This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: Nb0opBv9V1dlDRnBPKzMhNid16RJJPcc9Hzn/ROeK90= Subject key identifier: E1:59:82:97:20:29:68:DD:3E:75:37:95:DD:08:60:F4:45:9C:81:F4 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 34E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 34E9 Signing time: Thu 18 Dec 2025 15:04:29 +0000 Manifest this update: Thu 18 Dec 2025 15:04:29 +0000 Manifest next update: Thu 25 Dec 2025 15:04:29 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: G+ZIIBr+Y4mSdumm/sGpz+GZGtYatDUhH8BH2/p4vJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Dec 18 15:04:29 2025 GMT Not After : Dec 25 15:04:29 2025 GMT Subject: CN=694417fd-a3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:13:7b:ac:db:a6:df:dd:fd:2a:82:ce:37:6a: 58:e3:d8:f6:db:0e:92:c9:ff:e2:d9:11:01:99:4d: 7a:43:e2:27:33:90:74:f6:09:c0:1b:2f:b2:14:76: 39:d2:4c:bc:e1:10:6d:ed:15:cf:ae:d4:e6:62:02: ee:e4:7d:0d:66:2c:cc:af:d0:e2:63:b8:01:ad:f6: 2c:82:0b:cf:57:66:3b:89:f4:52:2b:3c:71:fa:36: 31:6e:bd:7e:c6:99:3b:66:8b:f9:cd:4a:a6:ac:0a: dc:fb:fb:c6:8b:71:bf:56:33:78:4d:42:8d:51:91: 09:31:7b:36:92:bf:c3:b9:b3:1c:25:f7:04:a2:15: aa:a2:dc:e1:45:60:da:3f:04:2c:09:4d:de:46:78: 67:f2:90:e7:38:73:eb:8f:27:fd:57:62:d5:ad:67: d7:fe:ab:fd:b4:50:72:7e:cb:81:ce:21:07:2b:29: a5:56:98:a2:b5:84:21:a3:61:00:83:00:fd:96:cb: 2f:b3:dd:a2:6e:ac:5e:54:e7:e4:a6:3c:d1:30:08: d1:95:8b:51:aa:63:3b:56:b2:97:ac:5f:e7:66:ab: 7c:2d:df:d7:7c:8a:75:c7:d9:1d:1c:a3:3a:9f:0b: da:0b:fa:97:8e:91:29:14:f7:58:51:c9:1a:f8:c3: 6a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:59:82:97:20:29:68:DD:3E:75:37:95:DD:08:60:F4:45:9C:81:F4 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e6:b1:ed:0e:e7:57:77:e7:5e:01:54:bb:27:5d:f2:37:e9: c4:1e:43:c5:8c:35:9b:5c:f8:76:45:0f:51:2b:2f:2a:dc:e4: 2f:dd:07:c3:bb:c3:54:6b:5b:2f:f1:c0:ee:ed:45:63:f5:b3: a3:78:42:f9:b9:2b:ee:8a:56:4c:ae:62:56:b2:54:ed:67:ae: 75:f3:32:66:c3:a8:1f:f8:dd:fa:6f:e9:2a:4d:f8:7e:9d:f8: 45:96:dd:87:a4:40:e9:d4:47:43:09:15:2f:05:90:b3:f0:85: 7e:41:ec:30:17:40:03:92:da:12:80:a9:6f:6f:02:c1:08:fb: f8:27:ae:ec:2e:ed:7d:a0:d9:87:a0:9f:f9:81:20:3c:5f:28: 25:f2:16:2e:9a:76:59:0d:ad:2b:61:d9:28:3f:41:0d:b1:ef: 74:26:0f:f6:aa:dc:5f:f9:94:1a:f5:7b:6c:a6:95:b0:8a:d6: e3:10:9d:26:c1:9c:47:ef:b3:57:f0:fb:26:14:37:87:b6:bb: 22:6c:cf:ca:84:34:c7:34:8c:7f:29:d4:2f:82:5f:ae:c0:a4: e0:0a:f7:7d:0f:34:41:64:b6:21:42:a4:b9:0c:a3:84:fc:bb: 3c:a0:0d:6c:bf:4d:9a:79:06:97:6b:a6:0c:f4:46:49:25:e2: a5:85:d9:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjUxMjE4MTUwNDI5WhcNMjUxMjI1MTUwNDI5WjAYMRYwFAYD VQQDDA02OTQ0MTdmZC1hM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBN7rNum3939KoLON2pY49j22w6Syf/i2REBmU16Q+InM5B09gnAGy+yFHY5 0ky84RBt7RXPrtTmYgLu5H0NZizMr9DiY7gBrfYsggvPV2Y7ifRSKzxx+jYxbr1+ xpk7Zov5zUqmrArc+/vGi3G/VjN4TUKNUZEJMXs2kr/DubMcJfcEohWqotzhRWDa PwQsCU3eRnhn8pDnOHPrjyf9V2LVrWfX/qv9tFByfsuBziEHKymlVpiitYQho2EA gwD9lssvs92ibqxeVOfkpjzRMAjRlYtRqmM7VrKXrF/nZqt8Ld/XfIp1x9kdHKM6 nwvaC/qXjpEpFPdYUcka+MNqEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFZgpcg KWjdPnU3ld0IYPRFnIH0MB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD5rHtDudXd+deAVS7J13yN+nEHkPFjDWbXPh2RQ9RKy8q3OQv3QfD u8NUa1sv8cDu7UVj9bOjeEL5uSvuilZMrmJWslTtZ6518zJmw6gf+N36b+kqTfh+ nfhFlt2HpEDp1EdDCRUvBZCz8IV+QewwF0ADktoSgKlvbwLBCPv4J67sLu19oNmH oJ/5gSA8Xygl8hYumnZZDa0rYdkoP0ENse90Jg/2qtxf+ZQa9XtsppWwitbjEJ0m wZxH77NX8PsmFDeHtrsibM/KhDTHNIx/KdQvgl+uwKTgCvd9DzRBZLYhQqS5DKOE /Ls8oA1sv02aeQaXa6YM9EZJJeKlhdn2 -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:26 2025 by rpki-client