This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json) Hash identifier: l6HLE/gEAotJoko/IvNsle0Klv37hYSuPPAwBqngzpc= Subject key identifier: 71:E3:34:0F:D7:CA:82:5B:DC:CA:70:2A:69:B8:71:AC:A1:40:4B:9B Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft Manifest number: 01FA Signing time: Tue 23 Dec 2025 01:30:29 +0000 Manifest this update: Tue 23 Dec 2025 01:30:28 +0000 Manifest next update: Tue 30 Dec 2025 01:30:28 +0000 Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: 5vVmxYBROtTjDY7rEQYoAmQ/IfY/mvh9pnl0w/yhACc=) 2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: wYBYO6Jcla4SoILvK2NaVJIBHB4Ha52WP5v+I/ZxS8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0A8, serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Validity Not Before: Dec 23 01:30:28 2025 GMT Not After : Dec 30 01:30:28 2025 GMT Subject: CN=6949f0b5-cf67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:32:ec:e5:14:70:b5:28:11:1d:53:93:41: 94:8a:d0:4a:71:01:54:88:13:8b:f2:7b:3f:0b:4c: fe:ff:a7:03:9b:8f:f1:74:fe:f0:f3:1b:3f:a5:72: 72:ac:61:99:44:42:25:64:26:bc:5b:39:33:f2:f6: 16:1e:ca:86:be:76:58:de:d9:42:46:1c:44:ce:23: 27:00:ba:0b:f5:05:f3:8a:ff:27:78:4a:e4:ce:4c: ae:70:57:32:67:e3:33:8b:47:54:b9:ba:7b:1c:f7: 44:f0:d9:89:62:ee:83:04:6c:da:04:78:07:eb:a8: 81:7f:3d:38:0f:1e:40:61:6e:14:05:a6:5d:7a:77: 24:99:ff:84:fa:f8:62:ad:12:98:d9:ed:4d:38:c9: a3:94:5f:64:59:96:ae:0f:e5:b6:4e:ec:38:ed:aa: c4:9c:13:64:07:16:66:2e:8c:77:0c:ec:80:ae:ae: 08:fd:f2:4a:b8:2e:d1:67:9c:57:0b:7b:65:de:89: b5:40:7f:88:5a:84:8b:cb:df:91:a5:bc:a5:13:d7: ab:45:01:39:99:f6:c3:9e:f5:f0:a7:05:a0:0e:56: 59:dc:e3:ae:1b:39:b3:a3:0c:07:91:33:21:43:d6: 1b:0a:ef:5a:0b:37:46:66:ce:c5:54:43:fa:c4:6a: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E3:34:0F:D7:CA:82:5B:DC:CA:70:2A:69:B8:71:AC:A1:40:4B:9B X509v3 Authority Key Identifier: keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:60:bc:d4:1b:5b:d4:80:67:9c:c4:b6:e2:a9:52:94:f1:8d: a1:b1:97:e6:38:8f:43:25:16:33:18:9b:e0:51:ad:ab:04:b7: 18:4b:f4:24:d6:89:0d:29:28:97:c9:a6:21:5e:4a:90:b9:b6: 61:99:f7:f4:b9:72:09:c5:a7:83:a2:bf:6d:c7:72:c4:c4:81: 26:27:a2:1e:9d:91:bb:d7:35:f8:40:50:f0:04:dc:ed:36:4e: 9d:e1:88:2d:29:83:a2:9e:bf:10:a6:1b:67:84:91:35:0c:6d: 0e:e8:9a:25:5a:a5:b4:1d:b5:bb:c1:8d:3c:57:f9:a9:4b:1c: 7b:22:3c:22:1c:3b:db:12:e3:9b:ca:1c:87:e4:55:b2:a7:5f: f9:d3:6a:52:fb:45:52:a5:99:d0:17:2d:1f:ed:41:4c:cd:e6: 6e:3a:06:3b:b4:d1:09:c5:93:b5:44:4a:15:df:31:e5:ab:56: ea:5b:ac:ca:7c:72:d1:b2:a5:21:3b:6b:ec:f0:30:f7:81:7f: 2a:97:78:36:f0:c3:0b:d6:11:1e:d2:04:b3:be:51:2c:d3:af: cb:21:ad:54:41:d5:2c:87:aa:b4:b4:49:a2:8a:f9:f7:7f:14: 47:95:6e:47:1d:82:fa:2d:c4:ca:cd:ce:85:9c:97:92:83:aa: 00:70:b0:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwQTgxMTAvBgNVBAUTKDRBNkNENjczMTMxNUEyMzRCMEY0OTZDNTczQzkwRTEy M0M5Rjk0QUUwHhcNMjUxMjIzMDEzMDI4WhcNMjUxMjMwMDEzMDI4WjAYMRYwFAYD VQQDDA02OTQ5ZjBiNS1jZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCMy7OUUcLUoER1Tk0GUitBKcQFUiBOL8ns/C0z+/6cDm4/xdP7w8xs/pXJy rGGZREIlZCa8Wzkz8vYWHsqGvnZY3tlCRhxEziMnALoL9QXziv8neErkzkyucFcy Z+Mzi0dUubp7HPdE8NmJYu6DBGzaBHgH66iBfz04Dx5AYW4UBaZdenckmf+E+vhi rRKY2e1NOMmjlF9kWZauD+W2Tuw47arEnBNkBxZmLox3DOyArq4I/fJKuC7RZ5xX C3tl3om1QH+IWoSLy9+RpbylE9erRQE5mfbDnvXwpwWgDlZZ3OOuGzmzowwHkTMh Q9YbCu9aCzdGZs7FVEP6xGrWDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHjNA/X yoJb3MpwKmm4cayhQEubMB8GA1UdIwQYMBaAFEps1nMTFaI0sPSWxXPJDhI8n5Su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBBOC8wNUM5MjdFMkQ3 NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9qU3c5SmJGYzhrT0VqeWZs SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NteldjeE1Wb2pTdzlKYkZjOGtPRWp5ZmxLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBBOC8wNUM5MjdFMkQ3NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9q U3c5SmJGYzhrT0VqeWZsSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdYLzUG1vUgGecxLbiqVKU8Y2hsZfmOI9DJRYzGJvgUa2rBLcYS/Qk 1okNKSiXyaYhXkqQubZhmff0uXIJxaeDor9tx3LExIEmJ6IenZG71zX4QFDwBNzt Nk6d4YgtKYOinr8QphtnhJE1DG0O6JolWqW0HbW7wY08V/mpSxx7IjwiHDvbEuOb yhyH5FWyp1/502pS+0VSpZnQFy0f7UFMzeZuOgY7tNEJxZO1REoV3zHlq1bqW6zK fHLRsqUhO2vs8DD3gX8ql3g28MML1hEe0gSzvlEs06/LIa1UQdUsh6q0tEmiivn3 fxRHlW5HHYL6LcTKzc6FnJeSg6oAcLBl -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:48 2025 by rpki-client