This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: U9IVc24NBoaigBZT2zG9mp8xh1WwoNwfnlbbWDe+eQQ= Subject key identifier: 86:B0:C3:84:A5:75:A6:F1:5D:EF:6C:DF:09:CE:AE:EC:47:ED:33:11 Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 0182 Signing time: Fri 05 Dec 2025 01:51:26 +0000 Manifest this update: Fri 05 Dec 2025 01:51:26 +0000 Manifest next update: Fri 12 Dec 2025 01:51:26 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: 06AHsT0eTjdxSXuFV0tuw7izO12balrt35dyb0pgsAQ=) 2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: x3typY+Rz1v7YQKoz8/eFq0vzVSoB9fMyJducWo5h8o=) 3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: Zs0S8blgDDMs3jrlGY37AkPWRyP83xeb73R0yUfKf24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Validity Not Before: Dec 5 01:51:26 2025 GMT Not After : Dec 12 01:51:26 2025 GMT Subject: CN=69323a9e-575d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:2b:27:16:65:23:f6:fc:a6:7a:05:9d:18: 7c:50:db:9f:57:5d:4e:0a:5a:66:b6:9e:9d:cb:e4: 03:c0:87:c5:df:8f:8e:de:77:f9:7e:14:71:72:6e: af:f6:12:c5:09:eb:1c:8a:d0:a2:4f:73:05:01:46: 2e:dd:98:7c:69:2b:31:e8:c0:04:b4:e4:82:b3:04: 17:df:ea:5b:7a:8c:b1:d0:c8:7e:41:8a:4d:71:d1: 37:51:4a:ef:cd:6b:3c:77:b5:4e:73:82:39:4c:83: 24:40:f4:77:89:59:c4:23:ce:cc:9d:63:9d:b8:a2: 9c:c4:fa:73:f7:fb:f9:58:7a:98:72:70:07:e1:8f: 9f:83:25:5b:51:22:b2:3e:22:78:68:95:d9:dc:b2: 7c:9d:c8:13:1d:e0:3f:f1:d5:88:5c:5c:18:8f:5e: de:2a:aa:15:eb:5b:b2:17:dd:7f:bb:69:17:5e:f3: 13:25:e3:29:58:2b:0a:9b:9f:b4:b8:b5:ce:53:f3: 53:41:2c:ca:80:26:14:38:96:57:26:d7:49:17:4b: f7:79:f8:5d:8b:07:e9:b5:e8:0e:67:44:8a:8b:c0: 24:7b:c9:5c:2f:c4:ce:10:09:9d:a8:a4:c2:c6:85: 62:ee:1a:19:96:4e:c0:8a:68:72:1c:8e:1d:42:e0: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B0:C3:84:A5:75:A6:F1:5D:EF:6C:DF:09:CE:AE:EC:47:ED:33:11 X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:2a:01:70:ca:d2:18:14:af:b1:db:b2:d5:00:69:e7:49:46: 69:47:1d:27:44:07:b4:72:0f:1f:81:8a:13:85:9d:75:34:30: 8f:34:8a:b4:3f:bd:af:73:e5:51:1c:25:06:b4:d0:06:ef:9b: 33:a3:b0:06:9b:e7:da:91:ad:cd:ec:31:54:e6:7f:50:ce:85: d4:d3:c1:c1:a5:a9:ed:63:8d:9f:48:f9:c6:a9:71:e0:e3:52: 4e:11:ef:97:34:c7:39:b5:ca:ed:6d:64:21:42:93:e8:c4:4e: 01:34:4f:06:dd:ea:8e:40:e0:7e:cb:ea:e1:e9:9e:b7:8f:04: 40:1a:a6:42:06:84:14:d3:8d:40:af:20:56:00:11:71:e8:ec: 32:1d:7e:ec:61:af:c3:e8:1c:b7:ad:2f:79:98:ca:18:0f:e3: 95:59:42:1c:97:73:d7:7b:ac:26:8e:7e:ac:cf:2e:04:ac:ed: 73:db:ad:e6:cf:b9:d8:4e:69:cc:e2:17:60:66:e3:4e:71:91: 80:59:cd:73:03:ea:63:eb:a2:cd:25:b6:f7:53:ae:94:53:62: ca:14:7c:8a:53:46:d2:94:4b:b5:af:9e:0c:ac:0b:fa:9a:3e: 1a:e8:67:06:dc:5d:60:ac:e1:3b:b6:e9:b5:d3:cf:eb:ef:17: 56:1c:94:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjUxMjA1MDE1MTI2WhcNMjUxMjEyMDE1MTI2WjAYMRYwFAYD VQQDEw02OTMyM2E5ZS01NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQwrJxZlI/b8pnoFnRh8UNufV11OClpmtp6dy+QDwIfF34+O3nf5fhRxcm6v 9hLFCescitCiT3MFAUYu3Zh8aSsx6MAEtOSCswQX3+pbeoyx0Mh+QYpNcdE3UUrv zWs8d7VOc4I5TIMkQPR3iVnEI87MnWOduKKcxPpz9/v5WHqYcnAH4Y+fgyVbUSKy PiJ4aJXZ3LJ8ncgTHeA/8dWIXFwYj17eKqoV61uyF91/u2kXXvMTJeMpWCsKm5+0 uLXOU/NTQSzKgCYUOJZXJtdJF0v3efhdiwfptegOZ0SKi8Ake8lcL8TOEAmdqKTC xoVi7hoZlk7AimhyHI4dQuD29QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaww4Sl dabxXe9s3wnOruxH7TMRMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhKgFwytIYFK+x27LVAGnnSUZpRx0nRAe0cg8fgYoThZ11NDCPNIq0 P72vc+VRHCUGtNAG75szo7AGm+faka3N7DFU5n9QzoXU08HBpantY42fSPnGqXHg 41JOEe+XNMc5tcrtbWQhQpPoxE4BNE8G3eqOQOB+y+rh6Z63jwRAGqZCBoQU041A ryBWABFx6OwyHX7sYa/D6By3rS95mMoYD+OVWUIcl3PXe6wmjn6szy4ErO1z263m z7nYTmnM4hdgZuNOcZGAWc1zA+pj66LNJbb3U66UU2LKFHyKU0bSlEu1r54MrAv6 mj4a6GcG3F1grOE7tum108/r7xdWHJRy -----END CERTIFICATE-----Generated at Sat Dec 6 16:06:03 2025 by rpki-client