This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: BptjjHNXDhMfIZc/UmPtjCgU5meao0iRWG1FYnoJF7I= Subject key identifier: E9:9D:8A:5D:93:60:E9:4F:72:14:23:71:82:44:CD:40:03:D3:FC:95 Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 081B Signing time: Sat 06 Dec 2025 19:59:16 +0000 Manifest this update: Sat 06 Dec 2025 19:59:15 +0000 Manifest next update: Sat 13 Dec 2025 19:59:15 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: jnLbvGAmC5ES5pHNo9lM7JOepQxIIlWQfU7c+gxHkZI=) 2: 799C6AD8149711EFB0CB9E0AC4F9AE02.roa (hash: Z6c5AlKVKf/klPMN7KddRfh49KHTtioUb3aQg5mvfg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Dec 6 19:59:15 2025 GMT Not After : Dec 13 19:59:15 2025 GMT Subject: CN=69348b13-052f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:51:dd:5d:1a:18:84:36:ea:5f:00:f3:9a:fe: df:1a:75:e6:e3:db:04:20:44:f4:b5:9e:03:34:1c: f8:f4:74:10:e8:e9:a1:3e:9e:74:b7:98:4d:34:0f: ff:d3:fc:d7:12:f9:5a:1f:72:cf:23:93:82:02:c1: 8d:97:25:d9:5a:65:0a:50:1e:c3:ac:86:da:e0:70: 15:cc:98:48:6e:fe:c5:f9:7e:71:df:5f:94:2b:38: 11:84:c1:9f:05:38:ed:7c:f2:4c:b3:a3:9a:d0:12: ff:a9:1b:8b:1e:01:66:95:d7:c3:1d:f0:c1:21:3d: 7a:f1:df:64:d5:2b:39:c5:dd:37:a3:e6:07:bb:07: f7:c0:78:e5:9e:35:a4:a2:50:0e:d0:c8:e0:28:bf: b1:43:ce:fa:43:20:71:49:6e:ac:aa:e1:3b:da:a6: bb:a7:b6:21:70:22:ab:51:c0:9a:cd:d2:8e:7f:3c: 43:98:fb:5f:7d:2a:e1:e1:d4:43:84:b7:48:68:5e: c4:50:39:75:4d:a1:c4:33:3b:ef:8a:3d:96:38:69: 2a:6b:e0:8d:17:e1:d5:02:4f:d1:ca:5c:8d:d1:29: 17:c1:17:57:2c:ae:2d:e4:b2:cd:4b:27:c2:d2:d9: 79:00:03:89:8c:84:b1:43:74:7a:33:e2:8d:b4:41: 31:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9D:8A:5D:93:60:E9:4F:72:14:23:71:82:44:CD:40:03:D3:FC:95 X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c2:49:15:40:4c:e2:83:59:1e:0c:43:8e:85:08:0e:ed:4b: d0:50:05:99:b3:5c:f9:0a:f4:14:3b:10:d7:80:21:2c:08:40: 83:74:90:6b:5c:a4:3a:7e:6f:73:e0:fd:d0:e6:94:27:ae:c8: 9f:37:e7:8d:9f:c7:49:07:83:26:14:a8:68:f9:f9:d2:cc:e9: 4d:90:2c:80:6c:46:6a:c5:fc:f4:08:f6:6e:6e:19:ca:44:07: cc:f8:b7:68:5f:63:8f:d5:b8:e4:cd:a3:e3:2a:7b:7d:60:0f: 1b:98:c5:ba:7d:a4:be:93:92:b2:c8:9b:6c:f4:ab:d6:cf:8c: 99:12:3e:8f:17:20:e0:9e:46:5a:d8:6d:42:ff:a8:61:e5:7d: fa:52:41:d0:f5:f3:e4:9d:36:59:97:10:50:ad:9b:d7:2c:63: 12:a9:2b:7a:b2:c5:6b:20:56:bd:44:aa:4e:7a:dd:f4:64:3f: 4d:c2:36:11:36:14:95:dc:39:82:c3:91:54:b8:48:92:17:40: bb:dc:f7:45:7b:f5:23:18:f8:0e:b5:28:22:83:1b:bc:2e:49: 39:0f:23:dd:a6:cd:75:11:4c:ef:4a:ee:b1:ee:4b:35:05:8d: 9d:74:76:f2:30:34:c4:ab:d6:b3:eb:06:e6:6a:d9:eb:34:e1: 08:d4:f3:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjUxMjA2MTk1OTE1WhcNMjUxMjEzMTk1OTE1WjAYMRYwFAYD VQQDEw02OTM0OGIxMy0wNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9lHdXRoYhDbqXwDzmv7fGnXm49sEIET0tZ4DNBz49HQQ6OmhPp50t5hNNA// 0/zXEvlaH3LPI5OCAsGNlyXZWmUKUB7DrIba4HAVzJhIbv7F+X5x31+UKzgRhMGf BTjtfPJMs6Oa0BL/qRuLHgFmldfDHfDBIT168d9k1Ss5xd03o+YHuwf3wHjlnjWk olAO0MjgKL+xQ876QyBxSW6squE72qa7p7YhcCKrUcCazdKOfzxDmPtffSrh4dRD hLdIaF7EUDl1TaHEMzvvij2WOGkqa+CNF+HVAk/RylyN0SkXwRdXLK4t5LLNSyfC 0tl5AAOJjISxQ3R6M+KNtEExuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmdil2T YOlPchQjcYJEzUAD0/yVMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXwkkVQEzig1keDEOOhQgO7UvQUAWZs1z5CvQUOxDXgCEsCECDdJBr XKQ6fm9z4P3Q5pQnrsifN+eNn8dJB4MmFKho+fnSzOlNkCyAbEZqxfz0CPZubhnK RAfM+LdoX2OP1bjkzaPjKnt9YA8bmMW6faS+k5KyyJts9KvWz4yZEj6PFyDgnkZa 2G1C/6hh5X36UkHQ9fPknTZZlxBQrZvXLGMSqSt6ssVrIFa9RKpOet30ZD9NwjYR NhSV3DmCw5FUuEiSF0C73PdFe/UjGPgOtSgigxu8Lkk5DyPdps11EUzvSu6x7ks1 BY2ddHbyMDTEq9az6wbmatnrNOEI1POI -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:39 2025 by rpki-client