This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft File: SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json) Hash identifier: zI+XI+5+I/iym1WDPPZyapCiwbD36ZEphFbK1eSUxmw= Subject key identifier: E1:5F:4A:4D:7D:F8:CF:DA:C8:D8:0F:02:31:9E:67:57:BA:81:3A:38 Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft Manifest number: 0743 Signing time: Thu 18 Dec 2025 21:08:39 +0000 Manifest this update: Thu 18 Dec 2025 21:08:39 +0000 Manifest next update: Thu 25 Dec 2025 21:08:39 +0000 Files and hashes: 1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: A8YHAlWLOUiLSfzy9RixX/EE+vv74iLQFNHjHlPq7uw=) 2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: xRXc4Qynp20VBH0uvYkKK7b4+52BnXGj7roDL8ZzWEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Validity Not Before: Dec 18 21:08:39 2025 GMT Not After : Dec 25 21:08:39 2025 GMT Subject: CN=69446d57-b4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:27:af:5e:5f:45:b7:2b:4f:14:01:96:0c: 18:f4:e1:e8:60:92:84:e1:13:77:ce:0b:dd:03:4d: 38:89:cc:02:81:91:f0:25:03:37:06:a2:82:8f:36: 34:89:f9:5b:48:96:ba:21:3a:f7:a5:d1:ed:88:f7: 82:87:c3:f9:d0:a7:c7:51:ae:e0:19:bd:6b:6a:2a: 0a:dd:f8:a1:f7:92:4a:6f:4d:56:08:6e:62:ea:39: d0:12:28:ad:1e:bd:80:6e:7e:bc:cf:52:42:dc:0b: c8:5e:9b:4f:ca:e7:58:d6:56:44:03:79:e6:84:26: e9:23:5f:bd:77:39:8d:f4:04:75:cd:cf:48:ca:95: d2:16:23:a7:55:43:ce:bd:96:88:45:9d:79:71:18: 67:f8:7b:8b:0b:97:c5:8b:85:bb:c2:28:95:1c:e1: 6d:26:d0:f1:66:5a:c6:13:6f:c9:bf:2d:04:6a:6c: 7f:a1:d9:43:dc:29:08:44:c8:6a:b8:6e:e5:f0:23: f6:af:85:aa:c5:ee:49:1e:3a:b6:97:df:d5:d4:f8: 8d:d7:34:df:37:50:34:17:ca:b8:7d:04:0b:23:ce: 48:aa:63:fa:3b:5e:5e:18:42:0e:62:d8:ef:bf:db: 32:f5:b9:a3:9b:77:81:7b:03:c5:ba:b6:0f:a0:73: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5F:4A:4D:7D:F8:CF:DA:C8:D8:0F:02:31:9E:67:57:BA:81:3A:38 X509v3 Authority Key Identifier: keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:50:14:c0:48:b9:04:cb:b6:2e:e6:aa:a8:3d:27:9f:dd:02: 01:3d:db:f8:ff:46:d6:66:6b:23:d9:28:94:5f:aa:90:33:7b: 42:dc:0d:da:0e:a2:40:3c:b2:f1:59:b1:cc:f4:9b:3e:e7:9e: d4:9d:19:18:15:34:eb:b0:90:f9:dc:36:30:c6:ff:a8:76:93: f1:80:38:5f:22:94:25:2a:19:80:d8:41:04:e3:f8:bc:23:52: 42:e1:a6:5b:e1:a0:c9:fb:75:b3:50:60:85:0b:a7:4f:3c:8e: 1e:16:90:31:25:1f:32:a8:fc:3c:f6:76:3e:b5:b5:df:74:54: 83:44:e5:6d:5b:8a:cb:f3:46:3b:fe:46:22:90:fc:54:c7:4e: 0c:34:7c:33:b1:1f:f0:a8:c7:ab:a1:a8:6d:91:62:a7:72:92: cf:07:1b:6f:50:96:cb:e4:28:fa:e6:8c:7d:37:5b:e2:87:9a: 98:7d:3e:f3:30:5b:e8:db:fc:fa:87:6c:75:92:27:d2:b8:ae: 81:7b:f3:6c:8a:0c:ce:3f:f4:e0:a1:e3:cd:8d:26:67:fb:ef: 97:da:07:80:42:a9:ab:28:9d:96:7b:19:2f:86:2b:3b:ca:37: f4:b0:61:94:1e:f3:5d:93:e9:78:86:c5:47:15:a1:89:5d:35: fa:ff:34:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QyMjgxMTAvBgNVBAUTKDQ4RTkwQjczQjQ5RkEzQURGNUVDOTFBNUNDRDIzREFE MzVEM0M0OEUwHhcNMjUxMjE4MjEwODM5WhcNMjUxMjI1MjEwODM5WjAYMRYwFAYD VQQDDA02OTQ0NmQ1Ny1iNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2Qnr15fRbcrTxQBlgwY9OHoYJKE4RN3zgvdA004icwCgZHwJQM3BqKCjzY0 iflbSJa6ITr3pdHtiPeCh8P50KfHUa7gGb1raioK3fih95JKb01WCG5i6jnQEiit Hr2Abn68z1JC3AvIXptPyudY1lZEA3nmhCbpI1+9dzmN9AR1zc9IypXSFiOnVUPO vZaIRZ15cRhn+HuLC5fFi4W7wiiVHOFtJtDxZlrGE2/Jvy0Eamx/odlD3CkIRMhq uG7l8CP2r4Wqxe5JHjq2l9/V1PiN1zTfN1A0F8q4fQQLI85IqmP6O15eGEIOYtjv v9sy9bmjm3eBewPFurYPoHNbjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFfSk19 +M/ayNgPAjGeZ1e6gTo4MB8GA1UdIwQYMBaAFEjpC3O0n6Ot9eyRpczSPa0108SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDIyOC82QjREMkRBODUw QUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82MzE3Skdsek5JOXJUWFR4 STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPa0xjN1NmbzYzMTdKR2x6Tkk5clRYVHhJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDIyOC82QjREMkRBODUwQUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82 MzE3Skdsek5JOXJUWFR4STQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEUBTASLkEy7Yu5qqoPSef3QIBPdv4/0bWZmsj2SiUX6qQM3tC3A3a DqJAPLLxWbHM9Js+557UnRkYFTTrsJD53DYwxv+odpPxgDhfIpQlKhmA2EEE4/i8 I1JC4aZb4aDJ+3WzUGCFC6dPPI4eFpAxJR8yqPw89nY+tbXfdFSDROVtW4rL80Y7 /kYikPxUx04MNHwzsR/wqMeroahtkWKncpLPBxtvUJbL5Cj65ox9N1vih5qYfT7z MFvo2/z6h2x1kifSuK6Be/NsigzOP/TgoePNjSZn+++X2geAQqmrKJ2Wexkvhis7 yjf0sGGUHvNdk+l4hsVHFaGJXTX6/zRq -----END CERTIFICATE-----Generated at Sat Dec 20 04:58:33 2025 by rpki-client