeW6Fc= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:07 2025 by rpki-client