This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: Bh0iCT/EX4z65Q/ZFbOxDef2TL7LfHmN0ByBQCtkxIc= Subject key identifier: 52:CC:F8:7B:42:7A:90:A5:B0:DA:10:3C:6F:CC:C1:4D:25:48:B5:8E Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 2131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2C17 Signing time: Mon 22 Dec 2025 15:45:09 +0000 Manifest this update: Mon 22 Dec 2025 15:45:09 +0000 Manifest next update: Mon 29 Dec 2025 15:45:09 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: NaeSrKeWf4kY/OtuXac2kOG/SydwGIvgIBPkWy/0X/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8497 (0x2131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: Dec 22 15:45:09 2025 GMT Not After : Dec 29 15:45:09 2025 GMT Subject: CN=69496785-0925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:c8:a0:91:69:6e:41:c5:6f:a4:a1:4e:e2: c6:13:3b:2a:d0:9a:56:10:a7:42:b9:c2:42:e0:ec: 5a:f0:4a:53:5b:cf:2b:df:07:d7:fb:ac:0f:08:c7: 14:a2:a1:97:96:9e:a8:a8:34:dd:75:8c:4c:ee:fd: 43:ab:6f:e6:75:aa:d7:90:17:ec:34:9f:1a:38:39: b7:86:99:99:e5:5f:75:ac:88:a3:b8:76:19:5c:61: fb:4f:dc:11:2a:38:31:e6:62:d0:99:0a:a8:c6:88: 3e:d0:8c:ca:35:6a:b3:07:d4:69:cb:66:6e:e9:aa: 3a:22:6f:9a:4c:90:f5:88:75:cf:93:d6:f2:02:65: 69:5c:1a:18:65:a7:02:a4:31:f7:ba:ad:4a:a0:b9: 2e:56:5a:01:cd:b2:f2:a6:aa:38:70:9a:f5:e1:32: 85:35:0d:c8:5d:07:ab:aa:07:2c:37:0f:5f:c3:53: 98:35:79:f8:c1:4e:3f:f7:23:9b:71:22:05:25:19: 42:da:90:1f:d6:1d:37:56:5f:c0:45:d6:1f:4d:74: 4f:b8:0f:49:a7:0e:c1:0d:39:58:e3:ec:ce:99:37: 49:df:93:8d:ed:bd:80:63:28:b8:3c:fb:86:ea:d5: b1:c1:d0:ee:aa:11:6e:ae:ab:fb:25:57:60:46:9e: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CC:F8:7B:42:7A:90:A5:B0:DA:10:3C:6F:CC:C1:4D:25:48:B5:8E X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1b:6e:c9:f6:12:a3:68:4c:9d:a1:4a:aa:a4:61:26:df:c1: fb:03:f3:5f:1d:9f:9e:0d:13:98:d2:b7:77:4d:62:92:05:10: ee:8a:f9:91:0a:b1:12:41:80:98:89:7b:05:62:9a:5f:85:50: 46:b2:84:96:ec:74:d0:cb:38:a1:09:33:81:10:2e:69:93:81: 61:4a:bd:23:5b:78:a7:9a:b2:85:66:69:d0:ba:1b:b8:8f:74: 31:23:90:05:bd:39:0c:18:9f:a1:68:56:62:f2:47:86:02:4a: b3:56:99:a1:ae:6f:01:35:c5:61:d3:58:2b:34:cd:15:b2:84: b0:be:47:a9:37:e6:39:e3:eb:b7:75:25:83:89:1e:0f:64:7d: 5b:c6:42:53:3a:32:ab:c4:37:ec:d5:00:f4:8b:65:ee:26:ee: 4c:b7:14:94:0a:4b:19:04:40:18:49:72:af:ac:ca:37:ce:75: a2:ba:e2:8f:d0:5c:79:3c:7a:44:8f:37:d3:15:3f:17:40:46: 33:45:80:d0:4f:64:90:72:b7:74:27:00:32:b0:c8:7b:4a:be: 53:40:01:c0:e8:4b:72:95:a9:0d:5f:75:38:07:1f:85:8f:70: 63:0b:00:32:9d:3d:63:94:4b:23:6a:a2:4f:7d:0f:d2:2e:40: 2f:26:c9:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICITEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUxMjIyMTU0NTA5WhcNMjUxMjI5MTU0NTA5WjAYMRYwFAYD VQQDDA02OTQ5Njc4NS0wOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1w7IoJFpbkHFb6ShTuLGEzsq0JpWEKdCucJC4Oxa8EpTW88r3wfX+6wPCMcU oqGXlp6oqDTddYxM7v1Dq2/mdarXkBfsNJ8aODm3hpmZ5V91rIijuHYZXGH7T9wR Kjgx5mLQmQqoxog+0IzKNWqzB9Rpy2Zu6ao6Im+aTJD1iHXPk9byAmVpXBoYZacC pDH3uq1KoLkuVloBzbLypqo4cJr14TKFNQ3IXQerqgcsNw9fw1OYNXn4wU4/9yOb cSIFJRlC2pAf1h03Vl/ARdYfTXRPuA9Jpw7BDTlY4+zOmTdJ35ON7b2AYyi4PPuG 6tWxwdDuqhFurqv7JVdgRp51YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLM+HtC epClsNoQPG/MwU0lSLWOMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXG27J9hKjaEydoUqqpGEm38H7A/NfHZ+eDROY0rd3TWKSBRDuivmR CrESQYCYiXsFYppfhVBGsoSW7HTQyzihCTOBEC5pk4FhSr0jW3inmrKFZmnQuhu4 j3QxI5AFvTkMGJ+haFZi8keGAkqzVpmhrm8BNcVh01grNM0VsoSwvkepN+Y54+u3 dSWDiR4PZH1bxkJTOjKrxDfs1QD0i2XuJu5MtxSUCksZBEAYSXKvrMo3znWiuuKP 0Fx5PHpEjzfTFT8XQEYzRYDQT2SQcrd0JwAysMh7Sr5TQAHA6EtylakNX3U4Bx+F j3BjCwAynT1jlEsjaqJPfQ/SLkAvJskQ -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:41 2025 by rpki-client