This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: 3LFcT64crR0cvyST9B36SGQS1XovjJbSOdAmqQIC+H4= Subject key identifier: EF:EB:69:6C:1C:D5:FA:4A:45:CB:D3:9E:BD:81:5F:6D:26:B1:B3:3D Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: 79 Signing time: Sat 20 Dec 2025 17:21:00 +0000 Manifest this update: Sat 20 Dec 2025 17:20:59 +0000 Manifest next update: Sat 27 Dec 2025 17:20:59 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: WNvm2X/ws4BG7iWAIalA+VeGldKTBU5o5k93hPiVRU4=) 2: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: Je+up3kY6qu1B3So3Vnq/xOYjMIPNymqMCzCxvb8aL4=) 3: 87087F00267E11F09183092AC4F9AE02.roa (hash: vPD3MBlV+VYxtTk5npGCIsRmwvlSAFp0uTh8dXUbHV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Dec 20 17:20:59 2025 GMT Not After : Dec 27 17:20:59 2025 GMT Subject: CN=6946dafc-fc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:1b:9e:45:7e:1f:8f:fe:0b:10:bc:c5:79: 5f:5a:68:be:76:cc:87:0e:26:ef:92:ab:ff:4e:a8: 20:8d:a9:34:02:d2:14:4d:cb:ec:ee:7e:6e:90:1d: d6:88:35:2f:2b:d5:ab:1f:7a:2d:2b:1b:10:8b:3a: 6f:5b:a0:d2:50:83:e5:62:b9:ca:22:c9:b0:20:d7: 52:29:57:53:cd:b9:9e:f0:95:92:21:b0:4c:ad:14: dd:ca:b0:a7:1c:2a:84:ba:61:87:a5:6a:d4:a8:f2: 14:d7:1d:e7:9f:12:3d:7b:1a:8c:33:dd:16:17:b4: 28:23:90:81:fc:3a:73:af:05:b1:1a:20:e9:21:32: 3d:f0:4e:dd:63:73:25:73:d1:9e:0d:3b:fd:43:52: 24:e3:1b:23:79:ba:4d:aa:9e:3f:7a:d1:e0:c9:72: 9a:34:a7:6b:8e:29:69:c5:80:a6:e0:00:11:15:11: 2b:12:b8:fe:08:40:3d:c9:15:57:f0:92:df:67:92: d7:d3:57:31:8b:1e:0c:50:23:58:28:01:19:98:04: 1c:5c:58:4b:f4:ce:fa:fc:7a:a8:a2:b7:f8:e8:58: 41:20:51:42:64:b1:12:70:a7:39:29:41:dd:65:c1: d1:c9:ec:bb:96:90:90:32:17:87:f3:59:bd:31:bc: 5f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EB:69:6C:1C:D5:FA:4A:45:CB:D3:9E:BD:81:5F:6D:26:B1:B3:3D X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3c:3d:aa:eb:29:a4:20:14:95:3e:7b:47:10:77:26:eb:43: 35:f6:7f:0e:75:ca:fe:2d:67:9c:7a:97:0c:74:bc:19:71:02: 8c:a7:ee:06:f5:20:b9:c6:eb:34:af:bd:d2:58:b6:bc:5e:62: e6:8e:5d:11:7d:b7:22:49:97:7a:4e:86:15:e4:8a:b6:f0:3c: 58:03:06:1e:0d:f9:2e:83:84:4a:91:d4:5f:22:d0:b7:38:b5: 7f:dc:15:fc:a0:fe:3a:4d:ac:f3:96:8b:58:68:2f:63:ea:e9: 97:1c:fc:ed:56:f3:c3:42:85:4c:c2:28:a3:15:56:9a:73:23: 7d:a7:4f:ae:ad:37:29:58:11:cc:72:da:ad:cc:30:0d:b0:4d: 60:09:6b:c6:39:5c:1c:2a:14:3e:aa:a8:88:ea:8a:e7:ff:ae: c0:35:a6:46:cc:bb:7c:82:b5:97:d0:e4:ef:1c:51:51:45:5b: 24:ba:95:56:9e:72:40:4f:32:a2:25:2f:53:f9:04:db:5e:a3: 91:55:71:82:fd:3b:f7:ee:0c:89:71:1f:ce:44:09:cd:b2:bd: d7:d0:85:f6:bd:3e:63:14:93:4d:c5:c5:db:ad:b7:e0:8b:19: e8:81:df:06:13:ce:00:9d:63:4f:c6:53:04:a6:e8:2f:b9:18: 08:6e:5d:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Njk4RTExMC8GA1UEBRMoNURCNzVCMkRGOTREMDQ0NzRBNkU1RTJENEI3OENDMDg0 QkZDMkE2QzAeFw0yNTEyMjAxNzIwNTlaFw0yNTEyMjcxNzIwNTlaMBgxFjAUBgNV BAMMDTY5NDZkYWZjLWZjOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwvRueRX4fj/4LELzFeV9aaL52zIcOJu+Sq/9OqCCNqTQC0hRNy+zufm6QHdaI NS8r1asfei0rGxCLOm9boNJQg+ViucoiybAg11IpV1PNuZ7wlZIhsEytFN3KsKcc KoS6YYelatSo8hTXHeefEj17Gowz3RYXtCgjkIH8OnOvBbEaIOkhMj3wTt1jcyVz 0Z4NO/1DUiTjGyN5uk2qnj960eDJcpo0p2uOKWnFgKbgABEVESsSuP4IQD3JFVfw kt9nktfTVzGLHgxQI1goARmYBBxcWEv0zvr8eqiit/joWEEgUUJksRJwpzkpQd1l wdHJ7LuWkJAyF4fzWb0xvF/lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7+tpbBzV +kpFy9OevYFfbSaxsz0wHwYDVR0jBBgwFoAUXbdbLflNBEdKbl4tS3jMCEv8Kmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2OThFLzA5NUY2QzhDMjY3 QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEtt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGJkYkxmbE5CRWRLYmw0dFMzak1DRXY4S213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 OThFLzA5NUY2QzhDMjY3QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVk S2JsNHRTM2pNQ0V2OEttdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADs8ParrKaQgFJU+e0cQdybrQzX2fw51yv4tZ5x6lwx0vBlxAoyn7gb1 ILnG6zSvvdJYtrxeYuaOXRF9tyJJl3pOhhXkirbwPFgDBh4N+S6DhEqR1F8i0Lc4 tX/cFfyg/jpNrPOWi1hoL2Pq6Zcc/O1W88NChUzCKKMVVppzI32nT66tNylYEcxy 2q3MMA2wTWAJa8Y5XBwqFD6qqIjqiuf/rsA1pkbMu3yCtZfQ5O8cUVFFWyS6lVae ckBPMqIlL1P5BNteo5FVcYL9O/fuDIlxH85ECc2yvdfQhfa9PmMUk03Fxdutt+CL GeiB3wYTzgCdY0/GUwSm6C+5GAhuXSM= -----END CERTIFICATE-----Generated at Sun Dec 21 13:10:03 2025 by rpki-client