This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json) Hash identifier: TV+oPRHVIyYuDoiD+C7+Nk5dimYygaBG41s8h+lp5oM= Subject key identifier: 4A:D0:B6:54:70:1C:4A:73:FD:4E:A8:F4:A0:24:F6:92:39:17:38:2B Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Certificate serial: 07A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft Manifest number: 0779 Signing time: Thu 04 Dec 2025 20:33:53 +0000 Manifest this update: Thu 04 Dec 2025 20:33:52 +0000 Manifest next update: Thu 11 Dec 2025 20:33:52 +0000 Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: GDqo99qRRXAEt4I38vRa0fz0SuGhjv5ciuv0v3jAHjk=) 2: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: qHbtyOGNfvy85AlmzO8CEnT5fTz9AwvvFi0y6XbFwG0=) 3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: SFXCFjWV3nIjHDr4Y0nX1h+ByORJe0z+8s0nBYc0bds=) 4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: ZsYDlTfdZ4GWQgL9mV+7VPUB+1RhWLSObaxg0y98Kxs=) 5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: aIhdOoGq/5IV6Mhns4F3omRFw08MxMY0t1LOWZhYXz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Validity Not Before: Dec 4 20:33:52 2025 GMT Not After : Dec 11 20:33:52 2025 GMT Subject: CN=6931f031-1db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:e0:40:d7:32:6f:1b:8c:a9:42:13:11:89: 29:2e:5c:dc:30:6a:2f:6e:c7:65:df:ed:29:0e:e9: 2c:1f:2c:3f:e0:56:a0:fa:90:be:02:ca:1c:7f:cf: c1:4b:29:fa:90:04:64:73:f9:79:f5:6a:1e:45:77: 88:40:a4:29:02:6a:ea:98:54:2a:73:1a:bf:43:4c: 74:33:db:e7:5f:b8:64:24:c1:da:30:4a:e7:b9:34: d7:cc:15:2e:34:73:eb:f6:c0:29:78:23:08:23:e6: 43:72:8c:14:1d:09:1c:fb:53:67:9c:50:0c:7c:13: 89:9c:9a:a3:e9:91:26:23:22:23:fe:a4:d0:a5:89: b3:d4:e5:71:a2:65:18:71:b0:11:20:5e:bc:18:f2: bc:80:7b:54:81:7b:04:cb:d8:5c:c0:68:dc:cb:93: a0:5e:ac:cb:7a:72:07:c5:02:af:56:37:64:1c:e5: e4:68:c9:82:19:61:7d:df:e7:51:b6:14:f8:d7:ab: 5f:68:58:71:58:d6:32:0c:0a:80:de:7d:40:e2:97: 7f:ac:7b:83:18:f6:fa:6b:7b:99:2d:c4:4b:7b:b7: c4:39:69:6b:7f:bc:c2:cf:f1:02:cb:01:8a:56:17: 7d:86:c5:ca:70:10:16:7b:2a:d5:1c:9c:99:16:af: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D0:B6:54:70:1C:4A:73:FD:4E:A8:F4:A0:24:F6:92:39:17:38:2B X509v3 Authority Key Identifier: keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:6d:29:39:06:45:5c:68:89:76:03:10:27:84:13:ce:f0:59: f5:0b:0b:0f:ab:91:eb:5e:a4:83:cf:9a:6f:31:46:1f:ba:c0: 66:09:e8:23:27:a6:9d:10:f4:fe:80:49:60:0f:86:82:4f:3a: 7f:85:e4:ae:47:5b:7a:b2:cf:dc:48:0b:4b:6c:ef:96:46:df: 7b:2a:9c:46:39:ed:2e:7e:8b:59:03:22:70:b4:6f:5a:08:9c: d0:1e:36:37:45:55:13:3c:f5:aa:c7:43:d1:24:7a:8a:e3:93: cd:9a:1c:a6:de:24:2e:c4:9f:b9:7d:ce:9b:04:aa:c0:28:ff: a9:c9:10:17:bb:ac:bc:5e:f4:3e:a6:cd:39:2f:73:c4:cd:82: b5:74:d7:97:d9:39:23:bd:50:43:81:2a:43:30:31:71:5d:e1: b5:7a:f2:4c:b2:77:ae:58:c6:5c:67:f1:d0:c7:8c:3d:32:3e: d2:59:da:7b:3e:ab:d7:2b:6a:36:74:ad:b8:47:03:4b:91:a6: df:eb:18:58:f4:35:b6:6c:4a:19:91:30:3a:8a:90:cf:12:c9: 91:90:1d:de:c3:c6:40:ba:ee:d8:4c:96:d4:cf:ae:1c:d1:21: 83:11:96:b7:1d:bb:48:98:35:c2:ba:e4:7b:bb:92:59:6b:cc: cb:a9:65:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy NEVDMjRFOTIwHhcNMjUxMjA0MjAzMzUyWhcNMjUxMjExMjAzMzUyWjAYMRYwFAYD VQQDEw02OTMxZjAzMS0xZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KHgQNcybxuMqUITEYkpLlzcMGovbsdl3+0pDuksHyw/4Fag+pC+Asocf8/B Syn6kARkc/l59WoeRXeIQKQpAmrqmFQqcxq/Q0x0M9vnX7hkJMHaMErnuTTXzBUu NHPr9sApeCMII+ZDcowUHQkc+1NnnFAMfBOJnJqj6ZEmIyIj/qTQpYmz1OVxomUY cbARIF68GPK8gHtUgXsEy9hcwGjcy5OgXqzLenIHxQKvVjdkHOXkaMmCGWF93+dR thT416tfaFhxWNYyDAqA3n1A4pd/rHuDGPb6a3uZLcRLe7fEOWlrf7zCz/ECywGK Vhd9hsXKcBAWeyrVHJyZFq89jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErQtlRw HEpz/U6o9KAk9pI5FzgrMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m WVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0bSk5BkVcaIl2AxAnhBPO8Fn1CwsPq5HrXqSDz5pvMUYfusBmCegj J6adEPT+gElgD4aCTzp/heSuR1t6ss/cSAtLbO+WRt97KpxGOe0ufotZAyJwtG9a CJzQHjY3RVUTPPWqx0PRJHqK45PNmhym3iQuxJ+5fc6bBKrAKP+pyRAXu6y8XvQ+ ps05L3PEzYK1dNeX2TkjvVBDgSpDMDFxXeG1evJMsneuWMZcZ/HQx4w9Mj7SWdp7 PqvXK2o2dK24RwNLkabf6xhY9DW2bEoZkTA6ipDPEsmRkB3ew8ZAuu7YTJbUz64c 0SGDEZa3HbtImDXCuuR7u5JZa8zLqWWf -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:35 2025 by rpki-client