This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json) Hash identifier: ZNad58Tdl2WVafscciBUmguMvcPI4MUt/nwr3tF1MVo= Subject key identifier: C2:99:DF:55:B2:3B:74:A5:2F:EC:66:67:DA:8C:EA:13:C2:C2:36:15 Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft Manifest number: BF Signing time: Fri 05 Dec 2025 03:55:15 +0000 Manifest this update: Fri 05 Dec 2025 03:55:14 +0000 Manifest next update: Fri 12 Dec 2025 03:55:14 +0000 Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: wyifcabVwBl1LPBjjcW/tkiHGY60mnTKcroXVokPEcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Validity Not Before: Dec 5 03:55:14 2025 GMT Not After : Dec 12 03:55:14 2025 GMT Subject: CN=693257a2-7fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:59:e7:b5:12:fb:1a:8d:ec:1f:99:a1:76: 65:61:f4:f8:c9:ac:bc:31:2a:8b:38:84:8c:78:78: cc:4a:2c:ae:ff:64:c5:a1:b2:de:b8:b4:53:91:60: ff:1b:b0:e5:17:d3:2b:0d:aa:99:78:93:98:c1:34: 69:b7:4d:b4:89:8a:d4:c7:b3:bb:73:97:cb:3f:e0: 60:bb:c3:a5:08:4a:8a:5c:b1:91:1f:96:f9:7f:6a: 91:fe:11:a0:c4:6d:eb:50:09:c4:8c:96:07:ec:8f: b2:34:69:5a:b8:04:ae:0e:bf:e3:10:63:2c:b5:26: ae:47:d5:f8:d7:ff:7f:4a:72:42:1b:5a:21:e2:93: d3:69:ce:7d:74:7a:00:82:c7:86:1f:03:b0:b0:71: 05:88:6d:f9:ab:34:75:03:10:f9:a7:f8:6d:db:34: 5a:7e:4c:b9:98:55:f3:9a:d6:2d:34:6b:01:63:72: da:0f:c8:d1:9f:7c:7b:84:35:d5:90:d2:6e:c5:99: b8:6e:40:99:f1:73:53:ea:b0:c1:e4:f5:15:83:a5: 41:99:33:46:c2:04:b3:f8:13:ea:cb:a6:10:61:59: 9a:a9:c9:8f:51:84:db:ff:45:3c:c5:0b:90:26:75: 45:08:f4:03:b2:43:6c:63:2a:03:d3:95:d0:97:27: b2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:99:DF:55:B2:3B:74:A5:2F:EC:66:67:DA:8C:EA:13:C2:C2:36:15 X509v3 Authority Key Identifier: keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:db:c4:d5:9d:fc:0a:21:71:40:b6:ca:e4:c2:55:f3:e0:16: 79:b8:2f:49:1c:15:2f:e9:69:c1:b2:0f:6e:27:3f:c4:ac:96: 2c:bc:0b:38:91:08:24:dd:92:54:cf:39:49:64:44:9e:92:40: 5d:ae:5f:fb:c3:7c:ba:7e:f5:63:8d:60:a6:9b:c1:71:f8:79: 54:f5:a7:4c:9b:39:b6:4f:dd:27:a7:71:97:6b:6e:36:9b:4d: 3a:e4:ba:3c:3e:63:01:5e:7e:5a:48:a4:73:ea:7b:05:9e:45: 28:72:6a:ff:6a:9c:90:7b:f2:7a:7c:af:1f:61:fb:da:8a:37: 5a:d5:3b:6d:ec:57:47:09:d5:d3:7c:c6:8b:50:1d:f8:2d:3f: f7:43:6d:aa:a9:d4:dd:9a:71:26:b3:34:87:f8:40:9f:6f:51: 1e:12:a6:78:7d:f8:71:de:60:e0:f8:43:e4:7a:df:5e:28:05: 68:62:cd:0c:e4:8e:09:66:e2:34:29:12:bc:54:94:75:9c:b9: 37:9b:51:54:12:05:b8:1f:91:49:84:43:4f:e9:42:f9:ec:74: 7e:fe:1a:61:f8:e4:8f:80:f5:93:66:da:b3:08:3a:ce:74:15: 8b:24:26:3d:69:e7:2f:73:5a:88:d2:d4:4c:e6:ce:4e:fd:47: d7:87:4f:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGQjYxMTAvBgNVBAUTKEM2QTIxNkU0MjMyNjhCMzkyNzdEQzEyMkYzRTFBQUQ4 NkM2RDlBNDMwHhcNMjUxMjA1MDM1NTE0WhcNMjUxMjEyMDM1NTE0WjAYMRYwFAYD VQQDEw02OTMyNTdhMi03ZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzlZ57US+xqN7B+ZoXZlYfT4yay8MSqLOISMeHjMSiyu/2TFobLeuLRTkWD/ G7DlF9MrDaqZeJOYwTRpt020iYrUx7O7c5fLP+Bgu8OlCEqKXLGRH5b5f2qR/hGg xG3rUAnEjJYH7I+yNGlauASuDr/jEGMstSauR9X41/9/SnJCG1oh4pPTac59dHoA gseGHwOwsHEFiG35qzR1AxD5p/ht2zRafky5mFXzmtYtNGsBY3LaD8jRn3x7hDXV kNJuxZm4bkCZ8XNT6rDB5PUVg6VBmTNGwgSz+BPqy6YQYVmaqcmPUYTb/0U8xQuQ JnVFCPQDskNsYyoD05XQlyeyswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKZ31Wy O3SlL+xmZ9qM6hPCwjYVMB8GA1UdIwQYMBaAFMaiFuQjJos5J33BIvPhqthsbZpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUZCNi84RUMzNURFNEFD NjQxMUVGQjY4NDI2N0JDNEY5QUUwMi94cUlXNUNNbWl6a25mY0VpOC1HcTJHeHRt a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxSVc1Q01taXprbmZjRWk4LUdxMkd4dG1rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUZCNi84RUMzNURFNEFDNjQxMUVGQjY4NDI2N0JDNEY5QUUwMi94cUlXNUNNbWl6 a25mY0VpOC1HcTJHeHRta00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB28TVnfwKIXFAtsrkwlXz4BZ5uC9JHBUv6WnBsg9uJz/ErJYsvAs4 kQgk3ZJUzzlJZESekkBdrl/7w3y6fvVjjWCmm8Fx+HlU9adMmzm2T90np3GXa242 m0065Lo8PmMBXn5aSKRz6nsFnkUocmr/apyQe/J6fK8fYfvaijda1Ttt7FdHCdXT fMaLUB34LT/3Q22qqdTdmnEmszSH+ECfb1EeEqZ4ffhx3mDg+EPket9eKAVoYs0M 5I4JZuI0KRK8VJR1nLk3m1FUEgW4H5FJhENP6UL57HR+/hph+OSPgPWTZtqzCDrO dBWLJCY9aecvc1qI0tRM5s5O/UfXh0/1 -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:14 2025 by rpki-client