This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: qihSeCoLIK4ig1YJKSId1r6UbpKsdspl5Y2INeQoZDY= Subject key identifier: 4B:0D:FF:25:10:84:BB:15:1A:49:62:33:DC:73:FF:F4:AB:4E:29:A2 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 3521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 3506 Signing time: Thu 18 Dec 2025 14:18:13 +0000 Manifest this update: Thu 18 Dec 2025 14:18:13 +0000 Manifest next update: Thu 25 Dec 2025 14:18:13 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: cDhFlpRvzW/0ExzgMgWGdR/E10b/aepIDGb2vjHuqL4=) 2: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: dgki84RnKxfDFSXW7buISP/w97pblO+d10cyHqDLr80=) 3: 2C5F8752A10D11EFB9BE8476C4F9AE02.roa (hash: jPj9bTXq8/V0TwHLgDmyYaPhRw7As2Sxl+kCUunMcow=) 4: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: e5E6IXPuP1rU/JKfEU2JqffZsvpnjnyYycraO2Bit8Q=) 5: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: ks6ZHeQSlWbDyKZP3PDWWDRvxvqWjlQTJpFGHN+LCL4=) 6: F8E58782A10C11EFA3C0F375C4F9AE02.roa (hash: YmetKHnU5ANrgA6cs+nuZb/Ddq+jw2xRjEtksMKjh6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13601 (0x3521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Dec 18 14:18:13 2025 GMT Not After : Dec 25 14:18:13 2025 GMT Subject: CN=69440d25-74e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:46:54:8e:34:3e:4f:42:f4:73:39:43:33:c7: 57:03:27:6b:9d:3e:16:62:62:11:f2:0d:d9:a2:9f: 25:57:42:e0:82:8f:13:e1:1c:bc:06:3b:35:fe:f5: 14:1c:33:5d:47:48:ba:56:e8:b5:5a:20:1c:90:15: 90:4c:f1:5b:fa:57:64:b7:1d:e7:d0:d7:3a:1e:48: 78:40:f1:0a:dd:3e:97:16:6d:d6:b4:4f:cf:84:b2: 6f:b1:d6:28:d8:5c:de:54:bc:9c:30:5a:d8:91:dc: 3e:bb:54:05:c1:78:2d:d1:f0:a7:ac:61:f6:67:ab: d9:ce:65:12:72:aa:41:d1:e3:34:d1:ff:3f:90:66: 77:d2:8d:cd:6e:57:5e:99:99:36:ff:13:8f:43:3a: ec:ea:cf:87:91:83:35:5c:99:ec:c9:82:48:8c:6e: 73:91:92:df:8c:a4:b5:3d:60:e2:16:f0:76:1c:05: 17:4f:cd:37:24:72:bb:a1:82:5e:04:c9:4f:9d:e0: 41:31:e6:27:4d:64:10:f3:e4:b9:78:e0:95:64:04: 84:5c:24:95:a2:cb:f0:77:93:04:ab:b4:13:7a:0b: 04:8b:83:83:3c:41:14:41:4d:1a:b0:77:2d:6c:b5: 2c:0a:67:90:54:0f:c7:3d:18:a6:8e:0e:ce:55:a7: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0D:FF:25:10:84:BB:15:1A:49:62:33:DC:73:FF:F4:AB:4E:29:A2 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:52:e0:ba:11:ee:73:14:ae:8c:14:50:67:ed:12:04:89:9f: 02:a9:fa:6d:16:55:3b:fe:ae:e9:0a:8a:53:3a:7c:67:d3:10: 17:fd:dd:7c:4a:75:7b:32:42:fc:32:4e:df:14:02:ae:da:91: 95:86:9f:2d:80:15:f6:19:1a:e7:ca:2b:7f:84:77:a6:bc:9d: 73:04:3f:e1:0a:b4:2d:e6:f4:30:20:3c:19:65:3a:db:97:09: 9e:f5:1e:1b:56:88:6b:13:51:f6:fd:70:1d:d2:9a:46:1a:0e: 8c:65:0a:37:55:ef:e2:e4:a2:16:c5:9f:4a:f1:6a:fb:05:70: 6e:9b:86:77:df:06:17:3b:a3:34:9b:ff:d5:d2:7b:39:8d:1d: 59:e2:b5:ff:b0:90:8c:19:fa:f3:5a:e9:89:ad:cc:10:77:5d: 1a:a5:aa:90:0c:91:1b:c8:0f:ff:20:66:fa:fa:6f:20:2c:ef: c9:81:b9:bc:7e:83:9b:8e:ec:09:35:21:79:65:4b:41:12:2b: 38:65:d9:b2:8f:ad:63:e8:02:d2:07:89:35:63:66:01:f0:51: 6d:b0:f8:eb:d5:d0:8c:fa:f4:fd:3d:38:a5:56:3a:b7:e4:ba: 4a:a3:d8:2b:89:8e:95:b2:91:8f:6a:03:58:14:4a:55:5b:22: 55:00:15:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjUxMjE4MTQxODEzWhcNMjUxMjI1MTQxODEzWjAYMRYwFAYD VQQDDA02OTQ0MGQyNS03NGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60ZUjjQ+T0L0czlDM8dXAydrnT4WYmIR8g3Zop8lV0Lggo8T4Ry8Bjs1/vUU HDNdR0i6Vui1WiAckBWQTPFb+ldktx3n0Nc6Hkh4QPEK3T6XFm3WtE/PhLJvsdYo 2FzeVLycMFrYkdw+u1QFwXgt0fCnrGH2Z6vZzmUScqpB0eM00f8/kGZ30o3Nblde mZk2/xOPQzrs6s+HkYM1XJnsyYJIjG5zkZLfjKS1PWDiFvB2HAUXT803JHK7oYJe BMlPneBBMeYnTWQQ8+S5eOCVZASEXCSVosvwd5MEq7QTegsEi4ODPEEUQU0asHct bLUsCmeQVA/HPRimjg7OVaeEMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsN/yUQ hLsVGkliM9xz//SrTimiMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABUuC6Ee5zFK6MFFBn7RIEiZ8CqfptFlU7/q7pCopTOnxn0xAX/d18 SnV7MkL8Mk7fFAKu2pGVhp8tgBX2GRrnyit/hHemvJ1zBD/hCrQt5vQwIDwZZTrb lwme9R4bVohrE1H2/XAd0ppGGg6MZQo3Ve/i5KIWxZ9K8Wr7BXBum4Z33wYXO6M0 m//V0ns5jR1Z4rX/sJCMGfrzWumJrcwQd10apaqQDJEbyA//IGb6+m8gLO/Jgbm8 foObjuwJNSF5ZUtBEis4Zdmyj61j6ALSB4k1Y2YB8FFtsPjr1dCM+vT9PTilVjq3 5LpKo9griY6VspGPagNYFEpVWyJVABU9 -----END CERTIFICATE-----Generated at Fri Dec 19 06:21:24 2025 by rpki-client