This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: PjZjaAKh3jUCAt4X8AuX4YcvkZIg3j9CP8Ng16SJCZc= Subject key identifier: F5:BE:3E:27:08:C3:A1:41:03:F0:85:05:AA:4E:1A:A1:9D:E6:B5:AE Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 019F Signing time: Fri 05 Dec 2025 01:33:11 +0000 Manifest this update: Fri 05 Dec 2025 01:33:10 +0000 Manifest next update: Fri 12 Dec 2025 01:33:10 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: SVftnw8ANbPgDMdSGfpQMbzyTLChBwTKvA+08luFsJk=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: Piv7VbbzumwO0tk/ipxojOk8nvFYW+4e20EuzVe+51E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Dec 5 01:33:10 2025 GMT Not After : Dec 12 01:33:10 2025 GMT Subject: CN=69323657-48e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:12:32:6f:e4:53:13:d0:be:12:75:8f:77: 67:92:13:d8:08:44:f8:62:8d:28:bd:8e:2a:7b:a8: 85:19:20:d3:0d:be:e3:f2:56:f5:2c:1b:36:d7:da: 06:24:bb:81:11:c2:37:82:1a:e2:23:0f:1b:11:9e: c8:c0:6d:33:7c:1e:59:f9:d8:2f:d8:ac:c1:c5:64: 7d:8d:4f:55:60:5c:51:25:4d:3d:1a:c4:c6:c0:de: 7c:de:6c:c7:2a:c1:ed:3d:c5:f5:01:99:c9:c0:1e: bb:80:02:3e:ea:45:1d:86:7c:74:8f:45:b6:de:36: 9f:61:62:14:f9:22:a4:d2:9c:0c:d5:68:40:ba:20: 2b:9a:ce:bb:10:2b:cb:a1:37:4d:2e:8c:04:a5:bb: 2d:31:4a:9d:63:2f:d3:78:ad:59:69:61:77:1e:5e: a5:cb:a9:64:36:14:cf:be:bc:ac:2c:88:94:88:e7: ad:e1:33:69:57:0a:a8:1a:41:ac:69:a9:25:6c:9d: 06:61:9c:ab:0e:e6:fd:c3:e9:6b:0c:48:65:0d:16: 6f:12:68:88:bf:4f:02:1f:3d:0f:ce:9e:c0:70:67: 76:e3:72:86:a0:f1:d7:f6:f1:af:77:d8:0c:05:ae: 82:12:ea:7a:97:45:bf:5e:f4:41:ba:1f:aa:8d:3e: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BE:3E:27:08:C3:A1:41:03:F0:85:05:AA:4E:1A:A1:9D:E6:B5:AE X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a4:a0:0f:51:a2:66:94:ca:9d:b9:04:aa:28:6b:19:65:77: a7:8e:bf:ed:36:6e:d3:b4:e0:4b:03:9b:c3:c5:52:79:6d:7b: 1c:48:77:fd:2f:ec:65:f2:6e:6f:b4:47:ab:ce:5f:23:1b:da: ba:04:ca:36:0f:93:0b:97:3b:2f:d4:8e:84:25:0f:0d:c1:02: c3:55:2c:32:51:13:28:cf:a6:22:11:44:3c:61:43:fe:7b:b3: f3:fa:95:5e:af:40:29:da:cc:4a:76:d9:d4:8e:19:8d:75:3f: 91:b9:b5:3c:e1:a9:2d:52:b0:77:e8:f1:e2:ca:f7:37:d0:17: 53:2e:76:ed:a1:0c:63:b5:b1:bb:1e:77:33:9d:8b:95:01:7d: 1e:82:a7:ef:6f:a1:85:7e:f0:27:a3:f4:66:58:64:86:08:5d: 07:0f:b3:c8:fd:99:a8:d4:eb:15:df:84:3e:9d:99:ee:84:cf: 3e:fb:fe:dd:85:6c:bf:65:7c:c2:c4:eb:91:43:74:2d:ea:49: 95:3b:1e:33:a3:f4:87:85:97:a7:a3:c5:05:b1:e9:23:73:7f: 62:78:80:e1:84:ab:7f:29:73:f9:62:e8:18:98:e3:cb:e1:6d: 82:32:5d:e1:99:bb:27:1f:17:b5:20:49:ab:74:02:41:11:32: f7:1f:14:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjUxMjA1MDEzMzEwWhcNMjUxMjEyMDEzMzEwWjAYMRYwFAYD VQQDEw02OTMyMzY1Ny00OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGoSMm/kUxPQvhJ1j3dnkhPYCET4Yo0ovY4qe6iFGSDTDb7j8lb1LBs219oG JLuBEcI3ghriIw8bEZ7IwG0zfB5Z+dgv2KzBxWR9jU9VYFxRJU09GsTGwN583mzH KsHtPcX1AZnJwB67gAI+6kUdhnx0j0W23jafYWIU+SKk0pwM1WhAuiArms67ECvL oTdNLowEpbstMUqdYy/TeK1ZaWF3Hl6ly6lkNhTPvrysLIiUiOet4TNpVwqoGkGs aaklbJ0GYZyrDub9w+lrDEhlDRZvEmiIv08CHz0Pzp7AcGd243KGoPHX9vGvd9gM Ba6CEup6l0W/XvRBuh+qjT4dsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPW+PicI w6FBA/CFBapOGqGd5rWuMB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDpKAPUaJmlMqduQSqKGsZZXenjr/tNm7TtOBLA5vDxVJ5bXscSHf9 L+xl8m5vtEerzl8jG9q6BMo2D5MLlzsv1I6EJQ8NwQLDVSwyURMoz6YiEUQ8YUP+ e7Pz+pVer0Ap2sxKdtnUjhmNdT+RubU84aktUrB36PHiyvc30BdTLnbtoQxjtbG7 HncznYuVAX0egqfvb6GFfvAno/RmWGSGCF0HD7PI/Zmo1OsV34Q+nZnuhM8++/7d hWy/ZXzCxOuRQ3Qt6kmVOx4zo/SHhZeno8UFsekjc39ieIDhhKt/KXP5YugYmOPL 4W2CMl3hmbsnHxe1IEmrdAJBETL3HxT+ -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:02 2025 by rpki-client