This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json) Hash identifier: IDnADLG7CFFnaKfEwXYgCs3PSXnrBbXolCjKPplH9ZY= Subject key identifier: 43:FE:3C:A6:3E:0D:D0:68:F7:94:57:5C:B7:D1:85:37:92:2B:A4:A6 Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Certificate serial: 11DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft Manifest number: 203F Signing time: Sat 06 Dec 2025 16:42:13 +0000 Manifest this update: Sat 06 Dec 2025 16:42:13 +0000 Manifest next update: Sat 13 Dec 2025 16:42:13 +0000 Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: fGKfrvawUZm0b/Ffbl+0FpDHCKYX6y8B435rSANBV1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4571 (0x11db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Validity Not Before: Dec 6 16:42:13 2025 GMT Not After : Dec 13 16:42:13 2025 GMT Subject: CN=69345ce5-a09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:52:55:a0:1d:15:67:f9:3d:5a:f8:94:be: c2:44:bf:7f:af:0e:0c:0e:3a:fb:c4:66:1d:d3:ce: a0:fc:db:4e:6c:61:33:eb:f9:7f:71:d7:4b:48:bb: fe:61:4f:2d:f6:69:62:e2:16:c9:a6:16:d0:d2:67: 29:96:0e:58:3e:0d:af:8b:4d:be:55:6c:d2:17:37: 4f:d6:cd:41:2b:33:c8:5d:3b:1f:71:0e:56:84:cb: 62:f1:f7:b2:8a:d5:63:f6:c0:59:1f:6d:e0:b4:55: 37:bc:72:8d:c1:96:26:30:fb:11:d1:09:42:11:c0: 78:72:9a:56:c8:82:e1:9b:39:5f:a1:21:5e:62:10: 2e:7b:98:bb:15:9e:c2:d6:3e:14:78:eb:a5:80:f5: 88:f4:38:26:cf:8f:66:e3:c1:4e:a0:47:98:8d:7e: 14:4c:8e:d6:2d:47:ca:64:c0:93:df:a3:1b:6a:d4: 19:0c:33:ad:a3:24:f5:ff:87:f5:c6:59:d0:9f:81: f6:09:35:a9:db:16:80:f6:ac:0f:e0:0f:c6:75:05: 89:3c:d9:04:4f:22:2c:55:7d:2b:23:a3:fc:dd:43: 72:30:2b:e8:42:d3:97:e0:2e:20:3b:fd:6d:86:2f: cb:92:dd:f7:ec:fd:6f:a8:08:ef:42:a1:1d:e0:0b: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FE:3C:A6:3E:0D:D0:68:F7:94:57:5C:B7:D1:85:37:92:2B:A4:A6 X509v3 Authority Key Identifier: keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:6c:5b:15:a5:c7:d1:40:4b:f1:5c:5f:46:3c:69:1a:39:5a: bf:87:e0:42:cd:dd:54:3b:1e:f1:b8:12:ce:33:e9:98:fd:e8: 57:a6:33:8c:c3:d2:06:19:90:e8:b0:bf:e9:25:26:80:92:6d: c5:78:99:f9:05:c9:a5:85:a9:67:ab:8e:0e:1c:e8:d8:d5:5c: 73:8c:a4:0d:36:cb:19:1d:96:e3:8c:ef:ee:c2:84:80:47:5f: 10:c8:39:26:ab:99:48:49:58:76:11:de:20:cd:d6:de:52:f0: 4e:b9:ce:3f:be:8c:9a:2d:74:a5:8b:ad:08:b1:2d:4e:76:01: 20:02:c7:48:fe:9d:d2:29:5d:f8:5d:4a:15:b7:c2:96:58:94: d7:4e:42:70:73:11:2c:89:0f:6a:23:1c:6b:16:24:7f:e9:67: f5:95:73:3e:74:97:8b:b7:7c:b5:22:3f:fe:62:af:05:fc:80: 86:53:20:e6:46:37:36:ce:07:c2:20:1e:7b:68:dc:01:00:c8: 81:cc:ef:b0:1a:bf:39:65:96:27:87:9b:dc:55:0d:4e:18:a8: 89:2e:19:21:7f:08:41:58:d8:8f:6f:0f:af:ae:e5:c2:6c:33: 70:8e:5d:cb:96:fe:96:43:4d:d2:92:d2:de:0a:7d:1d:20:a7: 8e:0e:00:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD MDk5MEE4NTMwHhcNMjUxMjA2MTY0MjEzWhcNMjUxMjEzMTY0MjEzWjAYMRYwFAYD VQQDEw02OTM0NWNlNS1hMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvRSVaAdFWf5PVr4lL7CRL9/rw4MDjr7xGYd086g/NtObGEz6/l/cddLSLv+ YU8t9mli4hbJphbQ0mcplg5YPg2vi02+VWzSFzdP1s1BKzPIXTsfcQ5WhMti8fey itVj9sBZH23gtFU3vHKNwZYmMPsR0QlCEcB4cppWyILhmzlfoSFeYhAue5i7FZ7C 1j4UeOulgPWI9Dgmz49m48FOoEeYjX4UTI7WLUfKZMCT36MbatQZDDOtoyT1/4f1 xlnQn4H2CTWp2xaA9qwP4A/GdQWJPNkETyIsVX0rI6P83UNyMCvoQtOX4C4gO/1t hi/Lkt337P1vqAjvQqEd4AvUowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEP+PKY+ DdBo95RXXLfRhTeSK6SmMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1 Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3bFsVpcfRQEvxXF9GPGkaOVq/h+BCzd1UOx7xuBLOM+mY/ehXpjOM w9IGGZDosL/pJSaAkm3FeJn5Bcmlhalnq44OHOjY1VxzjKQNNssZHZbjjO/uwoSA R18QyDkmq5lISVh2Ed4gzdbeUvBOuc4/voyaLXSli60IsS1OdgEgAsdI/p3SKV34 XUoVt8KWWJTXTkJwcxEsiQ9qIxxrFiR/6Wf1lXM+dJeLt3y1Ij/+Yq8F/ICGUyDm Rjc2zgfCIB57aNwBAMiBzO+wGr85ZZYnh5vcVQ1OGKiJLhkhfwhBWNiPbw+vruXC bDNwjl3Llv6WQ03SktLeCn0dIKeODgDC -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:58 2025 by rpki-client