This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: yBVblByOzU/a4NLUN/bILwWVGzjybVvSZAmXLipjUis= Subject key identifier: 09:A9:78:8B:05:16:A9:D8:82:42:24:CB:ED:AC:7A:F5:FF:26:34:8A Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 351A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 34FF Signing time: Thu 04 Dec 2025 14:17:58 +0000 Manifest this update: Thu 04 Dec 2025 14:17:58 +0000 Manifest next update: Thu 11 Dec 2025 14:17:58 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: WzdIb/f6O4ZtzNgcLV3OFIPvYM9nnglAgbG1qX7xyh0=) 2: 2C5F8752A10D11EFB9BE8476C4F9AE02.roa (hash: jPj9bTXq8/V0TwHLgDmyYaPhRw7As2Sxl+kCUunMcow=) 3: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: ks6ZHeQSlWbDyKZP3PDWWDRvxvqWjlQTJpFGHN+LCL4=) 4: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: dgki84RnKxfDFSXW7buISP/w97pblO+d10cyHqDLr80=) 5: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: e5E6IXPuP1rU/JKfEU2JqffZsvpnjnyYycraO2Bit8Q=) 6: F8E58782A10C11EFA3C0F375C4F9AE02.roa (hash: YmetKHnU5ANrgA6cs+nuZb/Ddq+jw2xRjEtksMKjh6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 14:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13594 (0x351a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Dec 4 14:17:58 2025 GMT Not After : Dec 11 14:17:58 2025 GMT Subject: CN=69319816-736b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:08:8d:d9:fa:31:af:04:9f:34:00:17:c5: 4c:a0:1f:5c:83:8d:73:99:37:94:a3:f5:10:6f:12: 36:d4:74:04:37:eb:96:ba:74:cf:42:c0:37:b6:8c: fa:52:ce:e1:29:46:37:d0:43:b1:1e:fb:6e:e1:95: 05:5a:76:a7:1d:c4:ab:be:e7:5b:c3:cd:12:a9:83: 78:0a:4f:ea:7a:2d:14:82:be:0b:86:6e:04:51:40: df:0d:d6:ac:21:37:c5:7a:22:a5:fc:07:68:fe:52: e8:de:b3:c5:a1:fd:f6:ae:98:1b:3b:02:0a:58:e6: 20:f8:cf:d1:a8:b4:13:6b:bb:fb:52:f4:8e:88:aa: 10:72:70:35:d4:67:e5:e6:68:85:65:a7:e2:4b:56: 93:2d:dd:5c:16:d5:01:47:a3:e6:7d:4d:b8:cb:dc: e2:80:71:24:fa:df:bc:dd:07:83:ce:ea:07:76:ba: 81:b4:2b:5d:aa:85:d2:33:be:65:1f:fe:12:19:00: bd:b9:a9:1a:69:bb:1c:76:19:40:6b:5b:61:b4:65: c1:f4:84:33:6a:6a:3d:80:28:71:0e:27:b5:27:2f: e1:08:5c:b0:d1:38:dc:e9:9a:56:f4:55:ec:bc:8e: 40:22:94:53:c6:38:6c:44:c8:ca:50:d5:70:bf:21: 4c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A9:78:8B:05:16:A9:D8:82:42:24:CB:ED:AC:7A:F5:FF:26:34:8A X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:42:05:0f:a1:f2:c2:34:45:04:fa:99:35:75:67:a8:e7:d2: 1a:5c:42:e3:b7:9d:41:e9:dd:51:e7:f1:e0:e0:68:d6:50:c0: 90:8b:5f:f1:eb:5e:f8:a2:78:36:72:7b:8c:7e:fb:23:78:a3: 99:89:24:1c:5c:79:67:b7:4e:c5:de:31:12:72:55:2d:dd:c0: d8:a6:32:ee:e1:0a:ce:f0:ba:e1:c0:72:d4:77:68:e8:aa:67: 89:b7:c7:90:0e:3d:34:58:85:1e:92:d9:c0:c5:f7:8d:2a:93: 61:f2:fa:e1:d0:ff:e8:df:dc:2c:6a:4b:73:67:81:32:38:e2: 31:88:2c:43:45:33:d4:df:69:cd:0c:bd:18:3a:31:cc:cf:fc: c9:8a:9d:14:e1:3c:92:b2:3e:5b:71:bb:05:03:24:f3:5d:6c: f4:13:49:b7:75:f2:c3:66:63:52:ac:aa:81:bc:a8:72:16:a9: bf:38:b3:92:85:e9:50:d8:4a:49:ff:e3:af:c3:f6:d2:77:f6: 07:bb:30:17:41:58:55:b2:a6:e5:08:bf:65:84:32:ca:a4:1c: 50:f3:e1:3a:1f:3a:c3:3c:a3:d0:13:60:5b:5c:20:9d:c0:eb: 8a:71:24:dd:ab:b2:5e:95:b6:81:ae:9b:d2:97:90:82:9f:4d: b8:1b:bd:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjUxMjA0MTQxNzU4WhcNMjUxMjExMTQxNzU4WjAYMRYwFAYD VQQDEw02OTMxOTgxNi03MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreYIjdn6Ma8EnzQAF8VMoB9cg41zmTeUo/UQbxI21HQEN+uWunTPQsA3toz6 Us7hKUY30EOxHvtu4ZUFWnanHcSrvudbw80SqYN4Ck/qei0Ugr4Lhm4EUUDfDdas ITfFeiKl/Ado/lLo3rPFof32rpgbOwIKWOYg+M/RqLQTa7v7UvSOiKoQcnA11Gfl 5miFZafiS1aTLd1cFtUBR6PmfU24y9zigHEk+t+83QeDzuoHdrqBtCtdqoXSM75l H/4SGQC9uakaabscdhlAa1thtGXB9IQzamo9gChxDie1Jy/hCFyw0Tjc6ZpW9FXs vI5AIpRTxjhsRMjKUNVwvyFM/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmpeIsF FqnYgkIky+2sevX/JjSKMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVQgUPofLCNEUE+pk1dWeo59IaXELjt51B6d1R5/Hg4GjWUMCQi1/x 6174ong2cnuMfvsjeKOZiSQcXHlnt07F3jESclUt3cDYpjLu4QrO8LrhwHLUd2jo qmeJt8eQDj00WIUektnAxfeNKpNh8vrh0P/o39wsaktzZ4EyOOIxiCxDRTPU32nN DL0YOjHMz/zJip0U4TySsj5bcbsFAyTzXWz0E0m3dfLDZmNSrKqBvKhyFqm/OLOS helQ2EpJ/+Ovw/bSd/YHuzAXQVhVsqblCL9lhDLKpBxQ8+E6HzrDPKPQE2BbXCCd wOuKcSTdq7JelbaBrpvSl5CCn024G708 -----END CERTIFICATE-----Generated at Sat Dec 6 14:26:48 2025 by rpki-client