This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json) Hash identifier: CqCRV7M6f8h4RJaqBKDJkRrT/H9vVUbrxKZ0jjF0pS4= Subject key identifier: 19:41:09:88:3E:83:5B:03:0A:72:A8:4C:7F:59:BF:7A:5A:22:8A:FD Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft Manifest number: 013B Signing time: Fri 05 Dec 2025 02:35:24 +0000 Manifest this update: Fri 05 Dec 2025 02:35:23 +0000 Manifest next update: Fri 12 Dec 2025 02:35:23 +0000 Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: PbTGMcySjbzvB1YyE19T9Fo48w19STlVtrfcpVF2Z1w=) 2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: H2P0kf4hy4afyomyyat64ajTM5Qyh5RNKdo/uhIFD+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Validity Not Before: Dec 5 02:35:23 2025 GMT Not After : Dec 12 02:35:23 2025 GMT Subject: CN=693244ec-bcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:b2:55:8c:b1:13:08:90:e2:f1:8f:7b:ea: 25:1b:75:66:9e:78:6d:da:21:df:41:ed:cf:f7:72: 1e:d3:38:f9:4d:ce:80:9c:90:0a:49:5c:d8:4a:06: e0:64:a7:26:4b:7f:e5:99:4f:73:cb:bf:42:06:8c: 18:9c:4c:35:45:b9:56:35:28:08:be:be:ac:51:a7: e7:94:20:df:24:2e:0a:7a:69:48:5c:82:d9:cb:dc: 23:f0:0d:75:70:60:d0:79:d4:a0:43:92:20:8d:f5: 59:6b:8d:94:d6:64:08:ed:83:f0:e7:c5:4a:18:90: 58:a9:da:e8:24:e0:68:5c:b7:14:a5:d7:f6:77:ea: 7c:ad:57:b7:73:95:a1:46:4b:13:9d:6a:e1:03:01: 85:60:10:71:cf:bf:fe:b3:59:55:92:a9:0c:15:de: 4a:0f:db:3e:5c:83:9e:fb:70:30:64:e3:81:a7:42: 6c:20:ae:cf:1f:a5:df:5f:b3:13:4e:d2:6c:0e:17: 0d:a5:c5:2f:7a:a3:43:f4:55:e6:d9:a9:7d:9e:46: 83:0e:ca:18:35:fd:7a:86:2a:4d:90:ba:55:05:24: b8:7b:eb:ee:26:f3:48:5a:b7:48:09:f3:b8:4f:7e: 1b:ee:6a:c4:2b:57:d7:db:57:03:36:16:48:59:7a: 5a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:41:09:88:3E:83:5B:03:0A:72:A8:4C:7F:59:BF:7A:5A:22:8A:FD X509v3 Authority Key Identifier: keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ea:d6:5d:45:89:37:35:f8:d1:fd:a9:dd:52:94:d4:29:fb: bd:6f:0b:96:d1:ee:4f:86:73:08:54:bc:b7:d9:9b:0f:cd:de: 0b:90:36:35:7f:11:61:89:9d:cd:86:3d:b5:19:50:8d:cb:fe: f0:0a:51:b5:80:11:3c:aa:55:89:3d:e4:26:f3:e1:d7:27:b6: 00:38:2d:95:76:c6:c1:cb:ac:03:7c:a1:33:e8:f3:a0:8f:63: ed:39:9e:91:39:c8:f3:b7:58:46:2c:2a:18:2a:da:e0:fc:b8: 08:8b:2e:6f:c4:c8:4f:3f:8f:2f:8b:28:05:f7:b9:61:1a:e0: b4:fc:af:2c:10:0a:85:29:bb:7e:48:05:94:6a:86:02:64:c1: 35:1b:e6:e1:bd:55:c0:43:42:ec:08:66:bc:ef:2e:54:ec:37: 0c:fc:de:9b:56:6a:81:1a:ac:13:d3:51:64:9b:80:0d:0c:3d: 22:fd:ba:f4:50:97:a8:09:46:d2:89:b5:51:c1:d3:96:11:3b: 2f:0a:54:28:69:73:b6:85:82:eb:ee:a1:64:48:6c:c7:93:a1: 73:6a:cb:ac:ed:22:51:4d:86:29:46:e7:3f:00:d9:c6:36:2f: a9:ce:1e:32:e9:b7:3b:3d:44:ff:a2:d0:aa:58:af:dc:61:c3: 36:fd:ef:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy MTg1MzBDNjUwHhcNMjUxMjA1MDIzNTIzWhcNMjUxMjEyMDIzNTIzWjAYMRYwFAYD VQQDEw02OTMyNDRlYy1iY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKCyVYyxEwiQ4vGPe+olG3Vmnnht2iHfQe3P93Ie0zj5Tc6AnJAKSVzYSgbg ZKcmS3/lmU9zy79CBowYnEw1RblWNSgIvr6sUafnlCDfJC4KemlIXILZy9wj8A11 cGDQedSgQ5IgjfVZa42U1mQI7YPw58VKGJBYqdroJOBoXLcUpdf2d+p8rVe3c5Wh RksTnWrhAwGFYBBxz7/+s1lVkqkMFd5KD9s+XIOe+3AwZOOBp0JsIK7PH6XfX7MT TtJsDhcNpcUveqND9FXm2al9nkaDDsoYNf16hipNkLpVBSS4e+vuJvNIWrdICfO4 T34b7mrEK1fX21cDNhZIWXpajwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlBCYg+ g1sDCnKoTH9Zv3paIor9MB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH a2t1N2xsWG40UGdoaFRER1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP6tZdRYk3NfjR/andUpTUKfu9bwuW0e5PhnMIVLy32ZsPzd4LkDY1 fxFhiZ3Nhj21GVCNy/7wClG1gBE8qlWJPeQm8+HXJ7YAOC2VdsbBy6wDfKEz6POg j2PtOZ6ROcjzt1hGLCoYKtrg/LgIiy5vxMhPP48viygF97lhGuC0/K8sEAqFKbt+ SAWUaoYCZME1G+bhvVXAQ0LsCGa87y5U7DcM/N6bVmqBGqwT01Fkm4ANDD0i/br0 UJeoCUbSibVRwdOWETsvClQoaXO2hYLr7qFkSGzHk6Fzasus7SJRTYYpRuc/ANnG Ni+pzh4y6bc7PUT/otCqWK/cYcM2/e/e -----END CERTIFICATE-----Generated at Sat Dec 6 17:12:58 2025 by rpki-client