This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json) Hash identifier: BydHVPRwslnhHmyZr9vPF0DtCuk4Vt6lsRDxfl4ZTJs= Subject key identifier: 71:30:63:4D:DF:EA:8F:2D:9E:60:A1:DA:B5:4A:B8:F6:1D:E0:B6:CA Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft Manifest number: 0141 Signing time: Wed 17 Dec 2025 03:55:11 +0000 Manifest this update: Wed 17 Dec 2025 03:55:10 +0000 Manifest next update: Wed 24 Dec 2025 03:55:10 +0000 Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: 3+U5d/uA8/5oAdfgSKlvQni8FQpYKqtHrnRji2x0jow=) 2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: H2P0kf4hy4afyomyyat64ajTM5Qyh5RNKdo/uhIFD+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Validity Not Before: Dec 17 03:55:10 2025 GMT Not After : Dec 24 03:55:10 2025 GMT Subject: CN=6942299e-fc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:80:1c:f4:84:5b:13:0a:7f:f4:dd:f8:34: 74:b0:c7:37:44:f3:29:55:25:4e:db:a6:ca:74:ef: 81:6e:b4:3d:41:66:25:58:95:d7:6d:bf:7b:11:94: 3f:ce:e5:f1:e8:d6:5f:fa:07:47:38:5c:4e:0a:a8: eb:39:cf:21:8d:96:77:79:8f:47:af:70:30:4c:d8: ef:d2:26:0c:79:3e:b1:24:4f:7a:3a:54:9b:55:19: 12:68:5a:0d:eb:47:92:c3:1d:a8:e3:a9:de:89:76: a4:5a:c6:0a:a2:df:1f:1a:ca:10:ab:da:a3:5d:90: fb:ed:61:f7:fc:73:ff:ff:b5:22:af:57:e9:1b:e8: ea:4b:b6:62:e5:d0:53:7c:5c:87:9c:bb:c4:40:c6: 88:0b:70:e7:38:81:d9:d1:9d:87:2b:74:eb:2b:50: 1e:c5:b2:44:43:10:fe:33:d9:7c:b0:52:52:e0:e4: e8:90:81:0f:98:43:3c:2f:fd:fe:82:23:b9:00:b4: 4f:39:9b:ca:bd:12:c6:fc:92:28:e3:48:9b:1d:a6: d2:88:d2:e6:3b:a9:db:02:65:d5:02:13:1e:5d:17: 06:27:70:6d:23:90:d9:9a:84:04:b1:06:bd:e6:ef: 54:f2:5c:c1:52:fc:36:db:12:85:6b:8a:bf:84:1b: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:30:63:4D:DF:EA:8F:2D:9E:60:A1:DA:B5:4A:B8:F6:1D:E0:B6:CA X509v3 Authority Key Identifier: keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:36:b3:0b:5d:f0:02:1f:e1:ac:5c:14:67:b2:9c:c8:4b:28: 64:20:48:1c:f8:88:f6:b9:1c:69:79:99:7b:a6:17:e4:3e:bc: 82:3c:98:40:0c:1e:95:e0:2c:45:0c:63:cf:14:73:e7:5c:71: 31:94:b5:c6:4b:5c:da:0e:2d:b0:6a:b9:52:ba:5e:ed:b4:18: 2c:1c:c2:9d:85:54:f3:4f:52:68:9b:16:9c:29:cc:45:33:ce: 15:2f:59:b8:a3:40:43:df:52:dd:aa:43:02:63:7b:0e:91:ae: 82:9f:bc:f8:21:22:9f:d3:37:7b:d2:70:7a:f5:9b:ce:d0:73: 6e:d7:9f:50:89:04:70:3b:ad:0a:33:53:2a:b5:2f:5b:2d:9d: c6:41:0a:94:a6:e2:94:a5:3c:d7:30:cf:0f:b4:8b:3d:3f:0a: 7b:67:ab:8f:db:59:bc:d6:98:1d:b5:1b:42:44:ef:95:eb:8f: 32:34:22:ff:67:71:b4:b6:e8:91:5b:95:00:15:39:57:a8:8b: 5e:24:e7:42:91:48:cf:33:c5:b2:68:33:00:43:e3:75:55:e1: 72:1e:a5:71:5c:49:52:d9:95:89:f4:c4:cb:1e:af:f0:86:c2: a3:f8:64:b7:e8:84:c8:2f:a1:8c:62:6d:18:43:fc:9e:98:7f: cd:2b:f1:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy MTg1MzBDNjUwHhcNMjUxMjE3MDM1NTEwWhcNMjUxMjI0MDM1NTEwWjAYMRYwFAYD VQQDDA02OTQyMjk5ZS1mYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgyAHPSEWxMKf/Td+DR0sMc3RPMpVSVO26bKdO+BbrQ9QWYlWJXXbb97EZQ/ zuXx6NZf+gdHOFxOCqjrOc8hjZZ3eY9Hr3AwTNjv0iYMeT6xJE96OlSbVRkSaFoN 60eSwx2o46neiXakWsYKot8fGsoQq9qjXZD77WH3/HP//7Uir1fpG+jqS7Zi5dBT fFyHnLvEQMaIC3DnOIHZ0Z2HK3TrK1AexbJEQxD+M9l8sFJS4OTokIEPmEM8L/3+ giO5ALRPOZvKvRLG/JIo40ibHabSiNLmO6nbAmXVAhMeXRcGJ3BtI5DZmoQEsQa9 5u9U8lzBUvw22xKFa4q/hBviHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEwY03f 6o8tnmCh2rVKuPYd4LbKMB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH a2t1N2xsWG40UGdoaFRER1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzNrMLXfACH+GsXBRnspzISyhkIEgc+Ij2uRxpeZl7phfkPryCPJhA DB6V4CxFDGPPFHPnXHExlLXGS1zaDi2warlSul7ttBgsHMKdhVTzT1JomxacKcxF M84VL1m4o0BD31LdqkMCY3sOka6Cn7z4ISKf0zd70nB69ZvO0HNu159QiQRwO60K M1MqtS9bLZ3GQQqUpuKUpTzXMM8PtIs9Pwp7Z6uP21m81pgdtRtCRO+V648yNCL/ Z3G0tuiRW5UAFTlXqIteJOdCkUjPM8WyaDMAQ+N1VeFyHqVxXElS2ZWJ9MTLHq/w hsKj+GS36ITIL6GMYm0YQ/yemH/NK/HR -----END CERTIFICATE-----Generated at Thu Dec 18 16:12:07 2025 by rpki-client