This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json) Hash identifier: JdeeZJZ6IEZprVldIgqBbx4lxn3OHpdXxx5vZ+/l9Ko= Subject key identifier: 5B:B5:1A:CE:41:18:C4:80:50:61:64:E0:F8:BD:15:C4:EB:07:FB:7A Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Certificate serial: 08FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft Manifest number: 08F3 Signing time: Mon 22 Dec 2025 19:43:56 +0000 Manifest this update: Mon 22 Dec 2025 19:43:55 +0000 Manifest next update: Mon 29 Dec 2025 19:43:55 +0000 Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: ZSnAUXDv5aGrTgWpr04Ip7eq5tjs+oxzQ8nwt552tbw=) 2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: +enQgUid53gMaFPCBDOzsd0TE3j6ha7MQxAZKWnZpAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Validity Not Before: Dec 22 19:43:55 2025 GMT Not After : Dec 29 19:43:55 2025 GMT Subject: CN=69499f7c-84ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:c4:7e:9a:e1:2d:f4:7d:07:a1:14:7d:46: c2:61:80:55:83:b3:44:16:fc:b3:64:46:b4:0f:e7: 5a:71:1a:4c:7c:02:34:15:b2:c0:96:bd:55:3a:46: f5:ab:54:f7:fe:d0:19:12:47:b7:03:6e:88:b3:c0: 22:57:19:4a:08:7b:c0:25:cd:28:4e:86:73:6b:91: 24:a6:54:7f:0b:07:c7:ff:56:5a:37:22:14:b4:2d: 25:da:e3:c6:e8:12:74:00:e2:1a:0c:c0:b2:1b:ee: d5:78:27:13:43:bc:13:da:40:6b:62:ed:ac:89:ba: d2:09:19:c8:50:2d:b1:08:14:b1:79:6d:f8:93:30: 80:d9:e8:cd:45:d5:30:9d:7c:9f:ff:d5:70:a7:68: 1d:91:e7:47:6b:e4:8e:a1:24:79:16:22:74:87:58: fe:ce:48:2d:7a:44:91:3c:02:f5:e6:ee:00:a7:98: 0c:b6:70:48:5e:a4:f5:f0:7e:1d:c6:be:cd:66:20: 4f:80:07:7e:8f:ad:39:e0:73:95:9d:c8:f2:77:3e: c7:f4:2a:bf:8a:e7:5c:67:80:4e:bf:c9:44:bf:5b: 08:7d:d3:78:ad:d2:c9:e8:5f:3d:59:ef:90:ca:2d: 13:7a:4c:8d:8c:55:5c:d6:64:22:e9:38:4b:9d:3e: 44:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B5:1A:CE:41:18:C4:80:50:61:64:E0:F8:BD:15:C4:EB:07:FB:7A X509v3 Authority Key Identifier: keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:82:be:83:95:16:94:99:ce:2e:04:d6:29:51:b4:e1:47:19: c9:4c:dd:50:af:97:3c:fe:9a:fa:4a:d5:18:26:03:d8:25:90: d6:7a:7b:b2:d0:6b:27:2d:cf:6e:6a:44:7f:af:dc:e4:c6:75: 2c:be:f2:87:23:d3:ba:34:50:bf:01:04:97:70:18:80:f9:0e: 5e:e1:f0:4f:ed:10:2f:49:9e:89:c9:d7:44:24:c6:7b:8f:84: 0b:a3:19:0c:ce:f4:fd:52:67:71:d1:dc:18:38:a1:45:81:88: d6:a7:e9:1b:58:e0:4d:f4:e1:0b:f0:b5:49:b2:c9:a7:be:ff: 76:02:91:0f:0c:ca:ba:51:cf:ca:6f:5a:30:0c:12:10:1f:e7: 19:d1:21:a0:0a:61:05:d0:e1:af:41:bc:fb:ef:0a:48:78:6b: 6a:40:98:bd:47:f6:a1:dc:eb:3b:44:69:96:da:65:0e:b5:6c: ff:69:8c:cc:0a:92:44:0d:fc:e1:b6:00:e7:b8:1d:4f:fa:c0: 11:95:5b:cb:0c:55:ef:2b:0c:ee:20:18:a4:92:d2:30:e1:02: b0:56:81:13:fc:8d:d7:8f:7e:4f:e0:86:28:e8:13:98:8c:f2: 59:38:a0:77:b7:73:57:ec:91:db:76:31:2e:28:28:b3:60:38: ff:fe:90:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2 NTVFOTI0QTAwHhcNMjUxMjIyMTk0MzU1WhcNMjUxMjI5MTk0MzU1WjAYMRYwFAYD VQQDDA02OTQ5OWY3Yy04NGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpbEfprhLfR9B6EUfUbCYYBVg7NEFvyzZEa0D+dacRpMfAI0FbLAlr1VOkb1 q1T3/tAZEke3A26Is8AiVxlKCHvAJc0oToZza5EkplR/CwfH/1ZaNyIUtC0l2uPG 6BJ0AOIaDMCyG+7VeCcTQ7wT2kBrYu2sibrSCRnIUC2xCBSxeW34kzCA2ejNRdUw nXyf/9Vwp2gdkedHa+SOoSR5FiJ0h1j+zkgtekSRPAL15u4Ap5gMtnBIXqT18H4d xr7NZiBPgAd+j6054HOVncjydz7H9Cq/iudcZ4BOv8lEv1sIfdN4rdLJ6F89We+Q yi0TekyNjFVc1mQi6ThLnT5EowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu1Gs5B GMSAUGFk4Pi9FcTrB/t6MB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3 azZjUUlhZzlaWVpsWHBKS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcgr6DlRaUmc4uBNYpUbThRxnJTN1Qr5c8/pr6StUYJgPYJZDWenuy 0GsnLc9uakR/r9zkxnUsvvKHI9O6NFC/AQSXcBiA+Q5e4fBP7RAvSZ6JyddEJMZ7 j4QLoxkMzvT9Umdx0dwYOKFFgYjWp+kbWOBN9OEL8LVJssmnvv92ApEPDMq6Uc/K b1owDBIQH+cZ0SGgCmEF0OGvQbz77wpIeGtqQJi9R/ah3Os7RGmW2mUOtWz/aYzM CpJEDfzhtgDnuB1P+sARlVvLDFXvKwzuIBikktIw4QKwVoET/I3Xj35P4IYo6BOY jPJZOKB3t3NX7JHbdjEuKCizYDj//pDY -----END CERTIFICATE-----Generated at Wed Dec 24 13:56:14 2025 by rpki-client