This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json) Hash identifier: agtKrDpgmYI6WZmgs2UkhFPiSqCvgnDqXTRta6WrdEo= Subject key identifier: 47:DC:68:47:1B:83:BD:3A:F4:44:93:61:5B:0F:49:1C:4E:15:00:3F Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Certificate serial: 11E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft Manifest number: 204B Signing time: Thu 18 Dec 2025 17:01:35 +0000 Manifest this update: Thu 18 Dec 2025 17:01:34 +0000 Manifest next update: Thu 25 Dec 2025 17:01:34 +0000 Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: IFPiTVOhYRGXxZu6VjdTteCnA+eEgkKqQXAWl1xBwi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4577 (0x11e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Validity Not Before: Dec 18 17:01:34 2025 GMT Not After : Dec 25 17:01:34 2025 GMT Subject: CN=6944336f-6833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:d2:c2:41:53:6b:39:bc:65:f4:b1:e6:4e: 87:ff:7f:e2:62:87:13:38:3b:c4:19:fe:82:88:5d: ae:5c:09:ab:71:ef:4d:ac:db:a6:2c:be:40:68:17: 19:2d:59:18:30:c3:ac:0f:af:6f:86:37:ab:dc:a7: 81:e8:64:ca:0f:fe:da:7b:54:a0:db:bc:ae:91:18: b9:83:6e:3a:79:62:b5:dd:c5:29:7e:17:66:cb:51: 84:a5:b1:2a:ba:b4:8c:04:da:ee:59:1a:f6:82:c9: 40:20:74:25:87:04:f5:76:f3:9a:aa:9d:05:40:c7: b8:e6:75:05:c3:7a:96:29:19:df:68:58:23:5e:1a: f0:b5:ba:d8:67:4e:be:f5:1e:7d:33:0b:33:1f:67: 5e:3a:7a:b7:62:43:17:1c:86:c2:b4:99:ea:68:bf: 0b:f8:75:84:d4:c5:a9:e2:a8:2f:b2:bc:47:99:fe: 96:25:07:87:88:66:21:c0:95:c1:38:8d:d4:c7:61: 24:7f:88:6a:61:3f:62:78:bd:de:7b:f0:3b:0a:cc: 16:9b:4b:30:05:2c:a3:f1:c3:10:f0:0e:87:fd:3d: 38:23:c4:51:7d:f3:88:d7:f2:8e:d2:1d:ba:92:7f: 77:ac:f4:0c:2f:5f:e2:c8:e7:9e:4d:a2:52:ae:12: 42:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:68:47:1B:83:BD:3A:F4:44:93:61:5B:0F:49:1C:4E:15:00:3F X509v3 Authority Key Identifier: keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:af:dd:20:32:8f:7d:8e:15:05:77:72:f7:37:13:c4:0f:d6: 4f:a1:95:ca:35:24:31:7b:d6:46:25:fc:27:ea:ac:e1:4f:51: 9b:0e:cf:b5:b1:16:2b:69:90:59:47:75:e2:ea:2b:12:d3:6e: 45:7d:42:97:4f:2e:9b:09:2a:8a:74:09:e0:c2:c7:28:30:95: 4e:8e:dd:ab:c6:5b:39:1d:f4:d0:31:37:fa:a6:f0:0f:1f:54: 90:aa:35:9e:78:b3:b2:6d:1f:dc:f3:de:29:04:d8:8f:3b:e4: 2a:ee:c1:5a:b7:38:45:1b:d0:3e:85:89:b6:f8:6b:b0:30:3e: 55:89:4c:d6:d4:ad:0b:92:d2:88:e0:96:42:c0:2f:eb:36:78: f2:81:73:4a:e2:3f:b4:c7:80:23:05:f7:f3:6e:8d:ca:6c:61: fb:28:68:7d:a4:0a:c5:20:0c:b7:44:73:74:1a:30:7d:8f:b9: cf:aa:54:e1:db:83:91:ae:c7:f4:85:e9:9f:86:0a:b5:a2:54: 04:7a:90:7a:8e:80:ef:41:a3:2f:16:0e:9b:20:cd:8e:03:18: 64:1c:ad:57:2d:ab:cb:46:0d:ab:33:d7:81:6b:dd:b7:46:a9: 87:c9:a8:dd:83:59:57:98:38:99:c1:43:06:24:20:64:e3:06: 9c:f5:d2:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD MDk5MEE4NTMwHhcNMjUxMjE4MTcwMTM0WhcNMjUxMjI1MTcwMTM0WjAYMRYwFAYD VQQDDA02OTQ0MzM2Zi02ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokjSwkFTazm8ZfSx5k6H/3/iYocTODvEGf6CiF2uXAmrce9NrNumLL5AaBcZ LVkYMMOsD69vhjer3KeB6GTKD/7ae1Sg27yukRi5g246eWK13cUpfhdmy1GEpbEq urSMBNruWRr2gslAIHQlhwT1dvOaqp0FQMe45nUFw3qWKRnfaFgjXhrwtbrYZ06+ 9R59MwszH2deOnq3YkMXHIbCtJnqaL8L+HWE1MWp4qgvsrxHmf6WJQeHiGYhwJXB OI3Ux2Ekf4hqYT9ieL3ee/A7CswWm0swBSyj8cMQ8A6H/T04I8RRffOI1/KO0h26 kn93rPQML1/iyOeeTaJSrhJCSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfcaEcb g7069ESTYVsPSRxOFQA/MB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1 Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZr90gMo99jhUFd3L3NxPED9ZPoZXKNSQxe9ZGJfwn6qzhT1GbDs+1 sRYraZBZR3Xi6isS025FfUKXTy6bCSqKdAngwscoMJVOjt2rxls5HfTQMTf6pvAP H1SQqjWeeLOybR/c894pBNiPO+Qq7sFatzhFG9A+hYm2+GuwMD5ViUzW1K0LktKI 4JZCwC/rNnjygXNK4j+0x4AjBffzbo3KbGH7KGh9pArFIAy3RHN0GjB9j7nPqlTh 24ORrsf0hemfhgq1olQEepB6joDvQaMvFg6bIM2OAxhkHK1XLavLRg2rM9eBa923 RqmHyajdg1lXmDiZwUMGJCBk4wac9dJU -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:02 2025 by rpki-client