This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: Gpr9d4/1VV4D92uEF7VlJV10sBRMD84NvUFxsJuEIfs= Subject key identifier: 17:01:E6:96:7C:C0:5A:C6:5D:A4:3C:43:21:D7:24:26:4D:87:7B:3C Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 0255 Signing time: Fri 05 Dec 2025 00:18:56 +0000 Manifest this update: Fri 05 Dec 2025 00:18:56 +0000 Manifest next update: Fri 12 Dec 2025 00:18:56 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: DvFHE3qYDCxNHpOOKxrdfQ1o7dCIGizLpNTj9QHAYqA=) 2: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: D+g5jzuWcvphD1ps8jnw5QvvfxsQjGFWKglonqcWSi0=) 3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: Kuncg/OKHO6KINevgnEgm8twmyohuTIV8xS8NsrR5Yw=) 4: CD152404495B11EF93EA3757C4F9AE02.roa (hash: G7ZmL/GFUdvItC3mb/pIr2VOosfHx+vaBIP/nBv1gCo=) 5: 6121C23230AC11F08C150767C4F9AE02.roa (hash: fShyVa3rIna9iRvZNHAjyEZoQgutIuaEQEMpg+RXaTc=) 6: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: 4uRsfI3UTikSBwFuE1LkYP4yx1HQPN2T4+sSHop7B54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Dec 5 00:18:56 2025 GMT Not After : Dec 12 00:18:56 2025 GMT Subject: CN=693224f0-bcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7f:b2:46:54:4a:6e:fd:51:9e:c2:d4:dd:83: c8:26:eb:85:39:ce:c9:9a:e0:f2:29:15:1b:b1:21: f0:73:88:7c:74:28:82:e9:cf:a0:14:d3:75:83:bd: d5:a1:df:d8:1d:d0:af:7b:29:57:ad:ba:36:10:a2: 71:a4:92:7d:81:77:48:ab:dc:fc:4a:d5:b1:f2:e1: 12:54:8a:d9:2c:15:fb:49:af:ae:6a:60:68:24:01: 1e:82:ed:20:1b:fa:1a:d2:4a:36:04:b0:55:7a:f8: 55:30:c0:ff:26:29:50:ac:32:3b:52:e4:9f:5a:4e: 5f:44:86:09:3d:02:fd:f8:17:46:2b:27:3f:5e:21: f7:ef:16:e8:d5:65:62:6e:be:99:db:c2:21:1d:f1: 26:1d:d1:58:b5:a0:76:b0:7c:ce:85:69:42:71:c7: 43:b6:e6:9d:09:66:bb:54:33:e9:15:bc:0e:2c:a9: de:42:02:de:80:16:bc:58:21:bc:b7:54:f7:db:4e: a7:1e:93:a2:3e:cf:ea:06:4c:11:ab:c4:1b:f1:51: 36:39:84:50:0d:bc:44:fc:1f:d6:20:b0:a2:ac:e7: 7a:cd:eb:fe:d4:af:3c:c2:c0:b2:ea:cd:20:37:53: 47:ef:b5:ca:22:a8:32:a6:92:07:16:d8:fc:cf:df: f7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:01:E6:96:7C:C0:5A:C6:5D:A4:3C:43:21:D7:24:26:4D:87:7B:3C X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:e0:dd:57:9f:dc:cc:a7:d4:9a:a8:bf:77:5b:67:a6:5d:e5: a8:1a:4e:5a:47:94:80:6e:a8:ed:0a:9d:10:06:c0:55:81:95: c6:da:23:5d:47:fa:df:f5:03:2d:42:b4:96:1f:f2:86:04:25: 5c:cf:a3:7b:ee:6f:13:f3:a9:cd:db:65:f9:ae:de:f6:1d:b0: 7b:13:0a:8c:58:c1:a9:dc:46:17:6c:d1:dc:bd:e9:fc:50:53: 0c:f7:42:35:a0:e1:31:c0:e3:c1:45:81:35:ec:82:7a:b0:ed: 60:d8:39:8a:4b:25:8f:b7:cc:d2:dc:fe:af:a8:8b:76:18:81: 0c:97:b7:24:5a:04:a7:82:da:ec:57:20:ac:12:73:ac:e2:34: 4e:08:8b:f6:e2:a6:29:51:70:4c:1c:97:7d:b9:bb:20:f5:d9: 4c:25:eb:c2:96:ff:54:35:93:b0:12:ab:07:b3:a5:e7:84:c2: fd:72:d1:79:58:b8:7f:18:e7:8c:92:a2:01:5d:93:75:11:c4: 42:e6:e7:b9:1b:d4:96:df:a4:39:62:30:f2:c9:37:6f:93:5b: a0:3c:cb:2d:48:96:5b:0c:21:f1:29:eb:27:14:ea:3a:0f:87: 97:38:c4:ee:ef:75:cb:6d:4d:80:69:6c:eb:c3:05:70:1e:0d: 5e:11:ac:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjUxMjA1MDAxODU2WhcNMjUxMjEyMDAxODU2WjAYMRYwFAYD VQQDEw02OTMyMjRmMC1iY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H+yRlRKbv1RnsLU3YPIJuuFOc7JmuDyKRUbsSHwc4h8dCiC6c+gFNN1g73V od/YHdCveylXrbo2EKJxpJJ9gXdIq9z8StWx8uESVIrZLBX7Sa+uamBoJAEegu0g G/oa0ko2BLBVevhVMMD/JilQrDI7UuSfWk5fRIYJPQL9+BdGKyc/XiH37xbo1WVi br6Z28IhHfEmHdFYtaB2sHzOhWlCccdDtuadCWa7VDPpFbwOLKneQgLegBa8WCG8 t1T3206nHpOiPs/qBkwRq8Qb8VE2OYRQDbxE/B/WILCirOd6zev+1K88wsCy6s0g N1NH77XKIqgyppIHFtj8z9/3jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcB5pZ8 wFrGXaQ8QyHXJCZNh3s8MB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz4N1Xn9zMp9SaqL93W2emXeWoGk5aR5SAbqjtCp0QBsBVgZXG2iNd R/rf9QMtQrSWH/KGBCVcz6N77m8T86nN22X5rt72HbB7EwqMWMGp3EYXbNHcven8 UFMM90I1oOExwOPBRYE17IJ6sO1g2DmKSyWPt8zS3P6vqIt2GIEMl7ckWgSngtrs VyCsEnOs4jROCIv24qYpUXBMHJd9ubsg9dlMJevClv9UNZOwEqsHs6XnhML9ctF5 WLh/GOeMkqIBXZN1EcRC5ue5G9SW36Q5YjDyyTdvk1ugPMstSJZbDCHxKesnFOo6 D4eXOMTu73XLbU2AaWzrwwVwHg1eEaxk -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:55 2025 by rpki-client