This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: jEaCmyOVOg5iOQmZY/v+p6kX/NCqCWpsEhQAa75bINs= Subject key identifier: A2:FF:6D:5B:A0:21:58:24:81:D6:8D:66:00:DD:2F:6A:9A:4C:96:BE Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0D32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0D15 Signing time: Wed 24 Dec 2025 17:45:31 +0000 Manifest this update: Wed 24 Dec 2025 17:45:31 +0000 Manifest next update: Wed 31 Dec 2025 17:45:31 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: fv1KQAFzSzNDgZYViVAXmFXiYRUWce4T8WiMcTU7ouM=) 2: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE=) 3: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: wRhoUuLabNYzTY9DDaSK06ADTxBJOvjSTEtu7/sVqes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Dec 24 17:45:31 2025 GMT Not After : Dec 31 17:45:31 2025 GMT Subject: CN=694c26bb-a024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:28:79:1b:0b:fe:87:4a:c4:f1:8e:33:96: e1:78:0f:aa:52:37:0c:c2:af:29:18:0d:f7:71:3e: 08:fc:b4:6a:b1:14:b2:d3:dd:6f:66:39:82:01:9d: 8a:0e:ad:93:82:7a:b1:9f:52:99:7a:7d:48:00:0a: ee:a2:b3:57:b5:79:76:f8:e0:84:15:c3:0d:87:08: d9:3c:2b:50:fd:2f:11:2f:a9:40:98:52:57:6d:56: d6:7c:f7:cc:83:9a:0e:1f:c7:ea:b4:93:5a:b9:dd: 7f:9a:78:54:2a:d8:ac:2c:76:a8:ed:0f:52:95:cb: 93:92:12:75:6d:c7:24:97:36:aa:39:91:3b:ac:86: 0e:ac:bd:f7:2f:3e:e9:4e:10:6d:fb:84:58:3b:e1: e5:5b:af:97:a0:9d:72:82:e3:6d:79:78:9f:d7:03: 34:db:63:79:d0:d8:c7:74:07:c7:2c:1a:42:88:d2: 9f:08:ec:1a:f7:4b:aa:af:f3:10:10:83:02:7d:6c: 9f:e4:85:af:ff:5a:2f:49:40:28:a8:14:72:43:65: 54:71:a7:50:8b:5e:09:83:fe:0c:99:7c:ca:bf:ad: f1:be:b3:94:28:90:3b:82:d9:a3:a2:04:04:42:9f: ef:73:d3:52:ac:40:20:dc:b5:b7:f1:b6:c1:1b:88: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FF:6D:5B:A0:21:58:24:81:D6:8D:66:00:DD:2F:6A:9A:4C:96:BE X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:68:03:94:c1:68:07:58:4d:95:cc:b1:2f:0e:43:a4:02:04: 6b:78:7b:93:95:8a:5d:a9:a3:44:df:d8:da:47:da:8e:55:b9: 55:78:94:82:08:e2:a4:93:1f:7f:ec:23:4e:6d:28:f5:48:08: 33:c9:c3:ed:92:47:7a:bc:b6:fa:c2:ed:6c:5d:51:6c:3e:c0: 76:4f:d9:a1:5c:ae:98:01:7a:8f:51:f9:0d:0f:82:1c:f4:3f: fe:63:1e:b1:2d:e0:c6:87:04:e2:b4:68:5a:84:94:3b:e8:7c: e2:98:b0:ba:05:f2:28:49:21:74:05:e1:3b:9c:54:f9:cb:d7: fa:cb:6d:50:7e:d3:9c:9b:ab:c9:74:eb:af:4e:41:7c:39:3e: 79:1d:99:d7:42:f5:5e:85:d2:7d:26:b8:b7:33:88:46:de:8f: 74:3f:a0:10:1f:97:0e:91:1f:80:5a:1c:53:a1:d6:6d:64:58: 57:05:50:32:18:2e:06:4a:92:91:b1:42:84:06:fc:be:06:98: e1:86:42:58:24:f9:6a:ee:7d:08:45:e2:f3:b9:c0:c5:79:68: c7:7d:f4:9e:46:22:ff:5c:65:aa:74:f8:1a:0d:fe:f7:69:76: 37:37:9a:34:65:29:e7:20:75:a5:86:2f:bb:00:98:33:59:67: 6c:e3:b8:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUxMjI0MTc0NTMxWhcNMjUxMjMxMTc0NTMxWjAYMRYwFAYD VQQDDA02OTRjMjZiYi1hMDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNMoeRsL/odKxPGOM5bheA+qUjcMwq8pGA33cT4I/LRqsRSy091vZjmCAZ2K Dq2Tgnqxn1KZen1IAAruorNXtXl2+OCEFcMNhwjZPCtQ/S8RL6lAmFJXbVbWfPfM g5oOH8fqtJNaud1/mnhUKtisLHao7Q9SlcuTkhJ1bccklzaqOZE7rIYOrL33Lz7p ThBt+4RYO+HlW6+XoJ1yguNteXif1wM022N50NjHdAfHLBpCiNKfCOwa90uqr/MQ EIMCfWyf5IWv/1ovSUAoqBRyQ2VUcadQi14Jg/4MmXzKv63xvrOUKJA7gtmjogQE Qp/vc9NSrEAg3LW38bbBG4gVkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKL/bVug IVgkgdaNZgDdL2qaTJa+MB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgaAOUwWgHWE2VzLEvDkOkAgRreHuTlYpdqaNE39jaR9qOVblVeJSC COKkkx9/7CNObSj1SAgzycPtkkd6vLb6wu1sXVFsPsB2T9mhXK6YAXqPUfkND4Ic 9D/+Yx6xLeDGhwTitGhahJQ76HzimLC6BfIoSSF0BeE7nFT5y9f6y21QftOcm6vJ dOuvTkF8OT55HZnXQvVehdJ9Jri3M4hG3o90P6AQH5cOkR+AWhxTodZtZFhXBVAy GC4GSpKRsUKEBvy+BpjhhkJYJPlq7n0IReLzucDFeWjHffSeRiL/XGWqdPgaDf73 aXY3N5o0ZSnnIHWlhi+7AJgzWWds47i8 -----END CERTIFICATE-----Generated at Fri Dec 26 09:23:15 2025 by rpki-client