This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: oUUNVH++uYUR41nKzcEOnFlkGGUoBHuw5fl2o+pzgsc= Subject key identifier: 68:40:53:D5:35:72:FC:9A:40:6E:D9:18:33:04:B7:DA:CC:67:48:7B Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 058F Signing time: Sat 06 Dec 2025 22:01:21 +0000 Manifest this update: Sat 06 Dec 2025 22:01:20 +0000 Manifest next update: Sat 13 Dec 2025 22:01:20 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: ya1xSb/5Geje8F0oex3H6k8ovXsYIxF6tfkieAvSnkU=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 2XbXZcyCmkwNngGPogkbhBm8QONSr+SCdJI+4quVjcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: Dec 6 22:01:20 2025 GMT Not After : Dec 13 22:01:20 2025 GMT Subject: CN=6934a7b1-6adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:1d:14:a9:8c:d9:20:3b:50:ca:29:d2:cc: 0b:ce:5c:9b:c6:5c:2d:44:de:c4:66:86:5b:87:d5: f0:51:d2:ab:4d:2d:19:2e:bb:6a:be:36:a2:28:26: 13:01:b8:7d:e7:aa:ae:0c:08:42:2e:8b:62:6a:c0: 72:4f:5f:17:aa:7b:dd:19:80:56:31:5b:89:d9:00: f7:a2:61:f7:9c:e7:77:11:23:c3:0a:91:82:e2:7f: 51:f6:ab:7e:c5:98:4b:61:c9:a3:de:0d:64:da:04: d1:da:75:37:b5:89:46:95:cb:22:55:04:fb:d9:b5: 03:54:af:f0:3e:dd:5d:c8:90:89:a9:99:85:65:36: 3f:d5:f0:06:98:35:d2:f5:1f:e4:82:5f:db:3d:1f: 4e:54:80:7e:17:19:45:66:33:e2:3c:9e:9e:a5:50: f3:80:91:96:91:ca:89:97:34:83:5c:04:fb:6f:47: 2c:05:54:af:44:13:c3:64:6c:9f:6d:6a:19:a9:26: 76:8a:fe:1c:06:a8:2f:15:d2:f0:15:6d:65:3c:39: 2f:6a:b7:1b:73:ac:55:bc:88:3a:7a:20:97:ab:0a: cf:67:d2:91:4b:d4:d6:6f:e8:a2:de:f1:d0:f4:7f: 81:89:1b:f6:41:ac:c2:ca:f4:1d:cc:11:83:9c:ad: b8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:40:53:D5:35:72:FC:9A:40:6E:D9:18:33:04:B7:DA:CC:67:48:7B X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:a0:4c:8e:24:20:cb:4a:62:a8:b2:3a:b0:d4:ce:a2:23:77: 2d:05:71:9b:9b:00:28:e9:cd:78:26:af:97:34:bc:40:0c:6d: 57:e5:0d:3d:ef:b6:49:48:e4:04:56:21:ba:d2:49:c7:64:07: cd:b4:4a:d1:9d:90:47:3b:bb:fa:67:90:28:87:e2:37:7d:94: 5e:59:db:bc:81:5d:88:a3:ca:8f:73:ea:86:fe:41:71:58:49: 84:9b:b2:75:c9:67:f9:59:54:32:fe:3a:3e:4d:ba:b5:62:86: 8a:5d:bb:e9:6c:97:c2:ca:df:e8:5d:23:4f:62:e2:ae:aa:d9: 03:8f:2a:97:33:16:96:e4:f6:83:94:c3:90:24:72:9c:58:25: 4e:70:6b:8a:b3:00:67:9c:98:1f:f0:8b:6e:fd:90:22:7c:e0: 52:fa:6a:d2:f2:a6:c1:bd:6b:6b:bb:ce:ae:24:51:71:f0:ed: e7:40:cb:bd:54:f9:ff:39:92:0a:c8:44:ba:96:41:17:de:cf: 81:24:97:06:79:d5:32:ec:6c:97:91:4f:9f:66:9b:45:d2:95: 86:21:3f:ab:95:dc:d7:7a:d8:cb:e9:6a:29:ec:7d:f5:d7:19: 15:72:da:53:44:c8:27:88:5f:9d:16:ed:31:eb:2b:b8:95:e6: cd:59:e2:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjUxMjA2MjIwMTIwWhcNMjUxMjEzMjIwMTIwWjAYMRYwFAYD VQQDEw02OTM0YTdiMS02YWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFwdFKmM2SA7UMop0swLzlybxlwtRN7EZoZbh9XwUdKrTS0ZLrtqvjaiKCYT Abh956quDAhCLotiasByT18XqnvdGYBWMVuJ2QD3omH3nOd3ESPDCpGC4n9R9qt+ xZhLYcmj3g1k2gTR2nU3tYlGlcsiVQT72bUDVK/wPt1dyJCJqZmFZTY/1fAGmDXS 9R/kgl/bPR9OVIB+FxlFZjPiPJ6epVDzgJGWkcqJlzSDXAT7b0csBVSvRBPDZGyf bWoZqSZ2iv4cBqgvFdLwFW1lPDkvarcbc6xVvIg6eiCXqwrPZ9KRS9TWb+ii3vHQ 9H+BiRv2QazCyvQdzBGDnK24+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhAU9U1 cvyaQG7ZGDMEt9rMZ0h7MB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCToEyOJCDLSmKosjqw1M6iI3ctBXGbmwAo6c14Jq+XNLxADG1X5Q09 77ZJSOQEViG60knHZAfNtErRnZBHO7v6Z5Aoh+I3fZReWdu8gV2Io8qPc+qG/kFx WEmEm7J1yWf5WVQy/jo+Tbq1YoaKXbvpbJfCyt/oXSNPYuKuqtkDjyqXMxaW5PaD lMOQJHKcWCVOcGuKswBnnJgf8Itu/ZAifOBS+mrS8qbBvWtru86uJFFx8O3nQMu9 VPn/OZIKyES6lkEX3s+BJJcGedUy7GyXkU+fZptF0pWGIT+rldzXetjL6Wop7H31 1xkVctpTRMgniF+dFu0x6yu4lebNWeJu -----END CERTIFICATE-----Generated at Mon Dec 8 09:13:02 2025 by rpki-client