This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: U+/6X660xtOWpuaw1X7uoI77dTaI2tzwB6p7PaN+QYw= Subject key identifier: 0D:35:1A:EA:70:98:95:58:44:F6:DD:DC:E0:73:02:6B:0D:3B:83:10 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 03EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 03E6 Signing time: Thu 04 Dec 2025 23:00:50 +0000 Manifest this update: Thu 04 Dec 2025 23:00:50 +0000 Manifest next update: Thu 11 Dec 2025 23:00:50 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: ePGo3jNvn5KZRkNsGAOCLA2riOSNlM/uv2aXSX4fhfM=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: DbGKbMecwcykqDAfU21+x6Kvm9Z6g5WTzg4SdqXRisc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1007 (0x3ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Dec 4 23:00:50 2025 GMT Not After : Dec 11 23:00:50 2025 GMT Subject: CN=693212a2-f449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:ab:72:a9:c8:3b:57:e4:25:a8:de:7a:80: e1:52:71:a8:de:2c:6c:77:d6:63:1b:3a:ec:35:8e: 1c:a7:35:b4:ba:03:13:d8:13:b3:05:6a:4b:21:4f: 0a:a9:2b:01:f2:64:fb:97:70:c8:e0:24:76:56:d1: 0a:b5:3e:df:43:c9:b1:58:21:40:a0:33:37:c4:5e: 6d:d1:39:ad:97:cf:31:a9:d7:93:94:c3:19:c5:67: 3f:8a:65:6c:f7:48:e0:dd:7d:ed:82:ab:83:58:ab: df:18:f0:ee:f8:a2:70:90:14:95:ed:aa:a6:e8:74: f2:fc:7c:74:29:80:94:87:ed:1d:92:f4:39:77:59: c5:f8:68:8a:1b:e5:87:25:26:7c:dc:47:cb:86:7c: c0:9b:25:9f:8a:38:56:09:2d:d5:a4:8c:ab:22:6d: bb:ad:33:58:6a:b0:6c:83:e3:e0:20:ba:0e:4e:d4: 08:b1:d4:db:53:29:18:d0:79:9c:cc:17:b7:ac:61: 12:7e:49:99:17:31:11:4f:26:44:cb:4e:7f:25:f6: 35:ca:6f:1e:3e:2d:fc:dc:9f:15:15:04:2b:4b:e3: 35:4e:db:9b:db:f2:79:06:52:1b:3b:9d:78:45:e8: ef:b0:2c:39:00:92:5c:a1:8f:af:fa:25:a6:a5:06: 25:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:35:1A:EA:70:98:95:58:44:F6:DD:DC:E0:73:02:6B:0D:3B:83:10 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5b:26:3d:1f:a4:a8:c7:81:16:21:5e:20:cc:ee:06:34:7f: 5b:8c:68:c6:49:ab:ed:95:eb:46:d0:24:a9:da:b0:b4:5b:e4: 20:43:c7:f6:8d:e2:ad:92:71:ab:a5:d7:90:40:f6:23:b8:78: 85:ce:cc:c4:f6:66:1d:f5:a1:71:a9:47:ee:8a:e8:20:fb:47: a5:b8:15:b4:c7:90:da:74:dc:1c:79:2d:8f:19:72:54:17:58: 5f:5f:9a:ad:36:70:c5:ff:6f:90:73:1b:9f:62:bc:27:77:e6: a6:0e:6e:a4:2e:dc:83:0e:bd:49:52:9b:67:42:d2:fe:ab:30: 59:cb:fa:fb:e8:f0:d5:66:56:3e:27:a0:31:38:32:a5:14:a7: f9:20:5a:1e:5a:e9:44:1a:25:ec:d2:06:e1:12:54:c5:1a:75: e7:bc:8f:3e:de:5b:e4:6d:1d:d7:dd:8c:ec:c0:b1:59:98:ab: e5:76:5e:92:7f:19:97:1a:9d:0a:a4:99:2f:3d:2a:98:6b:4c: 41:c1:02:a3:3c:06:fb:cc:a1:81:dd:ec:3e:b2:9c:a4:06:12: 24:39:2c:9d:89:49:bf:92:d1:90:b3:6e:30:b0:41:06:dd:27: ef:85:e0:76:82:19:00:9b:6e:f0:11:c9:91:83:e9:ab:bb:3e: e6:5c:b1:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjUxMjA0MjMwMDUwWhcNMjUxMjExMjMwMDUwWjAYMRYwFAYD VQQDEw02OTMyMTJhMi1mNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MqrcqnIO1fkJajeeoDhUnGo3ixsd9ZjGzrsNY4cpzW0ugMT2BOzBWpLIU8K qSsB8mT7l3DI4CR2VtEKtT7fQ8mxWCFAoDM3xF5t0Tmtl88xqdeTlMMZxWc/imVs 90jg3X3tgquDWKvfGPDu+KJwkBSV7aqm6HTy/Hx0KYCUh+0dkvQ5d1nF+GiKG+WH JSZ83EfLhnzAmyWfijhWCS3VpIyrIm27rTNYarBsg+PgILoOTtQIsdTbUykY0Hmc zBe3rGESfkmZFzERTyZEy05/JfY1ym8ePi383J8VFQQrS+M1Ttub2/J5BlIbO514 RejvsCw5AJJcoY+v+iWmpQYlPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA01Gupw mJVYRPbd3OBzAmsNO4MQMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6WyY9H6Sox4EWIV4gzO4GNH9bjGjGSavtletG0CSp2rC0W+QgQ8f2 jeKtknGrpdeQQPYjuHiFzszE9mYd9aFxqUfuiugg+0eluBW0x5DadNwceS2PGXJU F1hfX5qtNnDF/2+QcxufYrwnd+amDm6kLtyDDr1JUptnQtL+qzBZy/r76PDVZlY+ J6AxODKlFKf5IFoeWulEGiXs0gbhElTFGnXnvI8+3lvkbR3X3YzswLFZmKvldl6S fxmXGp0KpJkvPSqYa0xBwQKjPAb7zKGB3ew+spykBhIkOSydiUm/ktGQs24wsEEG 3SfvheB2ghkAm27wEcmRg+mruz7mXLFg -----END CERTIFICATE-----Generated at Sat Dec 6 20:17:21 2025 by rpki-client