This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: VjyWN7vG9u80Aw7thb5wg3MyAm06QN2w/+Yj0HnuNZo= Subject key identifier: 2E:2F:46:81:0E:4F:78:9C:59:63:08:29:42:8C:16:B6:AF:D1:C1:09 Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: 01A3 Signing time: Tue 23 Dec 2025 02:21:15 +0000 Manifest this update: Tue 23 Dec 2025 02:21:14 +0000 Manifest next update: Tue 30 Dec 2025 02:21:14 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: jvFNJWcYIjmrfBpyqo3v9AN2vMEJjtUPuAoe6pXYDWI=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: 1AC56+KqoXmIdoXxTwj6Vr1818DLnFN433yaIdYEMfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: Dec 23 02:21:14 2025 GMT Not After : Dec 30 02:21:14 2025 GMT Subject: CN=6949fc9a-5181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:81:17:b2:07:97:ec:e0:d7:cc:d4:41:39: e4:09:e1:8e:48:eb:31:a2:ef:20:f4:60:48:66:02: 06:8f:0a:dd:73:e7:1c:1d:36:78:e1:ae:49:10:55: b4:de:f1:9f:4b:f6:ae:cc:de:80:b5:97:b7:d0:c7: 63:53:92:91:fa:29:fc:7a:90:b8:98:db:0f:16:90: 6f:0b:5b:b5:6c:60:11:c5:22:4e:fc:22:2e:1b:81: 81:0d:75:11:66:d1:00:96:82:fe:cd:5f:e5:a3:be: 30:56:72:c4:24:7e:bd:27:f8:6d:d6:96:c2:07:47: 45:30:bb:0a:aa:fa:5f:ee:5c:33:c0:dd:f6:b0:c7: 2c:bf:ad:15:2b:c8:8e:22:1f:ed:81:7a:a8:0e:51: 9e:d2:55:a9:b3:35:39:16:b1:0f:2f:ec:3b:97:a0: c3:d3:d6:34:29:4d:31:68:89:0d:0e:b5:81:e5:fe: 27:36:81:45:42:56:de:80:45:d6:cf:cd:8d:31:62: a8:c7:8e:cd:cd:df:9e:ce:cc:4c:cf:e9:93:ba:c0: 29:34:56:86:94:ce:30:f2:ee:65:bd:17:e4:75:65: f5:28:68:42:20:e8:52:c7:f1:7f:dc:4b:96:88:8e: 98:c3:0e:58:95:78:e6:a8:1b:a7:bb:86:1e:75:b2: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2F:46:81:0E:4F:78:9C:59:63:08:29:42:8C:16:B6:AF:D1:C1:09 X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:91:49:45:1c:30:ec:67:6e:49:37:ba:82:10:81:72:05:ff: ec:1f:3d:33:57:5c:ee:c5:c0:1b:a4:97:9d:f2:8c:a5:48:1e: 0c:1e:d1:6d:ac:77:75:d8:f1:64:71:2f:a0:d0:30:c3:d6:bd: 4c:95:ec:a5:27:97:ca:91:a6:d1:6a:17:06:67:5f:52:8b:65: 6c:da:bf:ee:de:c2:4e:77:df:e1:68:ce:90:4a:82:9e:a9:61: f9:c8:e8:03:b1:aa:6e:e9:ed:35:05:b1:a3:16:23:a7:e7:8f: 60:4f:e8:30:93:8f:f0:16:17:13:e9:ff:ef:c8:97:6b:14:cf: 90:5f:97:fc:03:b5:a1:e5:af:8f:88:aa:6e:32:c9:a0:f2:ac: 40:05:e1:15:1d:18:b1:8b:02:0a:86:f8:d5:e5:1f:83:87:2c: 1d:97:cc:b6:79:ed:ff:90:97:98:9d:59:65:51:99:f5:0b:a2: e2:2f:2f:3e:7e:0b:98:a8:a0:40:68:ea:a8:77:d9:e6:85:68: ac:22:6a:8f:4b:82:ac:d9:6d:b3:aa:99:5f:92:cd:e1:9d:59: 75:e0:61:be:8c:47:a5:16:15:ac:93:41:20:e0:3d:a0:6a:fe: 72:7f:7d:0c:ab:2d:b1:e0:a9:3d:82:31:4f:c9:be:74:2d:30: bd:a4:b8:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3QzQxMTAvBgNVBAUTKDQ5REI2MUZGMDNDNTUxNjc5NUNGNzg1MDlFQTM3QTA2 MEY0NTQ3QkYwHhcNMjUxMjIzMDIyMTE0WhcNMjUxMjMwMDIyMTE0WjAYMRYwFAYD VQQDDA02OTQ5ZmM5YS01MTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3O2BF7IHl+zg18zUQTnkCeGOSOsxou8g9GBIZgIGjwrdc+ccHTZ44a5JEFW0 3vGfS/auzN6AtZe30MdjU5KR+in8epC4mNsPFpBvC1u1bGARxSJO/CIuG4GBDXUR ZtEAloL+zV/lo74wVnLEJH69J/ht1pbCB0dFMLsKqvpf7lwzwN32sMcsv60VK8iO Ih/tgXqoDlGe0lWpszU5FrEPL+w7l6DD09Y0KU0xaIkNDrWB5f4nNoFFQlbegEXW z82NMWKox47Nzd+ezsxMz+mTusApNFaGlM4w8u5lvRfkdWX1KGhCIOhSx/F/3EuW iI6Yww5YlXjmqBunu4YedbLOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4vRoEO T3icWWMIKUKMFrav0cEJMB8GA1UdIwQYMBaAFEnbYf8DxVFnlc94UJ6jegYPRUe/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDdDNC81OTVCRTgyQzYz NUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVXZVZ6M2hRbnFONkJnOUZS NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVX ZVZ6M2hRbnFONkJnOUZSNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhkUlFHDDsZ25JN7qCEIFyBf/sHz0zV1zuxcAbpJed8oylSB4MHtFt rHd12PFkcS+g0DDD1r1MleylJ5fKkabRahcGZ19Si2Vs2r/u3sJOd9/haM6QSoKe qWH5yOgDsapu6e01BbGjFiOn549gT+gwk4/wFhcT6f/vyJdrFM+QX5f8A7Wh5a+P iKpuMsmg8qxABeEVHRixiwIKhvjV5R+Dhywdl8y2ee3/kJeYnVllUZn1C6LiLy8+ fguYqKBAaOqod9nmhWisImqPS4Ks2W2zqplfks3hnVl14GG+jEelFhWsk0Eg4D2g av5yf30Mqy2x4Kk9gjFPyb50LTC9pLht -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:37 2025 by rpki-client