This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: wBkLxLq0dQcSw6d1M+skqIDOWD1sLruZJYlSSqCjbiM= Subject key identifier: 22:8C:A4:23:3D:3F:9F:9D:77:E6:85:BF:F2:65:E8:91:4F:C4:05:66 Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 158E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 1585 Signing time: Sat 06 Dec 2025 16:20:39 +0000 Manifest this update: Sat 06 Dec 2025 16:20:38 +0000 Manifest next update: Sat 13 Dec 2025 16:20:38 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: U/q9JEWTofRizxzuX5PVU/Zs+icc2HBT5vcZHVCmTiI=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: UB3e/BzYZNzSWafIfT/8shx3CMwEAB4npfcc5DFGpRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5518 (0x158e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: Dec 6 16:20:38 2025 GMT Not After : Dec 13 16:20:38 2025 GMT Subject: CN=693457d7-7bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:48:6a:60:d7:e1:58:4f:c4:6b:b2:68:ad: e8:71:e2:4b:f8:35:96:7d:13:80:da:ba:6d:13:0e: c2:d3:0c:f6:d0:e0:60:c9:30:d0:e3:29:a6:fd:e5: ac:e6:f9:3f:b3:d1:49:21:10:77:ed:08:20:48:aa: 55:da:6e:db:3b:68:af:c1:aa:0c:5f:2b:32:a9:34: e1:01:2b:b6:e0:db:f6:71:c7:57:13:55:d5:27:6e: 08:04:24:ef:75:ad:9c:cf:a2:72:8a:bf:3f:03:84: d2:98:1e:47:28:8d:ab:e3:3a:9d:9a:82:68:36:d3: f0:36:00:07:d9:c6:1f:d3:c9:8c:d8:be:21:e5:ba: 22:a6:70:11:51:b3:0f:12:d7:32:e2:dd:7c:33:0a: d9:86:f9:a2:c9:01:f4:2c:26:f1:4c:fa:7f:fc:e7: f0:76:8a:8d:c1:fe:a0:9a:2f:bd:81:1c:29:70:4d: f5:93:47:b2:12:1a:16:c2:ae:a3:22:39:b9:03:42: e5:69:4b:c4:77:b0:e0:6c:f5:e7:6f:b0:51:17:28: 89:5c:8e:dd:f3:5b:66:89:66:52:d4:e0:98:f1:9b: e4:d2:5e:25:56:b8:83:cd:6e:86:a9:75:4e:3e:3c: da:96:61:f3:fc:60:04:da:45:2c:7e:41:9a:a2:8b: e7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8C:A4:23:3D:3F:9F:9D:77:E6:85:BF:F2:65:E8:91:4F:C4:05:66 X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:10:c7:a0:08:14:1b:82:e2:2d:59:a5:ea:2a:91:b8:b3:e1: a2:60:b8:f2:b5:66:11:b0:8b:af:61:13:36:0f:bc:f0:ca:81: c2:4d:f2:c0:b5:ad:de:02:99:e5:2c:11:3d:4a:1a:06:e0:4e: 51:64:d6:72:63:ca:cd:31:81:a3:90:0a:a6:46:6a:a1:a2:fb: 57:30:67:ee:39:8a:1c:bb:4e:5d:f5:b6:5a:82:5a:01:50:3a: 42:8b:f7:41:99:a6:fc:aa:d6:8a:9f:9d:c2:63:d3:fb:1a:16: 71:1e:35:0d:d1:1e:f7:5f:ea:bb:30:3a:e8:83:89:fb:71:dd: 64:2a:9a:b1:47:d0:d5:25:6a:09:a8:33:bf:75:1f:05:0d:72: ab:ec:4d:94:a0:10:71:14:cf:3f:3a:7e:7e:ad:83:86:3b:71: a2:c2:a7:72:d1:38:aa:29:6b:96:b7:44:2f:b9:4c:23:d1:97: 3f:e0:c0:4d:7f:f1:54:46:69:06:13:c3:b0:51:28:51:ec:b7: 4b:2c:bf:80:30:cd:86:29:37:87:5a:d0:9c:56:c6:c6:a0:1c: 7c:2f:87:68:75:34:46:5e:8a:57:aa:df:f4:42:c7:64:46:49: bd:62:2a:1b:8f:b4:7e:f4:aa:92:7c:84:c7:c8:8c:81:b5:df: 31:a3:7a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUxMjA2MTYyMDM4WhcNMjUxMjEzMTYyMDM4WjAYMRYwFAYD VQQDEw02OTM0NTdkNy03YmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTZIamDX4VhPxGuyaK3oceJL+DWWfROA2rptEw7C0wz20OBgyTDQ4ymm/eWs 5vk/s9FJIRB37QggSKpV2m7bO2ivwaoMXysyqTThASu24Nv2ccdXE1XVJ24IBCTv da2cz6Jyir8/A4TSmB5HKI2r4zqdmoJoNtPwNgAH2cYf08mM2L4h5boipnARUbMP Etcy4t18MwrZhvmiyQH0LCbxTPp//OfwdoqNwf6gmi+9gRwpcE31k0eyEhoWwq6j Ijm5A0LlaUvEd7DgbPXnb7BRFyiJXI7d81tmiWZS1OCY8Zvk0l4lVriDzW6GqXVO PjzalmHz/GAE2kUsfkGaoovngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKMpCM9 P5+dd+aFv/Jl6JFPxAVmMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7EMegCBQbguItWaXqKpG4s+GiYLjytWYRsIuvYRM2D7zwyoHCTfLA ta3eApnlLBE9ShoG4E5RZNZyY8rNMYGjkAqmRmqhovtXMGfuOYocu05d9bZagloB UDpCi/dBmab8qtaKn53CY9P7GhZxHjUN0R73X+q7MDrog4n7cd1kKpqxR9DVJWoJ qDO/dR8FDXKr7E2UoBBxFM8/On5+rYOGO3Giwqdy0TiqKWuWt0QvuUwj0Zc/4MBN f/FURmkGE8OwUShR7LdLLL+AMM2GKTeHWtCcVsbGoBx8L4dodTRGXopXqt/0Qsdk Rkm9Yiobj7R+9KqSfITHyIyBtd8xo3rq -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:58 2025 by rpki-client