This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: SYdWzT/PoeujROLToXZ0ooAI+GuXuho60M9+lSIp5Jg= Subject key identifier: 89:3E:E6:BF:87:37:EB:9A:E5:35:B1:32:37:DC:2B:C2:E9:CE:27:81 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0E95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0E6D Signing time: Thu 18 Dec 2025 17:33:15 +0000 Manifest this update: Thu 18 Dec 2025 17:33:14 +0000 Manifest next update: Thu 25 Dec 2025 17:33:14 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: xbhXYCPkxzouQZOJptjNcTbGUKZJdh1yR4fR/gCwOMU=) 2: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: rV1Z8AbpTv1d+o44R7LlYsk8JevP6flWo0s81DQ5Rok=) 3: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: lbAPfcc0myVwdYbEISgNYKY5g+qS8g/HzTgMPDxOCGE=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: QRv08V7HqtcB3bHnZdM9X+W4jlFsB6z2SpL2l3Cbxgo=) 5: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: 1hlPRZQBD73jEyWKbHC8ZRWrArjylE9If913X/Jb57A=) 6: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: 6vTa2jFZRIl18mXvmJhTh/HGMJaVZWt9h8uikA4SPmc=) 7: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: qtVktuatmgxYDOUKpmx9+4mvFE8ErGGHadU2rZXHHOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3733 (0xe95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Dec 18 17:33:14 2025 GMT Not After : Dec 25 17:33:14 2025 GMT Subject: CN=69443adb-36f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:3f:c7:3d:f9:94:aa:57:5d:ca:eb:3f:44: 67:08:2e:bb:aa:65:4c:22:27:3a:4a:90:3a:5e:49: f4:83:ee:d1:1d:c7:f8:56:0e:cd:94:e0:0e:75:59: e6:b8:c6:ec:3f:db:12:54:3d:08:e8:75:b8:ea:d9: fd:4e:04:2b:41:3b:57:8d:a0:a0:53:7a:97:e8:29: 03:72:0c:c7:4d:dd:c3:e0:3f:b9:f5:f7:54:ef:28: 75:fa:f8:a0:8c:88:ec:5d:bf:4e:e9:7f:46:88:41: 05:5b:5c:1c:bf:0a:71:f6:0d:1d:a3:a0:61:fd:d7: b5:b4:a4:84:c1:cf:74:cd:10:5c:37:02:8d:2b:d9: e5:47:af:60:12:a8:44:8a:f2:22:7f:82:c0:72:3a: f6:49:0d:04:e7:35:b4:cd:20:5b:59:70:49:e0:14: e5:32:43:dc:19:c2:a1:29:4d:63:1c:40:06:10:9c: e9:31:1c:f6:97:8a:e6:d0:01:f7:24:58:1d:72:2a: 05:c9:38:e3:4d:21:17:d0:dd:75:e5:cc:ae:0a:50: 6b:0d:c4:24:b9:f0:60:49:5c:67:65:2f:8b:3c:b8: 85:3f:67:15:d2:88:58:2c:c0:58:0d:8f:e1:5b:0b: 6a:a4:32:ed:1d:cf:e6:fa:1f:5e:10:a4:58:9b:ff: 37:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3E:E6:BF:87:37:EB:9A:E5:35:B1:32:37:DC:2B:C2:E9:CE:27:81 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2b:5b:1b:99:b3:3a:f2:47:13:e3:82:ff:12:50:48:c5:4b: bf:e2:0d:d3:36:86:5d:71:f6:24:d4:e0:24:55:b4:48:e7:b6: fd:1d:23:d0:e5:3b:00:6f:91:17:0b:ef:a2:df:55:bd:06:6b: 00:f0:cc:c6:43:25:99:4b:76:ce:d2:0c:b3:31:23:87:06:f1: 20:ee:f8:30:40:01:aa:e2:05:27:b7:77:a5:fe:f2:ac:f6:e7: 1e:cc:f0:3b:0e:ea:74:61:6c:8c:78:3a:ea:df:08:cc:f7:b7: 3a:0d:ba:19:c7:9f:bc:84:93:d5:19:de:4c:29:49:0b:b6:e8: c8:89:31:9a:d5:90:65:cd:ae:be:da:4a:d0:87:bb:97:4a:74: 21:13:20:c1:1a:9d:b4:73:bd:87:dd:4b:f0:1b:62:4d:5d:b9: 94:22:e1:26:9a:d4:5b:a5:79:cd:5c:9e:3f:90:5a:93:a1:65: a6:8c:55:b9:36:1a:87:5e:29:89:0b:40:94:96:6d:02:53:cf: a6:9f:a7:6e:e7:1f:5b:70:89:4b:d2:28:66:02:d3:13:93:4a: a8:e3:aa:3c:c5:d1:d0:c9:07:c5:a2:17:ee:47:34:e4:d5:14: b7:8f:20:0f:c9:fc:3a:90:15:ec:50:d7:41:4d:7a:97:12:7c: 57:4c:26:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjUxMjE4MTczMzE0WhcNMjUxMjI1MTczMzE0WjAYMRYwFAYD VQQDDA02OTQ0M2FkYi0zNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bA/xz35lKpXXcrrP0RnCC67qmVMIic6SpA6Xkn0g+7RHcf4Vg7NlOAOdVnm uMbsP9sSVD0I6HW46tn9TgQrQTtXjaCgU3qX6CkDcgzHTd3D4D+59fdU7yh1+vig jIjsXb9O6X9GiEEFW1wcvwpx9g0do6Bh/de1tKSEwc90zRBcNwKNK9nlR69gEqhE ivIif4LAcjr2SQ0E5zW0zSBbWXBJ4BTlMkPcGcKhKU1jHEAGEJzpMRz2l4rm0AH3 JFgdcioFyTjjTSEX0N115cyuClBrDcQkufBgSVxnZS+LPLiFP2cV0ohYLMBYDY/h WwtqpDLtHc/m+h9eEKRYm/83tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIk+5r+H N+ua5TWxMjfcK8LpzieBMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuK1sbmbM68kcT44L/ElBIxUu/4g3TNoZdcfYk1OAkVbRI57b9HSPQ 5TsAb5EXC++i31W9BmsA8MzGQyWZS3bO0gyzMSOHBvEg7vgwQAGq4gUnt3el/vKs 9ucezPA7Dup0YWyMeDrq3wjM97c6DboZx5+8hJPVGd5MKUkLtujIiTGa1ZBlza6+ 2krQh7uXSnQhEyDBGp20c72H3UvwG2JNXbmUIuEmmtRbpXnNXJ4/kFqToWWmjFW5 NhqHXimJC0CUlm0CU8+mn6du5x9bcIlL0ihmAtMTk0qo46o8xdHQyQfFohfuRzTk 1RS3jyAPyfw6kBXsUNdBTXqXEnxXTCZ8 -----END CERTIFICATE-----Generated at Fri Dec 19 23:55:59 2025 by rpki-client