This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft File: aSE1YIaDdV6U2OylfYsLNY7OFxg.mft (raw, json) Hash identifier: /KSpuR7Vxq7S4r0/KBk8/nS/uB0qC1wPKaNBKNCWgUM= Subject key identifier: 07:45:3A:C8:A9:46:1D:F9:38:72:B8:AE:79:73:83:4D:67:75:20:EA Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18 Certificate issuer: /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718 Certificate serial: 03C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft Manifest number: 039E Signing time: Mon 22 Dec 2025 23:52:20 +0000 Manifest this update: Mon 22 Dec 2025 23:52:20 +0000 Manifest next update: Mon 29 Dec 2025 23:52:20 +0000 Files and hashes: 1: aSE1YIaDdV6U2OylfYsLNY7OFxg.crl (hash: 08snm1ProWkzQV3IlPBJy4ydaakxXBu+B8KR6G1e+WM=) 2: 593105685BB711EE8E69584CC4F9AE02.roa (hash: 6K1WvAW+XHVvFl9NKw/47c7C8mqXiUtIq7r2hsM/JHg=) 3: D0D44F9A7A7311EF9B70B061C4F9AE02.roa (hash: rOMU6+JJyASa3UMEbMc1nVoiFLnAmgt++mEA6n5GZvo=) 4: EFEEF8165BB211EE88BB1945C4F9AE02.roa (hash: pBp+3YEZO1rLrx0bvICmu2Gq4WoxGLfmXIpKccpgGw8=) 5: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (hash: U81ppJdJPa/NwEizA2XDkKKg4D0+UWmO8vP3Sd1xBj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 962 (0x3c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718 Validity Not Before: Dec 22 23:52:20 2025 GMT Not After : Dec 29 23:52:20 2025 GMT Subject: CN=6949d9b4-fb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:dc:07:12:f2:6d:02:c3:0f:96:da:3a:d5: 48:82:f8:e0:1a:72:48:d7:ea:37:18:0c:13:66:bd: 31:3e:3d:5b:38:b3:ca:69:ce:b6:5e:90:0a:9f:c9: dd:83:0b:82:a7:b9:62:19:c7:e3:37:dc:04:78:b6: ad:f4:5d:af:df:c8:c5:58:17:eb:8e:ea:6e:da:98: 14:26:77:9d:17:be:c9:49:68:18:9a:49:7f:3a:8c: e7:ad:bb:8f:a4:81:16:bb:3f:f3:62:6f:02:55:eb: 36:f2:24:63:34:53:6f:15:e2:06:71:00:76:11:af: 1a:86:cf:2c:3e:2f:93:c9:65:61:30:62:df:52:b6: 02:79:46:99:61:2c:46:4d:13:b8:89:9c:fc:3b:75: d3:14:c6:c2:75:68:f2:d1:86:5e:ae:d2:62:fa:11: 5b:67:8a:de:6c:33:31:a1:7d:62:f8:d5:e5:b9:b1: 6b:07:91:74:f9:a9:6a:e5:a6:9b:c6:db:1a:e2:e8: f6:e0:19:76:de:53:ae:51:d4:c8:4a:01:03:0a:00: 0d:9e:2a:a3:9c:18:f5:83:38:d9:f3:45:76:41:3c: 95:ee:9e:13:ff:e0:7d:a7:99:ea:fd:7c:58:21:aa: ea:fa:5a:50:d6:be:31:9d:ba:a2:e9:dc:fe:cc:4c: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:45:3A:C8:A9:46:1D:F9:38:72:B8:AE:79:73:83:4D:67:75:20:EA X509v3 Authority Key Identifier: keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e8:59:86:d5:b2:ae:c6:29:d2:13:58:c3:64:2b:0c:1b:2e: f2:df:21:00:3c:1e:99:3d:89:51:a6:c6:72:14:58:06:23:68: e1:34:af:90:e5:a1:35:a3:91:cc:10:7c:e7:57:68:bf:50:16: f7:e2:20:61:69:de:aa:06:b3:f5:83:63:7d:53:58:c4:4a:b3: 52:76:f4:8a:59:97:1d:bd:90:23:98:a3:f1:ae:13:cb:b7:8d: fa:ab:7b:e4:42:ad:7b:dc:21:59:0d:f4:82:29:10:73:ca:90: 76:16:58:68:38:4e:c3:c4:b6:45:2e:ed:00:e3:2d:98:0c:80: 96:ba:88:cb:1f:9c:fd:3b:5f:46:a8:46:07:6d:ee:9a:de:45: 67:ae:13:23:5b:e0:5d:1e:c1:3e:50:59:95:6f:cb:60:7c:90: 8d:43:a0:83:a6:ea:a0:b2:8a:47:92:74:cd:01:26:40:55:b1: 32:4f:51:e6:98:53:2d:56:5a:58:8e:56:16:39:7b:c0:aa:f7: 3a:9b:26:25:1f:b3:b4:d7:64:c1:95:3b:f9:20:56:82:6a:f9: a8:ee:03:d2:e8:b4:b7:93:b5:0c:84:87:52:05:76:0f:60:f1: 61:6b:9b:38:f6:da:6c:e6:2a:b7:85:44:b9:3e:9d:2d:40:79: 41:d3:d4:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg5OTYxMTAvBgNVBAUTKDY5MjEzNTYwODY4Mzc1NUU5NEQ4RUNBNTdEOEIwQjM1 OEVDRTE3MTgwHhcNMjUxMjIyMjM1MjIwWhcNMjUxMjI5MjM1MjIwWjAYMRYwFAYD VQQDDA02OTQ5ZDliNC1mYjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKzcBxLybQLDD5baOtVIgvjgGnJI1+o3GAwTZr0xPj1bOLPKac62XpAKn8nd gwuCp7liGcfjN9wEeLat9F2v38jFWBfrjupu2pgUJnedF77JSWgYmkl/OoznrbuP pIEWuz/zYm8CVes28iRjNFNvFeIGcQB2Ea8ahs8sPi+TyWVhMGLfUrYCeUaZYSxG TRO4iZz8O3XTFMbCdWjy0YZertJi+hFbZ4rebDMxoX1i+NXlubFrB5F0+alq5aab xtsa4uj24Bl23lOuUdTISgEDCgANniqjnBj1gzjZ80V2QTyV7p4T/+B9p5nq/XxY Iarq+lpQ1r4xnbqi6dz+zEzv0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdFOsip Rh35OHK4rnlzg01ndSDqMB8GA1UdIwQYMBaAFGkhNWCGg3VelNjspX2LCzWOzhcY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5Ni82NjAzMEY1RUQw NjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRWNlUyT3lsZllzTE5ZN09G eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTRTFZSWFEZFY2VTJPeWxmWXNMTlk3T0Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODk5Ni82NjAzMEY1RUQwNjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRW NlUyT3lsZllzTE5ZN09GeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY6FmG1bKuxinSE1jDZCsMGy7y3yEAPB6ZPYlRpsZyFFgGI2jhNK+Q 5aE1o5HMEHznV2i/UBb34iBhad6qBrP1g2N9U1jESrNSdvSKWZcdvZAjmKPxrhPL t436q3vkQq173CFZDfSCKRBzypB2FlhoOE7DxLZFLu0A4y2YDICWuojLH5z9O19G qEYHbe6a3kVnrhMjW+BdHsE+UFmVb8tgfJCNQ6CDpuqgsopHknTNASZAVbEyT1Hm mFMtVlpYjlYWOXvAqvc6myYlH7O012TBlTv5IFaCavmo7gPS6LS3k7UMhIdSBXYP YPFha5s49tps5iq3hUS5Pp0tQHlB09Rw -----END CERTIFICATE-----Generated at Wed Dec 24 11:07:56 2025 by rpki-client