This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: GV9APXwhk/aLmzcw9HtA/hFErqnBwDHAAm1Wcvw3dGs= Subject key identifier: 1F:FB:6A:20:04:8D:C5:67:F8:01:04:DE:8C:A2:07:6A:A6:C6:06:75 Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 02DD Signing time: Sun 21 Dec 2025 00:34:01 +0000 Manifest this update: Sun 21 Dec 2025 00:34:00 +0000 Manifest next update: Sun 28 Dec 2025 00:34:00 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: a6u8xaO0e7II3mff0vee3mWHpZztusqaUPdK5M0iD2M=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: ipAHoMEeSi68f+rJDCwmxc6LIwQCY1InwnKCCeoYyk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: Dec 21 00:34:00 2025 GMT Not After : Dec 28 00:34:00 2025 GMT Subject: CN=69474079-990c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c9:06:21:58:1d:cf:4e:d6:82:ab:e3:10:d7: 2d:26:64:90:05:40:81:78:ed:11:76:4c:47:a2:44: 59:40:d1:3e:02:6e:6d:49:47:af:17:f4:3a:66:47: 4c:70:da:5b:e7:8e:66:65:c0:8e:27:08:5b:0c:1a: 3e:17:c7:4a:15:f0:bb:e0:5d:73:8f:84:ea:d8:d1: a1:a0:3a:af:7d:73:a0:93:ab:58:29:51:58:e1:37: 82:bb:bd:5d:30:aa:cf:f8:85:d2:72:58:e3:c3:5b: e0:29:3a:ec:8e:dd:6d:ef:df:5a:e0:9f:9a:1a:5a: 48:7f:44:aa:31:cd:c2:3e:c4:7d:f7:e1:b3:09:59: 84:f9:59:d3:f2:6a:96:87:46:47:c5:4b:1e:7a:a1: c3:57:fe:cc:21:98:c2:1d:c5:78:0f:01:7d:77:cf: 2f:04:98:5f:5d:15:24:12:41:bf:e5:9b:58:21:69: a6:d4:bc:dc:19:ed:22:3c:82:96:91:62:a9:dd:fd: d2:96:7c:bb:51:0e:24:c3:2d:74:cc:36:40:8f:4d: f5:b0:2b:a3:3c:b3:4c:5d:9c:4b:c9:73:02:da:5e: c8:bc:07:6c:05:46:09:c5:74:57:08:a8:1e:96:dc: d0:b9:60:78:57:36:50:fb:14:f9:53:c8:ec:c7:18: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FB:6A:20:04:8D:C5:67:F8:01:04:DE:8C:A2:07:6A:A6:C6:06:75 X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d4:11:75:1b:6a:d0:af:56:d0:82:4a:4b:4a:78:b1:07:51: af:f6:1a:1b:76:d7:94:ca:b2:ca:d6:87:74:d9:38:97:c0:82: 9b:4d:47:de:a7:28:67:a6:fd:c4:1e:54:3e:62:2d:27:5c:38: 85:7a:da:05:53:1e:ba:30:69:ba:32:86:28:f5:a5:96:6f:ee: d3:60:ea:cf:84:29:33:32:ce:96:5e:75:5f:19:30:3a:d0:22: 5d:a9:05:ba:3e:1d:9e:76:30:96:cf:b0:83:ad:97:cc:33:e9: 54:8e:ca:6d:84:43:b7:93:24:4f:15:01:48:01:a4:68:46:65: 10:39:1b:eb:16:91:ea:0f:85:18:2b:50:4a:90:5d:20:d7:4e: 9a:a6:ab:ed:1b:99:9a:d1:e7:c5:e9:bf:42:a3:17:cc:74:0e: cb:04:9c:39:b5:69:0b:bc:fa:2f:69:c3:ff:32:a7:61:a7:b6: 81:38:0b:e7:ba:db:b2:80:34:9e:b2:24:0d:d5:e9:14:17:d9: c7:4f:fc:55:eb:cc:42:08:d4:be:ba:6a:60:d9:09:f2:5e:2f: 30:42:1a:ee:53:dc:ac:67:33:15:a1:80:1a:78:de:18:2f:03: 4b:25:96:c1:22:4e:e8:f9:9b:27:ee:54:2f:cc:58:e2:e6:36: d3:e6:cb:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjUxMjIxMDAzNDAwWhcNMjUxMjI4MDAzNDAwWjAYMRYwFAYD VQQDDA02OTQ3NDA3OS05OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMkGIVgdz07WgqvjENctJmSQBUCBeO0RdkxHokRZQNE+Am5tSUevF/Q6ZkdM cNpb545mZcCOJwhbDBo+F8dKFfC74F1zj4Tq2NGhoDqvfXOgk6tYKVFY4TeCu71d MKrP+IXScljjw1vgKTrsjt1t799a4J+aGlpIf0SqMc3CPsR99+GzCVmE+VnT8mqW h0ZHxUseeqHDV/7MIZjCHcV4DwF9d88vBJhfXRUkEkG/5ZtYIWmm1LzcGe0iPIKW kWKp3f3Slny7UQ4kwy10zDZAj031sCujPLNMXZxLyXMC2l7IvAdsBUYJxXRXCKge ltzQuWB4VzZQ+xT5U8jsxxhSxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/7aiAE jcVn+AEE3oyiB2qmxgZ1MB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD1BF1G2rQr1bQgkpLSnixB1Gv9hobdteUyrLK1od02TiXwIKbTUfe pyhnpv3EHlQ+Yi0nXDiFetoFUx66MGm6MoYo9aWWb+7TYOrPhCkzMs6WXnVfGTA6 0CJdqQW6Ph2edjCWz7CDrZfMM+lUjspthEO3kyRPFQFIAaRoRmUQORvrFpHqD4UY K1BKkF0g106apqvtG5ma0efF6b9CoxfMdA7LBJw5tWkLvPovacP/Mqdhp7aBOAvn utuygDSesiQN1ekUF9nHT/xV68xCCNS+umpg2QnyXi8wQhruU9ysZzMVoYAaeN4Y LwNLJZbBIk7o+Zsn7lQvzFji5jbT5su2 -----END CERTIFICATE-----Generated at Sun Dec 21 01:48:32 2025 by rpki-client