This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json) Hash identifier: blCuyUTwPnIVUP9xlkUSZScgVw4mslG2uAIH3kvOveo= Subject key identifier: E5:A4:05:CF:EC:A1:FC:47:99:5F:E0:94:10:B1:35:8F:E0:13:B9:13 Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft Manifest number: 023C Signing time: Fri 19 Dec 2025 01:08:31 +0000 Manifest this update: Fri 19 Dec 2025 01:08:31 +0000 Manifest next update: Fri 26 Dec 2025 01:08:31 +0000 Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: OeeRGcL9tbsL2i1zFpP2QNnRhtQr+GX4QSskJja1LhQ=) 2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: aXVsQ3eTDOFY8R9G8hcsnCxP/cyR26ThIRn0dDawEqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Validity Not Before: Dec 19 01:08:31 2025 GMT Not After : Dec 26 01:08:31 2025 GMT Subject: CN=6944a58f-0219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bb:34:3a:54:af:cb:21:dc:a1:2a:d3:6f:6e: f4:6d:d2:51:9a:d7:87:c0:d8:f3:c0:e9:d6:82:9a: d0:5a:af:e4:14:f3:16:8d:e1:89:df:e5:fe:85:a3: ed:07:6d:fb:94:3e:e1:d2:5a:99:8d:e9:43:44:83: d2:02:54:f3:e2:13:cc:0a:c4:9f:fe:c9:2c:cd:08: d1:a4:61:ab:f6:30:2e:6e:bb:b2:1f:f2:d2:4c:00: 8a:2f:b3:99:27:a2:7e:2b:ab:3d:cf:b7:b0:5a:d3: 7c:0a:b1:b9:43:72:4d:a6:a5:af:b3:43:0b:ba:71: 6f:e3:72:e2:e6:68:95:19:84:9c:87:1d:6e:b5:7b: 05:56:59:30:e2:96:97:73:c6:90:d6:46:a5:33:c4: ca:7c:4e:fd:bc:38:d1:f3:1a:85:17:6a:71:a1:8a: 7e:fc:d4:dd:7c:ac:df:68:be:3f:e6:40:8d:12:8a: 98:5b:61:5b:09:66:99:09:3b:63:d0:1c:df:ae:32: fd:ae:67:98:a1:05:11:8b:0b:cd:4b:11:79:20:c3: 77:68:9a:24:39:54:fd:b8:09:9d:a9:5d:c1:03:a3: f4:40:22:04:af:44:55:a2:78:a0:92:f2:ed:76:da: 62:67:54:c7:6b:86:8f:cf:ca:38:1c:e4:bc:40:3f: 2d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A4:05:CF:EC:A1:FC:47:99:5F:E0:94:10:B1:35:8F:E0:13:B9:13 X509v3 Authority Key Identifier: keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:56:f8:34:42:9c:eb:d2:d4:fb:62:c9:94:7f:b0:78:48:e2: d9:12:20:e7:14:31:6a:f6:1c:b5:2c:f3:49:29:61:d2:80:68: 92:98:73:a5:22:62:67:eb:a5:50:53:07:02:4a:53:98:4b:5e: d9:6d:36:5e:e3:9c:be:4a:b8:a9:f2:e6:88:34:ca:50:47:ad: 15:e1:15:33:ca:54:e3:71:57:ae:9d:30:cf:c2:e3:52:bb:f1: 3f:b1:be:59:30:ec:40:6f:71:d2:a1:a4:14:db:66:89:bb:18: 85:c7:20:7f:4c:a2:80:f6:ea:e9:1f:19:bb:29:38:8d:09:5a: 0f:1e:73:7f:14:9a:1e:39:c3:61:81:8f:2a:92:24:26:d3:29: 5b:2c:c5:6c:01:b4:6a:15:d9:bc:0a:63:9d:50:c3:0f:41:22: 99:12:c5:23:5d:4e:56:54:72:4a:a8:fa:46:0a:11:11:e7:63: 73:a3:e8:1f:9e:a5:28:ca:3b:96:8e:73:36:ef:a4:33:17:99: 81:77:37:12:5d:8c:e8:bd:4c:a1:9f:39:7a:06:75:ab:96:82: 44:0d:66:d2:11:6b:77:b0:f6:c4:cd:1a:5b:98:d6:f4:f7:a6: 99:87:d1:8d:ec:3e:9c:0f:b9:76:46:45:3a:db:cb:70:a3:74: 0a:09:13:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RENjYwNjRCRTky NkVDNzRDOUYwHhcNMjUxMjE5MDEwODMxWhcNMjUxMjI2MDEwODMxWjAYMRYwFAYD VQQDDA02OTQ0YTU4Zi0wMjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7s0OlSvyyHcoSrTb270bdJRmteHwNjzwOnWgprQWq/kFPMWjeGJ3+X+haPt B237lD7h0lqZjelDRIPSAlTz4hPMCsSf/skszQjRpGGr9jAubruyH/LSTACKL7OZ J6J+K6s9z7ewWtN8CrG5Q3JNpqWvs0MLunFv43Li5miVGYSchx1utXsFVlkw4paX c8aQ1kalM8TKfE79vDjR8xqFF2pxoYp+/NTdfKzfaL4/5kCNEoqYW2FbCWaZCTtj 0BzfrjL9rmeYoQURiwvNSxF5IMN3aJokOVT9uAmdqV3BA6P0QCIEr0RVonigkvLt dtpiZ1THa4aPz8o4HOS8QD8tHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWkBc/s ofxHmV/glBCxNY/gE7kTMB8GA1UdIwQYMBaAFLELT0ND+q4rLE091mBkvpJux0yf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0UyRi8wQkRFQTUyODcw RTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJpc3NUVDNXWUdTLWttN0hU SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRdFBRMFA2cmlzc1RUM1dZR1Mta203SFRKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0UyRi8wQkRFQTUyODcwRTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJp c3NUVDNXWUdTLWttN0hUSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxVvg0Qpzr0tT7YsmUf7B4SOLZEiDnFDFq9hy1LPNJKWHSgGiSmHOl ImJn66VQUwcCSlOYS17ZbTZe45y+Srip8uaINMpQR60V4RUzylTjcVeunTDPwuNS u/E/sb5ZMOxAb3HSoaQU22aJuxiFxyB/TKKA9urpHxm7KTiNCVoPHnN/FJoeOcNh gY8qkiQm0ylbLMVsAbRqFdm8CmOdUMMPQSKZEsUjXU5WVHJKqPpGChER52Nzo+gf nqUoyjuWjnM276QzF5mBdzcSXYzovUyhnzl6BnWrloJEDWbSEWt3sPbEzRpbmNb0 96aZh9GN7D6cD7l2RkU628two3QKCRM2 -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:52 2025 by rpki-client