This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json) Hash identifier: Wb2Nsr38DllDtky/+hxNQb5+CmftyLs7peqEJFGPlO8= Subject key identifier: 52:CB:90:27:60:E3:9A:1D:38:34:32:34:59:F5:3C:DB:BF:D5:69:C6 Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft Manifest number: 011C Signing time: Fri 05 Dec 2025 02:51:52 +0000 Manifest this update: Fri 05 Dec 2025 02:51:51 +0000 Manifest next update: Fri 12 Dec 2025 02:51:51 +0000 Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: x71FtHFSGhq/BIhzuBytPiFRyp285tAzI54fLbW7zRQ=) 2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: 97sXWjq7Fj5JCQCyo6BRYI+5mz862DUMpg5o3JeeUks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: Dec 5 02:51:51 2025 GMT Not After : Dec 12 02:51:51 2025 GMT Subject: CN=693248c7-8c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:75:73:14:f1:9d:62:26:3c:12:3f:e0:53: e6:32:c0:b3:d5:a4:00:56:f5:26:45:5d:1d:56:fb: 5e:34:b3:9f:14:4b:66:03:e4:0d:48:e7:31:41:c1: 0f:4b:b1:16:13:dd:39:35:2c:10:8c:df:ef:24:e9: a7:d0:af:81:5f:7f:85:b3:48:63:14:4f:3f:13:76: ca:3f:d8:ef:9c:bf:8d:6c:f9:04:f4:a0:09:4c:47: d2:47:98:0e:9a:a9:23:6f:8f:93:1f:98:a2:fd:49: a3:8c:f3:bc:0f:5b:3e:3c:91:32:74:1b:2e:4c:d1: 4c:e8:eb:f8:e7:a6:b8:fe:68:12:36:5d:bc:06:61: 9b:49:c1:ba:ea:98:44:33:58:b1:b2:28:29:ae:40: 07:58:ba:c4:b7:ca:cd:63:ae:c2:ce:ad:1d:b8:8e: b7:5f:85:60:0d:7f:31:42:e2:3b:1c:ee:16:3d:d6: a1:f7:da:1b:39:ba:e7:63:1f:57:4c:73:37:97:e1: 49:ff:2e:a0:46:7d:00:5b:94:10:5e:c8:93:d2:4d: 33:47:49:b0:19:0f:bc:5c:1b:c0:a7:3f:10:a8:de: f2:88:85:16:f7:fd:aa:a5:53:f0:ec:a7:4b:1c:03: 73:4a:f6:e5:18:cf:6d:2f:23:d3:fa:ce:74:7a:13: 49:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CB:90:27:60:E3:9A:1D:38:34:32:34:59:F5:3C:DB:BF:D5:69:C6 X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:54:cc:04:6f:33:99:3f:8c:b4:77:29:26:ad:e4:ca:6c:41: 5c:8b:53:9c:9b:ee:3b:97:ff:34:a0:99:53:91:2a:bc:a6:dd: b4:d2:e4:77:d6:0a:02:5b:b9:63:5f:2c:e6:ee:e2:bf:78:fc: ca:1c:70:13:cd:31:35:9f:c2:f3:69:62:35:27:bd:62:7a:e3: fd:65:c0:f8:7b:89:88:bc:db:ed:ae:30:4f:3b:b7:16:f5:3d: 39:5b:dc:19:b4:ec:a9:9b:6c:5d:a8:d5:d8:2d:6a:c4:9e:87: 76:0f:1b:08:a3:f7:9b:04:52:d1:1d:ce:c6:87:60:06:a7:2f: 1d:e5:52:57:a7:69:c4:3a:be:41:86:cb:1e:5e:5d:91:24:93: a3:b4:0c:c0:95:2c:f9:60:68:b2:21:d3:32:3f:fd:ce:cf:55: 67:33:8b:65:86:12:89:7a:10:32:84:18:19:64:5f:1b:f2:c3: a0:a9:fb:51:cd:05:71:30:76:e7:83:5f:be:ba:74:72:e0:d0: 0d:b5:e7:95:c1:15:d7:9e:f7:e4:c0:b7:4a:57:84:25:56:7c: e0:2c:30:67:52:76:4f:cf:74:cc:17:93:8b:13:81:6a:22:96: c4:30:7e:49:e0:1c:9f:67:94:db:25:88:65:c9:e8:6c:3d:b2: da:b2:2f:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEODkxMTAvBgNVBAUTKDQ4Rjk2MDA5QkNENENFMDZDRDYwRDEyNUYwQTkxQjIz RkVDMzAzNjAwHhcNMjUxMjA1MDI1MTUxWhcNMjUxMjEyMDI1MTUxWjAYMRYwFAYD VQQDEw02OTMyNDhjNy04YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3u91cxTxnWImPBI/4FPmMsCz1aQAVvUmRV0dVvteNLOfFEtmA+QNSOcxQcEP S7EWE905NSwQjN/vJOmn0K+BX3+Fs0hjFE8/E3bKP9jvnL+NbPkE9KAJTEfSR5gO mqkjb4+TH5ii/UmjjPO8D1s+PJEydBsuTNFM6Ov456a4/mgSNl28BmGbScG66phE M1ixsigprkAHWLrEt8rNY67Czq0duI63X4VgDX8xQuI7HO4WPdah99obObrnYx9X THM3l+FJ/y6gRn0AW5QQXsiT0k0zR0mwGQ+8XBvApz8QqN7yiIUW9/2qpVPw7KdL HANzSvblGM9tLyPT+s50ehNJOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLLkCdg 45odODQyNFn1PNu/1WnGMB8GA1UdIwQYMBaAFEj5YAm81M4GzWDRJfCpGyP+wwNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q4OS9EM0VENTg1ODIw QjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpnYk5ZTkVsOEtrYklfN0RB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q4OS9EM0VENTg1ODIwQjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpn Yk5ZTkVsOEtrYklfN0RBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSVMwEbzOZP4y0dykmreTKbEFci1Ocm+47l/80oJlTkSq8pt200uR3 1goCW7ljXyzm7uK/ePzKHHATzTE1n8LzaWI1J71ieuP9ZcD4e4mIvNvtrjBPO7cW 9T05W9wZtOypm2xdqNXYLWrEnod2DxsIo/ebBFLRHc7Gh2AGpy8d5VJXp2nEOr5B hsseXl2RJJOjtAzAlSz5YGiyIdMyP/3Oz1VnM4tlhhKJehAyhBgZZF8b8sOgqftR zQVxMHbng1++unRy4NANteeVwRXXnvfkwLdKV4QlVnzgLDBnUnZPz3TMF5OLE4Fq IpbEMH5J4ByfZ5TbJYhlyehsPbLasi8R -----END CERTIFICATE-----Generated at Sun Dec 7 02:56:45 2025 by rpki-client