This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: TM1B5BkjVyZAUtBm3cnLSW3muEi2p+mKLfsas6F3eQk= Subject key identifier: 1F:D6:30:97:24:A4:37:BB:6A:16:FB:4F:A7:3A:93:0E:7A:4F:6B:E9 Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 0260 Signing time: Sat 27 Dec 2025 00:56:46 +0000 Manifest this update: Sat 27 Dec 2025 00:56:46 +0000 Manifest next update: Sat 03 Jan 2026 00:56:46 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: VQ/brDM4qPgVIqxlGeD8cGUX92DmLQrp/iEU8Qd3MLA=) 2: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: 4uRsfI3UTikSBwFuE1LkYP4yx1HQPN2T4+sSHop7B54=) 3: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: D+g5jzuWcvphD1ps8jnw5QvvfxsQjGFWKglonqcWSi0=) 4: CD152404495B11EF93EA3757C4F9AE02.roa (hash: G7ZmL/GFUdvItC3mb/pIr2VOosfHx+vaBIP/nBv1gCo=) 5: 6121C23230AC11F08C150767C4F9AE02.roa (hash: fShyVa3rIna9iRvZNHAjyEZoQgutIuaEQEMpg+RXaTc=) 6: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: Kuncg/OKHO6KINevgnEgm8twmyohuTIV8xS8NsrR5Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 00:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Dec 27 00:56:46 2025 GMT Not After : Jan 3 00:56:46 2026 GMT Subject: CN=694f2ece-54c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:0d:8b:9c:97:80:d6:35:72:7f:f6:fe:c4: 77:b7:22:28:24:af:fd:d9:1a:27:60:5e:b7:c3:2d: 0b:77:aa:26:81:27:37:f2:c9:25:31:d0:f2:66:4b: cf:87:cd:c9:2f:a6:64:16:c4:9e:b9:c3:33:d3:9d: 29:5c:00:33:71:e9:93:80:1f:48:59:7b:78:69:e5: 19:4f:74:e9:e4:9d:8c:8e:cd:e4:f9:c1:fd:27:21: e3:a6:96:34:06:84:14:0b:b3:22:3d:f1:29:d3:ba: 48:7b:e1:db:00:f7:ff:cc:db:31:15:95:1c:26:d1: b8:84:3f:7f:6b:50:8b:b2:66:4b:58:4b:89:d7:82: 34:a6:a2:d0:40:99:9b:83:2e:dd:d8:e5:a3:8c:c4: 54:0f:f9:e8:e2:97:c2:45:51:0e:2d:c8:a3:cf:8d: 35:c5:0f:41:17:7b:0b:ad:13:57:9e:46:7f:28:40: d6:d4:96:36:5e:fa:4c:5d:33:e1:69:76:2a:48:2d: 1a:9f:85:c8:cb:c2:2d:21:5b:e1:6b:2c:b7:83:ad: c9:99:7a:d3:80:23:97:dc:bd:94:ae:17:ba:11:cf: ca:27:83:e0:fa:5b:8b:0f:e4:2e:53:93:83:42:98: e6:a3:26:24:fe:dd:72:68:af:ad:8b:77:23:7d:36: 7f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:30:97:24:A4:37:BB:6A:16:FB:4F:A7:3A:93:0E:7A:4F:6B:E9 X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:84:1b:fb:be:90:5c:e3:8c:84:98:2c:16:06:a7:30:f4:a6: 56:b0:9f:e3:bc:f9:6f:62:0b:b9:20:3d:6f:a3:44:21:a4:1a: 9f:e0:5f:e5:8e:bb:3e:25:35:50:2f:81:ab:f8:6c:a2:df:83: 00:f6:f0:cb:4d:1b:4b:a4:94:ca:0b:a9:94:f3:b8:41:47:7e: 02:8e:b0:09:3d:49:f2:7b:0b:75:9a:8c:8a:f7:91:4b:30:a5: ac:b8:b2:98:ad:f4:fb:aa:85:c7:b3:3c:3c:43:74:fb:97:2b: 5f:80:ad:01:42:9c:2d:83:cb:3c:6f:42:b2:74:a6:53:6e:0d: 3a:74:c0:83:c3:2a:1b:31:9c:ea:91:fb:d9:fd:dc:08:05:23: 69:de:5a:87:3c:dc:c6:f6:e5:53:94:2c:48:9a:c1:57:36:31: 70:29:38:74:18:63:78:12:3e:06:a8:4d:ee:93:68:ef:00:46: b0:77:16:ea:78:19:c3:82:b0:b0:90:02:36:b2:71:83:15:7d: 63:4b:91:1c:bc:95:47:ef:a8:6b:42:01:b6:3f:84:b6:8a:37: b7:f3:50:d0:8a:89:78:c2:7c:fb:f4:d5:b8:8f:21:c5:f5:33: b0:b3:8b:44:8d:0b:5d:ec:e6:02:33:b7:b8:22:bf:99:0c:15: 18:26:e0:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjUxMjI3MDA1NjQ2WhcNMjYwMTAzMDA1NjQ2WjAYMRYwFAYD VQQDDA02OTRmMmVjZS01NGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEsNi5yXgNY1cn/2/sR3tyIoJK/92RonYF63wy0Ld6omgSc38sklMdDyZkvP h83JL6ZkFsSeucMz050pXAAzcemTgB9IWXt4aeUZT3Tp5J2Mjs3k+cH9JyHjppY0 BoQUC7MiPfEp07pIe+HbAPf/zNsxFZUcJtG4hD9/a1CLsmZLWEuJ14I0pqLQQJmb gy7d2OWjjMRUD/no4pfCRVEOLcijz401xQ9BF3sLrRNXnkZ/KEDW1JY2XvpMXTPh aXYqSC0an4XIy8ItIVvhayy3g63JmXrTgCOX3L2Urhe6Ec/KJ4Pg+luLD+QuU5OD QpjmoyYk/t1yaK+ti3cjfTZ/rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/WMJck pDe7ahb7T6c6kw56T2vpMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4hBv7vpBc44yEmCwWBqcw9KZWsJ/jvPlvYgu5ID1vo0QhpBqf4F/l jrs+JTVQL4Gr+Gyi34MA9vDLTRtLpJTKC6mU87hBR34CjrAJPUnyewt1moyK95FL MKWsuLKYrfT7qoXHszw8Q3T7lytfgK0BQpwtg8s8b0KydKZTbg06dMCDwyobMZzq kfvZ/dwIBSNp3lqHPNzG9uVTlCxImsFXNjFwKTh0GGN4Ej4GqE3uk2jvAEawdxbq eBnDgrCwkAI2snGDFX1jS5EcvJVH76hrQgG2P4S2ije381DQiol4wnz79NW4jyHF 9TOws4tEjQtd7OYCM7e4Ir+ZDBUYJuC8 -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:21 2025 by rpki-client