This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json) Hash identifier: II+e9INJzuAScQRmn9AE0RQvMp6LZQxu3tlm0kOyrfM= Subject key identifier: 64:5F:C6:D7:B6:D5:42:2B:9A:A8:E1:C3:77:DC:A5:E4:4B:CB:3C:12 Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft Manifest number: D4 Signing time: Sun 21 Dec 2025 02:51:43 +0000 Manifest this update: Sun 21 Dec 2025 02:51:42 +0000 Manifest next update: Sun 28 Dec 2025 02:51:42 +0000 Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: gqUaQOoDOBeIb1XUqmrm2K2Vflt9vejcBoV3zanH3Kk=) 2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=) 3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Validity Not Before: Dec 21 02:51:42 2025 GMT Not After : Dec 28 02:51:42 2025 GMT Subject: CN=694760bf-f72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b7:96:4e:d2:ce:63:69:9c:d2:c8:14:a2:0f: c3:3f:4f:03:ac:aa:0d:79:44:95:3f:ae:84:fd:9b: 08:9b:bb:79:c2:b8:34:92:9b:a7:bc:3c:b7:28:aa: 02:1f:7a:6a:de:ba:d8:91:f0:2b:a4:4c:5a:71:b3: 6c:f0:a9:d9:31:6e:80:70:fc:2c:e8:69:de:f7:be: a3:65:cf:b2:25:fc:60:ca:a6:30:8b:e4:60:84:cc: ff:4f:39:8d:9c:95:a3:85:a4:ad:01:15:6c:50:94: 14:6b:96:08:61:1b:87:28:b0:e8:c3:85:2f:69:ff: 1d:ee:ad:f4:4e:27:09:38:f0:fe:76:36:0f:8b:96: 7c:a7:3d:03:db:d8:38:67:c6:13:7e:83:5e:b1:21: 41:00:e7:5c:9f:4a:a5:e9:af:66:03:9c:f1:d6:79: 13:64:34:6e:e6:5c:f5:5d:79:13:bc:c1:2d:f3:6f: 81:22:42:62:85:70:cb:45:3a:f8:97:86:c5:cd:ca: f2:7d:b5:51:04:d4:4b:b0:95:74:d1:14:fa:35:38: 56:47:e8:1f:c5:e0:ed:68:81:d6:e5:35:99:52:00: 1e:7f:f4:d1:39:e6:26:44:45:64:1c:a3:25:26:11: bb:61:11:b9:39:9b:fa:32:e6:fc:ad:7a:68:57:55: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5F:C6:D7:B6:D5:42:2B:9A:A8:E1:C3:77:DC:A5:E4:4B:CB:3C:12 X509v3 Authority Key Identifier: keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:2f:7e:ca:65:65:60:c5:9c:5e:48:ed:8d:ab:a9:45:7f:b3: cf:b5:08:e0:1f:bd:76:e5:7d:34:c7:a5:9b:38:71:47:e8:c5: 75:9b:cc:e6:cb:69:a2:e8:73:c7:13:d7:b6:b4:45:18:f9:b7: ed:64:28:ff:63:81:a6:92:d2:e8:01:3f:86:15:7d:73:33:32: d2:85:bd:34:35:d7:ec:99:ad:5e:24:e4:b2:21:29:16:f7:27: 93:e9:38:c2:f4:d9:af:2b:96:e2:8f:2e:a4:36:21:ed:d2:78: 1d:e4:61:73:b3:64:a4:f1:2c:f4:fe:cc:99:17:1f:c3:de:48: 27:61:f6:7d:87:3d:59:37:b6:63:98:c1:cf:4f:e6:82:63:fb: bf:cb:23:3c:dc:e4:bc:6c:45:0b:95:e8:b4:a4:87:50:75:0b: 56:ac:21:ee:9f:16:7f:39:ad:1b:5f:96:c9:ca:a9:da:e5:59: 03:86:ab:b3:7b:f4:ab:9f:3b:36:00:de:ba:f5:3c:aa:06:b7: 7a:91:8c:d1:95:d2:6c:c0:88:e1:1b:4e:4c:1c:bf:aa:a6:65: eb:e3:8b:d0:93:90:46:29:6c:8c:11:4e:74:5f:c0:b6:72:1b: 98:9d:e5:b2:bc:a8:31:30:7f:fb:68:c3:82:0e:20:e8:28:20: 05:fd:3f:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCODUxMTAvBgNVBAUTKEM1NTY0REVDMTAxNjYzQkY0M0QzRjJFMzQwMzk0QzAw NzY2QTYzRTMwHhcNMjUxMjIxMDI1MTQyWhcNMjUxMjI4MDI1MTQyWjAYMRYwFAYD VQQDDA02OTQ3NjBiZi1mNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7eWTtLOY2mc0sgUog/DP08DrKoNeUSVP66E/ZsIm7t5wrg0kpunvDy3KKoC H3pq3rrYkfArpExacbNs8KnZMW6AcPws6Gne976jZc+yJfxgyqYwi+RghMz/TzmN nJWjhaStARVsUJQUa5YIYRuHKLDow4Uvaf8d7q30TicJOPD+djYPi5Z8pz0D29g4 Z8YTfoNesSFBAOdcn0ql6a9mA5zx1nkTZDRu5lz1XXkTvMEt82+BIkJihXDLRTr4 l4bFzcryfbVRBNRLsJV00RT6NThWR+gfxeDtaIHW5TWZUgAef/TROeYmREVkHKMl JhG7YRG5OZv6Mub8rXpoV1VA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRfxte2 1UIrmqjhw3fcpeRLyzwSMB8GA1UdIwQYMBaAFMVWTewQFmO/Q9Py40A5TAB2amPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS9DQ0JCQUJFQTlG NjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3OUQwX0xqUURsTUFIWnFZ LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkI4NS9DQ0JCQUJFQTlGNjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3 OUQwX0xqUURsTUFIWnFZLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJL37KZWVgxZxeSO2Nq6lFf7PPtQjgH7125X00x6WbOHFH6MV1m8zm y2mi6HPHE9e2tEUY+bftZCj/Y4GmktLoAT+GFX1zMzLShb00Ndfsma1eJOSyISkW 9yeT6TjC9NmvK5bijy6kNiHt0ngd5GFzs2Sk8Sz0/syZFx/D3kgnYfZ9hz1ZN7Zj mMHPT+aCY/u/yyM83OS8bEULlei0pIdQdQtWrCHunxZ/Oa0bX5bJyqna5VkDhquz e/Srnzs2AN669TyqBrd6kYzRldJswIjhG05MHL+qpmXr44vQk5BGKWyMEU50X8C2 chuYneWyvKgxMH/7aMOCDiDoKCAF/T9D -----END CERTIFICATE-----Generated at Sun Dec 21 16:43:48 2025 by rpki-client