This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: YzACy5sOwru9PPEeeJx5k56cN17iPni/t0EVxR65jGs= Subject key identifier: 5D:C2:4F:E4:1B:F9:15:44:77:D0:2D:B4:EF:A6:5C:E0:3F:CA:05:D1 Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 050F Signing time: Thu 04 Dec 2025 22:11:04 +0000 Manifest this update: Thu 04 Dec 2025 22:11:03 +0000 Manifest next update: Thu 11 Dec 2025 22:11:03 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: bo5MyzCD9B65dGLz3Ds8sXoJKs97CfOdBvHmmilHr8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: Dec 4 22:11:03 2025 GMT Not After : Dec 11 22:11:03 2025 GMT Subject: CN=693206f7-1a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:fb:ee:14:3e:c6:80:32:78:92:dd:79:d1: e1:0d:78:77:74:1e:5e:2e:31:78:9b:5d:a4:81:dd: 94:62:1e:a6:2d:a9:fb:db:12:54:b9:cd:d4:ec:6b: 01:1f:b8:76:13:de:25:94:29:b5:b8:59:88:a8:f3: 48:a6:9e:df:e9:de:7f:45:29:44:d6:58:57:f4:c6: 92:06:6d:4c:f8:40:80:7f:93:d6:46:e1:f8:b8:6a: ee:11:02:95:6e:66:9f:3b:85:d9:d5:f1:f4:1c:a7: be:ca:ea:49:19:64:bd:a9:99:fb:0d:1f:b6:a6:4f: fc:6b:d8:2d:8c:53:1b:8d:d2:a2:d3:92:cc:cd:95: fa:4c:4e:ac:b4:a6:28:66:c9:61:69:d1:bd:96:64: 48:20:cc:c3:63:88:2b:f8:52:4a:3b:28:0c:19:b3: cb:ce:a8:6d:41:22:ff:90:21:6a:6e:a0:bc:48:12: bb:d2:a9:9b:10:a9:ae:d5:51:cf:52:0b:95:d5:38: 2f:7d:85:3e:1f:63:21:3c:e0:08:52:54:a5:b3:f8: 9a:db:ce:6e:51:84:d1:8e:1d:64:ce:a3:94:75:8c: 0c:f2:73:10:a9:87:a1:98:33:87:52:e8:f2:29:72: 37:24:e1:96:de:fd:91:46:e8:52:3c:f9:56:04:ab: e8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C2:4F:E4:1B:F9:15:44:77:D0:2D:B4:EF:A6:5C:E0:3F:CA:05:D1 X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e6:2b:66:e7:e8:be:5d:84:16:b4:89:07:d9:7a:75:ed:d6: 16:a0:04:63:30:15:5c:ed:75:c8:f4:48:23:60:aa:64:87:7f: c0:14:88:94:f7:f6:a1:eb:f9:d8:0f:e7:a3:fa:aa:e7:d0:77: 27:8d:7e:be:17:a7:d6:c0:6b:f1:4d:1f:7c:83:80:dd:fc:df: 2b:c9:18:fc:8d:83:e9:09:0f:c1:46:cd:1f:3a:1e:86:e7:98: ac:e8:12:1c:4a:02:1d:02:17:91:76:37:82:e2:19:3d:e8:ec: 2c:88:a8:8d:45:37:d9:e7:2d:df:cb:aa:00:68:b0:9d:a2:d0: 32:d1:14:c6:df:3b:a6:f0:5f:63:fd:97:1c:c4:65:b3:e8:c1: cd:a8:8d:2f:89:95:e3:be:be:92:d7:e2:db:43:18:ba:ff:8b: 49:c8:48:7e:7b:56:48:9b:39:77:cc:97:0f:92:ab:64:de:c0: c2:f7:80:bb:d8:14:92:f2:43:8c:55:a9:ca:f8:90:7f:f3:9f: 72:e4:df:f5:5b:e7:2f:1b:b0:a3:f6:a8:d3:32:eb:76:22:31: f4:dd:81:82:32:f1:85:e2:73:ce:89:0e:2a:12:43:6a:52:b7: 26:d2:0d:34:c1:8c:17:4e:4c:57:49:ea:84:9e:24:f2:14:70: f8:8d:62:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjUxMjA0MjIxMTAzWhcNMjUxMjExMjIxMTAzWjAYMRYwFAYD VQQDEw02OTMyMDZmNy0xYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztn77hQ+xoAyeJLdedHhDXh3dB5eLjF4m12kgd2UYh6mLan72xJUuc3U7GsB H7h2E94llCm1uFmIqPNIpp7f6d5/RSlE1lhX9MaSBm1M+ECAf5PWRuH4uGruEQKV bmafO4XZ1fH0HKe+yupJGWS9qZn7DR+2pk/8a9gtjFMbjdKi05LMzZX6TE6stKYo ZslhadG9lmRIIMzDY4gr+FJKOygMGbPLzqhtQSL/kCFqbqC8SBK70qmbEKmu1VHP UguV1TgvfYU+H2MhPOAIUlSls/ia285uUYTRjh1kzqOUdYwM8nMQqYehmDOHUujy KXI3JOGW3v2RRuhSPPlWBKvo/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3CT+Qb +RVEd9AttO+mXOA/ygXRMB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd5itm5+i+XYQWtIkH2Xp17dYWoARjMBVc7XXI9EgjYKpkh3/AFIiU 9/ah6/nYD+ej+qrn0HcnjX6+F6fWwGvxTR98g4Dd/N8ryRj8jYPpCQ/BRs0fOh6G 55is6BIcSgIdAheRdjeC4hk96OwsiKiNRTfZ5y3fy6oAaLCdotAy0RTG3zum8F9j /ZccxGWz6MHNqI0viZXjvr6S1+LbQxi6/4tJyEh+e1ZImzl3zJcPkqtk3sDC94C7 2BSS8kOMVanK+JB/859y5N/1W+cvG7Cj9qjTMut2IjH03YGCMvGF4nPOiQ4qEkNq Urcm0g00wYwXTkxXSeqEniTyFHD4jWIB -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:47 2025 by rpki-client