This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json) Hash identifier: ozsCyRpTINyUgObDTnL09omwMKexf950SZpNh9RY0k4= Subject key identifier: 5A:D6:01:9B:52:D2:22:6F:12:ED:14:1E:D7:99:8F:0E:9E:9C:7D:D8 Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft Manifest number: 04ED Signing time: Sat 06 Dec 2025 22:29:12 +0000 Manifest this update: Sat 06 Dec 2025 22:29:11 +0000 Manifest next update: Sat 13 Dec 2025 22:29:11 +0000 Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: r1kHx1l9Ws5b0djWOSfyrnj4W7KljYX1iah0n2U0+XU=) 2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: NHQlMr+Fs6uSbsfQLgv2iNTEsZYm+SpOv0roctNIT7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Validity Not Before: Dec 6 22:29:11 2025 GMT Not After : Dec 13 22:29:11 2025 GMT Subject: CN=6934ae38-ce83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:b2:c2:1e:d1:b2:11:85:35:79:1d:de:ac: b8:75:07:11:65:11:60:30:00:3b:17:76:ce:7d:76: 15:0e:e8:20:18:0c:49:97:6b:2a:ef:d0:5a:53:67: b6:f0:4a:07:91:3f:90:54:fb:71:f7:19:fd:a3:fe: f7:92:99:9a:32:b0:31:69:1a:88:9e:57:23:97:d9: 27:0f:6a:e6:77:db:68:8e:d6:db:b5:46:8f:28:70: 18:4a:4a:54:e1:a0:b4:35:d0:11:3a:5d:01:91:cb: b1:44:5d:a6:4c:62:d3:93:c6:02:b1:1d:2f:9b:b8: 95:6b:15:57:1b:f8:ee:cc:8f:90:e5:c9:f4:72:bf: 90:7d:4c:5f:69:09:8a:7c:48:ce:69:00:bf:05:62: 84:1b:df:d3:d9:97:e7:b1:b9:13:c2:26:56:fd:6b: ac:07:22:36:94:d0:0f:5c:eb:f5:ae:d3:d8:6d:5f: a8:a1:21:6e:8c:c3:7c:e3:6a:34:2a:e3:ae:89:a7: 27:1c:2c:1e:b0:21:74:5c:ce:4e:77:3d:68:0e:24: 5f:ba:ec:8f:ea:f7:d5:a7:73:75:c8:7f:7a:61:f3: 81:31:b9:55:f4:ff:3e:8d:46:4c:cc:85:d6:a0:5b: 0e:81:05:2c:b9:64:a7:40:da:b9:e5:c9:0d:4f:1f: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D6:01:9B:52:D2:22:6F:12:ED:14:1E:D7:99:8F:0E:9E:9C:7D:D8 X509v3 Authority Key Identifier: keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:54:40:8d:ee:b6:d5:28:48:dd:99:e9:bb:08:78:43:8a:d4: db:07:e2:a4:0b:fc:d5:a6:ac:20:ed:c1:ae:b5:db:c0:f8:f4: bb:48:69:ed:79:95:86:1a:97:05:af:22:3e:eb:02:ae:81:e8: 56:55:d1:ae:2a:fe:e9:fb:2b:ec:b3:45:4e:2b:6a:f7:2b:63: 22:d1:ad:2b:2c:17:7f:a0:4e:15:f2:a9:26:5e:a2:2d:9d:60: d3:66:db:53:f9:d3:1c:31:ec:76:2d:dd:57:ad:f9:2b:4a:6a: 65:94:b7:8a:5b:2b:09:04:79:f9:54:0d:96:e4:79:03:be:67: a8:ba:23:ab:40:95:46:b7:a6:de:bf:59:41:17:1f:cb:7d:fd: 44:46:81:67:54:d1:57:3e:a1:91:95:c0:5e:a2:ec:1b:61:5e: b5:83:d7:9d:68:3c:d9:2c:e4:09:8d:be:b0:ac:95:52:6e:da: 9f:30:5a:8a:25:5c:48:3b:04:5e:ff:4a:42:b7:79:91:74:5e: 16:64:97:53:ea:f0:df:7a:f6:b1:87:51:a6:b8:79:de:de:02: 01:65:84:05:09:1e:08:8f:ca:65:01:15:35:f8:85:f1:49:bf: fa:4f:39:63:d0:32:9b:5f:71:54:d3:4c:ee:d9:a3:f8:92:2a: 1c:14:9f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxQ0IxMTAvBgNVBAUTKDQ4QzVEQjVBMUJCREVCMjIxMTA1OEMwN0QyNzY3MEI0 MkI2RDg3NkEwHhcNMjUxMjA2MjIyOTExWhcNMjUxMjEzMjIyOTExWjAYMRYwFAYD VQQDEw02OTM0YWUzOC1jZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAaywh7RshGFNXkd3qy4dQcRZRFgMAA7F3bOfXYVDuggGAxJl2sq79BaU2e2 8EoHkT+QVPtx9xn9o/73kpmaMrAxaRqInlcjl9knD2rmd9tojtbbtUaPKHAYSkpU 4aC0NdAROl0BkcuxRF2mTGLTk8YCsR0vm7iVaxVXG/juzI+Q5cn0cr+QfUxfaQmK fEjOaQC/BWKEG9/T2ZfnsbkTwiZW/WusByI2lNAPXOv1rtPYbV+ooSFujMN842o0 KuOuiacnHCwesCF0XM5Odz1oDiRfuuyP6vfVp3N1yH96YfOBMblV9P8+jUZMzIXW oFsOgQUsuWSnQNq55ckNTx8dfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrWAZtS 0iJvEu0UHteZjw6enH3YMB8GA1UdIwQYMBaAFEjF21obvesiEQWMB9J2cLQrbYdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFDQi9FMzhFMzI4MDQw NUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5SVJCWXdIMG5ad3RDdHRo Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNWGJXaHU5NnlJUkJZd0gwblp3dEN0dGgyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFDQi9FMzhFMzI4MDQwNUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5 SVJCWXdIMG5ad3RDdHRoMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbVECN7rbVKEjdmem7CHhDitTbB+KkC/zVpqwg7cGutdvA+PS7SGnt eZWGGpcFryI+6wKugehWVdGuKv7p+yvss0VOK2r3K2Mi0a0rLBd/oE4V8qkmXqIt nWDTZttT+dMcMex2Ld1XrfkrSmpllLeKWysJBHn5VA2W5HkDvmeouiOrQJVGt6be v1lBFx/Lff1ERoFnVNFXPqGRlcBeouwbYV61g9edaDzZLOQJjb6wrJVSbtqfMFqK JVxIOwRe/0pCt3mRdF4WZJdT6vDfevaxh1GmuHne3gIBZYQFCR4Ij8plARU1+IXx Sb/6Tzlj0DKbX3FU00zu2aP4kiocFJ/Z -----END CERTIFICATE-----Generated at Sun Dec 7 04:46:28 2025 by rpki-client