This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft File: SGy4Fr46XgPLcncpiKDeDqlyzao.mft (raw, json) Hash identifier: 0PliIZc1N++V0c4dke+Thmi8EGLwXGtaATyD4VeC6j8= Subject key identifier: 46:CF:21:1B:E8:B7:AD:4C:9E:A3:B3:DA:A6:05:D0:E2:62:B5:81:4C Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA Certificate issuer: /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft Manifest number: 29 Signing time: Tue 23 Dec 2025 06:29:59 +0000 Manifest this update: Tue 23 Dec 2025 06:29:59 +0000 Manifest next update: Tue 30 Dec 2025 06:29:59 +0000 Files and hashes: 1: SGy4Fr46XgPLcncpiKDeDqlyzao.crl (hash: Q4bJVBYpzSkUn4+rioAq2IrkOEX0AjnkuwnE7y+eCQ4=) 2: 4AF261A4A27811F0898CD81DC4F9AE02.roa (hash: gfhnOPzDyM+Fg9J0TvNJzwIQWU3jT5AWtZ4rTSQDxgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Validity Not Before: Dec 23 06:29:59 2025 GMT Not After : Dec 30 06:29:59 2025 GMT Subject: CN=694a36e7-efb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:0c:c2:46:3c:1b:f4:33:ae:b4:82:94:85: 7d:d5:a6:26:76:0f:e9:23:49:8c:92:0c:3e:b0:41: d2:f8:43:d3:af:a3:40:f8:0a:19:3a:0c:95:af:73: a8:35:86:2f:76:46:35:3b:5b:7f:1d:0d:48:8f:cc: 25:f3:62:e1:bd:d1:cd:0e:1a:45:77:49:d8:f4:fc: 70:52:f1:09:64:35:88:f4:51:ce:e1:ea:72:16:6f: 81:89:32:b5:50:8a:b2:f8:ea:67:b2:3c:de:67:cc: 88:4c:c0:e2:4a:0b:57:14:c1:6a:c8:24:80:87:e8: a0:dc:82:1a:45:57:be:c3:d1:dd:bc:ab:87:63:1a: 70:f0:bb:e4:22:e6:4d:06:6d:33:74:78:56:2c:ad: 67:b0:1a:3a:89:ce:5e:8b:72:11:07:83:41:a8:22: 13:9d:ee:3c:7e:4f:f1:24:df:86:e9:57:ee:1b:8f: e0:dd:5c:cf:55:a5:71:30:70:7f:60:f1:fc:af:14: 84:4a:f1:98:f7:44:fb:53:e7:b0:a8:62:3c:13:b6: e1:9a:6d:12:52:35:3a:76:e1:22:bd:31:1b:15:77: 3d:89:53:e8:fe:cd:76:2a:23:72:22:6a:ec:fa:a9: 88:9a:6c:d9:52:87:54:77:65:f5:4c:9b:3a:e2:23: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CF:21:1B:E8:B7:AD:4C:9E:A3:B3:DA:A6:05:D0:E2:62:B5:81:4C X509v3 Authority Key Identifier: keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:91:8f:b0:65:40:21:11:8a:b1:b3:33:9b:59:7e:25:a5:c1: d1:b4:73:b6:bc:41:b8:88:c5:cd:38:63:de:1c:e9:cf:bf:aa: c9:c1:57:3d:49:42:58:0b:6f:b2:4c:b9:a7:3f:83:c0:0e:d0: e8:29:e6:e3:fc:00:67:59:c1:56:f0:54:69:97:f9:89:19:be: 3a:96:b2:7e:33:26:65:44:ab:f2:07:ed:a1:a0:95:86:02:10: 56:f0:f4:76:73:07:e7:0b:27:2a:bd:bd:f8:ba:ba:59:42:c7: 8f:73:df:d4:f9:36:9f:9b:b9:25:23:b3:2b:70:f9:ca:ad:6a: bd:be:41:a8:f1:97:86:82:de:12:c2:41:18:83:b5:22:ed:18: d3:79:0f:07:88:ad:be:e1:12:ee:d6:fe:10:4f:29:fc:0d:2c: ea:bf:55:8a:e0:dc:f3:47:83:db:6b:72:2a:b7:93:ef:92:22: d5:51:e1:43:65:44:88:4d:d5:5a:eb:46:8a:8d:ec:c6:30:79: 79:93:56:06:a4:e9:4d:d5:78:90:3f:f9:3b:36:31:ab:a2:00: 4f:65:3f:b1:e9:82:6d:c9:4d:75:d4:25:c9:69:27:50:6c:a6: f4:35:21:e0:04:2c:21:e7:b8:47:2a:3b:1a:3a:d0:2a:9c:59: ba:08:32:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzI1RjExMC8GA1UEBRMoNDg2Q0I4MTZCRTNBNUUwM0NCNzI3NzI5ODhBMERFMEVB OTcyQ0RBQTAeFw0yNTEyMjMwNjI5NTlaFw0yNTEyMzAwNjI5NTlaMBgxFjAUBgNV BAMMDTY5NGEzNmU3LWVmYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXLgzCRjwb9DOutIKUhX3VpiZ2D+kjSYySDD6wQdL4Q9Ovo0D4Chk6DJWvc6g1 hi92RjU7W38dDUiPzCXzYuG90c0OGkV3Sdj0/HBS8QlkNYj0Uc7h6nIWb4GJMrVQ irL46meyPN5nzIhMwOJKC1cUwWrIJICH6KDcghpFV77D0d28q4djGnDwu+Qi5k0G bTN0eFYsrWewGjqJzl6LchEHg0GoIhOd7jx+T/Ek34bpV+4bj+DdXM9VpXEwcH9g 8fyvFIRK8Zj3RPtT57CoYjwTtuGabRJSNTp24SK9MRsVdz2JU+j+zXYqI3Iiauz6 qYiabNlSh1R3ZfVMmzriI7L9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURs8hG+i3 rUyeo7PapgXQ4mK1gUwwHwYDVR0jBBgwFoAUSGy4Fr46XgPLcncpiKDeDqlyzaow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDMjVGL0ZDMUZCRTkyQTI3 NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQTGNuY3BpS0RlRHFseXph by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0d5NEZyNDZYZ1BMY25jcGlLRGVEcWx5emFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD MjVGL0ZDMUZCRTkyQTI3NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQ TGNuY3BpS0RlRHFseXphby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGyRj7BlQCERirGzM5tZfiWlwdG0c7a8QbiIxc04Y94c6c+/qsnBVz1J QlgLb7JMuac/g8AO0Ogp5uP8AGdZwVbwVGmX+YkZvjqWsn4zJmVEq/IH7aGglYYC EFbw9HZzB+cLJyq9vfi6ullCx49z39T5Np+buSUjsytw+cqtar2+Qajxl4aC3hLC QRiDtSLtGNN5DweIrb7hEu7W/hBPKfwNLOq/VYrg3PNHg9trciq3k++SItVR4UNl RIhN1VrrRoqN7MYweXmTVgak6U3VeJA/+Ts2MauiAE9lP7Hpgm3JTXXUJclpJ1Bs pvQ1IeAELCHnuEcqOxo60CqcWboIMhY= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:33 2025 by rpki-client