This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json) Hash identifier: ztTxuTFkLtzGBsuuvPUrJmJJYYfXJu50/z9kidhdFII= Subject key identifier: 11:08:24:4B:38:0B:F4:85:63:F6:B6:F9:B8:F1:8C:B4:18:85:63:AC Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Certificate serial: 0F14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft Manifest number: 0F0B Signing time: Sat 06 Dec 2025 17:04:03 +0000 Manifest this update: Sat 06 Dec 2025 17:04:03 +0000 Manifest next update: Sat 13 Dec 2025 17:04:03 +0000 Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: hjVB+e+6Kel82CABSB/JzsOAwIxUOrsfBbQaIKT7jsQ=) 2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: IptQh9J7jeiBWTQD/hPt8ei062oDoKw0nZ49KCuQKMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3860 (0xf14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Validity Not Before: Dec 6 17:04:03 2025 GMT Not After : Dec 13 17:04:03 2025 GMT Subject: CN=69346203-a6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:26:3c:31:43:5b:e4:c9:ad:88:8c:bc:76:87: 2e:06:c5:87:ef:3e:38:ef:f8:9e:bf:68:dd:04:c1: 74:19:90:18:6d:76:4b:44:1e:46:d5:ae:e6:04:7b: 90:31:9b:c6:67:e9:a0:fe:82:a4:ec:b2:30:2c:90: d4:19:51:ee:8d:5c:60:f6:d7:7d:a3:84:af:50:c5: ce:a2:b0:a0:4b:d9:b6:39:a1:7a:79:9d:a0:ae:9a: 57:f3:3f:eb:27:20:86:17:31:42:a3:1a:bd:2a:4c: f9:16:0e:c9:ae:4c:df:5f:6f:7d:9e:79:45:fb:de: 43:89:43:f4:51:c9:45:d6:fd:b1:3c:e3:35:df:87: c1:9f:f4:2b:44:a4:dc:0d:9c:2d:ba:8d:d1:da:5f: 21:b8:a5:d6:a0:43:3c:ba:e1:f3:39:af:c9:b7:38: 82:89:a1:8e:ec:a3:d0:b2:0e:61:c0:79:7d:c4:6d: e3:81:85:b4:87:27:ca:93:65:0f:fe:5a:bc:ec:57: 6b:a0:fa:14:6c:c8:66:67:b1:95:89:23:ab:d1:c8: 4b:c4:9e:e6:9a:5a:c8:dd:f3:00:a8:36:7a:f6:5a: 68:f4:1e:af:ce:6a:74:61:fe:34:84:db:1a:8d:0c: 2c:62:11:82:af:dc:ff:6e:1d:42:7e:a4:46:16:32: 33:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:08:24:4B:38:0B:F4:85:63:F6:B6:F9:B8:F1:8C:B4:18:85:63:AC X509v3 Authority Key Identifier: keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ec:a1:75:a8:52:00:cc:04:8b:4b:5e:b7:aa:b6:8c:63:d6: e6:cc:b2:6c:d7:50:a0:28:ef:f8:f2:9b:fe:df:ba:c4:e4:bf: 47:4d:55:33:60:f3:dd:00:12:b4:fb:3b:99:8e:7e:4c:72:68: 5a:32:84:e9:50:e8:af:30:1b:5e:85:78:d2:3b:f1:3d:f8:ae: 48:b1:6f:38:e7:23:ba:86:6f:78:21:27:f1:c8:a4:d6:9b:a9: 16:6f:ec:00:27:c3:54:35:7d:41:e0:a6:60:8e:d7:a3:c2:c4: 2a:d8:99:33:b0:e5:59:d2:e6:d2:53:1e:b7:f9:c4:1a:3f:a2: b4:19:71:ec:d0:a5:bd:73:21:09:74:9b:d3:e1:24:fd:26:ab: 3a:9f:51:6a:2f:b0:8b:b6:34:42:63:aa:e9:e9:f2:03:37:ec: e0:ae:79:9a:6b:5f:67:4e:5f:ec:09:f7:ce:cc:94:b5:60:e5: a7:24:91:c6:22:59:25:3d:08:d0:9c:d5:31:09:34:ef:51:98: 29:5d:87:5e:d7:e1:f1:59:49:a4:2e:de:2e:00:bc:50:9f:08: 71:13:22:a6:ab:82:a6:b6:28:b9:c4:e2:c0:2b:7e:17:6d:e8: 58:81:81:57:38:e9:00:de:cb:63:fb:72:f9:4c:1b:78:3e:df: 7c:1e:46:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0 NDk5NUIxRTAwHhcNMjUxMjA2MTcwNDAzWhcNMjUxMjEzMTcwNDAzWjAYMRYwFAYD VQQDEw02OTM0NjIwMy1hNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSY8MUNb5MmtiIy8docuBsWH7z447/iev2jdBMF0GZAYbXZLRB5G1a7mBHuQ MZvGZ+mg/oKk7LIwLJDUGVHujVxg9td9o4SvUMXOorCgS9m2OaF6eZ2grppX8z/r JyCGFzFCoxq9Kkz5Fg7JrkzfX299nnlF+95DiUP0UclF1v2xPOM134fBn/QrRKTc DZwtuo3R2l8huKXWoEM8uuHzOa/JtziCiaGO7KPQsg5hwHl9xG3jgYW0hyfKk2UP /lq87FdroPoUbMhmZ7GViSOr0chLxJ7mmlrI3fMAqDZ69lpo9B6vzmp0Yf40hNsa jQwsYhGCr9z/bh1CfqRGFjIzPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEIJEs4 C/SFY/a2+bjxjLQYhWOsMB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ R19tUWcyUjQ0WmxFbVZzZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh7KF1qFIAzASLS163qraMY9bmzLJs11CgKO/48pv+37rE5L9HTVUz YPPdABK0+zuZjn5McmhaMoTpUOivMBtehXjSO/E9+K5IsW845yO6hm94ISfxyKTW m6kWb+wAJ8NUNX1B4KZgjtejwsQq2JkzsOVZ0ubSUx63+cQaP6K0GXHs0KW9cyEJ dJvT4ST9Jqs6n1FqL7CLtjRCY6rp6fIDN+zgrnmaa19nTl/sCffOzJS1YOWnJJHG IlklPQjQnNUxCTTvUZgpXYde1+HxWUmkLt4uALxQnwhxEyKmq4Kmtii5xOLAK34X behYgYFXOOkA3stj+3L5TBt4Pt98HkZp -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:32 2025 by rpki-client