This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: En5hWuqeqqFfQIgaUpzKayNI29DjjYzJCMnYv2V9t8Q= Subject key identifier: 9E:F4:BF:67:08:67:C5:26:CB:BE:0D:61:EF:7F:A9:93:D7:15:7F:27 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 069A Signing time: Thu 18 Dec 2025 22:01:06 +0000 Manifest this update: Thu 18 Dec 2025 22:01:06 +0000 Manifest next update: Thu 25 Dec 2025 22:01:06 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: m0gnC372foTxe9+m7gG4a+TQo9cbx3GfCQdtV0UpU9g=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: LSrolBGN7UPabxJ890l4XmiAUR5PqpPbsorrwuIp+6A=) 3: E1201A0422D611EFAE700044C4F9AE02.roa (hash: q5An5IejOkRYWLTS2K7o5KZUOm0z/1pEEu1xwJZBWV8=) 4: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: 4DBjk9RooSzZolI3F0wRR+UkFptKPPbZZIJnu5t3sTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Dec 18 22:01:06 2025 GMT Not After : Dec 25 22:01:06 2025 GMT Subject: CN=694479a2-f5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:46:8f:e5:a0:81:11:5c:48:8b:0b:b9:69: 30:f4:dd:ec:96:6d:78:bf:67:34:ec:26:7c:4b:00: 63:e5:42:80:5b:a3:dd:1e:c5:ec:29:0d:e8:ce:fc: 58:02:f1:8a:b2:46:d9:9c:20:8b:44:22:43:60:9d: 33:01:e7:b8:e1:53:25:ec:7b:2e:17:e3:25:f1:5a: cc:36:33:a8:d5:33:8b:5f:b7:a7:19:ad:82:5b:da: be:ad:f4:86:31:6c:83:e8:36:98:0d:25:b9:86:b3: 1e:50:bf:28:34:f6:e0:00:7a:1d:82:cd:dc:47:1b: 14:dc:90:80:2d:8e:83:fa:ac:30:a6:c5:5d:bf:f3: f4:70:3c:cd:cb:c6:57:d2:ef:5a:3f:ff:56:3a:cb: 3b:4b:dc:9a:af:23:61:8b:1a:fd:87:41:cd:26:79: 49:1b:04:70:26:4b:62:5b:be:ff:84:67:21:4f:17: fd:8a:71:aa:8f:0f:22:98:4d:12:8d:e0:ff:16:54: 18:48:4a:ff:6a:f7:78:d7:2a:c9:a5:ab:f5:3e:3f: d7:2b:da:af:bd:e6:42:fc:2a:1d:b0:5e:f7:ad:08: 31:29:81:bf:79:b6:8c:1e:b2:77:48:ed:95:a9:45: 60:d7:86:21:21:17:a5:03:e8:a6:1f:87:63:e8:cf: 27:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F4:BF:67:08:67:C5:26:CB:BE:0D:61:EF:7F:A9:93:D7:15:7F:27 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:2b:8e:4a:02:72:68:65:e2:e0:0a:f6:b6:9a:82:2b:4b:5d: f3:09:15:57:6e:af:68:fa:ee:7c:01:dc:d3:d2:92:95:68:76: 43:bc:80:a6:96:c2:da:e0:7c:f7:91:a6:10:54:3f:c7:b8:fd: 28:8f:43:f3:54:ee:6a:eb:67:ae:5b:d5:9f:73:0f:8a:f7:bb: aa:ea:dd:53:32:fd:b1:30:b7:24:77:d6:c4:c8:65:77:d7:4a: 61:5d:f3:ef:db:50:af:6b:ef:28:a6:c8:a5:0e:3e:bf:fd:7a: 09:ff:42:a2:6d:16:af:de:d7:a3:a4:65:7d:6f:a6:6a:a9:16: 92:0a:4a:82:dc:f1:cc:83:1f:b1:30:d9:1d:05:05:2a:a6:f4: 19:30:09:74:b2:2d:f0:1d:f0:bf:a1:22:2a:4f:20:6c:a7:5c: 1b:c5:e2:96:ee:2f:08:c6:a2:99:dd:29:6a:4e:92:9d:ec:83: 8b:e5:06:da:c9:a0:e7:53:94:40:7c:64:48:46:b7:9a:e2:71: 26:5f:45:7a:0d:7a:0f:59:c2:95:95:01:96:c4:2d:1f:b6:a3: dd:f0:8d:9e:60:7b:c6:40:fc:b3:ba:c7:67:ef:ce:93:83:e3: 3a:a2:d6:88:23:2f:b5:c2:60:ec:aa:a4:1f:15:c8:dd:ed:ff: 3a:91:58:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUxMjE4MjIwMTA2WhcNMjUxMjI1MjIwMTA2WjAYMRYwFAYD VQQDDA02OTQ0NzlhMi1mNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCJGj+WggRFcSIsLuWkw9N3slm14v2c07CZ8SwBj5UKAW6PdHsXsKQ3ozvxY AvGKskbZnCCLRCJDYJ0zAee44VMl7HsuF+Ml8VrMNjOo1TOLX7enGa2CW9q+rfSG MWyD6DaYDSW5hrMeUL8oNPbgAHodgs3cRxsU3JCALY6D+qwwpsVdv/P0cDzNy8ZX 0u9aP/9WOss7S9yaryNhixr9h0HNJnlJGwRwJktiW77/hGchTxf9inGqjw8imE0S jeD/FlQYSEr/avd41yrJpav1Pj/XK9qvveZC/CodsF73rQgxKYG/ebaMHrJ3SO2V qUVg14YhIRelA+imH4dj6M8n7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ70v2cI Z8Umy74NYe9/qZPXFX8nMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2K45KAnJoZeLgCva2moIrS13zCRVXbq9o+u58AdzT0pKVaHZDvICm lsLa4Hz3kaYQVD/HuP0oj0PzVO5q62euW9Wfcw+K97uq6t1TMv2xMLckd9bEyGV3 10phXfPv21Cva+8opsilDj6//XoJ/0KibRav3tejpGV9b6ZqqRaSCkqC3PHMgx+x MNkdBQUqpvQZMAl0si3wHfC/oSIqTyBsp1wbxeKW7i8IxqKZ3SlqTpKd7IOL5Qba yaDnU5RAfGRIRrea4nEmX0V6DXoPWcKVlQGWxC0ftqPd8I2eYHvGQPyzusdn786T g+M6otaIIy+1wmDsqqQfFcjd7f86kVhA -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:32 2025 by rpki-client