This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: mPE8b/x+pdm3ovMeamYsF6CO6Z+8akggvJbhdVQ/RCw= Subject key identifier: B6:01:50:4D:E2:E5:E4:71:A3:D6:D3:AE:63:2D:C9:1E:16:8B:67:A4 Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 2129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2C07 Signing time: Sat 06 Dec 2025 15:39:32 +0000 Manifest this update: Sat 06 Dec 2025 15:39:32 +0000 Manifest next update: Sat 13 Dec 2025 15:39:32 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: OzS28Rz44+P5FXaBJ0KqlRQ5bzj98BB+pURVV83w2Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8489 (0x2129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: Dec 6 15:39:32 2025 GMT Not After : Dec 13 15:39:32 2025 GMT Subject: CN=69344e34-ce13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:c8:2d:17:73:9d:01:53:6b:1f:70:a3:bf: aa:53:22:ed:52:f5:71:33:c3:41:e9:c4:88:20:1a: 55:4d:4f:3a:b2:66:e9:1b:47:7b:61:f2:d4:e8:ee: f5:1d:2a:1a:cb:31:c9:f2:09:84:59:91:89:82:61: ca:d7:54:4d:1c:e3:79:74:ca:41:45:5c:ba:92:b7: aa:00:d4:1f:5e:cd:74:c6:be:31:0e:0e:3c:cd:68: b3:9c:a7:b8:4b:0d:05:bf:eb:8b:f0:c6:a0:73:94: f6:72:ce:cf:e5:25:3d:00:43:eb:8d:02:9e:f5:be: 0e:76:22:af:82:d4:60:1d:71:69:cf:bb:f9:79:a8: 8c:01:30:12:3b:60:2b:5c:b6:46:00:2a:08:87:e4: 7d:ba:31:86:4c:f5:5d:d0:1c:a2:3b:de:b9:5c:e4: 35:35:74:20:18:13:0f:03:8f:69:d4:5e:e2:93:68: 6c:c1:68:bb:e5:3b:57:06:62:4f:e4:3a:e5:d5:4b: ba:ea:d1:01:f6:a8:63:e2:5b:c1:48:e8:25:98:a7: d7:b3:59:31:88:76:c6:00:98:a5:a5:f3:ef:b2:f2: fa:77:55:0d:31:f5:c8:77:e6:71:ff:cd:ce:47:20: b5:e8:ae:11:9c:70:36:5b:1e:7f:70:4d:bf:f7:ac: 14:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:01:50:4D:E2:E5:E4:71:A3:D6:D3:AE:63:2D:C9:1E:16:8B:67:A4 X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:8e:0b:a4:cb:95:87:6b:b3:cb:04:54:df:d6:25:de:b3:a6: 72:1f:1e:dc:11:b2:32:f6:e9:5f:c2:ba:75:c8:0f:72:4a:e9: ce:d8:6e:70:fb:7c:0e:9c:38:b0:d2:63:73:9e:7d:fb:c8:e1: d0:52:d6:c9:d4:5c:94:a1:7c:9f:5b:13:83:1d:34:4a:ca:32: dc:78:11:d9:98:33:2d:c6:3b:3c:dc:a5:cf:2b:f5:8b:1c:50: 31:06:78:73:85:81:e6:6e:18:94:13:fb:c5:c3:91:8d:60:64: 4c:c5:f5:29:28:81:f9:d7:4a:6f:a0:88:1f:48:3f:58:19:f3: b7:e3:a6:6e:f2:51:b5:e0:68:a6:8e:eb:22:84:1c:87:ab:c0: 40:1f:5a:5f:a1:99:87:2e:41:b7:1e:88:62:90:2e:be:aa:7d: e1:f9:92:3b:1b:59:94:63:ea:02:d3:83:93:eb:92:3e:a6:b0: 9f:db:9f:d7:cb:80:52:ce:b3:24:b1:25:e2:66:15:97:8b:e7: 9c:3d:ee:dc:f3:67:c3:c2:a1:5a:3a:cb:48:53:10:cd:96:8a: 51:7f:75:3a:ca:e7:af:93:c2:f5:39:ea:ec:bd:1d:34:69:27: 4e:6e:d6:87:b5:39:02:1c:dc:ce:21:bb:8c:a6:02:2f:d9:26: 01:0e:9e:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICISkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUxMjA2MTUzOTMyWhcNMjUxMjEzMTUzOTMyWjAYMRYwFAYD VQQDEw02OTM0NGUzNC1jZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs03ILRdznQFTax9wo7+qUyLtUvVxM8NB6cSIIBpVTU86smbpG0d7YfLU6O71 HSoayzHJ8gmEWZGJgmHK11RNHON5dMpBRVy6kreqANQfXs10xr4xDg48zWiznKe4 Sw0Fv+uL8Magc5T2cs7P5SU9AEPrjQKe9b4OdiKvgtRgHXFpz7v5eaiMATASO2Ar XLZGACoIh+R9ujGGTPVd0ByiO965XOQ1NXQgGBMPA49p1F7ik2hswWi75TtXBmJP 5Drl1Uu66tEB9qhj4lvBSOglmKfXs1kxiHbGAJilpfPvsvL6d1UNMfXId+Zx/83O RyC16K4RnHA2Wx5/cE2/96wUMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYBUE3i 5eRxo9bTrmMtyR4Wi2ekMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYjguky5WHa7PLBFTf1iXes6ZyHx7cEbIy9ulfwrp1yA9ySunO2G5w +3wOnDiw0mNznn37yOHQUtbJ1FyUoXyfWxODHTRKyjLceBHZmDMtxjs83KXPK/WL HFAxBnhzhYHmbhiUE/vFw5GNYGRMxfUpKIH510pvoIgfSD9YGfO346Zu8lG14Gim jusihByHq8BAH1pfoZmHLkG3HohikC6+qn3h+ZI7G1mUY+oC04OT65I+prCf25/X y4BSzrMksSXiZhWXi+ecPe7c82fDwqFaOstIUxDNlopRf3U6yuevk8L1OersvR00 aSdObtaHtTkCHNzOIbuMpgIv2SYBDp7f -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:17 2025 by rpki-client