This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json) Hash identifier: V5JcCTvJlr/JPCzvXTRUbon/PFDXKhIgqfvahlG45yg= Subject key identifier: E6:C2:77:D9:F6:FA:66:01:43:EB:9C:4D:6C:90:00:3E:F5:4B:65:F9 Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft Manifest number: 0116 Signing time: Sun 21 Dec 2025 03:59:55 +0000 Manifest this update: Sun 21 Dec 2025 03:59:55 +0000 Manifest next update: Sun 28 Dec 2025 03:59:55 +0000 Files and hashes: 1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: cdo1oJKncC+y0LrkyuHeuyggTsx7FaB1cPi/ifbzjcI=) 2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: EPqvpxlJgwQtY4nw1cFwMuEYfLLzI7V4J9A9JpW8gvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Validity Not Before: Dec 21 03:59:55 2025 GMT Not After : Dec 28 03:59:55 2025 GMT Subject: CN=694770bb-9d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:77:dd:14:7a:e1:4d:d8:09:76:c3:80:0b:67: 88:47:f8:3b:1b:f7:8e:6e:d3:e8:35:00:3b:b9:9d: 6a:c7:53:c8:cb:7e:f8:64:89:c3:19:75:5c:8e:e2: ef:56:eb:74:d8:8a:6d:52:36:cb:8d:77:53:55:04: ee:88:f6:4a:a8:df:f8:36:8a:26:4a:dc:b6:9f:c3: fc:75:67:b3:b6:3a:11:a6:74:0d:e0:f6:73:9a:7f: aa:a4:3b:f5:37:85:85:cc:d8:8a:90:c0:8b:ab:39: c2:97:f8:11:5f:e3:40:1c:3f:38:21:c7:b0:ae:84: 9c:93:92:ce:da:76:0b:13:dc:06:ad:87:59:dd:01: 25:26:95:0a:92:b1:22:6f:86:8f:06:7b:44:b5:fa: ec:05:64:d9:d5:16:26:85:55:65:5f:3f:22:83:6a: fe:ec:92:52:95:19:71:04:0d:50:53:19:a6:d8:92: 4a:d3:48:5b:bb:63:57:df:5b:d9:c6:a5:f4:78:68: df:77:44:bc:76:cf:05:c9:70:21:01:de:ba:73:f7: 9b:2c:0a:db:28:41:f8:32:58:ce:cc:a5:60:8d:99: d0:37:b5:ca:7f:49:46:d1:3b:61:57:75:d4:56:ec: 8a:1c:5a:b3:01:82:b3:a0:0c:21:39:0b:39:d0:3f: a3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C2:77:D9:F6:FA:66:01:43:EB:9C:4D:6C:90:00:3E:F5:4B:65:F9 X509v3 Authority Key Identifier: keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:db:de:9f:5b:d2:5e:0e:3b:70:b3:a3:74:44:df:f2:d4:55: 17:e0:ba:05:d4:77:6a:43:7b:25:e0:85:ce:32:52:63:38:b6: 8b:66:75:20:c4:f8:0e:5a:5d:cd:7f:99:c8:04:11:4f:6a:51: 0d:a4:33:57:f5:45:c0:4a:3d:a3:d0:a5:77:ae:e1:9e:d4:93: 14:57:73:b1:00:1e:94:80:71:46:4b:ae:4e:ca:b2:9a:2e:68: 7d:57:71:ab:c3:1f:2f:b5:4e:90:be:2f:c0:63:f5:48:43:f6: fe:f5:cf:99:f0:2d:49:7f:ed:f8:d2:44:6e:06:76:88:0a:a0: bb:01:ea:fe:09:3c:78:97:08:38:d2:e3:de:c1:80:24:b8:5f: b1:39:1f:e9:5e:e0:ef:5e:6f:c3:57:75:d1:51:e7:7c:03:88: 0b:a6:59:ac:27:64:67:3f:b4:d7:82:28:97:f3:be:3f:df:02: da:97:54:b4:41:d1:8a:0f:53:61:69:ec:f9:10:b1:2b:60:a1: 1a:61:72:b1:7f:35:83:a5:6f:c7:31:e3:9f:9d:d0:f8:3a:6c: c5:0e:9b:9c:e9:f6:cd:24:2b:e8:3c:02:8f:26:5a:23:c6:11: a7:cf:88:34:21:19:1a:27:8b:6b:2b:05:3d:77:20:13:5e:88: 84:da:d5:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKEIyRTg4RUREMzYxQkNDNjE5NEM5N0Y2OEM0NzI1MTgw RkYwMkY3MjQwHhcNMjUxMjIxMDM1OTU1WhcNMjUxMjI4MDM1OTU1WjAYMRYwFAYD VQQDDA02OTQ3NzBiYi05ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3fdFHrhTdgJdsOAC2eIR/g7G/eObtPoNQA7uZ1qx1PIy374ZInDGXVcjuLv Vut02IptUjbLjXdTVQTuiPZKqN/4NoomSty2n8P8dWeztjoRpnQN4PZzmn+qpDv1 N4WFzNiKkMCLqznCl/gRX+NAHD84IcewroSck5LO2nYLE9wGrYdZ3QElJpUKkrEi b4aPBntEtfrsBWTZ1RYmhVVlXz8ig2r+7JJSlRlxBA1QUxmm2JJK00hbu2NX31vZ xqX0eGjfd0S8ds8FyXAhAd66c/ebLArbKEH4MljOzKVgjZnQN7XKf0lG0TthV3XU VuyKHFqzAYKzoAwhOQs50D+jhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObCd9n2 +mYBQ+ucTWyQAD71S2X5MB8GA1UdIwQYMBaAFLLojt02G8xhlMl/aMRyUYD/Avck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9CRDg1OUY5NjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpHR1V5WDlveEhKUmdQOEM5 eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1aU8zVFliekdHVXlYOW94SEpSZ1A4Qzl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9CRDg1OUY5NjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpH R1V5WDlveEhKUmdQOEM5eVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe296fW9JeDjtws6N0RN/y1FUX4LoF1HdqQ3sl4IXOMlJjOLaLZnUg xPgOWl3Nf5nIBBFPalENpDNX9UXASj2j0KV3ruGe1JMUV3OxAB6UgHFGS65OyrKa Lmh9V3Grwx8vtU6Qvi/AY/VIQ/b+9c+Z8C1Jf+340kRuBnaICqC7Aer+CTx4lwg4 0uPewYAkuF+xOR/pXuDvXm/DV3XRUed8A4gLplmsJ2RnP7TXgiiX874/3wLal1S0 QdGKD1Nhaez5ELErYKEaYXKxfzWDpW/HMeOfndD4OmzFDpuc6fbNJCvoPAKPJloj xhGnz4g0IRkaJ4trKwU9dyATXoiE2tWE -----END CERTIFICATE-----Generated at Mon Dec 22 07:06:11 2025 by rpki-client