This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: +Zi7stHpQq21VyhOVZNhH9wQ4tLbv0yRsYxSqip3Kak= Subject key identifier: C0:ED:C6:F2:3C:43:17:F1:3F:3E:12:EA:0B:A3:91:25:00:70:4D:42 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 07EB Signing time: Sat 06 Dec 2025 20:12:54 +0000 Manifest this update: Sat 06 Dec 2025 20:12:53 +0000 Manifest next update: Sat 13 Dec 2025 20:12:53 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: 3U0V8hlPm4UIZR0S6iuhDWFhWLm6kLoYV6GSVAJvofU=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: Z1uRbBBo1ykDesKGyzNhoAS+Q0kH4ecEfYyBIro/My0=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: RDAuo0ukbkiW2gxiKwesJ3g1zTBr8ESAl1lXLcl6ncU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Dec 6 20:12:53 2025 GMT Not After : Dec 13 20:12:53 2025 GMT Subject: CN=69348e46-d4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:ad:44:ce:ad:80:ee:a9:a9:69:c5:b4:33: 09:cc:b9:90:dd:14:4e:65:65:d5:80:4f:1c:2a:cd: 73:8d:65:c4:d4:7f:e9:9c:c7:e3:59:25:2e:7e:66: d2:d0:bc:1e:8d:d3:61:6b:a8:d8:7f:c5:f9:c5:c4: 45:24:c2:6b:72:f2:51:94:ed:d3:bb:52:2a:f3:34: 2b:a9:67:67:d9:57:6d:dc:50:48:72:0c:06:2e:15: 0f:8d:7c:27:11:5b:e7:79:b0:2a:bb:44:4e:7d:a2: 33:a6:38:97:f7:9b:77:bb:ab:72:e5:6a:51:4a:0d: 73:a8:53:73:e4:f8:e0:af:99:cd:87:89:6d:7b:a8: ec:7e:47:ac:8a:61:ce:9e:20:6a:74:f9:51:4b:13: 31:83:84:a0:3d:f9:24:e4:58:12:ca:c7:6b:11:b5: bf:8f:a3:ea:da:d3:49:cc:78:eb:19:b1:60:66:22: 82:17:22:9b:1e:3c:92:5f:ce:70:0c:99:fc:ce:1e: 7d:ae:b7:bc:0e:32:4c:e1:39:b5:68:f6:b1:d9:32: 8f:64:25:20:70:92:7b:4b:8d:4d:80:6a:8f:25:fc: 48:97:df:f4:8f:09:61:2a:41:3b:a0:d2:7e:2a:e1: 6c:4a:78:1c:f0:8d:87:fc:75:22:8f:b4:5c:11:ca: 7a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:ED:C6:F2:3C:43:17:F1:3F:3E:12:EA:0B:A3:91:25:00:70:4D:42 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:f0:72:c6:58:06:53:90:79:3b:d7:00:9e:c6:aa:08:b6:16: ff:0c:75:af:78:10:75:6f:f3:50:a4:14:6d:ff:58:29:14:e1: 7d:66:ef:9a:4e:f4:8e:5d:60:bd:36:cb:ab:1d:c2:4e:20:79: 92:60:41:90:3d:98:c2:ff:bd:c8:07:33:c6:1d:8a:14:49:82: 0e:59:21:53:5e:a2:16:6f:94:50:4e:fb:ac:9a:0d:88:fb:9d: b8:12:b3:8d:5b:1e:6b:f4:b7:fc:60:fa:d8:19:01:9d:4b:91: 7a:7c:80:ed:31:7f:86:84:5b:08:54:be:ec:87:0c:ab:89:a6: d0:49:dc:29:9b:f1:e6:8b:99:9f:40:ad:0f:09:5d:eb:8b:fb: 2a:8e:37:5c:89:06:bb:76:e8:3e:d3:fe:32:84:59:ad:75:02: 6d:9f:04:b9:f8:74:ca:0b:9e:87:3e:8c:fc:b6:58:78:c1:1d: e0:13:b6:4f:c2:4d:80:cc:f7:ce:cd:3b:a0:ad:f3:9f:4e:54: 92:a9:96:9d:a2:66:9e:21:4a:da:44:50:40:75:7a:f3:45:a9: 0e:63:dd:7f:10:ea:f8:e3:2e:4b:4e:4b:14:69:bd:54:c0:b3: 86:49:62:ee:30:b4:56:be:41:b8:c0:19:ed:12:46:c1:8c:66: 0c:6a:9b:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUxMjA2MjAxMjUzWhcNMjUxMjEzMjAxMjUzWjAYMRYwFAYD VQQDEw02OTM0OGU0Ni1kNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uytRM6tgO6pqWnFtDMJzLmQ3RROZWXVgE8cKs1zjWXE1H/pnMfjWSUufmbS 0LwejdNha6jYf8X5xcRFJMJrcvJRlO3Tu1Iq8zQrqWdn2Vdt3FBIcgwGLhUPjXwn EVvnebAqu0ROfaIzpjiX95t3u6ty5WpRSg1zqFNz5Pjgr5nNh4lte6jsfkesimHO niBqdPlRSxMxg4SgPfkk5FgSysdrEbW/j6Pq2tNJzHjrGbFgZiKCFyKbHjySX85w DJn8zh59rre8DjJM4Tm1aPax2TKPZCUgcJJ7S41NgGqPJfxIl9/0jwlhKkE7oNJ+ KuFsSngc8I2H/HUij7RcEcp61QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDtxvI8 QxfxPz4S6gujkSUAcE1CMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/8HLGWAZTkHk71wCexqoIthb/DHWveBB1b/NQpBRt/1gpFOF9Zu+a TvSOXWC9NsurHcJOIHmSYEGQPZjC/73IBzPGHYoUSYIOWSFTXqIWb5RQTvusmg2I +524ErONWx5r9Lf8YPrYGQGdS5F6fIDtMX+GhFsIVL7shwyriabQSdwpm/Hmi5mf QK0PCV3ri/sqjjdciQa7dug+0/4yhFmtdQJtnwS5+HTKC56HPoz8tlh4wR3gE7ZP wk2AzPfOzTugrfOfTlSSqZadomaeIUraRFBAdXrzRakOY91/EOr44y5LTksUab1U wLOGSWLuMLRWvkG4wBntEkbBjGYMapvi -----END CERTIFICATE-----Generated at Sun Dec 7 07:47:46 2025 by rpki-client