This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json) Hash identifier: W6s6bkV0x1C/ohZ96CmcoZY/D333pzI07jtmdfUBs0A= Subject key identifier: 61:27:43:6B:0B:0A:8F:13:F8:C5:DE:F6:84:BE:AD:87:DA:6B:0E:2D Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft Manifest number: 01E4 Signing time: Fri 05 Dec 2025 00:57:28 +0000 Manifest this update: Fri 05 Dec 2025 00:57:28 +0000 Manifest next update: Fri 12 Dec 2025 00:57:28 +0000 Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: rZtr1Iti64jMZvuV0/9QVcb1LbJLCMwEcSMkIaWQR9M=) 2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: H97m0xGfwTSK15tOF7js1ABWMy5iF+l3/IsWtR98xbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Validity Not Before: Dec 5 00:57:28 2025 GMT Not After : Dec 12 00:57:28 2025 GMT Subject: CN=69322df8-f7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:c4:02:4f:eb:fd:be:dd:a1:3e:85:3e:ee: c0:04:03:33:f3:37:fa:ca:ed:06:9a:3f:bd:19:f0: 16:8c:5e:4c:37:4b:3e:4d:da:c8:3f:bb:8a:52:3a: 1f:2e:4f:d4:16:a1:2d:9c:b2:60:32:a9:96:8e:e1: 43:ab:48:31:35:bd:31:40:31:df:d8:10:90:01:46: ec:37:99:92:fd:7f:c1:97:bb:89:64:61:9f:1e:b3: 70:5f:ea:a1:7f:cf:e6:bc:3c:1d:e2:c0:8e:81:20: fa:b6:08:ed:0c:ce:2a:84:c6:87:96:d3:55:28:15: 5d:bc:da:2f:d3:81:27:38:3e:d2:4b:06:b9:f8:29: e2:06:6e:90:b3:59:54:09:86:ee:79:26:30:d9:f0: 7f:69:bd:48:9c:12:69:30:e1:5f:8e:0c:b2:c4:66: 16:3c:89:83:44:af:47:98:92:bb:18:fe:ee:50:30: 57:47:9a:d9:a1:b3:3f:84:fd:4f:e6:0f:eb:3e:d2: b4:3c:f4:de:b4:c5:68:c0:1d:b5:60:dd:66:21:d0: 44:26:7c:ee:92:0f:5b:c4:28:64:9f:9d:1f:91:70: 65:c6:d5:9d:37:c7:e2:cf:ba:a6:24:1b:5c:42:8d: 99:90:55:d7:38:f0:bb:95:40:00:cb:20:d2:ce:b8: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:27:43:6B:0B:0A:8F:13:F8:C5:DE:F6:84:BE:AD:87:DA:6B:0E:2D X509v3 Authority Key Identifier: keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:22:50:6e:93:9e:12:b1:30:f3:78:57:dc:5c:4c:65:83:a6: c1:6f:ea:76:68:c8:49:dd:94:11:84:65:e6:8a:29:fb:37:99: 67:f5:3f:6d:cc:af:ad:78:8f:62:92:97:6b:88:eb:42:eb:f2: bb:ce:8e:a7:70:fd:ee:3c:f3:ee:d7:f4:8a:0a:59:84:c2:40: 19:58:93:c5:74:33:6e:da:46:09:8d:4e:c6:8b:57:a5:7f:68: 74:5f:7c:80:ec:f6:7b:b6:e7:af:35:1b:6c:ed:df:08:a7:64: 59:cb:5f:b6:02:aa:71:46:46:b9:65:45:54:5e:f5:d8:6e:7c: 2c:0a:5a:3b:34:82:db:e1:0b:6c:9f:b3:dc:70:9c:b0:a3:ea: 91:c3:a4:7e:cf:fc:e9:0d:3d:27:a0:b0:76:41:f8:8b:bf:2c: 71:d8:ad:ab:02:53:04:45:e6:ef:01:87:45:22:ad:35:8c:8e: 52:71:be:2a:22:8e:c3:41:e0:07:ab:1c:a2:29:c7:ff:4c:68: 12:d1:c8:3a:b5:9e:1a:bc:30:ee:80:56:72:10:04:62:61:17: ff:66:24:cf:c9:9c:7b:0b:34:6c:89:5f:b2:0b:70:94:3c:1a: 08:3f:7e:a2:9e:11:f0:54:04:c6:e9:1b:21:03:42:4a:f8:da: 89:ca:88:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND Qjc2NjJBQ0UwHhcNMjUxMjA1MDA1NzI4WhcNMjUxMjEyMDA1NzI4WjAYMRYwFAYD VQQDEw02OTMyMmRmOC1mN2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsobEAk/r/b7doT6FPu7ABAMz8zf6yu0Gmj+9GfAWjF5MN0s+TdrIP7uKUjof Lk/UFqEtnLJgMqmWjuFDq0gxNb0xQDHf2BCQAUbsN5mS/X/Bl7uJZGGfHrNwX+qh f8/mvDwd4sCOgSD6tgjtDM4qhMaHltNVKBVdvNov04EnOD7SSwa5+CniBm6Qs1lU CYbueSYw2fB/ab1InBJpMOFfjgyyxGYWPImDRK9HmJK7GP7uUDBXR5rZobM/hP1P 5g/rPtK0PPTetMVowB21YN1mIdBEJnzukg9bxChkn50fkXBlxtWdN8fiz7qmJBtc Qo2ZkFXXOPC7lUAAyyDSzrhowwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEnQ2sL Co8T+MXe9oS+rYfaaw4tMB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG c2VlcF9DRDdPcHpMZG1LczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmIlBuk54SsTDzeFfcXExlg6bBb+p2aMhJ3ZQRhGXmiin7N5ln9T9t zK+teI9ikpdriOtC6/K7zo6ncP3uPPPu1/SKClmEwkAZWJPFdDNu2kYJjU7Gi1el f2h0X3yA7PZ7tuevNRts7d8Ip2RZy1+2AqpxRka5ZUVUXvXYbnwsClo7NILb4Qts n7PccJywo+qRw6R+z/zpDT0noLB2QfiLvyxx2K2rAlMERebvAYdFIq01jI5Scb4q Io7DQeAHqxyiKcf/TGgS0cg6tZ4avDDugFZyEARiYRf/ZiTPyZx7CzRsiV+yC3CU PBoIP36inhHwVATG6RshA0JK+NqJyojj -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:57 2025 by rpki-client