This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: v9+eVNFzKiM2InpZJgQYd/8uyr710C14/hvVAjfydv8= Subject key identifier: 57:1E:52:1B:FA:D8:AA:CC:89:DC:A0:46:61:5E:29:6E:A5:6F:A0:2E Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0D30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0D13 Signing time: Sat 20 Dec 2025 17:45:07 +0000 Manifest this update: Sat 20 Dec 2025 17:45:07 +0000 Manifest next update: Sat 27 Dec 2025 17:45:07 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: fuZEEa6rxY94zVQYt8sHHADK6ToFd/IUtYioHOGb03w=) 2: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE=) 3: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: wRhoUuLabNYzTY9DDaSK06ADTxBJOvjSTEtu7/sVqes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3376 (0xd30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Dec 20 17:45:07 2025 GMT Not After : Dec 27 17:45:07 2025 GMT Subject: CN=6946e0a3-d3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:e0:d9:08:24:bc:b5:59:81:de:2e:34:63: 88:52:33:b1:69:2c:55:a3:0c:e8:96:fb:fa:38:d6: 5b:88:1d:f2:5a:76:e9:fe:ee:2f:47:b8:04:b2:f7: 45:5d:d8:da:e2:cc:24:c4:8a:1e:f9:e4:89:f9:f1: a4:eb:ab:54:78:4b:e8:7e:45:fa:4e:4f:a9:35:25: 96:34:7c:c1:62:fe:b1:d3:dc:18:1e:b9:f7:84:d7: 9f:a3:44:63:80:fb:40:6e:8d:bb:13:64:60:c4:67: 84:f6:47:b4:4d:a3:b8:53:28:db:42:0e:7c:a5:c3: 7c:89:6d:5d:99:1c:06:1b:c9:0e:4e:45:44:ae:9d: 96:9b:cd:9a:12:ca:af:21:3b:47:8f:03:dc:25:6f: 1c:0f:84:6f:39:de:9a:4b:02:c1:0c:c6:36:09:e9: b9:15:2a:f0:15:fc:06:50:6b:9e:c6:b7:2f:2f:fe: f7:06:3d:06:c1:47:78:4f:27:e0:f3:5c:de:47:7f: d5:8c:67:30:b4:60:f7:f8:ef:de:3f:e8:df:20:47: 39:4e:2b:ec:00:51:1c:8c:37:8a:a5:ec:6e:26:9d: 26:95:f8:d1:2d:45:15:fa:b0:b5:84:26:2f:65:ce: 6d:18:dc:5b:aa:cf:48:de:47:4d:97:fd:02:59:84: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1E:52:1B:FA:D8:AA:CC:89:DC:A0:46:61:5E:29:6E:A5:6F:A0:2E X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:65:9a:c1:5b:15:cb:ba:f6:53:c1:a7:3f:ca:73:6f:15:e7: 80:8c:fa:cd:ef:b3:46:a2:b0:35:7e:4a:74:94:96:13:92:a8: 33:d9:8b:33:20:15:be:6b:51:53:5e:be:61:e6:ed:17:79:3c: b4:7e:74:49:0b:68:f4:53:5b:e5:b6:7f:bf:f1:45:4c:e3:2c: 71:1b:b0:e3:73:20:5a:a7:fb:7f:08:88:92:8c:7d:50:57:fe: 39:38:98:c5:a6:e8:1d:4c:ba:b0:a9:99:d2:3d:1e:a3:da:b2: 19:4b:55:47:de:1f:b5:e5:01:0a:ca:48:8a:0b:44:29:41:f1: 43:18:c7:c4:5b:02:82:1c:e7:33:0d:f5:15:20:f9:6a:25:b4: 32:46:fb:a5:84:d6:a9:8c:b6:f4:ea:36:21:b0:6f:10:47:75: 83:d1:46:91:62:44:2e:ae:7e:38:71:39:17:9c:15:40:32:6f: d2:4f:4d:44:18:48:77:38:14:2b:79:e7:c6:83:74:98:2f:b6: d8:f4:fd:db:89:22:61:66:18:a7:91:73:6d:00:d9:a4:e7:fc: 01:af:02:5e:fb:14:73:52:83:22:1c:76:ae:a1:c1:d5:8f:9e: 63:88:a0:c1:c8:a0:a1:f5:32:2b:44:21:a5:9c:90:8e:32:e2: 6a:c1:8b:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUxMjIwMTc0NTA3WhcNMjUxMjI3MTc0NTA3WjAYMRYwFAYD VQQDDA02OTQ2ZTBhMy1kM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP7g2QgkvLVZgd4uNGOIUjOxaSxVowzolvv6ONZbiB3yWnbp/u4vR7gEsvdF Xdja4swkxIoe+eSJ+fGk66tUeEvofkX6Tk+pNSWWNHzBYv6x09wYHrn3hNefo0Rj gPtAbo27E2RgxGeE9ke0TaO4UyjbQg58pcN8iW1dmRwGG8kOTkVErp2Wm82aEsqv ITtHjwPcJW8cD4RvOd6aSwLBDMY2Cem5FSrwFfwGUGuexrcvL/73Bj0GwUd4Tyfg 81zeR3/VjGcwtGD3+O/eP+jfIEc5TivsAFEcjDeKpexuJp0mlfjRLUUV+rC1hCYv Zc5tGNxbqs9I3kdNl/0CWYR3ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFceUhv6 2KrMidygRmFeKW6lb6AuMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoZZrBWxXLuvZTwac/ynNvFeeAjPrN77NGorA1fkp0lJYTkqgz2Ysz IBW+a1FTXr5h5u0XeTy0fnRJC2j0U1vltn+/8UVM4yxxG7DjcyBap/t/CIiSjH1Q V/45OJjFpugdTLqwqZnSPR6j2rIZS1VH3h+15QEKykiKC0QpQfFDGMfEWwKCHOcz DfUVIPlqJbQyRvulhNapjLb06jYhsG8QR3WD0UaRYkQurn44cTkXnBVAMm/ST01E GEh3OBQreefGg3SYL7bY9P3biSJhZhinkXNtANmk5/wBrwJe+xRzUoMiHHauocHV j55jiKDByKCh9TIrRCGlnJCOMuJqwYs7 -----END CERTIFICATE-----Generated at Mon Dec 22 09:34:31 2025 by rpki-client