This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft File: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json) Hash identifier: D0huazSZ80ayiIbkiWC8OrfadFNlr4UiMPdiEHyAU8Q= Subject key identifier: 2E:9C:6E:A0:5C:5A:7A:6A:32:E9:96:0A:83:AB:0D:B1:07:07:E6:5D Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21 Certificate issuer: /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft Manifest number: 013D Signing time: Fri 05 Dec 2025 02:33:14 +0000 Manifest this update: Fri 05 Dec 2025 02:33:14 +0000 Manifest next update: Fri 12 Dec 2025 02:33:14 +0000 Files and hashes: 1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: REirq9ZcwLGq/cJ2XzFq0WDzySipQ48nljA4vQU2G1g=) 2: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: 00hi9oYWLhxiNt5qG52lfNVHtDojqLF3FRiNHRwXR2Q=) 3: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: ioOqYPYgjl0hBINpNmdRJRFRhysvj1VoKagrJNHAM6c=) 4: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: jcaCq3HWImgQ/NDx2leALcjgxzkZ4FPifc2Ybb4pZFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621 Validity Not Before: Dec 5 02:33:14 2025 GMT Not After : Dec 12 02:33:14 2025 GMT Subject: CN=6932446a-f662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:00:38:82:26:60:c4:92:74:77:25:2f:33:40: ad:b7:bd:83:45:4a:f0:ee:a6:12:ff:e3:ce:39:56: 00:63:81:e6:ce:63:ba:4e:5d:59:9e:c7:96:6e:49: 44:e5:dc:84:4b:b4:cc:5d:e0:f7:5e:44:e6:b7:ab: 8e:24:7c:f0:67:14:ea:54:4d:12:ad:aa:0e:8f:63: 37:ee:e4:55:56:97:9b:16:ad:bc:ee:6d:a7:e4:1c: 7f:eb:ce:97:03:a5:28:68:38:45:0b:b8:f2:82:2f: 9a:e5:93:04:df:6a:59:87:d9:d6:73:c3:7f:af:f8: d7:aa:5f:72:00:b4:3c:fa:0c:87:b4:f1:ea:d1:f5: 93:8c:03:b5:aa:39:ae:90:0a:56:ab:2c:9f:b8:af: 9e:53:0e:d2:ac:42:63:f0:38:48:d9:ad:d0:eb:b0: ad:f5:9c:63:af:da:12:4c:0b:e5:5b:0c:2d:43:5c: 56:6a:93:ff:d0:a5:d6:99:83:d8:51:ed:42:8c:0c: db:83:b1:e7:cd:9f:8b:6f:7d:af:f4:99:15:cb:dd: 9b:57:15:9a:fb:28:f3:f7:bf:d4:52:c0:21:92:c0: 64:31:68:34:e5:8d:b0:3a:5f:e7:b5:78:2e:cc:22: e8:14:ff:72:40:39:c1:1e:32:b9:63:56:a9:79:25: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9C:6E:A0:5C:5A:7A:6A:32:E9:96:0A:83:AB:0D:B1:07:07:E6:5D X509v3 Authority Key Identifier: keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:76:1a:1e:49:d3:57:54:a5:ca:4b:ed:f4:67:91:b8:dd:b5: 61:dd:c7:22:5a:1b:6b:5d:6e:e2:88:50:12:f1:cb:94:7e:b7: 8f:6d:83:23:1b:1b:4b:d4:01:10:e6:cc:7a:79:c7:19:6f:e4: f2:ce:79:7c:8c:6b:b6:20:95:3c:d7:cc:7e:83:1d:ad:2d:0c: d8:51:c6:a8:e6:fe:73:0a:f4:17:04:1e:4c:dc:2d:b9:07:f6: ef:cb:78:05:d0:0b:09:66:92:7e:10:0a:48:79:74:8d:e8:9e: e2:0d:ed:0d:ed:e1:1e:6e:e9:f6:d8:cc:79:8b:42:8f:46:4a: 28:3a:ba:cb:4c:e8:02:b3:9d:42:6c:b7:f1:b6:10:1e:4f:e4: 2b:75:2a:f0:08:19:31:14:6e:04:10:b4:39:2f:86:2f:96:aa: e9:d7:61:f2:ba:bb:c1:b1:1e:0e:7a:40:41:e8:35:44:c9:76: 33:f4:c5:f7:1e:03:50:40:18:fb:68:fa:0b:36:e2:6f:75:3d: 47:89:4b:e9:c4:2a:52:97:3d:5a:be:f3:17:67:5b:c3:f5:7a: 96:5c:e8:03:1e:ec:65:0c:d3:c1:31:76:7d:fd:48:3b:13:76: 5f:24:69:42:c8:a4:65:88:8d:71:7d:a2:2a:9c:6c:3b:8d:aa: f2:dd:e6:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY1MTQxMTAvBgNVBAUTKDRBNEQ3RjU4RUZCRDQ4Qjg2MzZEQjZBMEJGN0MyREU1 MEYwNDM2MjEwHhcNMjUxMjA1MDIzMzE0WhcNMjUxMjEyMDIzMzE0WjAYMRYwFAYD VQQDEw02OTMyNDQ2YS1mNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AA4giZgxJJ0dyUvM0Ctt72DRUrw7qYS/+POOVYAY4HmzmO6Tl1ZnseWbklE 5dyES7TMXeD3XkTmt6uOJHzwZxTqVE0SraoOj2M37uRVVpebFq287m2n5Bx/686X A6UoaDhFC7jygi+a5ZME32pZh9nWc8N/r/jXql9yALQ8+gyHtPHq0fWTjAO1qjmu kApWqyyfuK+eUw7SrEJj8DhI2a3Q67Ct9Zxjr9oSTAvlWwwtQ1xWapP/0KXWmYPY Ue1CjAzbg7HnzZ+Lb32v9JkVy92bVxWa+yjz97/UUsAhksBkMWg05Y2wOl/ntXgu zCLoFP9yQDnBHjK5Y1apeSVazwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6cbqBc WnpqMumWCoOrDbEHB+ZdMB8GA1UdIwQYMBaAFEpNf1jvvUi4Y222oL98LeUPBDYh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjUxNC9CNzczQTE2NEVC QzAxMUVFOUJCM0Y0M0ZDNEY5QUUwMi9TazFfV08tOVNMaGpiYmFndjN3dDVROEVO aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrMV9XTy05U0xoamJiYWd2M3d0NVE4RU5pRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjUxNC9CNzczQTE2NEVCQzAxMUVFOUJCM0Y0M0ZDNEY5QUUwMi9TazFfV08tOVNM aGpiYmFndjN3dDVROEVOaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEdhoeSdNXVKXKS+30Z5G43bVh3cciWhtrXW7iiFAS8cuUfrePbYMj GxtL1AEQ5sx6eccZb+Tyznl8jGu2IJU818x+gx2tLQzYUcao5v5zCvQXBB5M3C25 B/bvy3gF0AsJZpJ+EApIeXSN6J7iDe0N7eEebun22Mx5i0KPRkooOrrLTOgCs51C bLfxthAeT+QrdSrwCBkxFG4EELQ5L4Yvlqrp12HyurvBsR4OekBB6DVEyXYz9MX3 HgNQQBj7aPoLNuJvdT1HiUvpxCpSlz1avvMXZ1vD9XqWXOgDHuxlDNPBMXZ9/Ug7 E3ZfJGlCyKRliI1xfaIqnGw7jary3eZI -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:22 2025 by rpki-client