This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft File: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft (raw, json) Hash identifier: qlB5/HAXY+3/VoWZGjyBDc28Xsckuar9bRZIvdnrD3g= Subject key identifier: 44:28:47:AE:A7:93:BD:B1:C8:A0:DE:B7:ED:29:88:00:EF:8D:4E:FC Authority key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24 Certificate issuer: /CN=A913EF9C/serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft Manifest number: A5 Signing time: Fri 05 Dec 2025 04:14:04 +0000 Manifest this update: Fri 05 Dec 2025 04:14:04 +0000 Manifest next update: Fri 12 Dec 2025 04:14:04 +0000 Files and hashes: 1: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl (hash: BhVzsUvep1Kf+SEPaXKkDNoQHj9VANaDBUtFtUP0c2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524 Validity Not Before: Dec 5 04:14:04 2025 GMT Not After : Dec 12 04:14:04 2025 GMT Subject: CN=69325c0c-919a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:9d:41:97:fc:a5:7d:5a:33:88:ee:0e:28: 41:55:77:be:cf:24:af:fb:a0:67:72:f8:84:73:5d: 40:23:59:aa:ad:0e:5f:a0:f0:82:cf:bf:4f:da:86: f6:83:ee:4d:a0:68:de:b5:3f:b3:8d:00:81:21:b4: 35:86:45:8b:56:b4:49:94:be:26:a8:c1:18:c3:0b: cc:07:4f:c0:7f:39:09:36:43:42:58:00:47:1f:d3: 30:4d:e7:1a:f4:72:51:47:83:b9:1c:0d:7b:86:0e: bd:5e:94:1c:82:01:c3:1a:d8:c5:68:58:ae:3b:99: d7:95:5b:d0:a4:ce:ca:cc:2c:14:91:d5:56:8c:2f: 02:ff:10:95:4f:6b:3c:e5:29:27:a4:4c:3a:c1:a4: fb:61:86:19:a0:50:82:94:1e:2f:f7:6e:4a:01:dd: 0e:d2:4f:89:30:63:a4:8c:04:af:6f:18:18:7f:6b: f9:55:8b:dd:e9:bb:0f:6f:27:4f:7f:cb:20:5d:c2: 03:31:5b:06:f6:17:60:f0:e1:a5:d5:a8:7b:14:4e: c9:cb:2d:e2:06:67:db:d0:35:27:a1:4e:99:47:40: 05:89:22:ba:7f:bf:4b:9a:76:6f:f2:ba:45:62:8b: b1:06:bf:64:16:cf:99:20:6f:e6:29:4f:88:09:85: c9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:28:47:AE:A7:93:BD:B1:C8:A0:DE:B7:ED:29:88:00:EF:8D:4E:FC X509v3 Authority Key Identifier: keyid:C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d3:01:ee:d7:e4:d5:ec:3c:dc:17:05:27:b9:b6:03:6d:8f: c0:83:03:98:9d:db:48:72:74:be:1f:da:a9:0d:ff:77:d6:a2: 2f:86:1d:d0:50:be:a5:e2:1c:04:8b:c4:25:70:d0:b8:67:b0: 37:f3:09:51:dd:75:28:bc:de:e7:29:cd:d9:67:aa:73:7d:67: 69:83:1f:5e:71:fe:ef:21:0b:9a:dd:1a:6f:b9:85:1e:82:56: bb:32:47:1b:98:a1:b5:a9:88:d5:29:02:ee:b4:1c:c0:5e:16: b6:f0:e0:6f:3d:5d:8d:db:9e:a6:89:44:b2:ae:c4:ab:7a:23: 15:5c:7a:7a:c5:0a:b5:db:4f:89:54:76:9a:e6:2e:80:63:11: 19:70:07:72:6e:00:bf:fa:20:e1:b7:95:f7:fb:59:e0:23:5c: 47:84:3a:bd:10:24:ba:7d:8b:45:2d:92:0b:1d:df:44:b6:62: 66:80:70:9f:4c:00:7b:5d:f0:1b:e5:e3:bb:4c:e5:6e:74:75: 3c:83:9e:5d:1f:6f:bf:c3:0e:6f:54:36:3a:7e:33:3e:43:04: e3:b4:db:fa:0b:2f:6e:f7:59:c8:09:01:24:e5:0b:99:58:59: b8:b0:63:03:1b:2d:a3:1e:3d:23:73:78:38:6f:f0:26:7d:0d: 25:40:ba:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGOUMxMTAvBgNVBAUTKEM0NDM5REMwMUUyMEQxNkNDNUEwRUY5ODE3RDQxQkY2 Mjg5NzY1MjQwHhcNMjUxMjA1MDQxNDA0WhcNMjUxMjEyMDQxNDA0WjAYMRYwFAYD VQQDEw02OTMyNWMwYy05MTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzv6dQZf8pX1aM4juDihBVXe+zySv+6BncviEc11AI1mqrQ5foPCCz79P2ob2 g+5NoGjetT+zjQCBIbQ1hkWLVrRJlL4mqMEYwwvMB0/AfzkJNkNCWABHH9MwTeca 9HJRR4O5HA17hg69XpQcggHDGtjFaFiuO5nXlVvQpM7KzCwUkdVWjC8C/xCVT2s8 5SknpEw6waT7YYYZoFCClB4v925KAd0O0k+JMGOkjASvbxgYf2v5VYvd6bsPbydP f8sgXcIDMVsG9hdg8OGl1ah7FE7Jyy3iBmfb0DUnoU6ZR0AFiSK6f79LmnZv8rpF YouxBr9kFs+ZIG/mKU+ICYXJRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQoR66n k72xyKDet+0piADvjU78MB8GA1UdIwQYMBaAFMRDncAeINFsxaDvmBfUG/Yol2Uk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUY5Qy9DRDJDQThGOEQz RUExMUVGQTY2QzQ3NjBDNEY5QUUwMi94RU9kd0I0ZzBXekZvTy1ZRjlRYjlpaVha U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFT2R3QjRnMFd6Rm9PLVlGOVFiOWlpWFpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUY5Qy9DRDJDQThGOEQzRUExMUVGQTY2QzQ3NjBDNEY5QUUwMi94RU9kd0I0ZzBX ekZvTy1ZRjlRYjlpaVhaU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ0wHu1+TV7DzcFwUnubYDbY/AgwOYndtIcnS+H9qpDf931qIvhh3Q UL6l4hwEi8QlcNC4Z7A38wlR3XUovN7nKc3ZZ6pzfWdpgx9ecf7vIQua3RpvuYUe gla7MkcbmKG1qYjVKQLutBzAXha28OBvPV2N256miUSyrsSreiMVXHp6xQq120+J VHaa5i6AYxEZcAdybgC/+iDht5X3+1ngI1xHhDq9ECS6fYtFLZILHd9EtmJmgHCf TAB7XfAb5eO7TOVudHU8g55dH2+/ww5vVDY6fjM+QwTjtNv6Cy9u91nICQEk5QuZ WFm4sGMDGy2jHj0jc3g4b/AmfQ0lQLo2 -----END CERTIFICATE-----Generated at Sun Dec 7 01:58:38 2025 by rpki-client