This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: V/s2zxBNzvOZv8UZenHnam/jKNQAc8819TC94nQrujY= Subject key identifier: B0:E4:40:E5:60:86:71:E0:5C:70:11:39:34:6C:C0:2E:AB:35:38:06 Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 01A7 Signing time: Sun 21 Dec 2025 02:29:13 +0000 Manifest this update: Sun 21 Dec 2025 02:29:12 +0000 Manifest next update: Sun 28 Dec 2025 02:29:12 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: l43Mx50IM/hEr+0gIEj+U1H2XY+KrNmCYIIr2hC4REM=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: Piv7VbbzumwO0tk/ipxojOk8nvFYW+4e20EuzVe+51E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Dec 21 02:29:12 2025 GMT Not After : Dec 28 02:29:12 2025 GMT Subject: CN=69475b79-b48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:79:59:8e:94:a0:1f:6b:e0:83:25:aa:86:c1: 03:a0:70:1b:c6:08:41:bc:54:19:5c:67:dd:42:2f: 40:88:ab:80:32:89:19:de:6f:5f:22:87:8d:8d:7e: f6:a2:45:6f:ab:e4:f1:42:86:3f:b6:66:ae:70:e7: 50:8b:00:42:32:dd:69:65:42:71:f8:c4:73:35:d0: 31:83:39:94:eb:67:f8:b6:10:d2:8c:15:a3:ec:b8: 9a:06:37:d4:fc:4b:cd:57:ec:28:29:1e:48:c1:53: 2c:2e:82:33:6f:3d:d1:f0:cd:b4:f1:02:cf:0f:14: 0d:0f:b0:f6:7d:e3:09:02:4f:be:0f:a9:c2:9e:13: 5c:a9:f0:d9:f9:78:26:92:31:64:c2:ec:da:63:05: 24:75:b0:b9:d4:93:ca:80:28:e7:44:ad:4c:53:a2: 6f:ed:3d:bc:ed:15:13:92:85:b3:1a:b5:f3:cc:d6: 45:eb:ac:62:42:d7:50:e6:a7:f1:76:c2:bf:59:94: 67:52:5c:d9:1e:15:98:c0:9b:2b:f7:ba:30:6b:1f: 02:8b:52:65:15:92:d6:b8:f0:db:f2:32:f3:73:d4: 8a:5d:c0:ce:e4:52:5d:b1:a0:bd:59:5a:fc:09:91: f2:49:75:ca:63:ad:a0:06:73:95:95:c7:a2:b3:ea: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E4:40:E5:60:86:71:E0:5C:70:11:39:34:6C:C0:2E:AB:35:38:06 X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:26:4e:b2:43:41:d6:ab:06:eb:e1:65:6f:1a:fd:89:87:8a: b6:64:3e:c7:ce:aa:75:7f:4f:eb:a2:2b:9a:a1:80:87:7c:71: 44:72:6c:88:e7:96:f0:21:cd:e8:8e:38:82:e6:b1:58:cd:1a: 8a:41:a9:70:99:6b:7a:87:24:50:71:3d:e7:2b:cd:86:89:ee: b2:b2:e2:98:18:e1:d2:20:eb:50:a5:80:e0:9a:14:42:95:43: 82:e4:84:4e:30:49:8c:88:03:96:a0:78:93:80:5e:37:d5:11: 66:2d:68:c2:cb:1b:24:eb:02:fb:a8:1d:e8:bb:71:03:ee:c0: 1b:3c:8d:8c:3d:8a:e6:8a:5d:c5:91:d9:28:1b:03:c7:ac:31: 98:c5:dc:2d:bc:97:ba:78:7d:a7:9e:86:e7:7e:76:c6:74:8c: d4:99:22:e3:22:c3:6e:43:d6:0c:e2:86:9f:c1:6f:41:94:f9: 5d:7b:87:17:dd:7a:14:c3:4f:ad:15:35:86:3c:e2:a6:09:fd: 82:53:3f:cd:92:f4:b5:44:48:2e:9e:76:37:24:9d:12:0d:de: 21:84:de:5c:09:f8:8d:1d:29:31:36:fe:85:97:3b:a7:1f:3d: 5d:cd:e3:45:f7:f0:f2:05:fd:1a:fe:57:27:46:89:43:a4:6d: ec:05:58:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjUxMjIxMDIyOTEyWhcNMjUxMjI4MDIyOTEyWjAYMRYwFAYD VQQDDA02OTQ3NWI3OS1iNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA93lZjpSgH2vggyWqhsEDoHAbxghBvFQZXGfdQi9AiKuAMokZ3m9fIoeNjX72 okVvq+TxQoY/tmaucOdQiwBCMt1pZUJx+MRzNdAxgzmU62f4thDSjBWj7LiaBjfU /EvNV+woKR5IwVMsLoIzbz3R8M208QLPDxQND7D2feMJAk++D6nCnhNcqfDZ+Xgm kjFkwuzaYwUkdbC51JPKgCjnRK1MU6Jv7T287RUTkoWzGrXzzNZF66xiQtdQ5qfx dsK/WZRnUlzZHhWYwJsr97owax8Ci1JlFZLWuPDb8jLzc9SKXcDO5FJdsaC9WVr8 CZHySXXKY62gBnOVlceis+rIaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDkQOVg hnHgXHAROTRswC6rNTgGMB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMJk6yQ0HWqwbr4WVvGv2Jh4q2ZD7Hzqp1f0/roiuaoYCHfHFEcmyI 55bwIc3ojjiC5rFYzRqKQalwmWt6hyRQcT3nK82Gie6ysuKYGOHSIOtQpYDgmhRC lUOC5IROMEmMiAOWoHiTgF431RFmLWjCyxsk6wL7qB3ou3ED7sAbPI2MPYrmil3F kdkoGwPHrDGYxdwtvJe6eH2nnobnfnbGdIzUmSLjIsNuQ9YM4oafwW9BlPlde4cX 3XoUw0+tFTWGPOKmCf2CUz/NkvS1REgunnY3JJ0SDd4hhN5cCfiNHSkxNv6Flzun Hz1dzeNF9/DyBf0a/lcnRolDpG3sBVjN -----END CERTIFICATE-----Generated at Sun Dec 21 06:57:17 2025 by rpki-client