This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: G4HNL65DOigXnIQUbMw5rHexdM4hRbUdlRg2eQqTdhs= Subject key identifier: EB:40:37:A9:C8:FE:90:B9:CB:57:E4:96:F7:5D:98:2B:27:67:42:EF Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0CB5 Signing time: Thu 04 Dec 2025 17:53:06 +0000 Manifest this update: Thu 04 Dec 2025 17:53:06 +0000 Manifest next update: Thu 11 Dec 2025 17:53:06 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: uk88SL+5TUOX66p2gASb5JaVnS0+VkVmGIacDf9HSiQ=) 2: F0202A84B36311F082F02072C4F9AE02.roa (hash: BPqEGs/kp4/YORti6uUMV8XFvZq0a3v1h7gImxJAxZo=) 3: C13356C0921511F089DDCF39C4F9AE02.roa (hash: GIRtzwnKS+hvb6bEPI5Irt7NyfjR/9n068VTfKa3GPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Dec 4 17:53:06 2025 GMT Not After : Dec 11 17:53:06 2025 GMT Subject: CN=6931ca82-7501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:ac:a8:86:07:50:b5:29:30:eb:f2:f4:ed: 27:26:90:1a:d0:0b:76:9d:0e:3a:14:e1:35:2d:df: bd:b4:0b:75:c9:55:84:b4:8e:6c:c1:27:26:1f:50: 11:ac:07:e6:79:a3:97:d3:dc:80:85:97:71:e4:b3: f1:0a:e8:e7:1c:04:8d:ba:ff:3e:5c:07:ca:d4:70: d0:71:e0:ad:52:f1:34:29:aa:7c:91:c9:1f:44:20: 33:65:a0:d7:38:f2:f4:f4:23:dc:2a:6a:29:d9:f9: 76:76:34:ae:f5:48:eb:09:83:81:b1:34:52:19:df: 3b:52:2a:5e:cf:90:82:46:ff:17:11:fc:9a:61:96: 73:16:d4:03:22:c9:a3:9e:95:e3:e4:3c:e1:b3:79: 44:2f:35:f7:2c:1c:f6:41:69:bb:3c:82:5f:13:92: 8d:ac:a0:2f:61:31:af:2d:e0:49:93:7e:ab:61:d8: 2c:c8:87:10:70:b6:a2:2f:50:5c:d8:b4:18:e1:55: c9:50:e7:d2:e9:a8:2e:ae:2f:8a:30:a0:07:61:d5: 78:55:96:d4:2e:c9:64:9d:a1:8d:30:3a:22:34:0f: 04:1f:53:ae:9a:2d:e6:b7:6a:59:07:b3:2f:2f:34: e5:18:92:1d:b7:db:bd:5a:90:f7:e5:f4:83:1b:b2: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:40:37:A9:C8:FE:90:B9:CB:57:E4:96:F7:5D:98:2B:27:67:42:EF X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:af:93:07:31:67:76:0a:e4:3a:b4:c2:bd:a6:b8:55:80:72: aa:c4:63:aa:42:70:7f:b7:db:01:46:eb:01:16:5b:7c:46:24: c0:61:32:32:35:49:2d:09:2b:67:94:87:a8:28:54:1e:5b:e3: c7:e6:f8:8a:5e:1a:97:51:f1:d6:df:92:4f:75:38:5d:1a:ac: c1:dd:ed:e4:d9:df:eb:93:ef:21:7c:e3:38:9a:2e:22:3c:46: 4c:d9:3a:1f:b1:7c:e2:14:75:2a:cb:f0:db:1c:21:8a:e1:d8: 37:38:3e:62:01:8d:74:17:d7:47:bd:b5:cd:7a:68:de:84:be: 9b:af:26:9c:2c:53:55:40:82:da:56:40:69:57:01:5c:40:fe: ef:65:96:ba:0b:8b:7d:c3:39:c4:25:0f:12:31:15:dc:60:32: 18:37:8d:9b:a5:d8:cf:09:b9:fc:82:4e:86:eb:d3:d5:db:0e: 37:ed:ce:47:24:a7:96:ff:9a:02:62:35:e1:4d:33:b9:07:ee: 92:29:dc:ce:83:75:70:af:b4:7d:99:49:ff:99:79:5d:1a:d1: b4:21:fe:44:ce:66:96:9d:52:37:30:b1:28:ee:8e:6d:b9:a8: 44:7d:eb:5d:53:12:54:9b:04:f8:cf:44:5b:43:65:19:26:c0: 90:06:f3:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUxMjA0MTc1MzA2WhcNMjUxMjExMTc1MzA2WjAYMRYwFAYD VQQDEw02OTMxY2E4Mi03NTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweqsqIYHULUpMOvy9O0nJpAa0At2nQ46FOE1Ld+9tAt1yVWEtI5swScmH1AR rAfmeaOX09yAhZdx5LPxCujnHASNuv8+XAfK1HDQceCtUvE0Kap8kckfRCAzZaDX OPL09CPcKmop2fl2djSu9UjrCYOBsTRSGd87Uipez5CCRv8XEfyaYZZzFtQDIsmj npXj5Dzhs3lELzX3LBz2QWm7PIJfE5KNrKAvYTGvLeBJk36rYdgsyIcQcLaiL1Bc 2LQY4VXJUOfS6aguri+KMKAHYdV4VZbULslknaGNMDoiNA8EH1Oumi3mt2pZB7Mv LzTlGJIdt9u9WpD35fSDG7IqewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtAN6nI /pC5y1fklvddmCsnZ0LvMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARr5MHMWd2CuQ6tMK9prhVgHKqxGOqQnB/t9sBRusBFlt8RiTAYTIy NUktCStnlIeoKFQeW+PH5viKXhqXUfHW35JPdThdGqzB3e3k2d/rk+8hfOM4mi4i PEZM2TofsXziFHUqy/DbHCGK4dg3OD5iAY10F9dHvbXNemjehL6bryacLFNVQILa VkBpVwFcQP7vZZa6C4t9wznEJQ8SMRXcYDIYN42bpdjPCbn8gk6G69PV2w437c5H JKeW/5oCYjXhTTO5B+6SKdzOg3Vwr7R9mUn/mXldGtG0If5EzmaWnVI3MLEo7o5t uahEfetdUxJUmwT4z0RbQ2UZJsCQBvOG -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:48 2025 by rpki-client