This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: VurfbCpmpsbnPuu40aIH+TbSzDoBpu4k7lwuX2hi9kY= Subject key identifier: E6:91:D4:98:AE:92:D7:13:41:2C:F0:6D:BB:B2:EB:5F:FF:E8:5A:68 Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 0189 Signing time: Fri 19 Dec 2025 02:45:13 +0000 Manifest this update: Fri 19 Dec 2025 02:45:13 +0000 Manifest next update: Fri 26 Dec 2025 02:45:13 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: Fq7vbZ3rg4jdJsXMNFwiC1YwzMSIxblRtePuQmIDnZE=) 2: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: Zs0S8blgDDMs3jrlGY37AkPWRyP83xeb73R0yUfKf24=) 3: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: x3typY+Rz1v7YQKoz8/eFq0vzVSoB9fMyJducWo5h8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Validity Not Before: Dec 19 02:45:13 2025 GMT Not After : Dec 26 02:45:13 2025 GMT Subject: CN=6944bc39-a041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:73:a3:81:d1:7f:af:b9:ce:81:b7:3c:ec: 08:85:a2:15:ae:21:62:90:df:c2:76:0a:44:b6:b6: 7d:08:e0:f3:ea:64:8b:2d:e1:b7:eb:ac:d1:94:d5: d7:97:5b:3d:ec:86:3b:31:22:bc:24:8d:a9:03:f1: 1b:f2:42:97:a8:1c:c5:db:1e:b8:5e:0b:10:09:4d: e4:0d:59:79:51:5a:dc:74:fe:24:e8:04:7f:43:aa: 90:64:81:4c:2c:82:fa:83:27:2c:d9:9d:53:a2:96: 52:b5:0f:58:69:73:6d:55:58:c6:63:c2:93:bb:49: 72:60:a7:ec:40:6c:61:22:d9:6b:62:da:6c:86:63: 1d:c6:da:b6:38:9d:2f:3c:0f:e5:40:b6:2a:44:8d: e0:6a:a0:ba:12:41:4f:91:27:bc:d8:01:91:59:7e: 02:af:b6:c8:63:e1:04:37:da:40:44:89:a6:6e:1d: b0:90:d5:89:7c:18:6c:8c:e8:10:2b:2d:a7:c6:23: 90:2f:85:82:e2:d0:b5:12:5c:64:cd:27:33:61:2c: fe:bf:88:80:59:e5:5c:cf:eb:af:9d:0b:96:94:71: 83:74:78:fe:2e:2a:ad:24:29:59:fa:34:cd:7b:89: b7:33:dc:0a:d7:b9:e5:f4:3c:81:7d:f6:97:74:a8: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:91:D4:98:AE:92:D7:13:41:2C:F0:6D:BB:B2:EB:5F:FF:E8:5A:68 X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:03:27:6f:f4:16:cd:28:bd:81:98:56:de:96:56:cb:77:e4: f5:01:de:3e:f2:99:41:c2:fe:be:01:09:1d:a8:98:b5:47:05: 8e:e2:88:96:e3:0a:fd:53:b4:11:ff:3d:b2:46:68:a6:41:c6: 80:ec:30:10:25:56:4b:eb:57:8c:28:58:09:51:48:80:58:2c: bd:08:ac:3f:16:15:ab:37:a1:af:fa:e8:de:45:e0:47:12:92: ac:07:d9:33:a2:01:d5:ca:a3:c7:00:a5:57:35:aa:78:3a:c1: 81:9f:55:63:56:2c:38:b2:3a:78:0c:40:d6:e1:73:87:61:d9: 75:7b:f1:a3:4c:45:d0:74:8d:aa:63:01:f1:cd:5a:10:d8:21: 46:3f:c4:da:5f:e2:20:b3:a9:22:9c:eb:57:25:f7:02:2c:10: 7e:0e:d8:ad:bb:6a:79:a7:0c:bd:47:18:7c:14:f6:89:07:11: fe:49:68:98:ef:91:5d:19:f4:51:55:6c:9c:1d:a8:89:1d:8c: f1:fb:ed:62:52:82:e0:38:78:9b:0e:36:71:eb:14:48:06:7d: 32:a2:22:50:f9:a2:4d:0f:1d:ab:6c:a0:ba:a0:b6:95:ff:f1: 42:70:08:5e:09:1f:a2:cb:a6:32:49:e8:05:3b:7d:87:74:96: 51:7d:97:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjUxMjE5MDI0NTEzWhcNMjUxMjI2MDI0NTEzWjAYMRYwFAYD VQQDDA02OTQ0YmMzOS1hMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmu1zo4HRf6+5zoG3POwIhaIVriFikN/CdgpEtrZ9CODz6mSLLeG366zRlNXX l1s97IY7MSK8JI2pA/Eb8kKXqBzF2x64XgsQCU3kDVl5UVrcdP4k6AR/Q6qQZIFM LIL6gycs2Z1TopZStQ9YaXNtVVjGY8KTu0lyYKfsQGxhItlrYtpshmMdxtq2OJ0v PA/lQLYqRI3gaqC6EkFPkSe82AGRWX4Cr7bIY+EEN9pARImmbh2wkNWJfBhsjOgQ Ky2nxiOQL4WC4tC1ElxkzSczYSz+v4iAWeVcz+uvnQuWlHGDdHj+LiqtJClZ+jTN e4m3M9wK17nl9DyBffaXdKhBjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOaR1Jiu ktcTQSzwbbuy61//6FpoMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtAydv9BbNKL2BmFbellbLd+T1Ad4+8plBwv6+AQkdqJi1RwWO4oiW 4wr9U7QR/z2yRmimQcaA7DAQJVZL61eMKFgJUUiAWCy9CKw/FhWrN6Gv+ujeReBH EpKsB9kzogHVyqPHAKVXNap4OsGBn1VjViw4sjp4DEDW4XOHYdl1e/GjTEXQdI2q YwHxzVoQ2CFGP8TaX+Igs6kinOtXJfcCLBB+Dtitu2p5pwy9Rxh8FPaJBxH+SWiY 75FdGfRRVWycHaiJHYzx++1iUoLgOHibDjZx6xRIBn0yoiJQ+aJNDx2rbKC6oLaV //FCcAheCR+iy6YySegFO32HdJZRfZeB -----END CERTIFICATE-----Generated at Fri Dec 19 21:54:39 2025 by rpki-client