This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json) Hash identifier: kzT7vumWnuNALjP+ZTX7JgOsQd6P3nCUHmCL+62w4Yg= Subject key identifier: 88:79:74:8F:76:9D:4D:AB:FA:2F:08:71:96:48:F8:18:C5:EC:2A:55 Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Certificate serial: 0F1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft Manifest number: 0F11 Signing time: Thu 18 Dec 2025 17:24:45 +0000 Manifest this update: Thu 18 Dec 2025 17:24:45 +0000 Manifest next update: Thu 25 Dec 2025 17:24:45 +0000 Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: R5cco4eEADe/6GtS9MAMHCOV9z7zqwK7RUKHcU7NBFA=) 2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: IptQh9J7jeiBWTQD/hPt8ei062oDoKw0nZ49KCuQKMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3866 (0xf1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Validity Not Before: Dec 18 17:24:45 2025 GMT Not After : Dec 25 17:24:45 2025 GMT Subject: CN=694438dd-a964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:f9:94:dc:54:a0:e8:78:1e:74:20:e5:4b: 5f:9f:d8:f2:42:b5:a2:ef:5d:d1:cc:f4:7f:2a:58: 03:83:2a:23:d2:1d:fd:29:eb:62:7e:84:de:07:66: 27:00:6c:af:b3:ee:97:75:e2:17:c9:7a:ce:bb:41: 98:9a:fc:ee:98:d0:7a:9c:e3:ab:1b:4d:3d:d5:55: 2b:82:a0:12:07:98:45:6c:dd:6b:a1:ba:63:95:0e: 01:f6:15:e4:4b:a1:a1:1d:e2:39:1b:d7:a5:de:e2: 72:cc:5e:5c:23:fa:d6:d0:8b:d1:0d:c1:18:04:b4: ca:dd:ac:95:0a:21:5a:e2:e7:c1:08:e7:94:36:55: ba:2c:d6:7c:cf:bf:55:89:cf:4a:0c:83:43:df:01: b3:24:8a:8e:2e:0b:9c:e7:26:ad:7a:b1:01:3b:76: e7:96:89:99:15:e1:29:73:8b:04:70:f5:99:97:9c: 57:23:90:1c:31:da:e2:5c:c6:ff:d3:79:68:23:aa: ae:89:f6:95:df:73:30:59:b6:93:ea:5d:72:79:bb: 0c:27:82:89:23:94:36:70:0b:49:53:28:01:df:46: ef:72:ab:99:34:7a:ab:0b:94:df:be:54:34:57:ba: 5d:49:30:16:bd:4e:4d:93:14:c9:68:0d:00:66:0c: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:79:74:8F:76:9D:4D:AB:FA:2F:08:71:96:48:F8:18:C5:EC:2A:55 X509v3 Authority Key Identifier: keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:11:01:f4:54:d5:55:21:42:c1:d9:c5:38:ac:be:74:5c:e7: 18:87:68:53:74:57:79:64:96:80:85:34:4c:ae:c5:a5:6b:e9: d1:21:6a:0a:6a:b7:05:5d:03:62:f5:72:f5:65:ca:c3:02:61: d0:ff:61:24:19:a7:32:e7:6b:b7:85:38:55:3c:0a:6c:58:9c: 8a:82:58:12:b0:3e:82:02:ab:fb:47:55:8c:f6:e2:8b:f7:f0: a3:d1:43:c2:3c:23:cf:86:3b:6d:bf:4e:9a:7a:51:d8:82:a2: 91:23:13:f8:b8:6c:4b:8a:f0:b7:d2:cd:51:f5:4b:ca:47:98: 5d:e4:32:c9:bc:5a:b5:54:87:da:0d:1f:7d:b9:34:ed:d9:ea: 20:65:af:96:6d:92:18:70:54:bc:43:87:72:61:cc:b4:e8:c3: bd:85:3e:df:6f:a6:cf:57:99:5f:29:8b:ce:73:6e:17:a0:b2: c3:98:36:cb:65:f0:4e:07:3c:4c:44:c0:93:f3:e4:63:3a:76: 6c:30:c5:f2:51:ca:67:ef:c2:96:9b:69:14:bf:a1:65:22:64: 26:cf:c3:60:aa:9c:80:8c:e9:c5:20:ce:d4:ba:b4:88:4b:df: 28:72:5c:62:39:fb:24:0e:43:92:0f:99:27:35:21:b0:fc:9a: e2:8b:fa:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0 NDk5NUIxRTAwHhcNMjUxMjE4MTcyNDQ1WhcNMjUxMjI1MTcyNDQ1WjAYMRYwFAYD VQQDDA02OTQ0MzhkZC1hOTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttH5lNxUoOh4HnQg5Utfn9jyQrWi713RzPR/KlgDgyoj0h39KetifoTeB2Yn AGyvs+6XdeIXyXrOu0GYmvzumNB6nOOrG0091VUrgqASB5hFbN1robpjlQ4B9hXk S6GhHeI5G9el3uJyzF5cI/rW0IvRDcEYBLTK3ayVCiFa4ufBCOeUNlW6LNZ8z79V ic9KDIND3wGzJIqOLguc5yaterEBO3bnlomZFeEpc4sEcPWZl5xXI5AcMdriXMb/ 03loI6quifaV33MwWbaT6l1yebsMJ4KJI5Q2cAtJUygB30bvcquZNHqrC5TfvlQ0 V7pdSTAWvU5NkxTJaA0AZgzA4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIh5dI92 nU2r+i8IcZZI+BjF7CpVMB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ R19tUWcyUjQ0WmxFbVZzZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9EQH0VNVVIULB2cU4rL50XOcYh2hTdFd5ZJaAhTRMrsWla+nRIWoK arcFXQNi9XL1ZcrDAmHQ/2EkGacy52u3hThVPApsWJyKglgSsD6CAqv7R1WM9uKL 9/Cj0UPCPCPPhjttv06aelHYgqKRIxP4uGxLivC30s1R9UvKR5hd5DLJvFq1VIfa DR99uTTt2eogZa+WbZIYcFS8Q4dyYcy06MO9hT7fb6bPV5lfKYvOc24XoLLDmDbL ZfBOBzxMRMCT8+RjOnZsMMXyUcpn78KWm2kUv6FlImQmz8NgqpyAjOnFIM7UurSI S98oclxiOfskDkOSD5knNSGw/Jrii/qW -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:07 2025 by rpki-client