This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: aMnm23sqfqvOKEmOBkgdcUcKcYvdoWbFFvIznCK7fko= Subject key identifier: 31:0B:41:BA:6F:32:23:E0:5A:04:E5:65:13:2D:47:D3:21:0D:27:7E Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 059A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 0595 Signing time: Thu 18 Dec 2025 22:32:17 +0000 Manifest this update: Thu 18 Dec 2025 22:32:16 +0000 Manifest next update: Thu 25 Dec 2025 22:32:16 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: uJVUKjS3j9MtUDjg/Ubw1Xs2I3qZbUxrLN8+cwQP/Qk=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 2XbXZcyCmkwNngGPogkbhBm8QONSr+SCdJI+4quVjcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: Dec 18 22:32:16 2025 GMT Not After : Dec 25 22:32:16 2025 GMT Subject: CN=694480f1-6c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:c6:2b:88:29:a0:4d:cc:16:10:f2:8f:3a: a3:d7:2b:ef:f3:65:70:be:6f:7b:96:80:f0:d0:5d: e1:75:60:b1:ff:2b:92:51:c9:0b:2a:3f:84:cf:8f: 5d:2b:60:36:5b:b0:95:49:26:fb:da:e2:7f:bf:2d: 68:cb:e1:38:34:9d:c9:63:93:db:c1:c7:46:56:69: a1:61:ab:c5:9c:1b:37:49:d2:a9:cc:63:cb:3b:7b: dd:1a:e9:54:ae:17:4e:04:d3:c7:ef:1c:a7:1c:18: 28:1a:64:18:6d:5b:e3:05:fd:2a:50:3b:e8:52:12: 68:18:7b:b6:7b:14:d5:cb:38:7e:c4:5f:25:fe:69: d6:7d:4b:48:4f:81:a0:6a:d2:e8:d2:06:d3:4a:98: 15:c2:e3:b6:c8:65:6a:bb:7a:3a:54:d2:6b:54:ca: a3:b4:bc:2f:4e:31:ed:d6:cf:bc:8a:98:25:8d:d2: 2a:b1:f3:81:08:5f:19:82:c7:05:42:c0:a0:0a:d2: 88:e6:0f:fa:de:4d:71:df:f7:bd:cb:06:3f:05:eb: b7:b2:b1:af:0e:91:9a:0a:f7:e6:ef:f8:35:59:a0: f3:72:d3:d0:a4:51:46:39:e3:bf:ac:b7:bb:cb:3d: 02:65:12:37:be:ad:91:4c:93:ff:48:fd:9e:91:e7: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0B:41:BA:6F:32:23:E0:5A:04:E5:65:13:2D:47:D3:21:0D:27:7E X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:61:fb:ce:0a:94:ef:7c:89:84:9b:75:61:b9:d4:0f:c4:ff: 89:10:e8:a0:1d:00:b8:c2:1c:45:dd:54:46:9a:b6:ae:a6:aa: 32:74:19:0b:a1:c1:ba:cd:b0:f6:f8:2b:58:cc:ce:cb:3e:3b: a6:aa:60:82:c3:98:78:57:57:54:69:b4:48:1d:79:56:16:f2: 6b:1e:08:34:85:18:e1:5e:02:4f:80:8e:85:9f:b2:2e:ae:d9: 7c:fb:04:22:87:50:9a:bf:4f:77:3f:a9:8c:c0:5f:2a:c1:1a: 19:98:8c:d3:2e:f2:7a:3e:ff:5e:4b:a2:1f:17:a8:9c:3e:48: c8:8d:74:44:26:48:46:0f:ad:1b:ae:17:24:15:7c:46:15:58: c5:41:9f:ef:56:e0:24:63:93:e1:2e:61:34:72:22:b6:c3:b4: 4b:0b:54:66:aa:df:9c:e5:87:5f:a2:1f:ca:a3:97:05:96:c5: 3a:4e:83:02:1f:05:e4:32:a4:0e:68:40:ae:ed:46:53:74:1a: 49:12:af:cb:cc:79:46:e9:87:5f:0a:d3:e0:c3:ad:af:3f:53: f7:60:88:c5:61:42:53:2a:ae:67:ee:81:6c:50:5d:e0:37:aa: ab:bc:a9:ef:6a:e5:ab:59:8e:48:4f:bd:01:94:9a:46:cb:a4: 5a:90:75:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjUxMjE4MjIzMjE2WhcNMjUxMjI1MjIzMjE2WjAYMRYwFAYD VQQDDA02OTQ0ODBmMS02YzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcvGK4gpoE3MFhDyjzqj1yvv82Vwvm97loDw0F3hdWCx/yuSUckLKj+Ez49d K2A2W7CVSSb72uJ/vy1oy+E4NJ3JY5PbwcdGVmmhYavFnBs3SdKpzGPLO3vdGulU rhdOBNPH7xynHBgoGmQYbVvjBf0qUDvoUhJoGHu2exTVyzh+xF8l/mnWfUtIT4Gg atLo0gbTSpgVwuO2yGVqu3o6VNJrVMqjtLwvTjHt1s+8ipgljdIqsfOBCF8ZgscF QsCgCtKI5g/63k1x3/e9ywY/Beu3srGvDpGaCvfm7/g1WaDzctPQpFFGOeO/rLe7 yz0CZRI3vq2RTJP/SP2eked07wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDELQbpv MiPgWgTlZRMtR9MhDSd+MB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJYfvOCpTvfImEm3VhudQPxP+JEOigHQC4whxF3VRGmraupqoydBkL ocG6zbD2+CtYzM7LPjumqmCCw5h4V1dUabRIHXlWFvJrHgg0hRjhXgJPgI6Fn7Iu rtl8+wQih1Cav093P6mMwF8qwRoZmIzTLvJ6Pv9eS6IfF6icPkjIjXREJkhGD60b rhckFXxGFVjFQZ/vVuAkY5PhLmE0ciK2w7RLC1Rmqt+c5Ydfoh/Ko5cFlsU6ToMC HwXkMqQOaECu7UZTdBpJEq/LzHlG6YdfCtPgw62vP1P3YIjFYUJTKq5n7oFsUF3g N6qrvKnvauWrWY5IT70BlJpGy6RakHXr -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:52 2025 by rpki-client