This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: 7cXMB3faBYwCC316iRrPRcf33/wwK7/4jWGEePvPOdk= Subject key identifier: 19:86:E3:CB:63:6D:0B:CA:66:71:5D:67:18:78:BD:FF:62:C0:97:B6 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 10AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 1096 Signing time: Thu 18 Dec 2025 17:12:11 +0000 Manifest this update: Thu 18 Dec 2025 17:12:10 +0000 Manifest next update: Thu 25 Dec 2025 17:12:10 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: WGmTc1/OZnY6P+JjMkBSxZFY/F+wAVKJS0idU0e0noY=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: f+ssEZLOjLj3KCxNpmhhNkb36lPb0XOjNkCdaat32A0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4268 (0x10ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Dec 18 17:12:10 2025 GMT Not After : Dec 25 17:12:10 2025 GMT Subject: CN=694435eb-5a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:0f:f1:da:bb:a1:53:c6:4d:e4:75:43:4e: df:ef:7a:50:2b:88:a5:73:a9:eb:c0:0d:32:22:02: 0c:40:ac:63:80:eb:ba:11:34:8c:41:62:c2:3c:2b: 36:73:5a:fb:14:d2:f8:90:b3:6b:f0:af:f6:ef:57: 1d:99:1f:ba:9f:98:be:0c:c3:0d:e9:b9:98:68:31: fd:da:a3:0f:c4:2c:39:c6:59:18:7a:b4:21:f1:03: e9:1b:d7:79:b3:0f:b8:4d:f3:fb:17:f3:24:f2:55: 88:e4:ef:05:e4:08:98:fe:67:bf:60:a1:ac:a9:87: 4e:fc:6d:3a:27:ff:d3:5c:7c:0e:27:f4:45:ab:5d: 8e:e6:34:2b:0d:1a:b3:5a:6d:e4:75:87:3d:73:4d: 1d:d6:c1:b8:bf:bf:51:87:6a:68:c1:e3:5a:cb:e5: 08:42:a3:e1:46:73:1f:4c:82:7f:f9:02:43:8a:ac: b0:39:c8:79:9d:90:d2:75:ec:c8:3d:88:c6:a0:48: 1d:44:f1:ad:85:7e:5b:a3:6f:da:e9:9c:7e:ed:30: 2e:c6:09:bc:f9:1d:cd:3b:61:98:c4:8d:04:78:0b: d6:31:08:02:90:d8:04:17:9c:1f:b4:34:87:9f:b9: 4f:eb:c1:e0:5a:39:25:26:b0:9a:49:fa:78:8b:45: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:86:E3:CB:63:6D:0B:CA:66:71:5D:67:18:78:BD:FF:62:C0:97:B6 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:01:ab:df:d9:47:89:7e:32:5b:f8:cf:02:56:59:39:83:04: e8:7b:07:14:bb:31:54:5d:cc:33:41:b4:62:08:d2:f3:0e:b7: 55:ae:0b:52:a8:e5:df:d2:ec:84:84:6d:26:93:ef:03:22:8f: f6:7a:0f:06:1a:79:4c:85:44:e4:f7:3b:a7:6c:d2:84:eb:d2: f1:99:ed:b6:e2:30:a0:bb:3b:cd:c8:f0:bc:4b:5b:68:93:bc: cc:c6:39:60:4d:80:27:f0:16:64:50:ec:b7:63:f6:f8:52:b5: 4f:d4:f9:0e:de:4d:2f:1c:fd:a9:6b:c2:a6:1c:86:3e:71:0e: a8:8d:0d:a7:d1:33:22:64:62:f0:ff:fd:6a:51:ea:91:1b:4e: ea:3b:b6:3a:21:da:04:34:41:57:52:ae:94:58:4b:ed:c0:f4: dd:e6:2f:54:9e:8a:88:be:84:0d:7e:bb:c6:08:e7:8a:87:8e: c2:b4:fb:86:c6:11:5e:82:2e:80:0b:7e:48:3e:30:e3:33:e0: f3:76:07:5c:29:46:7a:2f:c4:69:65:db:27:27:3b:5d:da:aa: 72:97:75:2b:0f:ba:84:98:ab:3e:28:40:12:be:ca:c5:a5:7b: bf:e2:9e:66:a3:85:0b:1b:f0:ac:0d:69:a4:29:b8:30:10:69: b4:4e:27:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUxMjE4MTcxMjEwWhcNMjUxMjI1MTcxMjEwWjAYMRYwFAYD VQQDDA02OTQ0MzVlYi01YTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxoP8dq7oVPGTeR1Q07f73pQK4ilc6nrwA0yIgIMQKxjgOu6ETSMQWLCPCs2 c1r7FNL4kLNr8K/271cdmR+6n5i+DMMN6bmYaDH92qMPxCw5xlkYerQh8QPpG9d5 sw+4TfP7F/Mk8lWI5O8F5AiY/me/YKGsqYdO/G06J//TXHwOJ/RFq12O5jQrDRqz Wm3kdYc9c00d1sG4v79Rh2poweNay+UIQqPhRnMfTIJ/+QJDiqywOch5nZDSdezI PYjGoEgdRPGthX5bo2/a6Zx+7TAuxgm8+R3NO2GYxI0EeAvWMQgCkNgEF5wftDSH n7lP68HgWjklJrCaSfp4i0XayQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmG48tj bQvKZnFdZxh4vf9iwJe2MB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUAavf2UeJfjJb+M8CVlk5gwToewcUuzFUXcwzQbRiCNLzDrdVrgtS qOXf0uyEhG0mk+8DIo/2eg8GGnlMhUTk9zunbNKE69Lxme224jCguzvNyPC8S1to k7zMxjlgTYAn8BZkUOy3Y/b4UrVP1PkO3k0vHP2pa8KmHIY+cQ6ojQ2n0TMiZGLw //1qUeqRG07qO7Y6IdoENEFXUq6UWEvtwPTd5i9UnoqIvoQNfrvGCOeKh47CtPuG xhFegi6AC35IPjDjM+DzdgdcKUZ6L8RpZdsnJztd2qpyl3UrD7qEmKs+KEASvsrF pXu/4p5mo4ULG/CsDWmkKbgwEGm0TifG -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:01 2025 by rpki-client