This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: MXa2yMHnt5PSirxZWuuaFLmLOlz95snBf3oLhaNFyDQ= Subject key identifier: 0E:E4:9C:05:2B:78:C8:DD:86:28:06:21:BB:60:DD:35:88:37:98:EE Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 01B3 Signing time: Fri 05 Dec 2025 01:23:53 +0000 Manifest this update: Fri 05 Dec 2025 01:23:53 +0000 Manifest next update: Fri 12 Dec 2025 01:23:52 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: eRHqTKNyKmCtu3vm4HbKnBLezHBbY+RLwEbw5IwZDkM=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: Ko2wZOucS0J/Gzb2C9yks7gKzQf0Lz0Srb4aABcYNMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: Dec 5 01:23:53 2025 GMT Not After : Dec 12 01:23:52 2025 GMT Subject: CN=69323429-aacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:07:d4:03:a6:49:95:85:e8:69:bd:6e:f0:4b: 87:42:82:73:42:6a:4c:64:83:5a:38:68:30:0d:2a: a7:6b:c9:6d:39:e5:7e:dc:0e:50:d8:33:ad:71:b0: 3e:f5:d0:5a:d4:15:ae:2c:62:ef:46:64:62:d8:04: bd:8a:36:ff:a3:a3:ff:4c:b7:6c:b1:63:27:3a:13: 65:2a:fb:e7:e1:e5:1f:9b:fa:db:73:4e:98:33:16: fe:60:1b:89:90:76:a3:0a:90:b5:e0:ae:c3:57:a3: 46:f6:85:73:2b:fa:4c:c0:96:9e:68:5b:f3:95:fd: 64:76:83:a0:da:d5:a5:ab:64:c0:f7:94:91:24:50: 2b:6c:41:27:ae:cc:21:f3:e0:5b:76:dd:1a:3b:24: e7:66:5d:12:5b:db:a4:ad:3e:fb:0d:73:0b:60:df: 28:34:3b:84:a3:07:e0:23:a0:b5:e2:bb:9e:b0:f3: 2d:02:16:94:07:2d:a2:51:c4:0e:a0:23:27:02:59: d2:65:94:e8:13:11:fd:37:dd:62:eb:27:46:e3:b0: e1:a5:2d:4e:b3:86:76:df:17:66:3a:f1:f8:c9:f7: 0d:b2:c1:82:5d:bf:c2:51:e8:e9:a8:53:ab:8b:01: 8b:0f:de:ad:2d:e9:60:d2:e9:87:e7:8a:15:f1:af: 8a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E4:9C:05:2B:78:C8:DD:86:28:06:21:BB:60:DD:35:88:37:98:EE X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f4:e9:11:1e:ea:ca:03:58:eb:11:a2:7d:6e:99:55:ae:93: 2f:c1:02:4c:49:8f:24:21:f1:4e:45:1d:38:6e:85:1c:05:c5: 1c:3e:ac:05:5e:a7:0b:06:43:23:4d:47:09:79:e2:3b:53:df: e5:47:7a:94:c7:1e:b4:ad:7b:9a:4b:01:50:e1:f9:e6:17:5d: 2a:9c:3a:99:80:65:29:26:c4:44:60:e7:b7:c5:34:34:f3:07: a6:a9:c1:c7:87:d4:6b:53:58:69:3e:2c:cd:9c:da:c2:21:52: 1b:02:cc:bf:30:eb:33:50:69:cd:3f:36:52:13:81:5b:61:33: 5c:90:76:df:c5:55:d0:db:39:e0:7a:ae:ff:9c:b1:a4:96:43: c7:1b:ab:61:2d:1e:a9:75:47:a8:b3:5b:33:24:10:d9:59:dc: 88:8f:90:e7:ed:c8:56:e0:48:27:f9:11:df:dc:63:8e:3b:4c: 0f:ba:25:9c:61:27:aa:7a:b0:3d:5b:79:a0:c5:fe:37:12:a3: ec:d0:bf:5f:21:bc:b2:1f:7d:34:b3:c5:01:9e:c7:33:50:82: 5c:ef:cb:7b:db:55:2a:f4:4c:a5:45:89:ce:df:ed:fe:f7:71: 8c:53:6c:41:b7:f5:b3:43:67:91:78:e2:6c:7a:eb:b2:e8:10: ba:6b:41:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjUxMjA1MDEyMzUzWhcNMjUxMjEyMDEyMzUyWjAYMRYwFAYD VQQDEw02OTMyMzQyOS1hYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAfUA6ZJlYXoab1u8EuHQoJzQmpMZINaOGgwDSqna8ltOeV+3A5Q2DOtcbA+ 9dBa1BWuLGLvRmRi2AS9ijb/o6P/TLdssWMnOhNlKvvn4eUfm/rbc06YMxb+YBuJ kHajCpC14K7DV6NG9oVzK/pMwJaeaFvzlf1kdoOg2tWlq2TA95SRJFArbEEnrswh 8+Bbdt0aOyTnZl0SW9ukrT77DXMLYN8oNDuEowfgI6C14ruesPMtAhaUBy2iUcQO oCMnAlnSZZToExH9N91i6ydG47DhpS1Os4Z23xdmOvH4yfcNssGCXb/CUejpqFOr iwGLD96tLelg0umH54oV8a+KxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7knAUr eMjdhigGIbtg3TWIN5juMB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg9OkRHurKA1jrEaJ9bplVrpMvwQJMSY8kIfFORR04boUcBcUcPqwF XqcLBkMjTUcJeeI7U9/lR3qUxx60rXuaSwFQ4fnmF10qnDqZgGUpJsREYOe3xTQ0 8wemqcHHh9RrU1hpPizNnNrCIVIbAsy/MOszUGnNPzZSE4FbYTNckHbfxVXQ2zng eq7/nLGklkPHG6thLR6pdUeos1szJBDZWdyIj5Dn7chW4Egn+RHf3GOOO0wPuiWc YSeqerA9W3mgxf43EqPs0L9fIbyyH300s8UBnsczUIJc78t721Uq9EylRYnO3+3+ 93GMU2xBt/WzQ2eReOJseuuy6BC6a0FC -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:38 2025 by rpki-client