This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: 4WHyIxPr6yFSyJ4MEKgMRjpfpn39gaT+/E6g9WrHhdU= Subject key identifier: 7D:A4:79:6F:7F:C7:33:65:FA:02:AF:C3:A9:3E:0F:88:4E:CB:73:4C Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 02C8 Signing time: Sun 21 Dec 2025 00:37:11 +0000 Manifest this update: Sun 21 Dec 2025 00:37:10 +0000 Manifest next update: Sun 28 Dec 2025 00:37:10 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: cUva7E+anFqin0vzHBixTI3tuE/hoG+ryy3R8He8Wds=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Dec 21 00:37:10 2025 GMT Not After : Dec 28 00:37:10 2025 GMT Subject: CN=69474137-cfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:88:24:bc:d0:b6:f8:78:d5:a1:ae:bb:20:c1: 6e:6a:54:59:2a:a4:54:ad:e7:e3:e9:77:88:07:df: 7d:49:f3:8a:36:37:a9:a9:c0:5c:be:42:b6:c5:58: e6:09:1d:7a:7e:fb:73:1c:2f:88:a8:d5:4c:8c:20: b2:57:2a:2d:32:98:c9:97:68:43:b7:00:49:e1:0f: 3f:9a:a3:55:77:65:be:15:a8:fd:18:7c:e7:81:c2: 9c:ba:03:21:ae:94:d6:d1:6f:01:3a:9e:64:4c:4b: 86:80:07:c7:d2:fe:dc:44:58:40:26:b4:b6:cc:02: a9:1e:31:4f:ee:4b:e4:06:17:21:30:88:59:bd:c2: 88:ac:9b:7f:c2:3b:b0:9a:58:7e:32:bb:31:26:8d: 98:55:08:21:c9:04:1d:98:05:65:d5:0d:c9:df:40: 64:61:89:d6:0a:8b:1b:f8:0e:c1:76:f7:74:a0:56: d9:a9:e3:84:90:67:56:bb:e5:4a:59:a5:92:f8:5d: 8f:00:63:49:82:91:03:bb:e9:0d:ae:55:5d:56:10: d2:88:d5:d3:75:14:14:71:ad:ce:46:7e:dc:11:b8: 05:ac:a4:c9:3b:7e:c5:6f:1c:b0:72:d1:dd:11:94: bc:9b:6b:f4:47:92:28:b7:df:a7:79:1c:12:32:ff: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A4:79:6F:7F:C7:33:65:FA:02:AF:C3:A9:3E:0F:88:4E:CB:73:4C X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:56:53:51:fc:5f:1f:5e:b9:b7:03:70:c2:4d:a2:72:38:2a: f9:ea:7c:db:cf:8d:09:3b:ee:2a:ef:a2:b0:47:41:cc:38:e6: 81:ff:dd:62:75:ff:83:3f:ea:60:41:2a:52:b3:3c:fc:6f:3d: 79:d7:87:fa:8b:63:a0:e7:56:cc:cd:8e:78:c6:3d:77:11:b7: ac:b5:d6:b4:8e:fe:ef:47:89:d7:fd:81:9c:c2:25:08:90:84: 53:2d:96:db:b3:56:77:ff:8a:f4:6b:89:79:11:90:12:55:f6: 26:32:81:e0:92:d7:61:8d:13:4f:47:5d:73:53:32:52:0b:67: 36:52:30:62:cc:d0:a3:12:dc:b7:8c:f1:d1:24:2f:eb:3a:31: 30:bd:2a:8f:59:e8:06:d9:93:b2:d2:a5:57:ed:cf:3d:25:58: e8:c2:f6:b0:a7:cd:36:74:75:b7:31:b4:59:3a:88:8d:48:4c: 40:3d:c9:bd:1d:62:3b:3c:f6:15:66:62:91:bb:6f:72:3e:69: e8:c7:63:c0:2f:6b:9c:34:8a:de:c2:3d:57:82:83:0f:3d:18: 2f:21:1c:fe:a0:cc:8e:fd:d6:48:b7:1c:ce:de:b2:be:42:b2: d8:0d:7e:f7:f0:7a:ba:9e:d3:4a:39:b2:e0:98:3c:17:ca:e4: b8:84:c6:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUxMjIxMDAzNzEwWhcNMjUxMjI4MDAzNzEwWjAYMRYwFAYD VQQDDA02OTQ3NDEzNy1jZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhYgkvNC2+HjVoa67IMFualRZKqRUrefj6XeIB999SfOKNjepqcBcvkK2xVjm CR16fvtzHC+IqNVMjCCyVyotMpjJl2hDtwBJ4Q8/mqNVd2W+Faj9GHzngcKcugMh rpTW0W8BOp5kTEuGgAfH0v7cRFhAJrS2zAKpHjFP7kvkBhchMIhZvcKIrJt/wjuw mlh+MrsxJo2YVQghyQQdmAVl1Q3J30BkYYnWCosb+A7Bdvd0oFbZqeOEkGdWu+VK WaWS+F2PAGNJgpEDu+kNrlVdVhDSiNXTdRQUca3ORn7cEbgFrKTJO37FbxywctHd EZS8m2v0R5Iot9+neRwSMv82fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2keW9/ xzNl+gKvw6k+D4hOy3NMMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIVlNR/F8fXrm3A3DCTaJyOCr56nzbz40JO+4q76KwR0HMOOaB/91i df+DP+pgQSpSszz8bz1514f6i2Og51bMzY54xj13Ebestda0jv7vR4nX/YGcwiUI kIRTLZbbs1Z3/4r0a4l5EZASVfYmMoHgktdhjRNPR11zUzJSC2c2UjBizNCjEty3 jPHRJC/rOjEwvSqPWegG2ZOy0qVX7c89JVjowvawp802dHW3MbRZOoiNSExAPcm9 HWI7PPYVZmKRu29yPmnox2PAL2ucNIrewj1XgoMPPRgvIRz+oMyO/dZItxzO3rK+ QrLYDX738Hq6ntNKObLgmDwXyuS4hMZ3 -----END CERTIFICATE-----Generated at Mon Dec 22 20:46:54 2025 by rpki-client