This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: tE1GKp+7v70FXDaRLAiibb02P2vMxB4BcSzMtQV2/u8= Subject key identifier: 06:7C:10:70:51:0C:5A:65:2A:08:CB:AA:FA:A5:8B:16:FB:AA:C8:C2 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 1386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 137C Signing time: Sat 06 Dec 2025 16:31:53 +0000 Manifest this update: Sat 06 Dec 2025 16:31:53 +0000 Manifest next update: Sat 13 Dec 2025 16:31:53 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: x9CxtBZmT0BOqI5etuENq+7bxLTOmUEfsZh2YEYwxds=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4998 (0x1386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Dec 6 16:31:53 2025 GMT Not After : Dec 13 16:31:53 2025 GMT Subject: CN=69345a79-dc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:99:7c:8c:b1:b1:a5:1f:0e:1c:54:b7:9c: e2:8f:f0:54:20:08:a4:57:6c:f4:b4:1a:7e:93:8c: 26:8d:38:3a:88:bf:44:45:64:9a:d6:1f:cf:18:34: e1:a2:37:d2:6f:1f:de:1f:0d:fb:6d:12:92:10:80: 98:82:15:a8:60:62:da:3c:ce:c7:bd:84:7c:0f:91: 10:ee:31:6c:92:fb:1f:db:6d:7c:cb:69:8f:e2:89: 35:01:4c:71:88:43:36:66:0f:1f:0c:ef:12:e3:52: a0:d1:59:8c:4c:f8:df:5e:b9:84:a6:ef:ca:6f:b0: f4:33:31:a5:a5:fc:a9:f4:c1:1b:5b:72:ba:7c:75: c7:22:14:e1:a3:ed:4c:10:10:59:e6:88:e0:ae:81: 34:af:4a:38:ef:48:33:aa:7e:c0:4a:47:48:a0:1f: d6:17:8a:36:a9:a2:37:42:9f:b8:a4:34:8c:53:f0: 7a:3f:24:71:61:52:c5:f7:58:57:4b:10:88:6f:7c: 20:43:36:db:a3:4b:6d:7a:a6:a3:72:64:a9:8e:f4: 44:10:e5:3b:4d:2f:67:51:78:71:06:5c:ca:ce:fb: bc:ab:26:dd:8a:66:15:f2:ce:e4:76:ab:bd:6a:aa: 54:43:8f:ce:cd:af:d8:1e:4d:8a:69:08:2f:68:f4: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7C:10:70:51:0C:5A:65:2A:08:CB:AA:FA:A5:8B:16:FB:AA:C8:C2 X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:9e:c2:ac:1d:55:d3:4c:c1:12:05:84:bc:61:f4:e8:66:d2: f8:3a:7f:84:f1:91:54:11:1a:9c:b9:ed:88:72:3a:e7:05:71: 7d:44:c8:a9:20:1a:92:c6:bb:27:aa:bf:54:06:f7:ac:9b:53: d6:1d:87:e2:33:41:d4:d2:69:19:82:fd:64:a9:e7:b3:9d:50: ea:ca:ba:99:e3:0c:9c:12:20:ed:7b:b3:dd:ed:6d:c0:98:21: e8:a3:50:f9:36:d9:6e:55:f8:09:97:b8:0d:f2:c2:f2:af:f0: df:29:d4:9e:d5:ad:08:f7:23:f9:c8:6a:0c:27:99:ce:1f:d3: 1f:e6:61:27:0f:48:15:b8:8f:f9:9a:b7:12:8c:46:ca:aa:95: 63:25:d0:48:5f:c3:f2:c1:55:4c:e1:51:7f:43:5f:ff:d1:ac: eb:df:bb:a0:86:d9:99:83:9f:8f:83:18:8d:2a:a0:87:22:b9: 45:8b:b6:53:c1:47:80:75:7e:79:b5:b5:06:f1:6d:f6:c0:63: 0f:56:c5:3c:71:3c:91:ed:0e:c4:04:c4:1a:51:3c:9f:18:a0: 3f:0c:7e:b8:56:a7:13:a3:ad:71:0d:5e:ef:48:d6:bc:31:f7: 73:c0:59:69:20:ac:a4:ea:92:00:ff:c8:1f:c4:c7:cd:a1:1e: f9:9c:a7:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUxMjA2MTYzMTUzWhcNMjUxMjEzMTYzMTUzWjAYMRYwFAYD VQQDEw02OTM0NWE3OS1kYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD2ZfIyxsaUfDhxUt5zij/BUIAikV2z0tBp+k4wmjTg6iL9ERWSa1h/PGDTh ojfSbx/eHw37bRKSEICYghWoYGLaPM7HvYR8D5EQ7jFskvsf2218y2mP4ok1AUxx iEM2Zg8fDO8S41Kg0VmMTPjfXrmEpu/Kb7D0MzGlpfyp9MEbW3K6fHXHIhTho+1M EBBZ5ojgroE0r0o470gzqn7ASkdIoB/WF4o2qaI3Qp+4pDSMU/B6PyRxYVLF91hX SxCIb3wgQzbbo0tteqajcmSpjvREEOU7TS9nUXhxBlzKzvu8qybdimYV8s7kdqu9 aqpUQ4/Oza/YHk2KaQgvaPSd2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZ8EHBR DFplKgjLqvqlixb7qsjCMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9nsKsHVXTTMESBYS8YfToZtL4On+E8ZFUERqcue2IcjrnBXF9RMip IBqSxrsnqr9UBvesm1PWHYfiM0HU0mkZgv1kqeeznVDqyrqZ4wycEiDte7Pd7W3A mCHoo1D5NtluVfgJl7gN8sLyr/DfKdSe1a0I9yP5yGoMJ5nOH9Mf5mEnD0gVuI/5 mrcSjEbKqpVjJdBIX8PywVVM4VF/Q1//0azr37ughtmZg5+PgxiNKqCHIrlFi7ZT wUeAdX55tbUG8W32wGMPVsU8cTyR7Q7EBMQaUTyfGKA/DH64VqcTo61xDV7vSNa8 MfdzwFlpIKyk6pIA/8gfxMfNoR75nKcO -----END CERTIFICATE-----Generated at Sun Dec 7 03:00:24 2025 by rpki-client