This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: EwSk2YVTmE/iX8diMay0xaUE6Kh1UMoKKL6ObN0sanM= Subject key identifier: 31:C8:03:5B:BA:D0:53:78:61:4F:75:3D:70:48:C7:52:AB:BE:2A:21 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 0886 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 0854 Signing time: Thu 18 Dec 2025 20:17:15 +0000 Manifest this update: Thu 18 Dec 2025 20:17:14 +0000 Manifest next update: Thu 25 Dec 2025 20:17:14 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: bMBs+Kb3BClTsyY249wg0G7EZ+Dq+QuUWKtsyPxjXuw=) 2: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 6ixsZ+U2NSefvVb36mPlfQcQ8GQSyjxzHzBxsc46ols=) 3: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 1QBFWULUSDuABI4M5A9+pwghN2xnBCwM1ByVsOf4OoA=) 4: 67FF0960076911EF8569F157C4F9AE02.roa (hash: QiY4AYjpAOfJUKdo2bWSjao/45XX+9doU5egkrwqJ78=) 5: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: tNP9+2nzm8wftPIS9csYEXaUq+mqRmQ5CYwfV6WquDE=) 6: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: StO4PQ6ffihfvooMv19fGDjAg2vQbPTwXqeeTRzTihQ=) 7: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: jw0xm0XxEdyeTKSbIjmLJq8kg/lPA+5yh93w4gEj5Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Dec 18 20:17:14 2025 GMT Not After : Dec 25 20:17:14 2025 GMT Subject: CN=6944614a-72da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:6d:41:49:81:86:cd:58:ab:61:0e:3e:5f: 34:5a:4a:f9:41:92:28:29:46:36:a8:fc:8a:09:48: 99:b6:c0:5d:9c:7f:ce:4c:62:14:09:0d:49:50:d2: 92:f4:fb:12:25:d5:e7:3b:1e:6f:7d:56:e4:2f:ff: 59:3d:2f:9d:19:a8:f3:2e:ac:01:bb:53:70:c5:f2: ff:93:45:85:e6:80:d9:f0:10:6e:9e:2d:3a:0a:ac: 8b:0d:54:59:e7:fa:11:a2:67:2b:61:69:2f:5e:e8: 73:5b:d9:41:e5:17:77:17:b2:a6:89:08:36:7c:23: 8d:17:31:ab:23:dd:a3:53:98:5f:a7:8e:85:79:4a: 36:fd:f0:55:7a:ff:57:5f:18:ac:12:23:99:13:5d: 99:e8:25:ee:32:a8:11:5c:cb:2f:8f:b9:ac:f3:c4: 76:3a:d0:48:55:56:8e:65:9f:37:60:ff:40:77:5a: 45:26:c5:6f:8b:ce:04:ae:60:16:8d:95:fa:29:d5: 19:97:d2:7b:56:72:83:b4:f0:c7:09:91:c7:8d:9b: b1:28:f0:a0:51:e2:0b:92:b9:49:1b:a4:34:fb:b0: f1:ab:c1:e6:92:70:26:f9:4a:41:c2:63:63:8f:56: c3:aa:6e:fe:f7:08:d0:49:39:71:af:da:d2:f0:2e: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C8:03:5B:BA:D0:53:78:61:4F:75:3D:70:48:C7:52:AB:BE:2A:21 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:40:9e:fd:4c:dd:2a:45:ec:ef:77:21:8e:29:c7:64:94:02: bc:38:98:d5:fd:90:4f:88:0d:98:33:a5:a7:cc:c8:f8:fb:57: a0:da:80:45:9d:30:1e:b0:da:30:c3:9b:f6:e7:3c:56:f2:45: 6a:91:a9:ac:84:30:92:ab:6b:60:7f:64:7d:65:12:14:17:76: 01:3f:78:c9:68:7a:e7:42:19:ab:1a:e1:36:b9:d2:8e:83:77: 5a:80:0c:b9:a4:f8:ca:b8:ab:9a:ec:2f:0a:7c:7e:10:4b:b0: 3a:01:29:87:c4:85:7f:16:3e:87:3c:8b:de:6d:71:5c:89:64: 18:7b:ae:64:ee:da:69:d7:17:24:2f:83:63:6c:21:1b:e7:18: 33:49:7d:20:f0:8a:98:5a:f2:e2:d2:b8:e2:57:e0:59:41:81: 06:33:e9:0b:a7:7a:12:17:dc:18:77:6b:e4:aa:2f:ac:a4:5a: d5:92:f5:ae:b8:3a:a6:7f:a7:9d:e7:9a:e9:2e:c0:f6:3d:b3: cb:8a:be:33:b8:22:37:82:db:a8:6f:3b:0c:f4:f2:83:7a:2d: b7:9d:a9:e4:40:0d:be:29:d5:ca:b8:a3:38:2c:f7:23:c2:61: 27:06:ac:04:70:64:1a:ee:38:9b:0d:2e:1d:0d:7d:6e:ab:3a: dc:e1:5d:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUxMjE4MjAxNzE0WhcNMjUxMjI1MjAxNzE0WjAYMRYwFAYD VQQDDA02OTQ0NjE0YS03MmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhyptQUmBhs1Yq2EOPl80Wkr5QZIoKUY2qPyKCUiZtsBdnH/OTGIUCQ1JUNKS 9PsSJdXnOx5vfVbkL/9ZPS+dGajzLqwBu1NwxfL/k0WF5oDZ8BBuni06CqyLDVRZ 5/oRomcrYWkvXuhzW9lB5Rd3F7KmiQg2fCONFzGrI92jU5hfp46FeUo2/fBVev9X XxisEiOZE12Z6CXuMqgRXMsvj7ms88R2OtBIVVaOZZ83YP9Ad1pFJsVvi84ErmAW jZX6KdUZl9J7VnKDtPDHCZHHjZuxKPCgUeILkrlJG6Q0+7Dxq8HmknAm+UpBwmNj j1bDqm7+9wjQSTlxr9rS8C7AqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHIA1u6 0FN4YU91PXBIx1KrviohMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYQJ79TN0qRezvdyGOKcdklAK8OJjV/ZBPiA2YM6WnzMj4+1eg2oBF nTAesNoww5v25zxW8kVqkamshDCSq2tgf2R9ZRIUF3YBP3jJaHrnQhmrGuE2udKO g3dagAy5pPjKuKua7C8KfH4QS7A6ASmHxIV/Fj6HPIvebXFciWQYe65k7tpp1xck L4NjbCEb5xgzSX0g8IqYWvLi0rjiV+BZQYEGM+kLp3oSF9wYd2vkqi+spFrVkvWu uDqmf6ed55rpLsD2PbPLir4zuCI3gtuobzsM9PKDei23nankQA2+KdXKuKM4LPcj wmEnBqwEcGQa7jibDS4dDX1uqzrc4V1e -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:19 2025 by rpki-client