This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json) Hash identifier: UYmsa3YF9AhjGLmi4KPKbxP536Liopb4omXS6Wt/f0k= Subject key identifier: FC:19:41:FC:6F:D7:D6:1E:BA:4B:57:7A:48:F9:B0:1A:7A:90:23:9F Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft Manifest number: 0173 Signing time: Sat 20 Dec 2025 22:31:04 +0000 Manifest this update: Sat 20 Dec 2025 22:31:03 +0000 Manifest next update: Sat 27 Dec 2025 22:31:03 +0000 Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: 82Ce/wQ2erfHXmcKbD36OVxZYjmU9p8tWPehLz99VGg=) 2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: Kj01wL6hxzZNZ8dZAbJKpipOYkN2WV1ZM26ZUUjGKvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Validity Not Before: Dec 20 22:31:03 2025 GMT Not After : Dec 27 22:31:03 2025 GMT Subject: CN=694723a8-865a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:99:41:82:b3:3d:8d:bf:b8:cf:b1:bf:ab: fe:39:0b:ce:c1:4c:f4:97:78:bd:00:6d:3b:f0:ec: cf:02:82:e4:e8:8f:4f:19:6b:e3:ae:98:62:fe:14: e6:d4:6f:fe:3d:c0:8c:c5:e1:5f:ce:c9:06:a8:9e: 81:da:13:e4:4b:5e:fe:d8:ce:d4:02:9b:8f:57:2e: 23:69:0c:98:e5:b1:f5:68:b3:bb:c9:a5:a3:c3:fb: b7:0c:44:53:c9:f9:b8:22:1c:42:fe:76:cd:ed:e0: c1:ff:97:8a:b9:27:9e:60:33:d7:83:a1:eb:d3:37: 17:b1:f3:16:f5:96:4d:34:a8:d8:97:3d:45:41:ab: b2:6c:31:d7:a3:90:be:a4:87:61:8d:76:6a:1a:d3: 05:0c:02:ca:9e:b4:7b:3f:91:50:6b:17:a9:73:56: 03:86:1e:14:f7:cc:c5:61:a9:10:d8:e6:df:78:12: f6:06:ae:de:8e:50:ff:35:56:ba:69:16:86:3f:31: e8:af:fd:0e:21:69:bb:c0:42:8f:b6:6d:ab:d4:99: f9:f7:d5:4f:ac:4d:c6:ca:7f:4c:4b:c3:4e:6b:1d: b1:81:d2:3d:5e:c2:07:91:2e:70:87:20:64:7b:9a: 21:e1:be:ce:02:56:be:e3:38:87:65:ef:5e:95:0e: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:19:41:FC:6F:D7:D6:1E:BA:4B:57:7A:48:F9:B0:1A:7A:90:23:9F X509v3 Authority Key Identifier: keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:10:94:72:4d:7e:11:2a:04:a2:6b:16:ef:71:67:b4:fb:ba: a6:28:6b:d4:e9:73:40:8c:b5:7a:5b:85:b7:64:f6:da:ad:1c: 46:7e:28:90:a3:0f:f2:af:9d:5d:66:3f:97:9b:0b:52:32:33: 15:62:8b:f8:54:f3:4e:01:ac:e8:50:52:80:0c:b9:3b:ae:ab: 92:03:65:29:c3:e6:3f:50:71:98:4b:43:c8:10:a2:d5:6f:aa: 12:c3:55:02:97:4e:10:51:d2:cb:c7:23:1b:86:66:5b:d0:f8: 2b:55:16:86:58:d8:ba:96:b1:01:11:c3:f8:93:15:4b:1d:f2: d0:0b:69:7f:f7:92:d4:62:a6:7d:24:e4:b7:8a:8d:bb:29:28: cf:1c:88:61:a9:73:19:29:c4:21:92:57:0a:51:b8:1a:29:b6: cc:cb:2e:bb:f4:c8:de:5a:f8:84:bd:82:93:e6:3d:f6:2b:b7: 44:64:58:5c:55:b4:e3:53:63:59:9c:b2:9a:54:68:7d:0a:3e: a8:65:93:21:db:92:0d:af:09:ef:b1:23:54:54:92:dd:59:be: 5e:7e:3e:03:64:ed:0a:19:61:fc:6a:2e:52:4f:1a:c2:f4:af: ff:a2:13:ae:97:ae:ce:1a:73:a1:f7:89:8d:3c:87:85:d2:21: b3:7d:b8:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDc3RUM0ODY5MkQwNDI3MDI5NzhEQ0QwQjY4RTk0MEI4 RDc3MjNFNTIwHhcNMjUxMjIwMjIzMTAzWhcNMjUxMjI3MjIzMTAzWjAYMRYwFAYD VQQDDA02OTQ3MjNhOC04NjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqo2ZQYKzPY2/uM+xv6v+OQvOwUz0l3i9AG078OzPAoLk6I9PGWvjrphi/hTm 1G/+PcCMxeFfzskGqJ6B2hPkS17+2M7UApuPVy4jaQyY5bH1aLO7yaWjw/u3DERT yfm4IhxC/nbN7eDB/5eKuSeeYDPXg6Hr0zcXsfMW9ZZNNKjYlz1FQauybDHXo5C+ pIdhjXZqGtMFDALKnrR7P5FQaxepc1YDhh4U98zFYakQ2ObfeBL2Bq7ejlD/NVa6 aRaGPzHor/0OIWm7wEKPtm2r1Jn599VPrE3Gyn9MS8NOax2xgdI9XsIHkS5whyBk e5oh4b7OAla+4ziHZe9elQ43qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwZQfxv 19YeuktXekj5sBp6kCOfMB8GA1UdIwQYMBaAFHfsSGktBCcCl43NC2jpQLjXcj5S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC8yOEM2Q0NFNkE5 RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3S1hqYzBMYU9sQXVOZHlQ bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2QteElhUzBFSndLWGpjMExhT2xBdU5keVBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC8yOEM2Q0NFNkE5RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3 S1hqYzBMYU9sQXVOZHlQbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4EJRyTX4RKgSiaxbvcWe0+7qmKGvU6XNAjLV6W4W3ZPbarRxGfiiQ ow/yr51dZj+XmwtSMjMVYov4VPNOAazoUFKADLk7rquSA2Upw+Y/UHGYS0PIEKLV b6oSw1UCl04QUdLLxyMbhmZb0PgrVRaGWNi6lrEBEcP4kxVLHfLQC2l/95LUYqZ9 JOS3io27KSjPHIhhqXMZKcQhklcKUbgaKbbMyy679MjeWviEvYKT5j32K7dEZFhc VbTjU2NZnLKaVGh9Cj6oZZMh25INrwnvsSNUVJLdWb5efj4DZO0KGWH8ai5STxrC 9K//ohOul67OGnOh94mNPIeF0iGzfbiR -----END CERTIFICATE-----Generated at Sun Dec 21 16:02:19 2025 by rpki-client