This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft File: snbxWm1Kl8SBkekr0WYfNovvIeQ.mft (raw, json) Hash identifier: ZC+gaIM66Qnc0ene5vPtrBlDIk9qdCWAnLdYgQ5gr6s= Subject key identifier: 0B:9F:F1:55:2D:D1:BC:65:3F:1A:63:71:EE:9A:F1:07:42:68:14:07 Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4 Certificate issuer: /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft Manifest number: E2 Signing time: Tue 23 Dec 2025 04:30:26 +0000 Manifest this update: Tue 23 Dec 2025 04:30:26 +0000 Manifest next update: Tue 30 Dec 2025 04:30:26 +0000 Files and hashes: 1: snbxWm1Kl8SBkekr0WYfNovvIeQ.crl (hash: t8ACKMvVp7zi9rVI89zEzod0rVemBDhbZhbxMAEktsY=) 2: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (hash: m+cTvWrh74cJIwtxb5YNKAjFtv2dZKfs+BjQs+Q2hMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37C4, serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4 Validity Not Before: Dec 23 04:30:26 2025 GMT Not After : Dec 30 04:30:26 2025 GMT Subject: CN=694a1ae2-7769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:80:9a:76:02:97:de:fa:32:2c:07:b8:17: 29:f2:d2:7f:ab:fd:7d:23:3b:a6:cc:27:6e:79:57: 46:00:65:28:d3:17:eb:cd:ef:a8:83:5c:e1:8e:e2: bb:45:c1:7c:f0:5c:0c:5e:d8:fc:89:42:ba:23:12: fa:2f:0f:4b:62:8e:5f:c4:e3:bf:08:96:f0:87:31: 6f:66:89:7b:80:93:f4:4c:b9:3b:ea:bf:32:ad:0f: b9:e0:e3:17:1b:45:88:5c:dc:ae:00:80:86:5c:04: ba:74:60:00:07:b9:e6:50:68:4d:e2:75:2e:61:13: 5d:45:ad:ad:88:5d:c9:2f:27:a4:85:58:a0:ec:d3: 24:44:be:a8:01:6f:f0:9c:56:fa:bc:00:76:2a:98: ba:a6:13:9b:22:62:b4:f3:33:a6:c7:3b:64:0e:d5: 80:d9:aa:b6:7e:d7:2c:8d:bc:00:dc:7b:5a:0a:f3: 1e:dc:14:e3:2a:06:b7:14:1c:df:a1:cd:5e:83:d9: 79:e5:a4:ba:17:28:31:ae:9c:89:a4:d7:56:da:31: 51:2c:fe:8b:09:32:4d:98:00:79:cf:b7:f7:e5:be: 32:7a:a9:bb:47:4b:ac:f1:55:63:0a:23:d6:d5:ee: 78:b8:4a:bb:c8:bc:6c:cf:df:19:75:81:7c:4e:50: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9F:F1:55:2D:D1:BC:65:3F:1A:63:71:EE:9A:F1:07:42:68:14:07 X509v3 Authority Key Identifier: keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:73:59:40:5e:1a:21:3e:00:5f:74:55:cf:f3:0b:fb:35:81: 29:f3:bd:19:0c:a4:72:ab:ef:4f:c0:83:39:13:95:e6:b8:fd: 6f:ac:55:e9:ad:61:40:20:3f:74:87:be:11:95:d3:a6:9b:f1: f7:e9:be:ae:10:17:dc:5b:f4:96:75:82:13:29:12:5a:df:46: e8:1c:58:e9:dd:a3:3c:0a:0b:f0:92:e6:6a:63:22:ed:bb:55: 93:9d:8b:a0:4a:73:ba:e9:4c:1a:f7:99:cc:26:3a:1a:86:b1: 69:62:23:74:ad:dd:37:16:5c:6d:6f:20:e9:f7:70:7e:65:1b: ae:68:d0:37:9c:cc:0e:87:f5:db:f5:af:29:8d:30:1a:f8:af: 86:03:e4:08:b7:d7:81:a8:f0:5c:07:90:69:a2:f6:4b:3e:bf: 1e:75:31:e8:7e:1a:7f:29:32:38:5a:54:47:f3:68:be:a5:bb: a2:23:02:9b:80:78:5a:1c:6c:2a:c6:98:d6:69:0c:3a:53:8b: 2f:3b:61:7c:54:d7:ef:d8:8c:87:02:30:92:b8:12:4a:42:27: e1:7c:b9:7c:83:52:d7:1f:5d:24:71:7b:e4:4c:55:7c:b3:ee: 59:3c:c8:ad:7e:17:5f:ff:29:c3:c7:d5:0b:4f:8f:76:92:b1: c1:eb:c3:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3QzQxMTAvBgNVBAUTKEIyNzZGMTVBNkQ0QTk3QzQ4MTkxRTkyQkQxNjYxRjM2 OEJFRjIxRTQwHhcNMjUxMjIzMDQzMDI2WhcNMjUxMjMwMDQzMDI2WjAYMRYwFAYD VQQDDA02OTRhMWFlMi03NzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjeAmnYCl976MiwHuBcp8tJ/q/19IzumzCdueVdGAGUo0xfrze+og1zhjuK7 RcF88FwMXtj8iUK6IxL6Lw9LYo5fxOO/CJbwhzFvZol7gJP0TLk76r8yrQ+54OMX G0WIXNyuAICGXAS6dGAAB7nmUGhN4nUuYRNdRa2tiF3JLyekhVig7NMkRL6oAW/w nFb6vAB2Kpi6phObImK08zOmxztkDtWA2aq2ftcsjbwA3HtaCvMe3BTjKga3FBzf oc1eg9l55aS6FygxrpyJpNdW2jFRLP6LCTJNmAB5z7f35b4yeqm7R0us8VVjCiPW 1e54uEq7yLxsz98ZdYF8TlBiXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuf8VUt 0bxlPxpjce6a8QdCaBQHMB8GA1UdIwQYMBaAFLJ28VptSpfEgZHpK9FmHzaL7yHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdDNC9BMkFCQTcyQzhC RDkxMUVGOUY5NkJBNEVDNEY5QUUwMi9zbmJ4V20xS2w4U0JrZWtyMFdZZk5vdnZJ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NuYnhXbTFLbDhTQmtla3IwV1lmTm92dkllUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdDNC9BMkFCQTcyQzhCRDkxMUVGOUY5NkJBNEVDNEY5QUUwMi9zbmJ4V20xS2w4 U0JrZWtyMFdZZk5vdnZJZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpc1lAXhohPgBfdFXP8wv7NYEp870ZDKRyq+9PwIM5E5XmuP1vrFXp rWFAID90h74RldOmm/H36b6uEBfcW/SWdYITKRJa30boHFjp3aM8CgvwkuZqYyLt u1WTnYugSnO66Uwa95nMJjoahrFpYiN0rd03FlxtbyDp93B+ZRuuaNA3nMwOh/Xb 9a8pjTAa+K+GA+QIt9eBqPBcB5BpovZLPr8edTHofhp/KTI4WlRH82i+pbuiIwKb gHhaHGwqxpjWaQw6U4svO2F8VNfv2IyHAjCSuBJKQifhfLl8g1LXH10kcXvkTFV8 s+5ZPMitfhdf/ynDx9ULT492krHB68N+ -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:35 2025 by rpki-client