This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json) Hash identifier: OGqhtXdvkEbN6T9QPRIqxD3gzKfDiYd6aGulc2C8SYg= Subject key identifier: A4:2C:F4:60:8C:32:F7:73:57:39:20:60:40:62:FB:68:E3:18:D4:1A Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft Manifest number: 42 Signing time: Fri 19 Dec 2025 06:22:16 +0000 Manifest this update: Fri 19 Dec 2025 06:22:16 +0000 Manifest next update: Fri 26 Dec 2025 06:22:16 +0000 Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: dfuzGRykz9FnXjCEJ/07ur9Dqqi9Wky7zMICPFx0eXs=) 2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: eUyFtijE7ulYYeR6FE4HWasF4D8cnPdrEPGMIUGgb2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Validity Not Before: Dec 19 06:22:16 2025 GMT Not After : Dec 26 06:22:16 2025 GMT Subject: CN=6944ef18-1633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:01:4f:4d:02:1f:0b:de:43:7c:ae:f5:7e: e4:07:7a:ab:b1:05:4b:0b:27:9e:1e:5e:c4:9b:1b: 5b:80:59:da:36:af:b6:9b:6f:ba:b9:d7:80:f5:49: b2:ba:be:0f:68:39:73:aa:01:82:08:88:c9:c1:25: 1a:9c:60:52:91:f9:15:82:47:84:e6:14:80:17:ca: f5:6b:bc:cb:a2:49:7d:74:4c:de:38:e3:25:1e:cc: 8c:af:4c:f1:25:b2:4b:35:0d:09:ce:aa:a8:ec:3a: 67:e3:5e:0c:ee:3f:7e:86:5d:c7:fc:5d:e3:cf:07: dc:71:f8:bc:d5:b6:7b:31:37:4c:dc:cc:e2:04:e6: 26:a7:0f:dd:f6:e1:c0:34:2d:cd:6b:1c:25:d8:9d: 35:9c:86:0d:a9:7b:e5:a6:5e:72:1d:36:df:a6:a2: bc:48:31:42:b0:80:1c:97:e7:bd:0e:c6:5f:93:4a: 3a:bd:b0:30:3f:c5:0b:19:98:a4:ba:60:ae:12:d0: a5:25:85:e4:87:b5:27:be:3d:ea:00:68:67:ed:32: ee:a3:1d:3e:69:09:cb:c9:1a:3d:8a:ae:b8:15:8a: 0a:02:3d:2c:93:64:18:de:cd:40:a0:e9:d7:5e:31: 1f:1c:43:69:a6:ca:75:37:ab:5d:d8:00:4a:fe:a3: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2C:F4:60:8C:32:F7:73:57:39:20:60:40:62:FB:68:E3:18:D4:1A X509v3 Authority Key Identifier: keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:67:40:f4:26:6f:47:2f:5c:89:73:0a:04:50:f4:5e:25:27: 89:fc:95:bf:8e:99:4a:82:87:a4:34:81:83:59:22:50:7f:32: 8a:42:6d:79:e6:1d:ed:c4:95:a1:a6:11:d5:16:20:8f:5f:48: 11:00:65:3d:be:5f:1a:7a:d9:1f:ce:24:8e:9f:3e:0a:b3:97: 75:90:22:fe:c9:84:01:5d:7f:03:1f:e6:a4:5d:66:a8:9e:44: 61:f3:4c:2e:f7:fd:b7:30:67:e7:c9:22:79:77:bc:48:33:e5: 8f:a6:2f:08:08:ac:34:62:a2:79:eb:00:97:c9:a2:4f:a9:73: 26:cd:f7:14:c3:41:11:07:fc:ec:2e:fa:82:64:59:76:fd:81: 8e:b2:49:a0:77:c4:eb:02:25:e8:f0:e0:a0:18:c7:a9:50:92: 62:a6:03:60:8b:7a:a2:62:e6:c3:d9:66:d6:12:67:69:7b:99: 6c:cd:65:62:e2:6a:b6:7b:3b:0b:2a:74:64:0e:b8:e1:22:bc: 52:53:3c:9a:78:ce:66:ac:22:92:6c:de:b5:94:41:94:d6:e2: e4:33:11:e0:44:16:59:88:a7:e4:28:21:54:4a:81:e0:4f:92: c2:30:b3:4a:02:a4:1a:26:47:85:20:25:dc:6e:d5:02:d8:b2: db:ec:7b:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNDk3QkI3MjcxODI3OURCQ0M5ODVEQkE2RDM5QjM2NTY3 RjQ0RTdBQTAeFw0yNTEyMTkwNjIyMTZaFw0yNTEyMjYwNjIyMTZaMBgxFjAUBgNV BAMMDTY5NDRlZjE4LTE2MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBwAFPTQIfC95DfK71fuQHequxBUsLJ54eXsSbG1uAWdo2r7abb7q514D1SbK6 vg9oOXOqAYIIiMnBJRqcYFKR+RWCR4TmFIAXyvVrvMuiSX10TN444yUezIyvTPEl sks1DQnOqqjsOmfjXgzuP36GXcf8XePPB9xx+LzVtnsxN0zczOIE5ianD9324cA0 Lc1rHCXYnTWchg2pe+WmXnIdNt+morxIMUKwgByX570Oxl+TSjq9sDA/xQsZmKS6 YK4S0KUlheSHtSe+PeoAaGftMu6jHT5pCcvJGj2KrrgVigoCPSyTZBjezUCg6dde MR8cQ2mmynU3q13YAEr+o0KbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpCz0YIwy 93NXOSBgQGL7aOMY1BowHwYDVR0jBBgwFoAUSXu3JxgnnbzJhdum05s2Vn9E56ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0IyQ0VBN0Y2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1h1M0p4Z25uYnpKaGR1bTA1czJWbjlFNTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0IyQ0VBN0Y2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6 SmhkdW0wNXMyVm45RTU2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAERnQPQmb0cvXIlzCgRQ9F4lJ4n8lb+OmUqCh6Q0gYNZIlB/MopCbXnm He3ElaGmEdUWII9fSBEAZT2+Xxp62R/OJI6fPgqzl3WQIv7JhAFdfwMf5qRdZqie RGHzTC73/bcwZ+fJInl3vEgz5Y+mLwgIrDRionnrAJfJok+pcybN9xTDQREH/Owu +oJkWXb9gY6ySaB3xOsCJejw4KAYx6lQkmKmA2CLeqJi5sPZZtYSZ2l7mWzNZWLi arZ7OwsqdGQOuOEivFJTPJp4zmasIpJs3rWUQZTW4uQzEeBEFlmIp+QoIVRKgeBP ksIws0oCpBomR4UgJdxu1QLYstvse48= -----END CERTIFICATE-----Generated at Sat Dec 20 17:17:59 2025 by rpki-client