This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json) Hash identifier: d6eUhHvSfwXcWdX3R93zRDzOQ8Cu72wmdV+FjJ5Ujic= Subject key identifier: A2:0C:94:DF:39:F0:7D:C9:2D:C5:2A:B2:0C:56:1B:24:9C:C5:B2:DD Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft Manifest number: 02C1 Signing time: Sat 06 Dec 2025 23:58:23 +0000 Manifest this update: Sat 06 Dec 2025 23:58:22 +0000 Manifest next update: Sat 13 Dec 2025 23:58:22 +0000 Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: oPq5nZRuJ3Iosem3OYhZUsQ90ehY46A8ZrHqMqQN7cw=) 2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D Validity Not Before: Dec 6 23:58:22 2025 GMT Not After : Dec 13 23:58:22 2025 GMT Subject: CN=6934c31e-c28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:e8:7a:f2:1e:b8:5d:80:cc:48:9f:89:24: 85:2a:8f:84:4e:38:7b:84:df:0e:f2:7c:2a:3e:ea: 4c:cb:50:7b:d7:c6:6e:d4:1c:d9:68:6b:31:6e:13: c7:73:79:61:80:9b:e1:6d:4e:e3:6a:fa:45:94:54: a0:32:82:10:6c:f9:7a:b4:b7:41:af:75:28:d5:94: 74:63:39:25:d4:03:1a:45:ee:26:cf:af:f3:12:46: 13:9d:40:88:6f:17:9a:4d:02:cc:7f:05:b1:fe:f7: 29:92:0d:bf:5b:e9:d0:c4:97:31:ce:b1:3b:bf:74: 77:80:79:74:6c:ac:3b:57:c7:ce:f5:5a:4d:97:0b: 6e:7e:6b:55:73:11:51:07:c1:cc:56:33:d2:5d:7f: e2:64:ca:ad:56:38:a3:53:b6:91:90:3e:d9:00:33: 2f:bd:c0:a7:79:89:c7:a7:9b:f4:dd:5d:d1:25:eb: a3:5d:fb:71:18:a3:2c:f6:f6:59:98:4a:5e:51:66: 9a:8b:52:e7:06:56:6a:1d:9c:35:41:4b:15:e1:de: 28:04:b6:77:c2:16:ed:f9:a8:44:0c:f1:e2:fa:0b: 08:9d:f1:35:7d:02:e8:aa:03:f2:d0:75:94:0f:07: 98:eb:01:7e:2b:bd:65:98:4b:e0:54:83:ee:b5:27: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0C:94:DF:39:F0:7D:C9:2D:C5:2A:B2:0C:56:1B:24:9C:C5:B2:DD X509v3 Authority Key Identifier: keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ea:e7:86:da:b2:fc:b5:28:3e:b4:af:8b:a7:df:6b:b0:78: 1b:d1:65:86:76:b2:56:39:b3:64:19:5f:1f:42:6d:48:ea:ca: 9e:ce:47:f8:03:d3:79:c8:05:c1:f7:fb:d1:97:6f:37:f5:a4: ca:45:1d:56:5e:89:5a:6a:43:ca:a8:94:f3:0d:47:b0:b1:3a: 56:3a:e7:b6:a6:6e:0f:30:af:89:9c:5f:4c:64:38:bb:20:cd: f5:d6:2b:fe:c4:d9:0c:fc:c1:47:f5:f4:4d:41:11:ce:98:6e: 1c:e4:d9:f4:b2:cf:a6:e2:f4:d1:97:a1:aa:a0:1c:c6:19:7e: 41:d2:78:c5:ce:0a:ba:51:56:43:84:0d:22:41:b8:48:23:e7: e2:58:f4:72:d5:d4:86:bf:eb:9a:de:e6:e2:90:4b:e4:19:2e: 7c:47:9f:60:dd:dd:46:e4:0c:a5:ae:dd:9e:2e:b2:94:c6:83: c6:56:52:4d:b0:b3:94:18:32:0d:67:05:9d:15:b8:d1:22:87: 24:39:64:96:bf:78:bb:c0:32:02:11:af:8a:d5:8c:d4:a0:25: 62:f4:76:c3:09:5c:6d:6e:a6:60:d8:06:d2:8e:9d:d1:74:92: 3b:01:ab:48:1d:ad:a8:48:16:33:e0:ef:f9:5f:75:e2:f1:50: a5:ea:42:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz QjIyMDE4OUQwHhcNMjUxMjA2MjM1ODIyWhcNMjUxMjEzMjM1ODIyWjAYMRYwFAYD VQQDEw02OTM0YzMxZS1jMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYPoevIeuF2AzEifiSSFKo+ETjh7hN8O8nwqPupMy1B718Zu1BzZaGsxbhPH c3lhgJvhbU7javpFlFSgMoIQbPl6tLdBr3Uo1ZR0Yzkl1AMaRe4mz6/zEkYTnUCI bxeaTQLMfwWx/vcpkg2/W+nQxJcxzrE7v3R3gHl0bKw7V8fO9VpNlwtufmtVcxFR B8HMVjPSXX/iZMqtVjijU7aRkD7ZADMvvcCneYnHp5v03V3RJeujXftxGKMs9vZZ mEpeUWaai1LnBlZqHZw1QUsV4d4oBLZ3whbt+ahEDPHi+gsInfE1fQLoqgPy0HWU DweY6wF+K71lmEvgVIPutSdvCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIMlN85 8H3JLcUqsgxWGyScxbLdMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2 QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ TVc5bVF0bnJYMHc3SWdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA96ueG2rL8tSg+tK+Lp99rsHgb0WWGdrJWObNkGV8fQm1I6sqezkf4 A9N5yAXB9/vRl2839aTKRR1WXolaakPKqJTzDUewsTpWOue2pm4PMK+JnF9MZDi7 IM311iv+xNkM/MFH9fRNQRHOmG4c5Nn0ss+m4vTRl6GqoBzGGX5B0njFzgq6UVZD hA0iQbhII+fiWPRy1dSGv+ua3ubikEvkGS58R59g3d1G5Aylrt2eLrKUxoPGVlJN sLOUGDINZwWdFbjRIockOWSWv3i7wDICEa+K1YzUoCVi9HbDCVxtbqZg2AbSjp3R dJI7AatIHa2oSBYz4O/5X3Xi8VCl6kIz -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:07 2025 by rpki-client