This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: M0zXim5aMLc46p3bAzuo33BEck/XBqOJ5I7pTEHmFCY= Subject key identifier: E8:55:2B:39:2D:C1:DD:62:CE:1A:3F:05:75:EF:A3:B9:90:31:5A:53 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0CAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0CA3 Signing time: Thu 04 Dec 2025 17:48:37 +0000 Manifest this update: Thu 04 Dec 2025 17:48:37 +0000 Manifest next update: Thu 11 Dec 2025 17:48:37 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: t1nMWRUMhNiYDSnt60i1zqdXvt0OGpesnpdHmhEOgII=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3243 (0xcab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Dec 4 17:48:37 2025 GMT Not After : Dec 11 17:48:37 2025 GMT Subject: CN=6931c975-1d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2d:1d:31:6c:5c:0f:6b:fa:94:90:90:6c:1a: a4:8b:c6:5a:73:89:31:5f:12:13:9e:f2:72:f4:f1: 77:72:10:8c:9c:f0:f3:7d:4c:40:9d:36:0a:e9:9d: 0f:5a:36:ef:59:c2:c3:7a:2c:1a:dc:f1:e9:0a:b5: 11:37:ab:40:7e:81:00:48:54:f0:2a:6d:04:02:11: 9c:c9:f0:6c:2b:77:24:66:6b:cc:6c:37:e8:fd:79: 81:b1:8a:b4:10:9d:42:81:c8:17:72:7a:f5:73:6b: f8:6c:3e:7e:d0:35:98:da:72:f9:f1:45:0f:71:bd: 27:bc:33:98:6f:1c:83:a8:ce:bd:a6:8c:11:db:af: 9c:d5:e0:bc:d8:fb:0d:b5:1a:0c:64:1b:66:e5:16: 3a:5a:0c:68:ad:40:f1:49:f6:6a:c5:e8:97:89:a0: cc:3a:d5:ce:39:1d:03:6b:2f:38:86:58:38:62:80: bf:a3:5a:54:c2:0c:65:9a:88:15:8c:3b:04:4f:c8: 3d:e3:e9:eb:c6:7b:a3:f5:6d:ed:ec:66:04:6f:2a: 76:46:d9:95:73:d5:27:d4:e6:42:17:0f:fc:f1:1d: 3d:fb:73:2a:6f:77:d9:ae:5a:58:ce:b8:b5:e7:db: 3e:56:2b:a8:40:5b:cd:15:b5:67:92:e9:64:16:ce: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:55:2B:39:2D:C1:DD:62:CE:1A:3F:05:75:EF:A3:B9:90:31:5A:53 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:30:4a:c5:ea:c7:58:d4:ca:c9:27:ae:1b:a4:14:db:41:a8: ea:30:92:1e:37:b3:51:a1:f0:84:df:01:b9:d4:37:d1:38:0d: c2:1d:0a:43:38:33:3b:65:31:fe:b4:58:6f:db:fd:40:23:35: 0e:6a:d9:7f:cd:13:35:1e:3b:0e:38:1f:b4:0e:76:e4:38:7d: d1:78:39:67:e8:c6:07:77:8d:dc:1e:dc:ab:63:d7:1c:20:c7: e4:0a:25:d6:54:b4:f4:3f:84:dc:09:79:1f:17:d0:6d:69:8c: 31:82:b7:20:d3:8b:66:91:a3:a9:58:a3:c9:43:30:c9:02:05: 61:ac:b2:9a:28:b2:11:23:66:c0:08:19:ee:76:96:14:49:85: 19:29:c2:20:f4:0e:82:b3:ac:8c:ce:c7:1f:ba:49:62:88:ae: 94:b2:6c:92:8d:52:d1:e4:ee:7a:b6:2f:c8:2f:1a:da:46:0c: 6c:75:65:b5:a5:27:b4:eb:7c:8c:7c:17:6b:a0:5d:6c:89:09: a0:50:e7:1a:43:87:66:0b:28:b9:43:85:d8:99:83:2d:09:8e: 3c:4c:b9:e7:e3:a6:bc:e8:da:b3:d1:c0:42:e6:49:3d:2c:9d: 96:9e:05:39:8f:ca:44:89:b8:f9:aa:30:3a:09:40:07:90:36: 1a:9b:b9:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjUxMjA0MTc0ODM3WhcNMjUxMjExMTc0ODM3WjAYMRYwFAYD VQQDEw02OTMxYzk3NS0xZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7y0dMWxcD2v6lJCQbBqki8Zac4kxXxITnvJy9PF3chCMnPDzfUxAnTYK6Z0P WjbvWcLDeiwa3PHpCrURN6tAfoEASFTwKm0EAhGcyfBsK3ckZmvMbDfo/XmBsYq0 EJ1CgcgXcnr1c2v4bD5+0DWY2nL58UUPcb0nvDOYbxyDqM69powR26+c1eC82PsN tRoMZBtm5RY6WgxorUDxSfZqxeiXiaDMOtXOOR0Day84hlg4YoC/o1pUwgxlmogV jDsET8g94+nrxnuj9W3t7GYEbyp2RtmVc9Un1OZCFw/88R09+3Mqb3fZrlpYzri1 59s+ViuoQFvNFbVnkulkFs6Y9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhVKzkt wd1izho/BXXvo7mQMVpTMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKMErF6sdY1MrJJ64bpBTbQajqMJIeN7NRofCE3wG51DfROA3CHQpD ODM7ZTH+tFhv2/1AIzUOatl/zRM1HjsOOB+0DnbkOH3ReDln6MYHd43cHtyrY9cc IMfkCiXWVLT0P4TcCXkfF9BtaYwxgrcg04tmkaOpWKPJQzDJAgVhrLKaKLIRI2bA CBnudpYUSYUZKcIg9A6Cs6yMzscfukliiK6UsmySjVLR5O56ti/ILxraRgxsdWW1 pSe063yMfBdroF1siQmgUOcaQ4dmCyi5Q4XYmYMtCY48TLnn46a86Nqz0cBC5kk9 LJ2WngU5j8pEibj5qjA6CUAHkDYam7nI -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:40 2025 by rpki-client