This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft File: Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json) Hash identifier: Vy5pvI6a0PXEGD/IuK7jMDrYwRyk+wsqnVmcsZt8gR0= Subject key identifier: C8:9D:E8:15:16:9E:11:8F:60:C3:0A:E6:60:E3:EA:FF:F2:8F:8B:4C Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft Manifest number: 03AF Signing time: Thu 04 Dec 2025 23:38:08 +0000 Manifest this update: Thu 04 Dec 2025 23:38:07 +0000 Manifest next update: Thu 11 Dec 2025 23:38:07 +0000 Files and hashes: 1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: zOsD/pm+ixuRpBXEFBRCLNFz9E+jCIzfvfLIG86vIG0=) 2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: KmnsOS39j0MPrTWgpn3voqhWquulmymnEQE5J4qAsAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: Dec 4 23:38:07 2025 GMT Not After : Dec 11 23:38:07 2025 GMT Subject: CN=69321b5f-3b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:47:a3:0f:f0:e7:b7:a5:c2:88:36:95:43: 9a:d9:9e:7b:38:5d:21:53:0f:fa:b4:0c:1f:28:a9: 22:55:ca:f5:4d:2b:21:4d:2c:e2:29:52:00:ec:47: 9c:c0:d7:41:da:3e:38:cd:9a:8c:c7:ab:de:64:b3: b7:23:0a:27:9b:17:31:1c:33:ec:f2:d2:23:5d:0c: cc:d0:97:ab:ba:33:02:b7:26:e2:7a:48:1b:48:a1: 5d:3a:0d:b5:80:9e:4b:6f:03:b2:32:5d:6c:e6:0f: 09:2c:28:cb:0d:9b:5e:e3:c7:42:67:c4:89:96:90: 91:db:7e:68:ed:df:20:79:95:53:ec:9c:47:8e:1a: df:dc:c4:2e:1b:a4:9b:75:d1:ab:cd:ef:cc:cf:e4: d8:03:71:a0:05:7d:8d:67:c1:f1:29:f3:df:01:e1: 96:50:1e:d5:d0:d9:6c:11:9b:d6:8b:f4:2d:29:d4: ab:ed:a4:c2:17:9b:bb:f9:ca:31:d9:98:9c:ee:62: b5:a4:6c:97:8c:a1:10:5e:14:a4:09:c0:f7:55:9a: 06:71:13:2b:7a:fa:2b:27:36:30:d4:50:ed:c7:e2: c1:9c:64:78:c4:3e:eb:d5:1d:92:21:cd:5b:ce:2e: 4b:d8:9b:32:b6:e8:83:05:e3:94:3f:01:3d:e9:c6: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9D:E8:15:16:9E:11:8F:60:C3:0A:E6:60:E3:EA:FF:F2:8F:8B:4C X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ad:a5:16:0b:33:4d:d8:d8:61:40:54:83:e8:2b:6b:7b:db: 19:6f:e3:3d:9b:73:18:05:07:b5:0d:85:ef:8f:97:ba:32:2b: fc:90:30:fa:33:d7:06:3c:45:85:c0:fe:d6:06:23:2d:ad:c8: d3:c7:25:ee:fd:33:4a:73:db:97:ee:7c:18:8e:a4:7d:0c:df: c8:79:8b:3b:8c:4c:92:0c:e6:5a:a0:c6:e7:2f:bb:a1:9b:e4: ec:54:0f:2c:e7:00:ea:f6:ec:0b:c5:27:45:8e:19:8d:38:70: a5:6d:1c:f2:03:a5:17:fb:95:fa:8c:2f:f6:5e:28:74:b3:42: ae:4d:35:42:f8:cc:3e:cc:3b:ad:6c:f3:7a:af:fa:63:d1:c9: c5:bc:e8:37:aa:2f:d8:91:80:ee:06:31:33:ad:38:7c:0e:5c: e1:ac:5c:e7:e0:1f:ab:4f:da:dd:77:81:19:e1:57:d1:a2:6c: 18:36:84:f0:d3:e8:0d:77:ac:04:bc:9f:4d:8b:17:21:89:9b: 2a:90:21:47:f7:f3:d7:93:c9:0e:cb:a2:85:32:58:e7:17:58: 5e:2e:c4:30:bf:ed:7b:4c:35:56:e2:5e:f1:ab:e9:5d:a7:5e: bc:fb:ef:0a:e1:8c:fc:8d:ea:70:76:31:d8:9d:3c:91:73:bc: 57:d2:39:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjUxMjA0MjMzODA3WhcNMjUxMjExMjMzODA3WjAYMRYwFAYD VQQDEw02OTMyMWI1Zi0zYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SRHow/w57elwog2lUOa2Z57OF0hUw/6tAwfKKkiVcr1TSshTSziKVIA7Eec wNdB2j44zZqMx6veZLO3IwonmxcxHDPs8tIjXQzM0JerujMCtybiekgbSKFdOg21 gJ5LbwOyMl1s5g8JLCjLDZte48dCZ8SJlpCR235o7d8geZVT7JxHjhrf3MQuG6Sb ddGrze/Mz+TYA3GgBX2NZ8HxKfPfAeGWUB7V0NlsEZvWi/QtKdSr7aTCF5u7+cox 2Zic7mK1pGyXjKEQXhSkCcD3VZoGcRMrevorJzYw1FDtx+LBnGR4xD7r1R2SIc1b zi5L2JsytuiDBeOUPwE96cZhlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMid6BUW nhGPYMMK5mDj6v/yj4tMMB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0 ekk4ajNWcVN4cGxOMXdOUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDraUWCzNN2NhhQFSD6Ctre9sZb+M9m3MYBQe1DYXvj5e6Miv8kDD6 M9cGPEWFwP7WBiMtrcjTxyXu/TNKc9uX7nwYjqR9DN/IeYs7jEySDOZaoMbnL7uh m+TsVA8s5wDq9uwLxSdFjhmNOHClbRzyA6UX+5X6jC/2Xih0s0KuTTVC+Mw+zDut bPN6r/pj0cnFvOg3qi/YkYDuBjEzrTh8DlzhrFzn4B+rT9rdd4EZ4VfRomwYNoTw 0+gNd6wEvJ9NixchiZsqkCFH9/PXk8kOy6KFMljnF1heLsQwv+17TDVW4l7xq+ld p168++8K4Yz8jepwdjHYnTyRc7xX0jm8 -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:29 2025 by rpki-client