This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json) Hash identifier: bVm1cbSuoHZtXWBc3V5FOKYP8pEw8UpqxeI5m06Fmrk= Subject key identifier: AE:15:80:88:B5:0B:3B:28:37:ED:12:16:4B:79:69:09:A9:33:B9:A3 Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft Manifest number: 1822 Signing time: Thu 18 Dec 2025 17:22:47 +0000 Manifest this update: Thu 18 Dec 2025 17:22:46 +0000 Manifest next update: Thu 25 Dec 2025 17:22:46 +0000 Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: b1IkFYTR4BDWZV0Y9yYB+9okgSdTnd1jaypqLsmmfjg=) 2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: t2aB2zeGB7GLVJUFKuYwNrlRUrrBiilMq9C3DO3eLYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Validity Not Before: Dec 18 17:22:46 2025 GMT Not After : Dec 25 17:22:46 2025 GMT Subject: CN=69443867-ce44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fd:f9:d4:d6:15:e0:1e:e6:5b:4a:09:67:3a: 36:72:ef:d3:86:5a:ca:aa:80:84:c8:25:e4:f5:6c: bd:72:bb:11:3a:d0:e8:8d:d0:e0:c6:b0:62:55:ea: 2f:8b:1f:10:5e:84:16:6a:0c:18:95:bf:81:41:12: 40:07:70:0f:29:e5:18:83:38:4f:19:94:82:7b:ba: f1:09:3a:cc:37:5e:b0:16:38:f5:8a:6b:07:f7:6b: c2:59:7a:d8:13:0c:66:da:29:97:a0:6e:0f:23:61: 45:84:be:4d:30:ac:bc:30:d8:e0:f5:4f:a5:6a:2e: e7:78:83:d6:42:32:97:75:43:7c:91:58:ed:f5:45: 74:78:7f:e2:8f:ac:86:94:14:ce:16:64:20:e7:b4: 3c:ca:c7:ff:50:4b:1e:5b:71:de:2b:07:c1:d6:79: 8f:ec:57:ae:4e:57:78:d9:19:ab:ff:b7:98:6d:a9: 6d:fe:72:10:c1:82:de:7b:15:1e:fd:05:24:98:87: b2:d1:e5:63:73:fd:73:ac:f5:3e:13:f8:e2:54:fa: 35:a4:30:4f:41:46:57:9d:54:c5:68:95:52:f8:e6: 46:55:92:32:df:42:8b:d9:8d:b0:3e:b3:5d:ec:f6: d0:d6:50:fe:cf:cc:c2:47:21:87:3f:41:84:1d:01: 41:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:15:80:88:B5:0B:3B:28:37:ED:12:16:4B:79:69:09:A9:33:B9:A3 X509v3 Authority Key Identifier: keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:b4:ef:39:bb:53:c2:c7:ce:4d:08:d8:bb:6a:df:8a:b6:7c: 2f:49:8b:d3:ec:d8:15:8f:72:6e:23:fc:73:24:16:b7:d3:38: 20:19:55:0f:73:a0:bf:29:eb:fc:7d:40:9e:b8:95:30:6c:a9: 7e:a9:f4:97:5e:cc:ee:a2:54:b1:a7:19:ce:84:d2:af:06:e1: bd:89:5d:f7:6e:ef:fd:67:8e:7c:33:ab:e7:22:d3:2e:a9:36: 77:21:8f:07:cc:23:45:f1:59:5c:70:18:85:11:e4:47:3c:9c: 75:56:b8:54:8a:ce:2d:84:dd:02:31:35:e9:66:58:be:d8:9d: a6:9c:f8:6c:53:fc:07:52:55:b5:21:5e:6b:72:3c:10:a5:08: 2a:d6:b2:19:8e:41:29:87:e0:7f:39:2d:e1:2d:02:97:84:86: 56:3b:31:0f:58:c7:8a:19:03:27:67:76:5b:fd:e5:bb:c0:3b: 13:3b:61:4a:b7:18:28:e3:b5:f8:f2:d8:ec:96:ff:eb:10:41: 85:9b:95:0a:7c:93:dd:1a:7c:db:d2:d1:fb:eb:e7:16:20:9c: d6:4d:de:75:88:eb:66:8d:34:c8:a6:bd:63:53:c8:25:16:54: 47:1c:1c:43:85:44:29:ee:68:6e:15:6e:63:df:35:7b:d3:bf: 2e:cf:08:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKDVDRTU5QkVBNDA0OTNGQ0M1NzQ2NzE2OTIyRjE5ODhE OTYyOTFGQkUwHhcNMjUxMjE4MTcyMjQ2WhcNMjUxMjI1MTcyMjQ2WjAYMRYwFAYD VQQDDA02OTQ0Mzg2Ny1jZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/351NYV4B7mW0oJZzo2cu/ThlrKqoCEyCXk9Wy9crsROtDojdDgxrBiVeov ix8QXoQWagwYlb+BQRJAB3APKeUYgzhPGZSCe7rxCTrMN16wFjj1imsH92vCWXrY Ewxm2imXoG4PI2FFhL5NMKy8MNjg9U+lai7neIPWQjKXdUN8kVjt9UV0eH/ij6yG lBTOFmQg57Q8ysf/UEseW3HeKwfB1nmP7FeuTld42Rmr/7eYbalt/nIQwYLeexUe /QUkmIey0eVjc/1zrPU+E/jiVPo1pDBPQUZXnVTFaJVS+OZGVZIy30KL2Y2wPrNd 7PbQ1lD+z8zCRyGHP0GEHQFB4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4VgIi1 CzsoN+0SFkt5aQmpM7mjMB8GA1UdIwQYMBaAFFzlm+pAST/MV0ZxaSLxmI2WKR++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4eFhSbkZwSXZHWWpaWXBI NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPV2I2a0JKUDh4WFJuRnBJdkdZalpZcEg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4 eFhSbkZwSXZHWWpaWXBINzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAtO85u1PCx85NCNi7at+KtnwvSYvT7NgVj3JuI/xzJBa30zggGVUP c6C/Kev8fUCeuJUwbKl+qfSXXszuolSxpxnOhNKvBuG9iV33bu/9Z458M6vnItMu qTZ3IY8HzCNF8VlccBiFEeRHPJx1VrhUis4thN0CMTXpZli+2J2mnPhsU/wHUlW1 IV5rcjwQpQgq1rIZjkEph+B/OS3hLQKXhIZWOzEPWMeKGQMnZ3Zb/eW7wDsTO2FK txgo47X48tjslv/rEEGFm5UKfJPdGnzb0tH76+cWIJzWTd51iOtmjTTIpr1jU8gl FlRHHBxDhUQp7mhuFW5j3zV7078uzwhY -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:39 2025 by rpki-client