This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: ETHXCft3CQgezFfJ0Guz/jvvyEbA1okdhCVTJHZbwYk= Subject key identifier: 98:6A:D4:6E:C4:22:98:89:33:C1:BE:8E:84:C7:1B:F3:18:EB:7C:3C Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: 019A Signing time: Fri 05 Dec 2025 01:39:19 +0000 Manifest this update: Fri 05 Dec 2025 01:39:19 +0000 Manifest next update: Fri 12 Dec 2025 01:39:19 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: uobAf7KAYRcgOMyDtbfKZAlzRX1Y8rF+B4rZzpqGKbU=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: 1AC56+KqoXmIdoXxTwj6Vr1818DLnFN433yaIdYEMfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: Dec 5 01:39:19 2025 GMT Not After : Dec 12 01:39:19 2025 GMT Subject: CN=693237c7-9c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:79:72:09:08:17:20:de:9e:15:ce:1c:f6: 0a:da:7f:da:16:1d:da:d3:18:d7:81:32:75:2f:1f: 5d:8b:d9:91:79:bb:78:e8:e1:c7:c6:c8:ee:c9:b5: f7:f1:d5:8e:f2:e4:35:21:80:2e:a9:09:ad:c1:43: 26:d5:bd:d1:a8:c1:91:4a:a7:63:ae:5c:ad:22:55: d1:8b:92:dc:9b:16:2d:a3:01:db:05:1e:70:5e:35: c0:d1:39:84:76:92:10:a5:87:70:f4:d0:d6:0c:7f: fc:da:c0:e0:a1:ff:ea:02:bb:0e:96:a1:03:d0:26: 41:a2:70:c9:22:7c:93:2e:21:e2:02:7b:2a:1f:b1: d2:fe:9b:3c:ef:7a:ab:e2:b2:be:8d:00:1b:73:55: 25:90:ad:2f:91:e5:1a:9a:71:a0:00:1f:ab:ba:d8: 49:95:d1:fc:a3:d8:48:72:9c:20:ec:97:15:32:99: 31:a9:2a:7a:a4:36:11:4e:a7:84:21:fe:9d:15:bc: 87:4f:fb:7c:00:4e:09:ef:95:03:f1:39:30:a6:f2: 0b:6b:b8:71:59:ad:0e:86:57:ba:af:05:e2:fd:9c: 17:dd:f7:3b:e3:b0:49:88:85:85:e9:cf:81:1f:b2: 93:ce:3f:42:ad:fb:58:a4:ee:02:f3:10:c1:40:32: c3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6A:D4:6E:C4:22:98:89:33:C1:BE:8E:84:C7:1B:F3:18:EB:7C:3C X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7f:eb:64:40:b4:1b:c9:15:3f:a2:ef:fa:02:2e:ac:51:ed: 0c:62:cf:e2:e3:e0:6c:7e:66:a5:4a:38:e5:95:4e:8e:77:2f: 56:77:38:f1:99:48:15:74:15:c5:16:f4:f2:78:70:97:87:84: 2e:b9:3b:f1:e5:eb:dc:29:8f:ee:2f:fd:43:0e:82:15:61:b1: 72:51:48:8f:36:f7:ff:90:06:6f:a7:ad:e0:ce:b8:0b:f8:ca: 8d:5e:3d:07:fb:93:b0:e2:89:f5:ee:6c:3f:9e:17:d5:0e:83: 5f:e7:1a:ec:43:f9:02:b5:20:83:bc:be:97:cd:f6:b5:27:8d: 23:46:20:28:45:81:70:96:4d:fe:13:e9:97:72:08:c1:bf:03: 21:b9:e3:df:46:59:92:fc:cc:2b:cb:7e:ec:3d:32:c4:17:c1: 2d:dd:45:1e:d5:dd:23:22:b4:d2:10:f5:a4:2f:6d:1c:51:07: 00:ac:ac:19:63:7c:94:5d:a2:eb:48:9f:20:34:ae:a2:f6:53: 69:8a:7d:48:66:e7:be:5e:14:00:9d:a3:83:b5:2d:6b:10:7f: 86:e0:7b:cf:ab:88:f8:2f:90:d4:d1:08:78:8c:6e:c0:b8:93: 72:86:25:a1:38:15:f8:4a:85:ea:d2:d6:a4:61:b5:85:0b:65: f6:4d:40:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3QzQxMTAvBgNVBAUTKDQ5REI2MUZGMDNDNTUxNjc5NUNGNzg1MDlFQTM3QTA2 MEY0NTQ3QkYwHhcNMjUxMjA1MDEzOTE5WhcNMjUxMjEyMDEzOTE5WjAYMRYwFAYD VQQDEw02OTMyMzdjNy05YzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotZ5cgkIFyDenhXOHPYK2n/aFh3a0xjXgTJ1Lx9di9mRebt46OHHxsjuybX3 8dWO8uQ1IYAuqQmtwUMm1b3RqMGRSqdjrlytIlXRi5LcmxYtowHbBR5wXjXA0TmE dpIQpYdw9NDWDH/82sDgof/qArsOlqED0CZBonDJInyTLiHiAnsqH7HS/ps873qr 4rK+jQAbc1UlkK0vkeUamnGgAB+ruthJldH8o9hIcpwg7JcVMpkxqSp6pDYRTqeE If6dFbyHT/t8AE4J75UD8TkwpvILa7hxWa0Ohle6rwXi/ZwX3fc747BJiIWF6c+B H7KTzj9CrftYpO4C8xDBQDLDEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhq1G7E IpiJM8G+joTHG/MY63w8MB8GA1UdIwQYMBaAFEnbYf8DxVFnlc94UJ6jegYPRUe/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDdDNC81OTVCRTgyQzYz NUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVXZVZ6M2hRbnFONkJnOUZS NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVX ZVZ6M2hRbnFONkJnOUZSNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcf+tkQLQbyRU/ou/6Ai6sUe0MYs/i4+BsfmalSjjllU6Ody9Wdzjx mUgVdBXFFvTyeHCXh4QuuTvx5evcKY/uL/1DDoIVYbFyUUiPNvf/kAZvp63gzrgL +MqNXj0H+5Ow4on17mw/nhfVDoNf5xrsQ/kCtSCDvL6Xzfa1J40jRiAoRYFwlk3+ E+mXcgjBvwMhuePfRlmS/Mwry37sPTLEF8Et3UUe1d0jIrTSEPWkL20cUQcArKwZ Y3yUXaLrSJ8gNK6i9lNpin1IZue+XhQAnaODtS1rEH+G4HvPq4j4L5DU0Qh4jG7A uJNyhiWhOBX4SoXq0takYbWFC2X2TUDp -----END CERTIFICATE-----Generated at Sat Dec 6 17:12:44 2025 by rpki-client