This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: P4kpmGuXrNqzUj2v4iKH6kSF+oIgM1GHbcJUH87Jw7A= Subject key identifier: 7E:9D:A4:E4:21:44:56:8E:88:C6:28:10:3E:D7:F6:4D:1C:00:B1:80 Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 01B4 Signing time: Fri 19 Dec 2025 02:49:35 +0000 Manifest this update: Fri 19 Dec 2025 02:49:34 +0000 Manifest next update: Fri 26 Dec 2025 02:49:34 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: 3Od+eWKemaQ25cpSQfCs7AYQQjQHYZJU5SEEQvfzk2c=) 2: C93C3BD2BF1211F0825A8B67C4F9AE02.roa (hash: HtRntKRfaXLAooX4kFwapJHzhkv5FlOJ2XUK109fP9o=) 3: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: vcu54xel+Jd2PL9HStWqqILbr2WjpCxq0YzZdKgizr8=) 4: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: tV1N8F94Z6M1hB65b9pOLkNRnS2hcjPHIFAbKHyneRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Dec 19 02:49:34 2025 GMT Not After : Dec 26 02:49:34 2025 GMT Subject: CN=6944bd3e-ac7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:29:d4:e8:7e:20:1b:f7:07:87:6c:a1:f3: 89:c1:d6:ed:c4:14:0d:df:0e:b9:f6:a8:4c:ed:86: a3:6c:8e:cc:f2:b6:a6:40:f1:16:c3:52:b3:02:9b: 2a:87:03:e3:62:74:ee:9f:c5:7e:18:6d:87:3a:de: c9:cb:8e:39:9e:a5:80:e2:0d:a9:42:c5:09:10:6c: 2b:90:97:af:ff:2b:4d:cf:a5:92:97:73:5a:2c:1c: 5a:66:93:a1:e5:3e:81:9d:bc:6d:48:c4:ee:ad:e3: a5:e4:ff:dc:b4:71:ea:46:82:03:a1:aa:89:9e:23: 8a:2c:fa:cd:e1:39:4a:d0:5b:17:e3:52:a7:7e:a2: 59:d6:ec:da:72:13:61:e3:1d:e0:33:43:a8:23:54: 7b:29:d3:c6:4c:90:cf:8c:b7:e8:33:6b:ee:d8:5f: ec:9a:d1:ec:81:bc:3c:3e:30:15:ed:25:ce:f8:fb: a1:7e:11:51:17:4d:29:28:54:56:d2:49:63:76:1a: e7:f3:3f:9b:22:6a:32:b2:e7:3e:65:58:58:e7:7c: 28:65:83:cb:04:67:5f:97:c9:bd:ef:f3:94:d9:96: 83:32:cb:cb:ce:4d:5e:58:09:a2:e0:7b:90:11:05: 34:e8:69:61:8f:0b:1c:14:a8:f4:d9:52:75:8b:7c: 7a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9D:A4:E4:21:44:56:8E:88:C6:28:10:3E:D7:F6:4D:1C:00:B1:80 X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f0:07:31:e7:ba:46:35:5d:5b:4b:ba:ab:1e:41:5d:19:99: 55:30:29:a6:71:0e:93:14:0f:41:c6:b0:dc:4e:fd:2f:88:1c: 42:2a:57:62:6c:85:dd:2e:b5:91:e4:92:97:b3:c4:34:00:6a: a5:03:14:eb:5c:05:10:c2:74:a2:5f:e7:17:31:d6:bd:90:25: f6:07:4d:13:ca:fb:62:32:ca:7f:5b:56:ed:78:55:2b:c4:51: aa:bf:3a:5b:f4:7f:c0:38:6a:1e:28:5d:ad:40:7d:5e:0d:cb: 55:8b:9f:9c:99:fb:e7:5c:74:e1:e2:81:44:d1:8e:c3:82:c8: d4:45:9d:d0:95:be:76:93:43:80:4c:4a:41:a5:b2:7f:d1:b1: 02:2e:7c:84:bf:fa:02:ee:5a:c8:91:8d:6a:74:a1:67:ba:c9: ff:68:26:ec:f7:7d:83:c6:83:2e:7d:5e:a1:bd:90:15:41:ce: 0e:7b:b6:7c:24:1b:26:2b:b2:0a:e5:76:bd:26:08:98:3d:43: 4f:e4:7d:c3:24:58:17:cb:ea:15:04:2e:07:8f:86:05:8f:7d: 32:50:8d:a1:2f:37:8f:1a:49:20:9f:d0:e3:7e:60:d4:80:5d: e1:01:c5:24:76:bf:79:4f:e1:c0:fc:c6:0a:ef:36:6f:c3:7b: d9:07:ee:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjUxMjE5MDI0OTM0WhcNMjUxMjI2MDI0OTM0WjAYMRYwFAYD VQQDDA02OTQ0YmQzZS1hYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXop1Oh+IBv3B4dsofOJwdbtxBQN3w659qhM7YajbI7M8ramQPEWw1KzApsq hwPjYnTun8V+GG2HOt7Jy445nqWA4g2pQsUJEGwrkJev/ytNz6WSl3NaLBxaZpOh 5T6BnbxtSMTureOl5P/ctHHqRoIDoaqJniOKLPrN4TlK0FsX41KnfqJZ1uzachNh 4x3gM0OoI1R7KdPGTJDPjLfoM2vu2F/smtHsgbw8PjAV7SXO+PuhfhFRF00pKFRW 0kljdhrn8z+bImoysuc+ZVhY53woZYPLBGdfl8m97/OU2ZaDMsvLzk1eWAmi4HuQ EQU06GlhjwscFKj02VJ1i3x6HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6dpOQh RFaOiMYoED7X9k0cALGAMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH8Acx57pGNV1bS7qrHkFdGZlVMCmmcQ6TFA9BxrDcTv0viBxCKldi bIXdLrWR5JKXs8Q0AGqlAxTrXAUQwnSiX+cXMda9kCX2B00TyvtiMsp/W1bteFUr xFGqvzpb9H/AOGoeKF2tQH1eDctVi5+cmfvnXHTh4oFE0Y7DgsjURZ3Qlb52k0OA TEpBpbJ/0bECLnyEv/oC7lrIkY1qdKFnusn/aCbs932DxoMufV6hvZAVQc4Oe7Z8 JBsmK7IK5Xa9JgiYPUNP5H3DJFgXy+oVBC4Hj4YFj30yUI2hLzePGkkgn9DjfmDU gF3hAcUkdr95T+HA/MYK7zZvw3vZB+6P -----END CERTIFICATE-----Generated at Sat Dec 20 20:56:38 2025 by rpki-client