This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: Y3UV9l6ouu4JDkUtXDNbhK3X5BHCqVKkpPHQ7BgrJps= Subject key identifier: 41:E7:1C:02:C7:E5:39:2A:55:88:66:30:BD:6C:AB:7A:EA:9F:58:94 Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 0249 Signing time: Fri 05 Dec 2025 00:07:28 +0000 Manifest this update: Fri 05 Dec 2025 00:07:27 +0000 Manifest next update: Fri 12 Dec 2025 00:07:27 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: R05hMy1VuPlxxqHZqtnmNw2ZUe3YGRZNMJo+8YH3qJw=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: /pTedztaSiCOyPS1HOnaWKUVCcU322igmimIyTxJJbg=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: HWKUOlRf26vXVLrvzxoCBARsK7RmPl1k0ABbjAs3vlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Dec 5 00:07:27 2025 GMT Not After : Dec 12 00:07:27 2025 GMT Subject: CN=69322240-d5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b0:e0:67:f7:3b:9d:5b:bb:cb:e8:5f:9a:19: fe:bf:55:9f:46:e0:35:97:35:5c:2d:db:7e:0a:60: b6:3e:16:4b:37:e9:cb:1f:69:a2:65:55:80:19:41: e2:6d:bb:ea:b2:35:a5:87:e5:8a:57:bc:d4:ee:b2: 3e:01:bf:07:5c:a5:54:d5:13:de:74:66:0a:50:8b: 4f:9f:ca:2c:26:8f:7c:8c:23:07:90:66:80:54:b5: cb:59:4c:00:d2:77:10:6d:ec:bc:c4:38:24:60:b7: 3f:46:da:81:b4:a2:dc:f1:0c:5b:15:f8:dc:d1:fd: 20:9c:6e:a3:c6:73:cf:2d:b9:71:e0:2c:fa:7e:43: f5:5a:cd:f7:58:57:9b:ba:cb:87:5c:c1:38:85:5d: 03:2c:bc:39:49:be:4c:fe:13:3d:47:6b:69:49:be: 53:ae:8e:89:ac:ea:cd:6d:50:b5:e7:b1:c6:6b:9c: 99:63:e3:2d:7e:59:33:a5:f8:fd:1d:3b:44:a2:92: c2:e5:27:d0:0d:88:51:f3:61:c8:ec:7a:7e:f5:19: 65:6d:40:62:e0:f3:5b:34:6b:94:76:d3:e5:90:35: 5f:0c:6e:40:a7:e7:26:98:80:d1:d5:ef:8f:14:a1: 15:f7:94:a7:9c:19:28:75:06:dd:c6:54:29:9c:bb: ee:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E7:1C:02:C7:E5:39:2A:55:88:66:30:BD:6C:AB:7A:EA:9F:58:94 X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:76:cf:19:aa:49:88:09:f8:09:d8:04:33:7c:73:c1:43:8a: 59:1c:e4:24:67:f3:54:e2:f1:c3:75:0d:18:ec:8e:f6:f4:db: d5:d0:55:02:33:f0:75:b8:5e:da:83:3e:67:4d:8f:a8:63:48: 12:b2:86:22:24:38:c0:28:28:69:bb:9b:b3:46:68:61:65:08: 80:8e:da:72:81:0a:d7:6c:8a:8a:6c:d6:1e:9f:e7:e2:c9:26: 37:c3:b3:41:cd:32:15:79:80:97:18:05:36:64:70:8b:e4:00: d4:1c:a5:7f:d1:09:03:57:17:fd:54:b1:b0:3a:26:ea:e2:e3: 8f:21:12:d8:e2:28:2a:fa:15:e6:0b:35:50:fd:c8:f5:2f:92: 7b:3a:12:0d:04:4e:3f:b1:ed:2b:76:19:c1:2d:00:b0:e4:10: 68:b7:50:b5:f0:05:ff:ad:b7:c7:f4:55:5f:7a:8e:eb:03:9a: 4a:ca:2c:23:10:04:cb:05:42:dd:06:72:08:00:0b:e1:5c:01: 6a:da:4f:7b:46:6d:cc:a3:db:d1:0b:02:f8:00:0f:23:2a:21: bb:03:b8:da:6f:96:e2:b1:ff:68:49:1e:7c:cf:44:94:71:9b: 39:a9:c3:ab:c1:c8:53:a7:a9:14:a4:9c:51:c5:c7:f8:32:e6: 55:66:e2:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjUxMjA1MDAwNzI3WhcNMjUxMjEyMDAwNzI3WjAYMRYwFAYD VQQDEw02OTMyMjI0MC1kNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9LDgZ/c7nVu7y+hfmhn+v1WfRuA1lzVcLdt+CmC2PhZLN+nLH2miZVWAGUHi bbvqsjWlh+WKV7zU7rI+Ab8HXKVU1RPedGYKUItPn8osJo98jCMHkGaAVLXLWUwA 0ncQbey8xDgkYLc/RtqBtKLc8QxbFfjc0f0gnG6jxnPPLblx4Cz6fkP1Ws33WFeb usuHXME4hV0DLLw5Sb5M/hM9R2tpSb5Tro6JrOrNbVC157HGa5yZY+Mtflkzpfj9 HTtEopLC5SfQDYhR82HI7Hp+9RllbUBi4PNbNGuUdtPlkDVfDG5Ap+cmmIDR1e+P FKEV95SnnBkodQbdxlQpnLvuOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHnHALH 5TkqVYhmML1sq3rqn1iUMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbds8ZqkmICfgJ2AQzfHPBQ4pZHOQkZ/NU4vHDdQ0Y7I729NvV0FUC M/B1uF7agz5nTY+oY0gSsoYiJDjAKChpu5uzRmhhZQiAjtpygQrXbIqKbNYen+fi ySY3w7NBzTIVeYCXGAU2ZHCL5ADUHKV/0QkDVxf9VLGwOibq4uOPIRLY4igq+hXm CzVQ/cj1L5J7OhINBE4/se0rdhnBLQCw5BBot1C18AX/rbfH9FVfeo7rA5pKyiwj EATLBULdBnIIAAvhXAFq2k97Rm3Mo9vRCwL4AA8jKiG7A7jab5bisf9oSR58z0SU cZs5qcOrwchTp6kUpJxRxcf4MuZVZuLB -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:13 2025 by rpki-client