This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: IgI6vPrhiDGvbDQ/OY3gniSI84lZ1BmQER6FISSSpHY= Subject key identifier: 2E:EC:36:D4:80:C5:4C:D5:5B:E3:B4:0A:5F:1B:04:E8:0E:F6:53:F8 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 138C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 1382 Signing time: Thu 18 Dec 2025 16:50:43 +0000 Manifest this update: Thu 18 Dec 2025 16:50:42 +0000 Manifest next update: Thu 25 Dec 2025 16:50:42 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: hGA3nkyOcgJdHz94VYVFKsWjeJ3cBQ3rKeB+Szn4ww4=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5004 (0x138c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Dec 18 16:50:42 2025 GMT Not After : Dec 25 16:50:42 2025 GMT Subject: CN=694430e3-7b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:20:bf:df:50:28:f2:84:56:6e:53:ae:86: 6a:38:74:65:ac:ce:2b:d5:63:9b:3c:60:59:ea:eb: 59:e2:d0:07:4a:4e:51:53:37:31:49:8b:7a:3b:6f: 60:94:fc:29:81:a3:24:99:d3:f0:57:af:5d:70:c0: 75:a6:93:03:83:11:42:b2:74:75:80:d1:5f:0e:46: 2e:2d:8e:db:3f:a2:2b:63:66:46:ae:24:5b:b6:37: d7:6d:11:76:7b:69:8b:fa:d8:63:c8:97:de:8a:b9: db:44:eb:8d:16:fd:60:08:94:fe:a1:e0:23:ed:42: 46:10:ec:68:36:72:21:8c:a8:35:a6:4d:2a:64:88: 6a:29:53:d0:c7:4c:45:56:eb:8f:dc:6b:97:46:f2: 3c:bb:c8:f4:d5:83:a2:87:9f:d3:87:f0:fa:6b:04: d4:d7:5a:d3:dc:c1:f7:e6:c8:52:db:0c:ad:7b:12: 9b:45:cb:f1:b4:1a:be:39:4f:cf:fa:f3:e1:6f:bc: 62:3f:ed:23:8f:1a:a0:6e:53:fe:6a:d2:b0:11:27: 9c:62:4e:12:93:65:5b:83:c7:d9:84:94:c3:6a:be: 93:a4:1a:2b:71:96:37:0b:16:fa:4a:24:93:33:6b: 09:52:df:9d:14:28:34:c2:df:21:dc:0b:65:84:64: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EC:36:D4:80:C5:4C:D5:5B:E3:B4:0A:5F:1B:04:E8:0E:F6:53:F8 X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1e:4f:e8:f2:07:6b:f8:0f:7d:35:6e:c7:50:fd:a4:ba:e4: 39:f6:f9:cd:d7:57:42:4b:5b:8d:2c:51:fc:c5:f7:89:41:68: a4:14:e3:6c:8d:3e:11:44:24:38:43:38:f8:fe:61:84:f6:9b: da:94:c8:2b:3d:91:47:c2:1f:16:2f:4c:23:2e:a2:ae:83:91: 19:61:7c:6b:01:ba:e7:c4:f1:d3:b0:d5:7c:37:d1:f8:34:a1: 1f:c1:e2:cb:90:17:22:42:f3:43:8a:b1:b6:81:ed:6c:16:3f: 15:b9:f8:3a:30:46:6c:84:d2:66:ad:93:e0:6c:d3:ff:bc:06: b1:51:02:5e:c8:0a:31:7c:b3:8c:c1:f4:ce:05:22:ef:a8:b6: 28:1d:8b:38:b3:ae:2e:3d:44:c0:91:d4:b3:da:2a:b7:a6:9f: f8:04:01:e5:a0:55:08:fe:5a:cd:73:74:62:55:aa:98:8c:40: 48:70:0d:4b:79:bf:ee:40:15:16:fa:43:0d:1b:d0:27:13:63: 31:c8:c5:ea:df:d1:7b:73:01:ec:d2:dc:aa:bd:f2:60:1e:f0: 52:09:94:63:ec:ca:15:9f:eb:da:0c:70:ce:81:9c:3a:da:6b: b5:b8:4b:c2:aa:46:50:28:d2:d7:c3:fb:8e:a0:af:96:85:4a: dd:d5:de:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUxMjE4MTY1MDQyWhcNMjUxMjI1MTY1MDQyWjAYMRYwFAYD VQQDDA02OTQ0MzBlMy03YjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk8gv99QKPKEVm5TroZqOHRlrM4r1WObPGBZ6utZ4tAHSk5RUzcxSYt6O29g lPwpgaMkmdPwV69dcMB1ppMDgxFCsnR1gNFfDkYuLY7bP6IrY2ZGriRbtjfXbRF2 e2mL+thjyJfeirnbROuNFv1gCJT+oeAj7UJGEOxoNnIhjKg1pk0qZIhqKVPQx0xF VuuP3GuXRvI8u8j01YOih5/Th/D6awTU11rT3MH35shS2wytexKbRcvxtBq+OU/P +vPhb7xiP+0jjxqgblP+atKwESecYk4Sk2Vbg8fZhJTDar6TpBorcZY3Cxb6SiST M2sJUt+dFCg0wt8h3AtlhGSaswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7sNtSA xUzVW+O0Cl8bBOgO9lP4MB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbHk/o8gdr+A99NW7HUP2kuuQ59vnN11dCS1uNLFH8xfeJQWikFONs jT4RRCQ4Qzj4/mGE9pvalMgrPZFHwh8WL0wjLqKug5EZYXxrAbrnxPHTsNV8N9H4 NKEfweLLkBciQvNDirG2ge1sFj8Vufg6MEZshNJmrZPgbNP/vAaxUQJeyAoxfLOM wfTOBSLvqLYoHYs4s64uPUTAkdSz2iq3pp/4BAHloFUI/lrNc3RiVaqYjEBIcA1L eb/uQBUW+kMNG9AnE2MxyMXq39F7cwHs0tyqvfJgHvBSCZRj7MoVn+vaDHDOgZw6 2mu1uEvCqkZQKNLXw/uOoK+WhUrd1d7M -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:36 2025 by rpki-client