This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json) Hash identifier: HbHqrltT7sMu6pSOvmvhX96OAArxguo/hJNIFRHBTb0= Subject key identifier: 33:FB:79:7F:86:03:9B:CD:35:75:77:2E:A8:D5:F2:E4:39:77:20:A7 Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft Manifest number: 0235 Signing time: Fri 05 Dec 2025 00:17:43 +0000 Manifest this update: Fri 05 Dec 2025 00:17:43 +0000 Manifest next update: Fri 12 Dec 2025 00:17:43 +0000 Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: dsP/fMkrbYweRTYQXImawtg/7sYCFQ5f+ZTYTkbJU4k=) 2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: aXVsQ3eTDOFY8R9G8hcsnCxP/cyR26ThIRn0dDawEqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Validity Not Before: Dec 5 00:17:43 2025 GMT Not After : Dec 12 00:17:43 2025 GMT Subject: CN=693224a7-df05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:1a:e2:9f:95:d4:be:7d:7f:02:58:d8:f4: 98:57:2b:21:86:9b:bc:8d:ac:f4:89:a1:ee:d1:e9: 27:ce:d8:c6:b1:ef:72:cd:40:d1:f1:eb:53:91:81: 8c:ca:2a:3d:4d:31:60:72:f4:fd:21:6a:51:5c:ff: e1:24:32:3f:92:ae:f5:11:84:1c:3f:47:35:40:a6: 8b:b5:5c:4a:99:26:2a:92:39:39:32:40:4c:b6:3c: bc:8f:4b:e4:9a:07:40:09:07:7a:85:90:3f:e7:7d: ca:dc:e1:27:b0:2e:fe:53:7b:e7:05:dc:01:b8:a0: 0b:8e:b0:89:26:6a:42:db:cb:86:e9:aa:45:74:c6: b3:41:b6:de:ee:d0:0a:fd:c9:e4:46:32:14:60:46: db:6a:a0:e9:25:02:ce:56:08:22:c7:44:b9:bf:d2: 09:0b:5a:cf:45:3c:0a:63:48:62:04:27:12:95:74: 16:ab:d4:6f:a8:07:70:3f:09:73:c9:9d:82:32:f2: 09:38:fb:6b:86:c5:c3:90:4a:83:10:70:98:ed:b1: c2:79:44:05:e3:56:2f:31:10:08:51:88:f8:e4:2b: 7f:96:43:f1:dc:bb:ee:ca:b5:f6:2e:b3:99:0f:82: 51:8e:37:e9:8a:05:1e:40:c0:08:78:be:e2:05:66: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:79:7F:86:03:9B:CD:35:75:77:2E:A8:D5:F2:E4:39:77:20:A7 X509v3 Authority Key Identifier: keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cc:05:0b:1f:51:14:7d:e9:74:e6:65:0c:61:55:87:79:17: 94:46:c1:ff:66:9a:05:86:e3:04:bd:cb:9a:f0:be:1e:6a:40: cd:90:b4:1a:f4:e4:01:bc:b5:22:13:39:7b:af:ac:2d:08:23: 6f:38:9b:1d:43:23:59:3c:08:61:4d:b7:60:10:5d:de:c9:15: 5b:0e:eb:fa:59:ee:c8:c5:b7:73:ea:99:1d:01:ed:de:81:bf: bb:f5:f8:cd:0a:21:3d:1d:a1:d6:d3:47:68:f2:f5:d1:24:f3: 9a:29:d1:57:ea:c3:69:27:a5:2a:46:14:4f:16:16:4d:f5:64: 47:54:3a:c3:e3:8c:61:6e:37:d5:d2:9e:57:bb:36:34:55:b2: e3:e2:0d:25:84:7e:f5:a7:e8:3c:29:1a:69:57:10:13:60:a4: 0e:d4:a9:78:8c:2a:ea:37:4f:4a:c9:10:a4:66:28:72:5a:f2: f1:d8:0b:33:4c:13:8e:5b:b3:7c:22:87:3a:37:2b:94:ec:74: f0:83:f6:f4:9a:79:3e:2d:75:02:4d:c8:1a:a9:83:8e:93:be: ee:c0:9e:f9:f6:69:bd:cb:f1:d9:15:2d:fa:3b:c3:75:35:c8: 3b:a6:ff:20:d7:36:28:5c:ed:04:c8:fc:15:b1:ea:57:dd:fa: 9a:96:d7:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RENjYwNjRCRTky NkVDNzRDOUYwHhcNMjUxMjA1MDAxNzQzWhcNMjUxMjEyMDAxNzQzWjAYMRYwFAYD VQQDEw02OTMyMjRhNy1kZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu4a4p+V1L59fwJY2PSYVyshhpu8jaz0iaHu0eknztjGse9yzUDR8etTkYGM yio9TTFgcvT9IWpRXP/hJDI/kq71EYQcP0c1QKaLtVxKmSYqkjk5MkBMtjy8j0vk mgdACQd6hZA/533K3OEnsC7+U3vnBdwBuKALjrCJJmpC28uG6apFdMazQbbe7tAK /cnkRjIUYEbbaqDpJQLOVggix0S5v9IJC1rPRTwKY0hiBCcSlXQWq9RvqAdwPwlz yZ2CMvIJOPtrhsXDkEqDEHCY7bHCeUQF41YvMRAIUYj45Ct/lkPx3LvuyrX2LrOZ D4JRjjfpigUeQMAIeL7iBWbYtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDP7eX+G A5vNNXV3LqjV8uQ5dyCnMB8GA1UdIwQYMBaAFLELT0ND+q4rLE091mBkvpJux0yf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0UyRi8wQkRFQTUyODcw RTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJpc3NUVDNXWUdTLWttN0hU SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRdFBRMFA2cmlzc1RUM1dZR1Mta203SFRKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0UyRi8wQkRFQTUyODcwRTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJp c3NUVDNXWUdTLWttN0hUSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnzAULH1EUfel05mUMYVWHeReURsH/ZpoFhuMEvcua8L4eakDNkLQa 9OQBvLUiEzl7r6wtCCNvOJsdQyNZPAhhTbdgEF3eyRVbDuv6We7Ixbdz6pkdAe3e gb+79fjNCiE9HaHW00do8vXRJPOaKdFX6sNpJ6UqRhRPFhZN9WRHVDrD44xhbjfV 0p5XuzY0VbLj4g0lhH71p+g8KRppVxATYKQO1Kl4jCrqN09KyRCkZihyWvLx2Asz TBOOW7N8Ioc6NyuU7HTwg/b0mnk+LXUCTcgaqYOOk77uwJ759mm9y/HZFS36O8N1 Ncg7pv8g1zYoXO0EyPwVsepX3fqalte2 -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:07 2025 by rpki-client