This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft File: XQ11AElW7cyrm4QnGnNA5jhV_4o.mft (raw, json) Hash identifier: C2BA2NxuPuvcFXe3lfOxJ44pdD+ZN+h/4ZNloJYRvBo= Subject key identifier: AD:01:CD:BB:FD:58:FE:CB:88:52:92:DA:07:5D:33:4C:31:8A:4B:46 Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A Certificate issuer: /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft Manifest number: 077E Signing time: Wed 31 Dec 2025 21:10:21 +0000 Manifest this update: Wed 31 Dec 2025 21:10:20 +0000 Manifest next update: Wed 07 Jan 2026 21:10:20 +0000 Files and hashes: 1: XQ11AElW7cyrm4QnGnNA5jhV_4o.crl (hash: jhlgmZ3yz/D4gwq6YcGuauRMI+JlAuIKM/zuC7hWbEw=) 2: 688EAE1E8A1911EC94921D85C4F9AE02.roa (hash: +jUuW9+jw1JUgmOZj9N0BtBUU0s0p/K1kZNOedeoZQI=) 3: 8EBA772E3F2B11EB87759716C4F9AE02.roa (hash: JhJ29hsZ9Nl8Kc5Vc5GMGK+cSOOJDZ3+fb8ZbDKNP/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 21:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BC39, serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A Validity Not Before: Dec 31 21:10:20 2025 GMT Not After : Jan 7 21:10:20 2026 GMT Subject: CN=6955913d-7bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:c4:ca:75:0d:eb:ff:87:8c:11:d8:fc:80: 55:59:15:50:31:13:ad:1d:f4:c6:58:59:0f:e1:25: d6:e9:d1:24:3b:85:6e:47:4a:c5:9e:b6:64:17:26: 3d:77:b5:3e:a6:fb:57:9c:fa:b6:bc:71:aa:8d:67: 15:49:3b:ce:02:49:50:88:26:3d:c3:01:a0:12:1d: d2:cf:3d:2d:48:7e:06:68:96:19:ba:27:2d:26:7e: 26:1a:6b:50:6e:fd:9e:da:0f:89:fc:0f:13:c6:29: 64:72:50:5c:b2:c4:cc:ff:5b:b8:12:d7:cc:89:03: 68:bc:e9:fe:54:1f:59:db:9a:50:9c:20:d4:dd:1d: 44:63:98:69:6a:b8:eb:77:d6:f5:1a:78:a7:b3:2c: af:91:e9:e8:e8:58:10:82:54:fd:43:b8:3b:30:8c: e7:96:57:ea:c4:da:3e:0d:b1:c9:ef:12:69:9a:24: 2d:4f:37:5a:43:de:36:81:4b:57:3e:12:ca:73:a5: 2b:a8:fc:cf:85:e6:92:2b:95:5a:90:de:57:1b:b9: e7:c9:6d:0f:b3:7d:99:b0:1c:c4:41:9c:e9:ff:5f: 16:d1:13:57:a7:69:40:55:fb:9f:64:22:34:8d:59: 81:36:8d:1d:ab:5f:dd:72:9f:0e:95:57:d9:a7:12: 0c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:01:CD:BB:FD:58:FE:CB:88:52:92:DA:07:5D:33:4C:31:8A:4B:46 X509v3 Authority Key Identifier: keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d5:ec:93:5e:64:7b:01:fe:ad:a7:21:8c:df:01:c8:4e:bb: 6b:4f:61:de:8f:18:b2:95:67:75:75:f3:e7:cb:2e:d5:ff:e2: 1d:b7:73:30:ba:e9:49:0e:93:5d:fb:98:5e:71:53:44:c9:ae: 67:35:a1:0e:2f:22:9a:dd:73:a9:e7:b9:ee:e3:1c:e7:46:b1: a7:52:cf:16:91:9a:d3:bc:69:a2:7f:7e:45:06:49:06:c2:f7: a8:ba:35:ef:58:1f:80:52:44:76:1e:9b:13:27:a4:5a:00:5a: ee:85:d5:d1:7f:b6:d6:f8:41:a6:78:7a:6f:2a:4e:ed:e1:bc: f0:a0:9e:37:22:81:ba:8f:a9:d2:c5:2c:01:11:70:1a:b4:a9: aa:a8:c6:f2:4b:f7:26:92:80:0a:80:7f:39:87:e4:48:0b:83: 13:ac:92:eb:6c:5a:d9:9a:08:7e:1f:be:1d:80:47:50:52:96: 06:a9:5b:4c:56:e9:95:05:2c:ca:c6:d2:e0:99:67:92:30:7f: 4c:95:e6:21:a9:9e:5f:a3:3f:1f:0d:c3:57:45:f9:17:39:f7: 75:be:1f:6a:62:1e:10:d7:3a:84:03:2a:33:93:4c:50:4f:be: 0e:75:4f:af:5a:16:14:e4:1b:82:0e:a3:7d:d9:49:e0:62:df: 8c:8e:95:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDMzkxMTAvBgNVBAUTKDVEMEQ3NTAwNDk1NkVEQ0NBQjlCODQyNzFBNzM0MEU2 Mzg1NUZGOEEwHhcNMjUxMjMxMjExMDIwWhcNMjYwMTA3MjExMDIwWjAYMRYwFAYD VQQDDA02OTU1OTEzZC03YmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJ3EynUN6/+HjBHY/IBVWRVQMROtHfTGWFkP4SXW6dEkO4VuR0rFnrZkFyY9 d7U+pvtXnPq2vHGqjWcVSTvOAklQiCY9wwGgEh3Szz0tSH4GaJYZuictJn4mGmtQ bv2e2g+J/A8TxilkclBcssTM/1u4EtfMiQNovOn+VB9Z25pQnCDU3R1EY5hparjr d9b1Gninsyyvkeno6FgQglT9Q7g7MIznllfqxNo+DbHJ7xJpmiQtTzdaQ942gUtX PhLKc6UrqPzPheaSK5VakN5XG7nnyW0Ps32ZsBzEQZzp/18W0RNXp2lAVfufZCI0 jVmBNo0dq1/dcp8OlVfZpxIM3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0Bzbv9 WP7LiFKS2gddM0wxiktGMB8GA1UdIwQYMBaAFF0NdQBJVu3Mq5uEJxpzQOY4Vf+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkMzOS9CMzdCMTU4RTNG MjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdjeXJtNFFuR25OQTVqaFZf NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hRMTFBRWxXN2N5cm00UW5Hbk5BNWpoVl80by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkMzOS9CMzdCMTU4RTNGMjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdj eXJtNFFuR25OQTVqaFZfNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb1eyTXmR7Af6tpyGM3wHITrtrT2HejxiylWd1dfPnyy7V/+Idt3Mw uulJDpNd+5hecVNEya5nNaEOLyKa3XOp57nu4xznRrGnUs8WkZrTvGmif35FBkkG wveoujXvWB+AUkR2HpsTJ6RaAFruhdXRf7bW+EGmeHpvKk7t4bzwoJ43IoG6j6nS xSwBEXAatKmqqMbyS/cmkoAKgH85h+RIC4MTrJLrbFrZmgh+H74dgEdQUpYGqVtM VumVBSzKxtLgmWeSMH9MleYhqZ5foz8fDcNXRfkXOfd1vh9qYh4Q1zqEAyozk0xQ T74OdU+vWhYU5BuCDqN92UngYt+MjpWy -----END CERTIFICATE-----Generated at Thu Jan 1 12:33:26 2026 by rpki-client