This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: 7F6fl6JvHil9jGtz2PLNpJG+nREVMjFlOp/RTOXFeWM= Subject key identifier: B9:00:D9:A6:56:59:F1:04:4F:28:3B:B9:37:E6:6C:CC:6E:50:12:F2 Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 03EA Signing time: Thu 04 Dec 2025 23:03:43 +0000 Manifest this update: Thu 04 Dec 2025 23:03:43 +0000 Manifest next update: Thu 11 Dec 2025 23:03:43 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: gY0EIvWnQHf64IjRUmR1l95wEFK0cNhalGmKg1wZTLg=) 2: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: melteXR1cRharD5muHTsf70+edihxivjKNNQzAZNpLE=) 3: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: pIl/ybOSWeNJuXyu7vI+RsUvtpL0KXP/t0jEbgQtU7I=) 4: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: ImUvDtTwcm68idWdwXB7tEHKc5rG51UP9vCEMxdSyRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: Dec 4 23:03:43 2025 GMT Not After : Dec 11 23:03:43 2025 GMT Subject: CN=6932134f-791a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:85:0d:a2:b3:9b:75:79:9d:d6:48:2a:3b: 86:b9:f9:c2:3d:93:b0:11:9a:fc:72:46:62:4d:e4: 80:78:2a:f6:70:bc:71:e1:fe:56:ad:5c:1e:64:43: 22:20:40:49:aa:93:b1:f0:ab:c8:da:f4:af:c7:a6: c5:84:ab:54:18:2b:36:9a:6a:d8:bd:c8:c6:15:86: ef:2b:5d:32:90:66:81:16:94:3f:dd:72:2b:3e:16: 4c:0f:73:8e:a4:7a:7e:e5:57:76:f5:23:34:19:9e: ed:28:b9:85:c2:11:6b:b3:ec:ab:28:e6:f3:e6:1b: ff:be:8c:d8:f2:bc:5e:ba:28:5e:6c:0a:b7:15:73: 1a:bd:8b:74:4c:bb:d5:23:b8:8f:2d:da:b6:79:02: 75:1d:18:0c:c1:cd:4f:1b:5e:78:57:eb:d6:23:2a: 66:73:6f:f5:37:9d:0e:54:46:18:74:d3:b4:52:27: 82:16:f8:a6:10:43:e0:03:61:3c:23:c8:9a:1d:1d: b6:c8:21:98:9c:92:72:f6:31:6e:66:c8:b5:2b:87: 8a:7b:9d:95:ac:93:99:1c:fd:de:33:cf:bc:00:ba: a3:dc:49:9f:cf:88:47:9f:aa:3e:84:9d:a3:f5:b1: ad:d4:36:63:c5:0e:64:82:f7:ce:02:d1:0b:e0:e1: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:00:D9:A6:56:59:F1:04:4F:28:3B:B9:37:E6:6C:CC:6E:50:12:F2 X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:72:28:c9:7e:46:1f:1c:24:d5:53:0f:f4:2c:99:3a:91:6a: 31:48:54:e3:6d:91:c6:0d:0e:51:86:58:f5:03:e1:1b:a3:3d: cf:16:b1:b5:6d:95:c5:30:ee:07:0f:54:9d:52:46:34:7f:36: 64:81:d5:e7:3a:0d:e6:e4:f5:27:5e:c7:e7:56:0c:56:67:3c: 27:5c:de:4a:cb:72:d2:0a:10:e6:e2:1a:4a:d4:c3:a3:c9:8c: 1f:7a:a4:16:d0:48:39:f4:0a:70:f4:0f:ac:62:d9:58:07:7b: 53:74:a0:52:83:d6:87:cf:30:8d:94:1c:79:a6:a9:bf:99:f9: 6d:fb:8f:c7:86:ee:c7:7a:4c:a7:a7:43:08:0b:fd:6d:97:60: 15:20:f9:14:31:c0:6d:c7:1d:65:91:c9:01:1f:83:55:95:04: 24:56:3f:67:eb:40:15:9c:81:8c:c3:26:a1:bf:ec:b6:73:6f: ed:22:de:a3:e2:d6:87:e2:d7:ba:7a:d9:44:ac:9a:40:10:b6: 65:49:9e:d0:7a:9d:9c:92:59:e0:f7:ee:f9:6a:37:38:68:dc: 62:8d:e1:a3:93:97:80:6d:e0:7b:05:6d:4b:a7:af:6d:af:3c: 1a:b5:9f:71:f8:67:58:e2:59:19:90:f3:d4:7b:0e:57:89:73: f0:df:1f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjUxMjA0MjMwMzQzWhcNMjUxMjExMjMwMzQzWjAYMRYwFAYD VQQDEw02OTMyMTM0Zi03OTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBOFDaKzm3V5ndZIKjuGufnCPZOwEZr8ckZiTeSAeCr2cLxx4f5WrVweZEMi IEBJqpOx8KvI2vSvx6bFhKtUGCs2mmrYvcjGFYbvK10ykGaBFpQ/3XIrPhZMD3OO pHp+5Vd29SM0GZ7tKLmFwhFrs+yrKObz5hv/vozY8rxeuihebAq3FXMavYt0TLvV I7iPLdq2eQJ1HRgMwc1PG154V+vWIypmc2/1N50OVEYYdNO0UieCFvimEEPgA2E8 I8iaHR22yCGYnJJy9jFuZsi1K4eKe52VrJOZHP3eM8+8ALqj3Emfz4hHn6o+hJ2j 9bGt1DZjxQ5kgvfOAtEL4OHW0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkA2aZW WfEETyg7uTfmbMxuUBLyMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFcijJfkYfHCTVUw/0LJk6kWoxSFTjbZHGDQ5Rhlj1A+Eboz3PFrG1 bZXFMO4HD1SdUkY0fzZkgdXnOg3m5PUnXsfnVgxWZzwnXN5Ky3LSChDm4hpK1MOj yYwfeqQW0Eg59Apw9A+sYtlYB3tTdKBSg9aHzzCNlBx5pqm/mflt+4/Hhu7Hekyn p0MIC/1tl2AVIPkUMcBtxx1lkckBH4NVlQQkVj9n60AVnIGMwyahv+y2c2/tIt6j 4taH4te6etlErJpAELZlSZ7Qep2cklng9+75ajc4aNxijeGjk5eAbeB7BW1Lp69t rzwatZ9x+GdY4lkZkPPUew5XiXPw3x8E -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:04 2025 by rpki-client