This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json) Hash identifier: SSuxbmUt4R0cXixVWWEQ7HTNINiwyxMGqrp75U4MBqg= Subject key identifier: EC:9C:81:08:79:16:24:3B:6A:3F:EF:97:2F:16:00:F1:B8:6C:05:90 Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft Manifest number: 012D Signing time: Sun 21 Dec 2025 03:46:17 +0000 Manifest this update: Sun 21 Dec 2025 03:46:16 +0000 Manifest next update: Sun 28 Dec 2025 03:46:16 +0000 Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: HBodJZ7WnfIj0qZjiFQoI/cDsTA+IcMz7mflHPaHl0c=) 2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: b3uced97w9HX8eWf4q1QzAvxi1eeuc/tsrxa1EU++kg=) 3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: jYT3h3nuK8EuInDGgHZ314Lk8EIylHxKqFUTo50wOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B6FB, serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Validity Not Before: Dec 21 03:46:16 2025 GMT Not After : Dec 28 03:46:16 2025 GMT Subject: CN=69476d89-c6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:75:b5:67:b9:16:ff:d4:d2:59:a0:c6:54:b8: 57:80:8d:1b:09:e7:56:8e:47:76:dc:3c:0e:28:22: 74:66:b4:24:bb:70:0c:9f:23:21:8a:7d:e6:73:de: 3d:6a:3e:a5:e4:d6:9f:99:5f:8a:f0:f8:27:b4:04: cf:fb:fd:83:31:39:c2:8e:45:6a:14:ae:82:96:3e: 88:4d:c7:94:0a:65:98:53:51:f7:4c:41:4a:e5:04: 0b:2c:83:86:72:78:46:59:57:97:7a:28:60:84:cb: 59:d2:80:1b:5e:de:56:38:bf:0c:a9:8a:f0:ab:21: 55:d7:c3:45:6b:52:0f:fd:01:e7:71:a0:d0:8e:83: 97:10:6d:56:82:de:d6:75:46:b7:34:6e:78:b9:92: 4e:bb:15:d7:a3:42:e7:90:b2:1d:bc:be:cf:61:79: 34:28:81:d4:a9:e2:a6:f4:64:f5:94:2e:30:2b:43: b7:a4:84:63:c4:4c:5a:f5:5b:6f:c0:a5:8c:f8:6f: 55:aa:7b:29:96:bf:a6:75:60:e0:4b:01:d1:8f:34: 5a:bb:4c:d2:bb:d1:54:7c:16:c7:9c:2a:41:d8:72: 3a:b3:5f:a6:ba:ec:fe:df:4f:e9:21:07:ae:66:ce: bc:b4:98:a3:a7:d8:04:33:a0:8c:44:06:80:13:80: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9C:81:08:79:16:24:3B:6A:3F:EF:97:2F:16:00:F1:B8:6C:05:90 X509v3 Authority Key Identifier: keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ef:21:cb:3a:c1:4c:d0:2c:8b:86:bb:95:9a:55:39:90:03: bf:7a:5a:50:bb:e6:73:37:a5:bd:3b:23:03:a4:c2:9c:65:70: c0:7d:92:d3:3f:1d:fe:fe:3d:8c:3e:4c:02:69:22:2e:03:bf: 6f:18:26:a6:a4:be:05:fd:44:be:70:3a:f4:91:ec:da:ad:1f: 42:ae:b9:3e:a1:29:76:56:6a:ca:8f:12:d0:82:77:06:fb:13: a7:51:df:b5:bf:f8:48:e2:ba:34:a1:68:22:e3:9c:b9:37:4d: dc:e4:c5:ee:ee:2a:21:d5:4e:25:3d:b3:a6:f4:8f:32:fe:d6: d1:4d:ed:53:93:49:e3:61:e0:94:b5:12:19:12:52:71:48:cd: f4:6e:8b:29:03:6a:25:58:bd:ba:5a:67:63:37:d7:90:3c:8c: ad:1e:a3:07:01:33:5e:a5:ca:e5:5a:b6:ba:55:e1:c1:f3:21: db:b8:43:1a:3f:a2:7e:4d:26:19:24:8f:0a:be:1f:6c:74:af: 89:e7:91:a3:51:72:32:e7:81:4a:db:29:9e:f2:03:76:bf:77: 1f:54:c8:92:24:d0:ba:84:da:ec:f4:99:f9:93:09:be:63:48: 3c:94:78:62:82:c7:03:42:b6:50:a8:02:30:ae:cd:4a:fb:c6: 07:ee:d3:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI2RkIxMTAvBgNVBAUTKEFEMjM0RTNGMUVCQkFEQUQwMTlGRTA5QUZGRjcwRTgw NzVBRkRFMTcwHhcNMjUxMjIxMDM0NjE2WhcNMjUxMjI4MDM0NjE2WjAYMRYwFAYD VQQDDA02OTQ3NmQ4OS1jNmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XW1Z7kW/9TSWaDGVLhXgI0bCedWjkd23DwOKCJ0ZrQku3AMnyMhin3mc949 aj6l5NafmV+K8PgntATP+/2DMTnCjkVqFK6Clj6ITceUCmWYU1H3TEFK5QQLLIOG cnhGWVeXeihghMtZ0oAbXt5WOL8MqYrwqyFV18NFa1IP/QHncaDQjoOXEG1Wgt7W dUa3NG54uZJOuxXXo0LnkLIdvL7PYXk0KIHUqeKm9GT1lC4wK0O3pIRjxExa9Vtv wKWM+G9Vqnsplr+mdWDgSwHRjzRau0zSu9FUfBbHnCpB2HI6s1+muuz+30/pIQeu Zs68tJijp9gEM6CMRAaAE4A4cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOycgQh5 FiQ7aj/vly8WAPG4bAWQMB8GA1UdIwQYMBaAFK0jTj8eu62tAZ/gmv/3DoB1r94X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjZGQi9EOUNDOUVERTEx RjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3JhMEJuLUNhX19jT2dIV3Yz aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTTk9QeDY3cmEwQm4tQ2FfX2NPZ0hXdjNoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjZGQi9EOUNDOUVERTExRjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3Jh MEJuLUNhX19jT2dIV3YzaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE7yHLOsFM0CyLhruVmlU5kAO/elpQu+ZzN6W9OyMDpMKcZXDAfZLT Px3+/j2MPkwCaSIuA79vGCampL4F/US+cDr0kezarR9Crrk+oSl2VmrKjxLQgncG +xOnUd+1v/hI4ro0oWgi45y5N03c5MXu7ioh1U4lPbOm9I8y/tbRTe1Tk0njYeCU tRIZElJxSM30bospA2olWL26WmdjN9eQPIytHqMHATNepcrlWra6VeHB8yHbuEMa P6J+TSYZJI8Kvh9sdK+J55GjUXIy54FK2yme8gN2v3cfVMiSJNC6hNrs9Jn5kwm+ Y0g8lHhigscDQrZQqAIwrs1K+8YH7tNg -----END CERTIFICATE-----Generated at Mon Dec 22 12:27:31 2025 by rpki-client