This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: k5XAKdaGW5oYFIu4MOCw6kEMHM0gva9xDbiLSrHLFvk= Subject key identifier: 1A:6C:A7:5D:07:49:10:FA:76:70:55:D0:28:74:DD:4D:F4:EA:A1:01 Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 06A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 06A3 Signing time: Tue 30 Dec 2025 21:38:46 +0000 Manifest this update: Tue 30 Dec 2025 21:38:46 +0000 Manifest next update: Tue 06 Jan 2026 21:38:46 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: CM84UnVQm0AL2YMKJ6VXj7lae3cRk0dKUPMRD8i1qOI=) 2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 21:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1702 (0x6a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Dec 30 21:38:46 2025 GMT Not After : Jan 6 21:38:46 2026 GMT Subject: CN=69544666-670f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:9f:05:5d:cd:d7:b7:db:6b:0a:d4:5e:45: 2c:4c:fd:d6:e4:79:0f:63:7a:76:41:d1:eb:2a:45: 05:71:64:c3:35:f7:5d:1b:04:fa:2f:3a:9c:13:68: 53:5a:d8:81:78:2f:a8:77:26:ec:ad:86:17:b8:42: 75:48:40:1a:b6:5d:93:2f:64:20:ff:98:d5:db:20: 05:6a:ca:1d:01:dd:63:17:a3:cb:07:0c:0e:55:dc: 3f:ec:ed:a4:51:9f:b6:17:01:75:7a:bf:54:b4:69: eb:0e:cc:d5:be:08:be:d7:f1:a7:76:38:14:59:d8: 25:7a:9d:43:3a:4a:82:ae:3e:fb:72:ec:48:fa:bb: 4a:6e:9a:c8:75:6e:ba:8a:36:0b:7b:17:de:d3:3b: ba:c8:55:08:1a:6d:aa:e4:2a:d0:55:f9:50:3a:e2: b1:ec:3c:35:f2:54:e3:93:98:e6:88:e1:9e:60:1d: 5d:7a:e2:b8:e1:70:ad:95:a1:e6:47:0c:7f:1f:5a: 70:51:e2:91:6f:56:7e:62:30:18:23:6a:ee:25:a9: c8:ee:03:b0:cd:7a:2e:00:bc:94:29:b1:16:42:39: 18:92:0d:7d:4e:e4:8e:dd:24:42:bd:4f:b9:7c:ac: 89:9f:71:e8:96:6e:e0:65:41:a4:01:21:9d:7c:c3: 20:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6C:A7:5D:07:49:10:FA:76:70:55:D0:28:74:DD:4D:F4:EA:A1:01 X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:84:54:08:5d:34:7a:e5:ff:28:00:ea:2f:0a:a4:d5:a7:a1: f9:c4:7c:76:f6:06:cb:30:66:2c:6a:4e:ba:40:51:69:2d:03: cf:af:d1:8d:09:5f:e3:d0:f7:3c:3b:62:a7:a6:c1:d5:3a:97: 07:4e:08:19:0c:c0:b1:cf:61:7d:cd:39:be:b1:a7:16:a6:8b: e0:0b:81:85:eb:3c:aa:b6:c2:8f:44:9b:95:39:89:14:f6:da: ff:35:64:bf:17:ab:d7:5b:ac:68:97:f7:72:e5:26:a3:ee:f7: 1f:91:e8:8c:13:01:f8:8f:cb:ac:a2:a2:be:2f:d0:28:c6:0a: 47:62:b5:21:4a:36:e3:92:9b:87:88:26:d0:3a:0f:b5:57:e3: db:5d:49:cd:88:63:f6:d6:03:9b:a0:e5:5f:79:0f:8b:b4:cf: df:d4:81:c9:11:5e:00:b8:65:b0:ae:f0:8e:8e:c2:e4:96:98: eb:bd:86:0e:c9:21:e7:8b:88:34:c6:4f:ef:df:c0:1c:cd:3f: c6:d3:99:5e:3b:9b:bd:50:b3:bb:1d:61:61:2f:93:ef:6c:62: 5f:fa:c9:5e:52:c3:23:48:6d:b3:e3:47:a5:ec:85:3f:99:65: 9d:d8:03:9a:a5:03:0e:82:66:a7:62:d4:62:d6:d8:2c:89:0f: f9:af:d2:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjUxMjMwMjEzODQ2WhcNMjYwMTA2MjEzODQ2WjAYMRYwFAYD VQQDDA02OTU0NDY2Ni02NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5CfBV3N17fbawrUXkUsTP3W5HkPY3p2QdHrKkUFcWTDNfddGwT6LzqcE2hT WtiBeC+odybsrYYXuEJ1SEAatl2TL2Qg/5jV2yAFasodAd1jF6PLBwwOVdw/7O2k UZ+2FwF1er9UtGnrDszVvgi+1/GndjgUWdglep1DOkqCrj77cuxI+rtKbprIdW66 ijYLexfe0zu6yFUIGm2q5CrQVflQOuKx7Dw18lTjk5jmiOGeYB1deuK44XCtlaHm Rwx/H1pwUeKRb1Z+YjAYI2ruJanI7gOwzXouALyUKbEWQjkYkg19TuSO3SRCvU+5 fKyJn3Holm7gZUGkASGdfMMgTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpsp10H SRD6dnBV0Ch03U306qEBMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAhFQIXTR65f8oAOovCqTVp6H5xHx29gbLMGYsak66QFFpLQPPr9GN CV/j0Pc8O2KnpsHVOpcHTggZDMCxz2F9zTm+sacWpovgC4GF6zyqtsKPRJuVOYkU 9tr/NWS/F6vXW6xol/dy5Saj7vcfkeiMEwH4j8usoqK+L9AoxgpHYrUhSjbjkpuH iCbQOg+1V+PbXUnNiGP21gOboOVfeQ+LtM/f1IHJEV4AuGWwrvCOjsLklpjrvYYO ySHni4g0xk/v38AczT/G05leO5u9ULO7HWFhL5PvbGJf+sleUsMjSG2z40el7IU/ mWWd2AOapQMOgmanYtRi1tgsiQ/5r9Lz -----END CERTIFICATE-----Generated at Wed Dec 31 00:02:47 2025 by rpki-client