This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft File: aSE1YIaDdV6U2OylfYsLNY7OFxg.mft (raw, json) Hash identifier: BhCgfkfHcn/T3kX8vumeRcZcuWmbeR90AKS/U34EOXg= Subject key identifier: D3:DA:C4:21:9A:FB:5E:06:01:AD:9F:2C:A0:34:DE:08:32:69:43:E0 Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18 Certificate issuer: /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft Manifest number: 039D Signing time: Sun 21 Dec 2025 00:05:37 +0000 Manifest this update: Sun 21 Dec 2025 00:05:36 +0000 Manifest next update: Sun 28 Dec 2025 00:05:36 +0000 Files and hashes: 1: aSE1YIaDdV6U2OylfYsLNY7OFxg.crl (hash: bMVcFdMJ8r+TaKF8IIoWUqVEOoTfuKPMbFNw6CLewJA=) 2: EFEEF8165BB211EE88BB1945C4F9AE02.roa (hash: pBp+3YEZO1rLrx0bvICmu2Gq4WoxGLfmXIpKccpgGw8=) 3: D0D44F9A7A7311EF9B70B061C4F9AE02.roa (hash: rOMU6+JJyASa3UMEbMc1nVoiFLnAmgt++mEA6n5GZvo=) 4: 593105685BB711EE8E69584CC4F9AE02.roa (hash: 6K1WvAW+XHVvFl9NKw/47c7C8mqXiUtIq7r2hsM/JHg=) 5: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (hash: U81ppJdJPa/NwEizA2XDkKKg4D0+UWmO8vP3Sd1xBj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718 Validity Not Before: Dec 21 00:05:36 2025 GMT Not After : Dec 28 00:05:36 2025 GMT Subject: CN=694739d0-cca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:09:28:6a:49:8a:c3:19:72:a2:11:3c:ae: c3:18:60:17:3a:48:49:0e:d0:60:3d:04:f0:a5:4b: ac:6f:00:83:95:f8:87:ff:7d:8c:9b:ce:8c:ae:cd: 42:2e:e9:da:30:19:bd:7f:e6:e9:5d:fe:8c:61:d9: e4:c2:14:ac:1a:c7:57:18:b6:8d:e9:e4:13:62:12: 01:dd:6d:ea:b5:47:db:0e:60:0a:48:6f:fe:3d:32: 78:10:12:5e:7f:23:c2:a2:f9:25:83:34:9f:5b:55: 6b:e9:e3:47:90:97:ac:be:06:fa:f7:30:06:36:08: b5:b8:d1:f7:77:f7:2f:89:a8:9b:5a:62:94:88:b4: e6:78:eb:1c:78:60:f7:2f:be:88:93:4c:aa:4a:ae: b9:ec:f2:21:18:50:3c:4e:fe:bd:1b:71:bc:f7:62: fb:f0:78:a5:ed:39:e6:eb:82:c1:3b:3d:61:ef:95: 94:b6:33:90:74:a4:66:ba:76:20:bd:68:36:0d:cd: a0:9d:34:2b:63:ca:cf:99:d4:03:58:ab:89:98:11: 1b:25:ad:f2:68:42:3c:13:49:1c:e9:20:56:67:be: e6:45:a4:ca:71:13:05:00:bd:ae:ec:70:5e:1e:ec: ca:a6:6b:3f:44:d2:a5:90:52:c1:1c:f8:b3:64:6b: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DA:C4:21:9A:FB:5E:06:01:AD:9F:2C:A0:34:DE:08:32:69:43:E0 X509v3 Authority Key Identifier: keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:45:75:63:29:62:25:70:7e:eb:f1:d4:3b:12:60:d8:a0:20: 8a:74:97:83:8c:93:4c:7c:6f:16:b6:33:7b:34:4b:b3:15:74: 71:36:04:0b:fc:b6:aa:19:f2:b4:ab:2c:95:c9:9a:56:18:c3: 51:d6:63:90:ab:dd:f0:5c:6c:91:57:02:1d:fe:c5:2d:ec:fe: 47:2b:c6:62:a1:a9:96:00:64:43:44:7e:f9:a1:70:86:45:ae: 65:31:59:66:36:74:78:06:88:c2:c1:96:f8:68:6d:97:53:19: 42:11:ba:f2:f4:58:1c:6f:27:41:97:01:c9:92:c0:16:77:8f: 7a:76:ee:b5:5c:56:c8:48:aa:d3:db:23:94:0d:ad:65:a5:fb: 39:7e:67:aa:ea:0e:50:40:c6:cb:d9:3c:f9:81:ca:2b:a0:13: 8b:3f:1b:05:8c:db:33:58:4f:ec:d8:9b:2a:8d:cc:1b:5e:e6: b1:ba:72:79:9f:bc:7d:5c:f2:7a:56:a3:94:de:8f:73:a2:f2: 9b:cb:43:3a:da:3d:0b:02:1d:e7:8d:6d:ef:a4:6a:0e:6a:fc: 2c:8d:10:42:bd:e0:c6:62:c2:da:c1:ec:4c:e1:f3:a0:f6:50: ad:4e:0f:eb:53:ea:a6:d5:85:75:b0:2d:ef:13:4e:05:8b:97: 3b:f9:9e:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg5OTYxMTAvBgNVBAUTKDY5MjEzNTYwODY4Mzc1NUU5NEQ4RUNBNTdEOEIwQjM1 OEVDRTE3MTgwHhcNMjUxMjIxMDAwNTM2WhcNMjUxMjI4MDAwNTM2WjAYMRYwFAYD VQQDDA02OTQ3MzlkMC1jY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK4JKGpJisMZcqIRPK7DGGAXOkhJDtBgPQTwpUusbwCDlfiH/32Mm86Mrs1C LunaMBm9f+bpXf6MYdnkwhSsGsdXGLaN6eQTYhIB3W3qtUfbDmAKSG/+PTJ4EBJe fyPCovklgzSfW1Vr6eNHkJesvgb69zAGNgi1uNH3d/cviaibWmKUiLTmeOsceGD3 L76Ik0yqSq657PIhGFA8Tv69G3G892L78Hil7Tnm64LBOz1h75WUtjOQdKRmunYg vWg2Dc2gnTQrY8rPmdQDWKuJmBEbJa3yaEI8E0kc6SBWZ77mRaTKcRMFAL2u7HBe HuzKpms/RNKlkFLBHPizZGu4wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPaxCGa +14GAa2fLKA03ggyaUPgMB8GA1UdIwQYMBaAFGkhNWCGg3VelNjspX2LCzWOzhcY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5Ni82NjAzMEY1RUQw NjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRWNlUyT3lsZllzTE5ZN09G eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTRTFZSWFEZFY2VTJPeWxmWXNMTlk3T0Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODk5Ni82NjAzMEY1RUQwNjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRW NlUyT3lsZllzTE5ZN09GeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHRXVjKWIlcH7r8dQ7EmDYoCCKdJeDjJNMfG8WtjN7NEuzFXRxNgQL /LaqGfK0qyyVyZpWGMNR1mOQq93wXGyRVwId/sUt7P5HK8ZioamWAGRDRH75oXCG Ra5lMVlmNnR4BojCwZb4aG2XUxlCEbry9FgcbydBlwHJksAWd496du61XFbISKrT 2yOUDa1lpfs5fmeq6g5QQMbL2Tz5gcoroBOLPxsFjNszWE/s2JsqjcwbXuaxunJ5 n7x9XPJ6VqOU3o9zovKby0M62j0LAh3njW3vpGoOavwsjRBCveDGYsLawexM4fOg 9lCtTg/rU+qm1YV1sC3vE04Fi5c7+Z5R -----END CERTIFICATE-----Generated at Sun Dec 21 12:16:22 2025 by rpki-client