This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft File: xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft (raw, json) Hash identifier: nP16oKYckqplyRiidgVCopBU5UZNYCFq7hUQy4XhdkI= Subject key identifier: 88:C9:60:A9:C0:0C:24:D8:C6:79:4A:0D:1B:46:86:94:EB:36:39:05 Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft Manifest number: 069F Signing time: Sat 06 Dec 2025 21:14:56 +0000 Manifest this update: Sat 06 Dec 2025 21:14:56 +0000 Manifest next update: Sat 13 Dec 2025 21:14:56 +0000 Files and hashes: 1: xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl (hash: xGBrBKtkOfTHQSMRwR6Q6YRsJePQq+2mr+gFiwCPzBQ=) 2: 807CB298903A11EBA9783756C4F9AE02.roa (hash: Q95/nW6cBcg6eSxuqekACSAFlF9Gvg9OiOnkTSpqx38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Validity Not Before: Dec 6 21:14:56 2025 GMT Not After : Dec 13 21:14:56 2025 GMT Subject: CN=69349cd0-d473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:29:46:85:49:1d:13:bf:be:2b:ff:d3:8f: 10:21:4c:fb:a3:f7:cc:3d:06:36:24:a5:bf:52:d6: d8:87:75:82:e7:02:80:03:c3:94:03:08:33:59:c2: 98:9e:43:fb:e8:f2:55:11:41:36:8e:8c:cc:e4:52: 35:78:b9:42:39:6a:43:04:c3:da:e3:da:c3:41:fb: bb:86:6f:f0:c5:92:4b:ed:2d:f2:0b:4f:fa:89:72: ce:a7:ef:a4:7c:6d:72:76:d5:fc:df:2b:39:0a:ee: 70:d8:78:6b:80:92:73:47:f3:d4:40:28:ba:8a:45: 2a:a1:12:47:bc:78:00:b0:7d:93:83:43:01:56:58: 5d:97:27:c6:9f:99:45:f1:da:00:a1:ff:4e:c6:57: 48:1c:d3:e1:38:bc:f8:00:b0:71:50:0c:e5:56:ba: 61:9c:bd:60:89:a4:80:f9:d8:19:6a:d3:29:bf:e7: 11:04:f5:74:8a:2c:30:05:d0:aa:10:9f:9d:25:1d: 49:b9:4e:e0:c4:aa:d8:9c:b8:ea:ff:c9:81:bc:4e: 9e:00:05:41:15:39:90:56:8f:3b:8d:4d:05:e4:24: 80:8c:dd:1d:73:72:d1:cd:92:03:51:27:1f:eb:69: fb:8a:f5:37:b2:38:4d:08:29:f8:40:75:77:0e:08: f0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C9:60:A9:C0:0C:24:D8:C6:79:4A:0D:1B:46:86:94:EB:36:39:05 X509v3 Authority Key Identifier: keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:6d:23:9b:9a:27:a2:cb:5b:b5:ee:e9:30:7d:c1:04:0c:4b: 02:4d:3b:84:88:c7:f4:c7:c0:b0:a5:26:3c:38:9b:51:da:9d: 04:e4:81:6d:e0:2c:74:c8:f2:87:4c:3b:da:f9:31:b9:ed:38: aa:c3:c7:62:71:de:e3:25:f5:5b:84:49:52:a8:f5:65:af:26: 67:aa:73:de:d9:7d:9d:2d:9d:74:49:9f:8e:5a:03:db:c2:2a: 76:e6:26:ee:35:7c:06:01:04:16:51:7e:30:24:2a:84:09:fb: 4d:a0:34:8a:ad:21:b1:d0:20:a5:b4:c2:91:b9:e0:65:5e:45: a2:83:44:54:c1:13:d8:90:1f:60:c4:9c:8a:3a:5d:60:d5:32: be:83:f5:c2:b6:15:d9:a0:23:63:60:45:8a:a2:d8:be:55:c4: 96:00:c5:dc:09:1f:66:03:28:27:17:69:b6:c8:89:d6:cf:56: 4a:98:6e:56:07:6b:d6:c3:9d:88:1f:a2:96:70:68:c4:ff:7b: 85:64:61:03:fd:79:4c:4e:8d:33:5c:a2:d2:ed:5f:54:3c:7a: 9b:c9:a5:58:88:e2:ac:a7:70:29:34:ca:e3:a0:51:57:ee:4d: 90:b9:44:37:a6:85:4b:c9:f6:16:80:13:75:24:1e:32:94:7e: 47:50:2b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNjYxMTAvBgNVBAUTKEM0NTVCMDg2QkFCODY0N0NEMjUxMENBODMyNDFFNzAw MTRDRDhBNDQwHhcNMjUxMjA2MjExNDU2WhcNMjUxMjEzMjExNDU2WjAYMRYwFAYD VQQDEw02OTM0OWNkMC1kNDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwkpRoVJHRO/viv/048QIUz7o/fMPQY2JKW/UtbYh3WC5wKAA8OUAwgzWcKY nkP76PJVEUE2jozM5FI1eLlCOWpDBMPa49rDQfu7hm/wxZJL7S3yC0/6iXLOp++k fG1ydtX83ys5Cu5w2HhrgJJzR/PUQCi6ikUqoRJHvHgAsH2Tg0MBVlhdlyfGn5lF 8doAof9OxldIHNPhOLz4ALBxUAzlVrphnL1giaSA+dgZatMpv+cRBPV0iiwwBdCq EJ+dJR1JuU7gxKrYnLjq/8mBvE6eAAVBFTmQVo87jU0F5CSAjN0dc3LRzZIDUScf 62n7ivU3sjhNCCn4QHV3DgjwKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjJYKnA DCTYxnlKDRtGhpTrNjkFMB8GA1UdIwQYMBaAFMRVsIa6uGR80lEMqDJB5wAUzYpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I2Ni9FNUM0RDMyNjkw MzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpIelNVUXlvTWtIbkFCVE5p a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hGV3docnE0Wkh6U1VReW9Na0huQUJUTmlrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I2Ni9FNUM0RDMyNjkwMzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpI elNVUXlvTWtIbkFCVE5pa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClbSObmieiy1u17ukwfcEEDEsCTTuEiMf0x8CwpSY8OJtR2p0E5IFt 4Cx0yPKHTDva+TG57Tiqw8dicd7jJfVbhElSqPVlryZnqnPe2X2dLZ10SZ+OWgPb wip25ibuNXwGAQQWUX4wJCqECftNoDSKrSGx0CCltMKRueBlXkWig0RUwRPYkB9g xJyKOl1g1TK+g/XCthXZoCNjYEWKoti+VcSWAMXcCR9mAygnF2m2yInWz1ZKmG5W B2vWw52IH6KWcGjE/3uFZGED/XlMTo0zXKLS7V9UPHqbyaVYiOKsp3ApNMrjoFFX 7k2QuUQ3poVLyfYWgBN1JB4ylH5HUCuz -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:56 2025 by rpki-client