This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: MlYfcWTeZeANkVyeqINpnfxPwa9iunFJJsYRWN3/x5k= Subject key identifier: A6:3C:69:0E:6A:8D:CA:C0:5A:12:2D:1A:D2:BD:4C:C4:1E:20:22:9B Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 025C Signing time: Fri 19 Dec 2025 01:09:45 +0000 Manifest this update: Fri 19 Dec 2025 01:09:44 +0000 Manifest next update: Fri 26 Dec 2025 01:09:44 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: chUWsVq/QZrXnST1ec0hvqJK661f/7+d3h5F6Wnbo+4=) 2: 6121C23230AC11F08C150767C4F9AE02.roa (hash: fShyVa3rIna9iRvZNHAjyEZoQgutIuaEQEMpg+RXaTc=) 3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: Kuncg/OKHO6KINevgnEgm8twmyohuTIV8xS8NsrR5Yw=) 4: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: 4uRsfI3UTikSBwFuE1LkYP4yx1HQPN2T4+sSHop7B54=) 5: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: D+g5jzuWcvphD1ps8jnw5QvvfxsQjGFWKglonqcWSi0=) 6: CD152404495B11EF93EA3757C4F9AE02.roa (hash: G7ZmL/GFUdvItC3mb/pIr2VOosfHx+vaBIP/nBv1gCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Dec 19 01:09:44 2025 GMT Not After : Dec 26 01:09:44 2025 GMT Subject: CN=6944a5d9-2205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:fd:88:2f:6b:35:63:4b:59:00:83:b1:73: 73:d1:32:87:46:12:f6:22:a7:0b:21:8b:64:ee:14: 5f:51:2b:cd:42:0a:79:5f:32:14:b3:37:e4:9e:e2: f6:7c:4b:e2:74:31:68:75:fd:7c:2a:ab:4a:98:ee: 1c:fe:1c:7a:47:c3:5f:fd:8c:ee:38:d5:c8:c9:05: 0e:42:df:e8:8c:7a:38:5e:0c:26:f7:82:bf:73:13: 94:ce:ee:cf:55:de:eb:ab:a3:0d:a6:e3:e1:d5:ff: 61:8d:ce:1a:06:fd:97:ec:f3:7f:0d:d8:00:8f:3a: c7:b1:12:55:28:65:eb:db:e7:af:f4:71:f1:a6:d8: 02:a9:10:36:b0:31:19:8a:d7:54:fe:21:a8:53:24: cc:30:2c:db:fb:06:a6:f3:ac:9c:31:9e:18:cf:3d: 9c:51:aa:a1:5a:a8:59:a7:c9:5c:1e:93:eb:6f:9c: c2:f0:94:6d:ff:4c:e8:81:45:0b:69:37:fb:ac:6d: ab:aa:e1:09:90:8c:d7:44:93:3e:9e:5d:72:f8:50: d1:c2:33:32:b5:a2:02:3c:d5:07:66:02:e5:a4:67: 33:c5:67:ab:af:d5:5f:92:f4:0d:84:2b:93:67:95: b3:75:00:6a:78:f9:fd:51:5e:39:16:b9:ac:86:8d: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3C:69:0E:6A:8D:CA:C0:5A:12:2D:1A:D2:BD:4C:C4:1E:20:22:9B X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b4:ba:3d:0c:b7:33:b6:c8:24:fe:f9:db:43:7a:0b:61:00: fe:66:a2:f3:85:35:64:34:d8:55:2f:3f:a0:c4:8b:06:26:84: 9f:21:59:83:d9:41:0b:f0:d3:7c:59:e7:72:af:b6:9b:df:86: ea:89:59:65:4d:e0:81:e2:30:e4:12:36:76:6d:b4:29:86:43: 3f:45:2e:fe:f1:63:f9:81:c9:99:d1:e9:c7:1b:fe:29:1c:42: a3:4c:f2:c5:7b:70:97:94:21:cf:80:75:08:f3:f6:d2:b6:1a: 67:61:83:60:bf:74:73:f1:94:50:21:ed:5e:32:43:1d:6f:29: 19:06:96:ce:64:4c:14:56:39:f5:fb:0d:0a:ad:6b:0b:dc:20: a8:aa:00:bc:3c:b4:58:c2:14:9d:b3:34:27:e0:18:9a:fc:79: a7:fa:00:00:8c:fb:37:8b:f0:0a:2e:07:a5:f8:b8:b1:1f:b4: 8a:54:71:1e:e8:74:bf:9c:78:42:3c:d4:63:87:30:57:5f:0c: 7e:9b:7f:33:df:8e:ac:a2:cd:b3:d5:cc:59:fd:aa:58:31:3d: d0:c6:ea:b0:e9:2c:2a:26:1d:9a:0d:b9:9c:9c:5e:31:4c:a5: b6:f3:f7:0f:4c:13:98:27:a8:26:8f:36:8b:09:73:03:30:b6: c2:9b:bb:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjUxMjE5MDEwOTQ0WhcNMjUxMjI2MDEwOTQ0WjAYMRYwFAYD VQQDDA02OTQ0YTVkOS0yMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LP9iC9rNWNLWQCDsXNz0TKHRhL2IqcLIYtk7hRfUSvNQgp5XzIUszfknuL2 fEvidDFodf18KqtKmO4c/hx6R8Nf/YzuONXIyQUOQt/ojHo4Xgwm94K/cxOUzu7P Vd7rq6MNpuPh1f9hjc4aBv2X7PN/DdgAjzrHsRJVKGXr2+ev9HHxptgCqRA2sDEZ itdU/iGoUyTMMCzb+wam86ycMZ4Yzz2cUaqhWqhZp8lcHpPrb5zC8JRt/0zogUUL aTf7rG2rquEJkIzXRJM+nl1y+FDRwjMytaICPNUHZgLlpGczxWerr9VfkvQNhCuT Z5WzdQBqePn9UV45Frmsho02IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY8aQ5q jcrAWhItGtK9TMQeICKbMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBktLo9DLcztsgk/vnbQ3oLYQD+ZqLzhTVkNNhVLz+gxIsGJoSfIVmD 2UEL8NN8Wedyr7ab34bqiVllTeCB4jDkEjZ2bbQphkM/RS7+8WP5gcmZ0enHG/4p HEKjTPLFe3CXlCHPgHUI8/bSthpnYYNgv3Rz8ZRQIe1eMkMdbykZBpbOZEwUVjn1 +w0KrWsL3CCoqgC8PLRYwhSdszQn4Bia/Hmn+gAAjPs3i/AKLgel+LixH7SKVHEe 6HS/nHhCPNRjhzBXXwx+m38z346sos2z1cxZ/apYMT3Qxuqw6SwqJh2aDbmcnF4x TKW28/cPTBOYJ6gmjzaLCXMDMLbCm7s4 -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:53 2025 by rpki-client