This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft File: RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json) Hash identifier: HBGAagJKENZcT1/45st9asbhgnzr1rGT9QBwmYcm6XY= Subject key identifier: A3:B1:06:33:AD:4B:8F:BD:BD:C7:E2:FC:2D:75:38:AA:A0:6E:B5:B2 Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 Certificate issuer: /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Certificate serial: 0A85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft Manifest number: 0A7F Signing time: Thu 18 Dec 2025 19:11:48 +0000 Manifest this update: Thu 18 Dec 2025 19:11:48 +0000 Manifest next update: Thu 25 Dec 2025 19:11:48 +0000 Files and hashes: 1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: eAsLtXI5zXlbAetA+mhZPh1mfq9YaH0kdHXYeLG2LaE=) 2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: L7du7ZJlcmB2nN0ANGTgn5PQ8EaqXu+Bk+I6VvNhSKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2693 (0xa85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Validity Not Before: Dec 18 19:11:48 2025 GMT Not After : Dec 25 19:11:48 2025 GMT Subject: CN=694451f4-a7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:e6:4b:cd:42:28:32:56:1d:44:59:63:2f: 5d:68:55:db:5f:22:25:22:f8:6f:94:c1:9c:2a:4d: b6:d8:32:27:6e:5e:03:13:cc:81:64:76:21:a3:c9: 47:fd:50:9c:f2:e5:0a:3f:06:59:3a:3a:b1:ad:6a: d5:23:8e:01:70:ef:75:70:e6:b4:35:b1:48:d0:f7: 9f:7c:ee:9d:3e:02:00:05:74:9d:b8:60:6a:f2:3d: a6:68:5c:75:35:5e:a7:38:52:32:b2:84:6e:b0:ac: 43:ef:ef:1b:5c:05:13:1b:d4:3c:42:9b:be:1f:d1: 1d:34:78:fb:0c:7f:e9:5e:a6:18:ac:02:6d:1a:ac: 25:57:38:f1:28:79:a2:ae:bb:de:9a:dd:8e:68:1d: fc:d4:66:36:d7:38:e3:26:75:9c:23:9e:88:69:f4: d4:38:07:df:71:c9:bb:fd:d4:61:f6:ad:3d:e1:8c: 8f:06:21:df:10:b2:76:14:4c:03:87:09:6e:dd:1b: 8a:59:da:c0:f3:fd:ad:d9:41:ad:87:3f:e8:2a:4b: 4b:e4:c6:da:e4:76:17:65:a3:32:88:21:4c:53:e6: 01:37:65:36:06:5f:d3:4c:84:1f:99:7c:d5:86:4e: 47:38:8a:f0:c7:22:d6:44:e1:77:1d:95:ec:83:ec: 2e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B1:06:33:AD:4B:8F:BD:BD:C7:E2:FC:2D:75:38:AA:A0:6E:B5:B2 X509v3 Authority Key Identifier: keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:98:54:61:16:fd:ff:82:05:da:7d:b5:fc:42:f9:0e:35:a6: 04:5d:22:73:75:4f:d1:77:d2:51:80:f7:db:6b:e6:77:c9:0f: 6a:56:7f:c7:f4:76:0a:9e:e5:56:6b:59:14:6e:f1:90:14:e1: f7:2e:45:a9:8f:02:ee:91:99:bb:b3:8c:97:de:3d:84:4b:e4: df:80:ce:45:30:c1:7f:30:cd:90:d3:eb:8d:68:28:18:34:1f: 46:41:ac:0b:37:88:6b:8b:2d:80:ef:aa:7a:6c:49:73:c7:51: b0:1e:8f:2f:e3:61:c9:b3:d5:3f:06:0f:9f:7b:38:7e:63:33: bf:68:db:75:5a:07:1d:b1:38:cc:4f:c2:ad:b7:34:da:8c:21: 37:82:e4:bf:5b:bd:c7:61:5b:eb:5e:f9:eb:82:4b:06:51:e7: 6c:d0:f5:31:3d:23:9f:65:84:2e:b7:dd:87:fd:04:35:94:19: ab:97:3c:34:d9:98:68:9d:4b:15:aa:75:d4:a8:5b:f4:37:9b: 13:4e:d4:c4:36:29:fa:96:82:be:2a:8b:96:21:c6:49:03:26: 3c:56:20:94:b7:ea:d3:41:57:4a:cf:c1:33:43:a0:02:d0:a9: 35:a9:f4:a1:22:bc:5a:a3:58:45:7a:78:84:dd:4d:6b:cf:58: 64:78:ef:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2 QzczMUZCQTcwHhcNMjUxMjE4MTkxMTQ4WhcNMjUxMjI1MTkxMTQ4WjAYMRYwFAYD VQQDDA02OTQ0NTFmNC1hN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOfmS81CKDJWHURZYy9daFXbXyIlIvhvlMGcKk222DInbl4DE8yBZHYho8lH /VCc8uUKPwZZOjqxrWrVI44BcO91cOa0NbFI0PeffO6dPgIABXSduGBq8j2maFx1 NV6nOFIysoRusKxD7+8bXAUTG9Q8Qpu+H9EdNHj7DH/pXqYYrAJtGqwlVzjxKHmi rrvemt2OaB381GY21zjjJnWcI56IafTUOAffccm7/dRh9q094YyPBiHfELJ2FEwD hwlu3RuKWdrA8/2t2UGthz/oKktL5Mba5HYXZaMyiCFMU+YBN2U2Bl/TTIQfmXzV hk5HOIrwxyLWROF3HZXsg+wuPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOxBjOt S4+9vcfi/C11OKqgbrWyMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhmFRhFv3/ggXafbX8QvkONaYEXSJzdU/Rd9JRgPfba+Z3yQ9qVn/H 9HYKnuVWa1kUbvGQFOH3LkWpjwLukZm7s4yX3j2ES+TfgM5FMMF/MM2Q0+uNaCgY NB9GQawLN4hriy2A76p6bElzx1GwHo8v42HJs9U/Bg+fezh+YzO/aNt1WgcdsTjM T8KttzTajCE3guS/W73HYVvrXvnrgksGUeds0PUxPSOfZYQut92H/QQ1lBmrlzw0 2ZhonUsVqnXUqFv0N5sTTtTENin6loK+KouWIcZJAyY8ViCUt+rTQVdKz8EzQ6AC 0Kk1qfShIrxao1hFeniE3U1rz1hkeO8J -----END CERTIFICATE-----Generated at Fri Dec 19 06:26:24 2025 by rpki-client