This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft File: xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json) Hash identifier: B9AhkXjxw43sSK92ko55MgK0DacA8T1omeR61poPS6I= Subject key identifier: CC:59:E3:F0:F8:BC:93:AC:72:B2:BF:6B:A9:B2:70:FE:2E:B9:F5:2F Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D Certificate issuer: /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft Manifest number: D9 Signing time: Sun 21 Dec 2025 04:46:44 +0000 Manifest this update: Sun 21 Dec 2025 04:46:43 +0000 Manifest next update: Sun 28 Dec 2025 04:46:43 +0000 Files and hashes: 1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: vyW2LZWyP6K9nZ3ZPWbho7mE3cyaNCHi2o4NK8fGNGc=) 2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ijUv0+puTZ+N4j9fhEKBY9wHAWPDCsnAi/IUGHnumK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Validity Not Before: Dec 21 04:46:43 2025 GMT Not After : Dec 28 04:46:43 2025 GMT Subject: CN=69477bb3-175b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:89:c8:3c:36:dd:9f:8a:46:6a:2b:3b:09: ef:4d:3b:96:c8:40:e9:59:02:d8:ee:a1:74:54:da: be:f1:ad:c4:56:bc:ab:6b:cf:57:61:e5:b1:78:d0: 61:95:aa:b1:a3:f2:6f:5f:89:67:08:82:13:0a:90: b9:d2:66:bf:7b:07:37:1d:46:e1:e5:67:44:9e:fa: 62:c8:86:3b:d5:23:ac:54:2c:20:c1:2c:49:f6:91: b1:92:84:ae:1c:59:bf:5a:f7:08:ec:4f:5b:6c:ab: 9c:62:6e:4e:17:74:40:a6:8a:b8:70:e9:72:9b:c3: e8:e3:fd:61:ea:cb:b1:4e:80:14:84:8a:35:e3:ea: 83:d0:05:02:3a:14:b0:a8:a9:91:86:dd:02:85:47: ce:90:22:58:20:f9:6f:dd:2e:8b:14:db:20:07:8e: 8c:01:ab:bb:f1:8f:cf:bc:95:87:0c:22:41:8c:79: 7e:b3:42:28:a2:49:7b:8f:1e:e4:db:75:ed:bb:c0: 67:d1:99:97:2b:e6:eb:32:3f:1e:65:fe:3f:82:a7: 67:e2:ef:25:9b:4d:52:7d:0a:aa:49:02:0e:f4:dd: 52:8e:46:43:3d:72:95:1b:c2:cb:0f:07:b7:e6:2e: d6:c6:68:8b:0f:16:9c:dc:e9:ed:bf:53:66:31:b6: 3b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:59:E3:F0:F8:BC:93:AC:72:B2:BF:6B:A9:B2:70:FE:2E:B9:F5:2F X509v3 Authority Key Identifier: keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:6f:6e:7c:5d:b0:5a:18:47:47:04:b2:0c:7d:0b:16:59:ad: 91:d0:f0:87:fb:33:fd:43:b0:1c:a2:a2:d0:b5:02:a5:b6:1f: b8:1b:4c:7b:d3:94:7e:9d:29:18:43:ce:23:43:1f:72:31:22: 57:66:8b:ed:e6:84:c7:71:af:2f:e0:86:df:b3:92:40:63:f8: 6a:76:34:c0:de:b3:00:f8:6d:90:30:f9:93:e1:89:27:75:ad: 36:9c:5a:3c:77:6c:ea:01:09:29:12:25:85:a6:2e:88:ef:33: fa:8e:bb:17:1a:12:ce:3b:1a:ea:ab:9c:ce:69:63:70:e7:d7: bc:80:8b:47:ec:0f:51:1e:5c:b6:0f:f2:b4:16:ad:00:6c:15: 8d:f5:63:1b:a7:7b:8b:20:0a:ba:ae:58:60:62:a3:6d:94:a5: 3a:df:90:3b:09:74:fd:fe:bd:ea:3a:38:f2:04:c2:c3:64:4d: 72:a9:11:48:fd:3b:c2:e4:6f:5e:d3:da:a6:68:c0:54:d7:b5: 71:bf:11:64:ee:2f:ac:be:b6:d3:48:e5:a0:6b:73:12:5b:76: 43:83:61:90:84:05:b1:9c:55:18:ec:c3:3a:53:8d:70:62:2e: 38:a8:d9:ca:cd:ec:2c:da:69:37:f2:33:cf:15:c9:8c:f5:09: e6:3e:9c:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzOEExMTAvBgNVBAUTKEM0NkM0M0JBMjc3RDJDMTBFRTdEMUVGRjNERjBFMkVG Qzg4NTFBMUQwHhcNMjUxMjIxMDQ0NjQzWhcNMjUxMjI4MDQ0NjQzWjAYMRYwFAYD VQQDDA02OTQ3N2JiMy0xNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DCJyDw23Z+KRmorOwnvTTuWyEDpWQLY7qF0VNq+8a3EVryra89XYeWxeNBh laqxo/JvX4lnCIITCpC50ma/ewc3HUbh5WdEnvpiyIY71SOsVCwgwSxJ9pGxkoSu HFm/WvcI7E9bbKucYm5OF3RApoq4cOlym8Po4/1h6suxToAUhIo14+qD0AUCOhSw qKmRht0ChUfOkCJYIPlv3S6LFNsgB46MAau78Y/PvJWHDCJBjHl+s0Iookl7jx7k 23Xtu8Bn0ZmXK+brMj8eZf4/gqdn4u8lm01SfQqqSQIO9N1SjkZDPXKVG8LLDwe3 5i7WxmiLDxac3Ontv1NmMbY7aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxZ4/D4 vJOscrK/a6mycP4uufUvMB8GA1UdIwQYMBaAFMRsQ7onfSwQ7n0e/z3w4u/IhRod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4QS81QkREMkNBRTk1 NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxCRHVmUjdfUGZEaTc4aUZH aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjM4QS81QkREMkNBRTk1NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxC RHVmUjdfUGZEaTc4aUZHaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlb258XbBaGEdHBLIMfQsWWa2R0PCH+zP9Q7AcoqLQtQKlth+4G0x7 05R+nSkYQ84jQx9yMSJXZovt5oTHca8v4Ibfs5JAY/hqdjTA3rMA+G2QMPmT4Ykn da02nFo8d2zqAQkpEiWFpi6I7zP6jrsXGhLOOxrqq5zOaWNw59e8gItH7A9RHly2 D/K0Fq0AbBWN9WMbp3uLIAq6rlhgYqNtlKU635A7CXT9/r3qOjjyBMLDZE1yqRFI /TvC5G9e09qmaMBU17VxvxFk7i+svrbTSOWga3MSW3ZDg2GQhAWxnFUY7MM6U41w Yi44qNnKzews2mk38jPPFcmM9QnmPpwR -----END CERTIFICATE-----Generated at Sun Dec 21 22:07:59 2025 by rpki-client