This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft File: xPfznmL0ydeMXhL9wVGuTjK8mkI.mft (raw, json) Hash identifier: 96nJ/t0EQtMx0o95AnFfkoW9W7nwmZm8fbZ0U/JTDds= Subject key identifier: A5:4F:7C:BD:5A:07:37:87:F8:67:88:6A:D2:02:12:C7:A4:3F:DD:16 Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft Manifest number: 012C Signing time: Fri 05 Dec 2025 02:45:15 +0000 Manifest this update: Fri 05 Dec 2025 02:45:15 +0000 Manifest next update: Fri 12 Dec 2025 02:45:15 +0000 Files and hashes: 1: xPfznmL0ydeMXhL9wVGuTjK8mkI.crl (hash: h2Q8Ia/lqMQiJ2foR3eRnicqRCTdsQvI1AO3KlR2mmY=) 2: 127604E20F8B11EF87FC5918C4F9AE02.roa (hash: Ur2f+2mtS8rG+Wi5lYOAmNS8a2RYYseSRQgStkLqo/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B29B, serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Validity Not Before: Dec 5 02:45:15 2025 GMT Not After : Dec 12 02:45:15 2025 GMT Subject: CN=6932473b-b96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:13:3a:e7:16:a2:99:5d:55:5a:83:f8:72:48: f9:6a:41:df:dd:17:34:d0:00:bb:9d:44:d7:11:5c: 1d:2a:33:ce:c5:84:f3:70:ae:70:42:8e:bd:18:aa: bf:d5:4b:31:3e:ed:b0:de:a0:7d:86:1e:08:7e:43: 8a:31:f8:26:87:d3:11:21:8f:9a:d9:24:24:6e:32: ba:db:cb:5b:f0:ba:80:94:8a:f7:ff:07:4d:7f:cb: 2e:53:1d:d3:47:f6:3d:1a:7b:c7:38:fe:9f:5a:16: 52:c6:ee:c3:8b:52:f4:e7:ec:1c:8f:2a:45:ec:59: ee:d1:c4:3c:27:62:a7:4a:8b:b4:b6:92:d8:04:27: 7f:e1:cd:38:75:0a:1f:5d:dc:cc:b3:69:ff:51:5f: db:e9:e4:fd:da:a2:6d:7b:1c:f4:b1:3e:bb:ad:dd: 2c:d8:13:51:48:f6:3f:3e:ce:b3:fa:33:77:95:c6: 5e:e1:9f:34:8b:7b:1e:68:4c:c5:c5:70:f2:75:37: 55:b5:2d:da:f3:ac:fd:97:0a:11:23:52:bb:dc:89: 0d:fa:fc:50:a9:f2:00:dc:ce:30:0f:2d:74:8c:ca: 19:de:39:78:19:f4:cf:ff:5e:7d:16:b8:64:56:05: fc:1f:f6:a4:eb:de:17:ba:e0:a0:32:10:ce:b7:d4: 49:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4F:7C:BD:5A:07:37:87:F8:67:88:6A:D2:02:12:C7:A4:3F:DD:16 X509v3 Authority Key Identifier: keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5b:3d:86:ca:f4:94:a8:2e:58:98:e7:32:28:88:e6:67:b6: a9:e5:c2:06:a0:2e:14:7a:5b:3d:86:b0:bc:f7:95:b0:2f:e9: 71:34:f4:00:9b:58:f9:0b:e4:74:df:08:78:5a:6c:ae:f5:80: 44:48:08:3e:a5:4d:68:65:89:37:d9:9d:bc:e4:b2:1c:94:3c: 02:e2:eb:b1:01:9c:02:a9:0e:a3:dd:1e:cd:ab:4e:e6:98:d9: 4d:51:00:7b:bb:fc:ff:7e:79:9e:43:63:8b:45:15:9c:e6:02: 4a:e8:5c:ab:2d:19:70:48:e7:be:85:65:41:a1:1a:b9:5b:bb: 67:7e:53:00:dd:1e:c0:f3:dc:83:7d:84:fe:39:c8:72:91:f0: 88:62:95:2d:1b:67:9b:e5:67:b1:57:6d:b9:a4:f1:32:9d:69: 68:ba:1c:43:c6:2d:23:04:22:b5:24:dc:f4:05:7d:9b:80:df: be:5d:2b:28:fd:fd:b3:e0:d6:f4:d6:1a:51:19:50:bb:ad:86: e0:cf:43:b7:97:a3:f5:c5:2e:c3:02:6a:f6:34:be:f9:a1:f8: 7b:e3:27:d1:d0:7f:5b:f8:cb:1c:26:99:f7:d1:44:68:df:1f: 9f:9c:c7:16:43:71:e5:2a:46:5d:15:73:15:3d:f4:a2:41:e7: 0e:0f:d3:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIyOUIxMTAvBgNVBAUTKEM0RjdGMzlFNjJGNEM5RDc4QzVFMTJGREMxNTFBRTRF MzJCQzlBNDIwHhcNMjUxMjA1MDI0NTE1WhcNMjUxMjEyMDI0NTE1WjAYMRYwFAYD VQQDEw02OTMyNDczYi1iOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BM65xaimV1VWoP4ckj5akHf3Rc00AC7nUTXEVwdKjPOxYTzcK5wQo69GKq/ 1UsxPu2w3qB9hh4IfkOKMfgmh9MRIY+a2SQkbjK628tb8LqAlIr3/wdNf8suUx3T R/Y9GnvHOP6fWhZSxu7Di1L05+wcjypF7Fnu0cQ8J2KnSou0tpLYBCd/4c04dQof XdzMs2n/UV/b6eT92qJtexz0sT67rd0s2BNRSPY/Ps6z+jN3lcZe4Z80i3seaEzF xXDydTdVtS3a86z9lwoRI1K73IkN+vxQqfIA3M4wDy10jMoZ3jl4GfTP/159Frhk VgX8H/ak694XuuCgMhDOt9RJbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVPfL1a BzeH+GeIatICEsekP90WMB8GA1UdIwQYMBaAFMT3855i9MnXjF4S/cFRrk4yvJpC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjI5Qi84QTNFMUQxQTBG ODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlkZU1YaEw5d1ZHdVRqSzht a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZnpubUwweWRlTVhoTDl3Vkd1VGpLOG1rSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjI5Qi84QTNFMUQxQTBGODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlk ZU1YaEw5d1ZHdVRqSzhta0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqWz2GyvSUqC5YmOcyKIjmZ7ap5cIGoC4Uels9hrC895WwL+lxNPQA m1j5C+R03wh4Wmyu9YBESAg+pU1oZYk32Z285LIclDwC4uuxAZwCqQ6j3R7Nq07m mNlNUQB7u/z/fnmeQ2OLRRWc5gJK6FyrLRlwSOe+hWVBoRq5W7tnflMA3R7A89yD fYT+OchykfCIYpUtG2eb5WexV225pPEynWlouhxDxi0jBCK1JNz0BX2bgN++XSso /f2z4Nb01hpRGVC7rYbgz0O3l6P1xS7DAmr2NL75ofh74yfR0H9b+MscJpn30URo 3x+fnMcWQ3HlKkZdFXMVPfSiQecOD9PX -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:02 2025 by rpki-client