This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: Z4PCk+w049Ooh8L3eV58aVMq7PU4HE/cevA+QdJod24= Subject key identifier: 4B:BE:6A:84:CE:AC:6B:80:EC:97:51:FA:38:DA:C1:A7:7D:AB:19:24 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 06C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 069E Signing time: Sat 06 Dec 2025 21:28:03 +0000 Manifest this update: Sat 06 Dec 2025 21:28:02 +0000 Manifest next update: Sat 13 Dec 2025 21:28:02 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: nLTdbA8OAWqgoKDyYJvlsGTIaosqx1F038+UisgrIYM=) 2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: j+BVCzGmHhrmZNWRNyRwqjg6Au56wUjhsrKVbEHpiXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: Dec 6 21:28:02 2025 GMT Not After : Dec 13 21:28:02 2025 GMT Subject: CN=69349fe2-0d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:9c:c4:b4:22:04:9d:71:c8:2b:0e:a7:01: 25:d0:73:3a:11:50:31:69:4e:6e:1f:a2:dc:8b:8b: 9f:b6:47:37:8b:4f:37:32:6c:c9:49:99:fb:a8:36: 0f:a0:14:eb:95:9d:e4:60:32:ae:b5:80:f3:6f:de: 84:bf:8b:ae:bd:ba:26:4e:9e:fa:97:63:1f:bf:de: e3:ce:e2:75:40:1d:8c:28:f9:2a:7c:b1:0b:3d:c1: 7a:95:9e:95:03:8e:0d:0a:83:ad:97:3d:5a:1f:28: 99:0a:78:05:17:d7:31:43:41:54:53:e7:61:7f:82: 42:c0:14:f0:0f:2b:73:9f:a9:3e:cd:2b:1f:97:8b: 3a:7c:32:2f:97:5d:bc:bc:e6:69:5b:8f:55:93:8e: 08:75:d9:bd:f7:0a:ea:4e:78:35:b9:6c:8a:9a:7f: 96:00:4b:cd:82:88:b1:52:c8:b4:e8:58:22:92:b6: b7:67:77:d0:24:da:c7:40:12:c3:5c:ac:be:63:ba: c0:6d:85:fd:ad:17:59:6e:c6:9d:db:e4:c5:d8:ef: 10:de:e2:9e:a0:d4:6a:11:ee:3d:41:8e:1f:83:06: e6:7d:fa:a3:87:d4:3f:77:9a:38:c7:c8:69:ec:a4: 27:61:2e:0f:15:11:bb:b4:dc:8a:40:b8:d7:ac:6e: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BE:6A:84:CE:AC:6B:80:EC:97:51:FA:38:DA:C1:A7:7D:AB:19:24 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f2:09:02:37:10:4c:7b:e3:1a:97:a3:3a:f1:b0:03:57:93: 46:26:63:d3:70:8e:49:82:07:eb:c0:26:2c:a4:3f:7f:42:ff: c3:8c:2d:22:c9:fa:fe:fe:c6:e9:5b:fe:e3:6b:9e:bd:5f:3c: 51:08:a0:63:ad:71:f6:4b:0d:86:2f:29:b2:a0:a5:6e:14:8e: 34:75:7f:ab:6e:e8:9f:43:21:c3:00:e4:e2:cd:19:c4:90:87: 84:25:6e:3c:d0:c7:18:7c:4f:4b:63:56:e0:7b:33:96:c6:ba: 68:1e:ab:25:07:65:bb:fd:4f:72:49:0d:c8:a1:e4:33:6c:e9: 8d:4d:a0:5d:99:10:19:27:e9:c4:d9:ed:ce:4f:7b:d5:79:c4: 74:27:c5:95:2c:eb:ea:87:48:12:4f:f4:d3:e8:7f:1a:41:90: 70:6b:0b:f0:b1:27:4c:8a:8d:11:95:47:56:54:f7:23:4a:92: 9d:eb:b7:ff:d2:6b:b6:a4:ab:75:2d:96:4a:98:b5:d5:e4:86: 4f:44:75:86:1b:10:cd:2c:3b:88:24:d6:4e:45:29:a2:e6:ab: 27:90:89:be:24:b3:f9:12:b7:e0:1b:91:25:e9:07:12:ca:18: b3:36:9b:0b:53:96:f6:c9:9a:cd:31:ca:e3:9d:17:f8:c6:f0: a1:f4:e2:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjUxMjA2MjEyODAyWhcNMjUxMjEzMjEyODAyWjAYMRYwFAYD VQQDEw02OTM0OWZlMi0wZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvacxLQiBJ1xyCsOpwEl0HM6EVAxaU5uH6Lci4uftkc3i083MmzJSZn7qDYP oBTrlZ3kYDKutYDzb96Ev4uuvbomTp76l2Mfv97jzuJ1QB2MKPkqfLELPcF6lZ6V A44NCoOtlz1aHyiZCngFF9cxQ0FUU+dhf4JCwBTwDytzn6k+zSsfl4s6fDIvl128 vOZpW49Vk44Iddm99wrqTng1uWyKmn+WAEvNgoixUsi06Fgikra3Z3fQJNrHQBLD XKy+Y7rAbYX9rRdZbsad2+TF2O8Q3uKeoNRqEe49QY4fgwbmffqjh9Q/d5o4x8hp 7KQnYS4PFRG7tNyKQLjXrG5TbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu+aoTO rGuA7JdR+jjawad9qxkkMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB8gkCNxBMe+Mal6M68bADV5NGJmPTcI5JggfrwCYspD9/Qv/DjC0i yfr+/sbpW/7ja569XzxRCKBjrXH2Sw2GLymyoKVuFI40dX+rbuifQyHDAOTizRnE kIeEJW480McYfE9LY1bgezOWxrpoHqslB2W7/U9ySQ3IoeQzbOmNTaBdmRAZJ+nE 2e3OT3vVecR0J8WVLOvqh0gST/TT6H8aQZBwawvwsSdMio0RlUdWVPcjSpKd67f/ 0mu2pKt1LZZKmLXV5IZPRHWGGxDNLDuIJNZORSmi5qsnkIm+JLP5ErfgG5El6QcS yhizNpsLU5b2yZrNMcrjnRf4xvCh9OJd -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:40 2025 by rpki-client