This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json) Hash identifier: 28FRl/2BLoAbBpErkJVOXt7CRIgLkcQ3Bnj2LsFKTIw= Subject key identifier: 74:A5:54:F2:06:57:67:FF:6C:2A:1A:2A:C6:B1:73:86:D5:AC:D2:34 Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Certificate serial: 351E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft Manifest number: 3505 Signing time: Sat 06 Dec 2025 14:18:38 +0000 Manifest this update: Sat 06 Dec 2025 14:18:38 +0000 Manifest next update: Sat 13 Dec 2025 14:18:38 +0000 Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: UFuPGpOjKk9OWZmwmL8lR3eA/KNyPX7nrAuQk8b2kq0=) 2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: yi83MC4bGsYsYYIO3cLCV7chmo/rO1rwAJjntq4bNoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13598 (0x351e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Validity Not Before: Dec 6 14:18:38 2025 GMT Not After : Dec 13 14:18:38 2025 GMT Subject: CN=69343b3e-cedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:9a:de:d0:1e:eb:af:b8:67:b8:4d:af:89: 20:af:40:f5:49:d5:35:d5:99:77:a5:1c:61:7d:e4: af:55:8b:cb:1d:14:0a:fb:3b:3f:00:a4:8c:9d:16: 63:03:d6:3a:5e:88:89:9d:50:7d:bc:01:27:a9:00: cc:b0:27:1e:26:a6:f9:f5:19:a5:60:c7:38:2a:f1: 0e:1f:01:ff:43:02:6d:33:bf:37:5a:97:22:87:e6: 4a:93:98:af:76:56:48:7c:16:96:21:00:73:33:87: 9d:32:e2:c7:88:30:b7:72:40:e0:15:ca:3f:be:1c: 0c:0a:2f:1e:28:c8:43:56:3a:a1:c9:dd:21:b0:df: 56:bf:21:ec:61:72:b2:24:09:f8:8e:38:80:37:87: 77:71:65:3f:23:ae:e9:bb:af:ae:37:10:39:78:49: 5a:c6:7e:15:c4:8a:99:ba:c1:af:1e:4b:cf:59:e8: e7:54:3d:e8:f4:79:0d:88:af:bd:6c:75:3a:1f:23: 9b:49:ab:d7:2b:a0:18:ae:f0:6b:23:f2:41:b5:77: 09:01:20:20:d2:8c:dc:70:fe:85:16:c6:7e:c4:9d: cb:3b:48:7e:ba:64:bb:77:7e:31:e7:ba:e5:84:fb: 97:08:d8:ad:e5:b6:78:3e:59:45:34:36:ef:24:b2: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A5:54:F2:06:57:67:FF:6C:2A:1A:2A:C6:B1:73:86:D5:AC:D2:34 X509v3 Authority Key Identifier: keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2a:eb:99:08:36:d2:94:ff:96:9d:93:d5:d8:74:d0:9d:a8: ad:8b:4b:6c:9c:2e:27:e5:be:a5:81:9e:2d:82:15:a2:3f:02: 92:88:2c:b2:be:63:ed:78:0b:5d:5d:67:56:fe:a1:6a:47:c4: f0:4c:ca:6e:3e:fc:0a:8b:c4:67:53:d8:36:24:ad:14:c0:56: 05:39:d8:3e:99:2d:6d:f3:b8:87:a9:ef:98:cf:05:22:ca:e5: fa:fc:7b:68:3f:0e:f0:f9:9f:24:27:ec:f4:1d:9e:cc:39:a3: e7:fd:10:84:fc:c9:fd:ba:14:f4:34:1d:59:28:14:66:2d:15: 37:d3:7e:98:dd:28:31:95:81:80:64:60:6e:77:e6:0e:42:d8: 8f:7d:05:2a:49:ea:11:96:88:4e:55:8a:5f:ad:fa:97:44:1f: 23:69:f3:35:f2:fd:64:19:e6:99:8f:5f:30:af:25:8e:1e:f1: db:10:a3:c8:54:a3:e9:bc:c6:54:b2:fd:91:54:ca:24:6f:33: 1b:d5:b3:63:3c:b9:4d:3d:4c:41:85:35:bf:0b:e9:3c:5a:61: 82:dd:f2:d5:d0:34:53:37:31:c6:27:86:70:bb:96:6c:60:fa: cb:2c:ff:c6:ca:68:0f:8f:5b:18:e5:14:6d:c9:e9:5b:fd:49: 1b:ea:11:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3 N0RGQjIxQTMwHhcNMjUxMjA2MTQxODM4WhcNMjUxMjEzMTQxODM4WjAYMRYwFAYD VQQDEw02OTM0M2IzZS1jZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eCa3tAe66+4Z7hNr4kgr0D1SdU11Zl3pRxhfeSvVYvLHRQK+zs/AKSMnRZj A9Y6XoiJnVB9vAEnqQDMsCceJqb59RmlYMc4KvEOHwH/QwJtM783Wpcih+ZKk5iv dlZIfBaWIQBzM4edMuLHiDC3ckDgFco/vhwMCi8eKMhDVjqhyd0hsN9WvyHsYXKy JAn4jjiAN4d3cWU/I67pu6+uNxA5eElaxn4VxIqZusGvHkvPWejnVD3o9HkNiK+9 bHU6HyObSavXK6AYrvBrI/JBtXcJASAg0ozccP6FFsZ+xJ3LO0h+umS7d34x57rl hPuXCNit5bZ4PllFNDbvJLKDRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSlVPIG V2f/bCoaKsaxc4bVrNI0MB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx U0cybVFfajVOaHQzMzdJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbKuuZCDbSlP+WnZPV2HTQnaiti0tsnC4n5b6lgZ4tghWiPwKSiCyy vmPteAtdXWdW/qFqR8TwTMpuPvwKi8RnU9g2JK0UwFYFOdg+mS1t87iHqe+YzwUi yuX6/HtoPw7w+Z8kJ+z0HZ7MOaPn/RCE/Mn9uhT0NB1ZKBRmLRU3036Y3SgxlYGA ZGBud+YOQtiPfQUqSeoRlohOVYpfrfqXRB8jafM18v1kGeaZj18wryWOHvHbEKPI VKPpvMZUsv2RVMokbzMb1bNjPLlNPUxBhTW/C+k8WmGC3fLV0DRTNzHGJ4Zwu5Zs YPrLLP/GymgPj1sY5RRtyelb/Ukb6hHW -----END CERTIFICATE-----Generated at Sat Dec 6 17:43:08 2025 by rpki-client