This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json) Hash identifier: yBXwB/NAm+iwX3JJzuIWN6ycwb1/YYRidGeUMDWlv6g= Subject key identifier: FC:53:06:15:9B:9D:21:3F:F4:BF:75:9A:CD:6B:D9:B1:3C:DD:8A:BD Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft Manifest number: 63 Signing time: Fri 05 Dec 2025 04:55:02 +0000 Manifest this update: Fri 05 Dec 2025 04:55:01 +0000 Manifest next update: Fri 12 Dec 2025 04:55:01 +0000 Files and hashes: 1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: RQf6qkoEE8Poj9zrdpVBQAYAqg6/EqEOJDLnpyjwevw=) 2: C053613E38B311F08DB63209C4F9AE02.roa (hash: uKfaLXcOCNJdE2XGkLLuO2/nisMUjVXsuFOacDhWkTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Validity Not Before: Dec 5 04:55:01 2025 GMT Not After : Dec 12 04:55:01 2025 GMT Subject: CN=693265a6-4b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:21:7e:af:b4:c4:a1:17:44:24:dd:ec:f7: 07:cf:3e:28:26:23:e2:9f:41:26:c2:ae:6a:88:2c: a2:72:50:6c:98:c6:14:b7:c9:52:86:b0:85:83:aa: e4:5d:08:38:2f:0e:ff:b1:6b:19:8b:28:00:d3:9a: cf:b8:cf:9f:4a:a4:c2:6f:3c:ee:57:e6:83:48:f1: 06:cb:e5:48:0d:55:7e:e6:10:5b:50:2e:01:35:bc: c4:a6:e0:93:b8:8e:87:25:0c:7a:09:cc:bd:0a:29: 00:05:1f:17:9d:9c:c8:54:11:0f:33:b4:66:a6:af: 85:96:ef:b1:8f:b1:f7:5a:a0:21:b7:ce:c2:bc:29: 68:b1:67:d0:e0:66:4d:30:ba:e8:ba:1b:75:e7:31: cd:97:23:a7:d8:ba:78:b4:cf:c2:4d:bc:56:e8:58: 1f:99:bc:b2:71:72:ee:11:60:f1:0b:b8:b5:a9:51: 75:29:97:e6:69:18:2c:78:8f:47:26:4c:a4:d6:f9: c3:ea:a7:e5:fd:9a:d9:ba:8a:89:20:b9:48:d8:08: 86:9e:48:aa:15:30:50:f2:5e:75:ac:97:04:6b:af: 5f:53:df:c0:06:7b:4c:7a:78:86:ce:43:16:59:49: 0f:13:90:52:0a:39:1c:1d:22:9e:52:46:ba:65:65: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:53:06:15:9B:9D:21:3F:F4:BF:75:9A:CD:6B:D9:B1:3C:DD:8A:BD X509v3 Authority Key Identifier: keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2d:47:0d:ab:61:c9:ed:0d:27:92:68:39:3c:9c:92:6f:2f: 0c:eb:46:1b:bf:13:69:ab:11:f6:b9:dd:3f:d9:81:07:3a:2e: ec:65:22:e2:9b:20:e4:47:06:89:77:f0:e1:b7:d3:8a:36:a3: 83:fe:fe:c5:1d:0d:71:cb:67:02:90:12:b2:48:5a:a6:db:ba: 67:53:24:42:2a:71:39:90:cf:de:ba:6d:33:97:03:bd:41:fc: bc:eb:74:19:01:88:16:3d:a7:55:fc:61:61:26:bb:91:cf:02: 90:71:59:bb:c4:4b:a7:b5:1a:92:b5:65:25:45:04:52:09:42: d8:b1:33:50:aa:a0:1a:aa:d7:c7:d2:62:33:1b:e6:2b:ce:e6: d4:8d:75:df:ac:e8:5d:16:19:f8:cb:1b:a3:33:f1:ce:47:81: 20:fb:0e:d9:61:f7:c4:ea:de:24:93:8a:e4:59:a4:d2:4a:43: eb:61:2c:27:ff:20:4e:1c:24:0a:30:03:ec:82:ff:94:17:b7: 43:e7:fc:1f:9f:be:4d:43:65:82:07:cb:8b:5d:8d:72:d7:a0: 57:93:17:f8:76:42:4e:6f:8c:4a:b3:c2:51:22:ef:cd:76:66: c4:3a:05:95:19:3f:5a:71:c4:eb:97:56:67:ad:ce:d2:f7:41: fb:2d:28:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoNUVDNUZCMzM0RUU1MkI5MDA5Q0I5MjNDNjkzQkQyMEYw NDc4QTE0NDAeFw0yNTEyMDUwNDU1MDFaFw0yNTEyMTIwNDU1MDFaMBgxFjAUBgNV BAMTDTY5MzI2NWE2LTRiNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUNSF+r7TEoRdEJN3s9wfPPigmI+KfQSbCrmqILKJyUGyYxhS3yVKGsIWDquRd CDgvDv+xaxmLKADTms+4z59KpMJvPO5X5oNI8QbL5UgNVX7mEFtQLgE1vMSm4JO4 joclDHoJzL0KKQAFHxednMhUEQ8ztGamr4WW77GPsfdaoCG3zsK8KWixZ9DgZk0w uui6G3XnMc2XI6fYuni0z8JNvFboWB+ZvLJxcu4RYPELuLWpUXUpl+ZpGCx4j0cm TKTW+cPqp+X9mtm6iokguUjYCIaeSKoVMFDyXnWslwRrr19T38AGe0x6eIbOQxZZ SQ8TkFIKORwdIp5SRrplZdAfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/FMGFZud IT/0v3WazWvZsTzdir0wHwYDVR0jBBgwFoAUXsX7M07lK5AJy5I8aTvSDwR4oUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzM0MDA4MDIyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVBSnk1SThhVHZTRHdSNG9V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHNYN00wN2xLNUFKeTVJOGFUdlNEd1I0b1VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzM0MDA4MDIyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVB Snk1SThhVHZTRHdSNG9VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIgtRw2rYcntDSeSaDk8nJJvLwzrRhu/E2mrEfa53T/ZgQc6LuxlIuKb IORHBol38OG304o2o4P+/sUdDXHLZwKQErJIWqbbumdTJEIqcTmQz966bTOXA71B /LzrdBkBiBY9p1X8YWEmu5HPApBxWbvES6e1GpK1ZSVFBFIJQtixM1CqoBqq18fS YjMb5ivO5tSNdd+s6F0WGfjLG6Mz8c5HgSD7Dtlh98Tq3iSTiuRZpNJKQ+thLCf/ IE4cJAowA+yC/5QXt0Pn/B+fvk1DZYIHy4tdjXLXoFeTF/h2Qk5vjEqzwlEi7812 ZsQ6BZUZP1pxxOuXVmetztL3QfstKGA= -----END CERTIFICATE-----Generated at Sat Dec 6 17:43:12 2025 by rpki-client