This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json) Hash identifier: znBXixDpaygiixiFwyzVcnglFVOB9roym3dB9ZIAdGg= Subject key identifier: 12:DA:1E:5C:46:08:BF:C5:4A:B1:0E:DD:1E:B0:04:FA:4D:F5:85:60 Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft Manifest number: 06DD Signing time: Tue 30 Dec 2025 21:20:21 +0000 Manifest this update: Tue 30 Dec 2025 21:20:20 +0000 Manifest next update: Tue 06 Jan 2026 21:20:20 +0000 Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: u3uNKkTpRwBN73YumTm/9nWjVyei4JCNvuvGB2w/YMk=) 2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: LymCYpP9ODjDnMZgIvd8/QCM8E6rGc1JYF+pBCdV8o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 21:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Validity Not Before: Dec 30 21:20:20 2025 GMT Not After : Jan 6 21:20:20 2026 GMT Subject: CN=69544215-b137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:f6:33:bc:9e:d8:a2:27:62:b1:33:1f:a7: 0c:b3:05:57:80:b9:fd:15:33:90:cd:78:c3:16:43: 32:26:de:00:82:cb:7a:06:c3:5e:85:66:fa:5a:09: 23:86:26:1f:1c:ee:6f:d8:5b:ca:6c:09:d0:94:87: 65:f6:31:ce:1c:f6:24:cf:3e:20:d4:4d:6b:34:4b: 70:93:45:74:ff:28:49:5e:9b:7c:09:83:10:1f:d8: e5:a6:38:67:a5:95:b6:cf:fd:d1:75:f9:cb:7b:e0: 07:41:1c:d4:9c:d0:af:cb:73:17:9a:87:94:06:ac: 4c:8c:1c:57:62:07:2f:c3:48:89:44:5f:21:f4:02: 5e:7c:2e:6c:f2:69:0d:f8:c9:d9:76:99:e8:55:92: ba:88:5a:24:96:6a:79:f0:49:fc:64:49:1d:cf:9a: 91:82:74:f6:39:ba:e9:6c:52:1f:96:bc:c1:6a:e8: 94:4a:4a:23:2c:ee:4f:12:12:de:96:42:76:b0:33: 1c:e7:07:73:25:e7:b3:9b:00:8d:9f:d8:34:5d:6c: 7c:5e:de:ac:84:26:fc:49:50:55:62:a4:24:9b:e5: da:75:cf:49:55:d2:d3:a6:db:fc:54:da:c5:82:f4: af:30:e6:8d:a9:53:e2:42:c0:ad:1d:f1:3d:fa:63: e4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DA:1E:5C:46:08:BF:C5:4A:B1:0E:DD:1E:B0:04:FA:4D:F5:85:60 X509v3 Authority Key Identifier: keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d3:a3:ca:8b:2c:b4:16:ed:8a:2c:a0:ea:47:e1:11:2a:0b: 8d:aa:96:70:8d:30:0d:53:58:e3:a0:b6:cc:a7:bb:f5:9b:70: 2f:d7:fd:c9:71:19:fd:4b:b3:ad:c9:60:3b:1f:d0:d9:e7:de: f0:b6:af:a5:5f:8b:d4:3d:c5:32:c1:34:41:a9:4d:71:91:8f: f3:34:9f:8b:6b:b0:64:a2:c6:70:81:79:9f:fc:c0:16:19:57: b3:3d:8d:69:0c:f0:57:8b:ce:e2:1f:7d:85:63:53:81:1d:7b: 36:99:32:32:f4:42:1f:5e:27:59:a7:9d:14:95:41:d3:82:0e: c4:4a:5c:e9:58:4d:39:56:e5:1d:ce:6a:b3:95:78:72:9f:fa: df:e8:65:95:9c:2b:eb:6b:cb:17:57:60:33:0c:46:18:55:f2: e3:ed:ea:52:c7:4c:35:6b:e1:28:58:aa:d6:18:f4:e7:24:b9: d1:36:1c:4b:69:26:74:a4:3f:11:ab:5c:2c:58:90:16:64:48: 35:3f:6e:33:c3:be:40:56:a4:9f:50:58:c9:5e:ab:93:d4:bf: b1:51:13:1b:7c:12:a7:a0:07:43:5b:7b:66:6b:c1:77:d4:d6: a9:49:f2:a1:45:7f:5f:5f:8d:c4:bc:a1:29:3f:5e:e8:56:64: 86:64:09:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2RTE0QjEwMDFD MDgxOUREQTkwHhcNMjUxMjMwMjEyMDIwWhcNMjYwMTA2MjEyMDIwWjAYMRYwFAYD VQQDDA02OTU0NDIxNS1iMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvn2M7ye2KInYrEzH6cMswVXgLn9FTOQzXjDFkMyJt4Agst6BsNehWb6Wgkj hiYfHO5v2FvKbAnQlIdl9jHOHPYkzz4g1E1rNEtwk0V0/yhJXpt8CYMQH9jlpjhn pZW2z/3RdfnLe+AHQRzUnNCvy3MXmoeUBqxMjBxXYgcvw0iJRF8h9AJefC5s8mkN +MnZdpnoVZK6iFoklmp58En8ZEkdz5qRgnT2ObrpbFIflrzBauiUSkojLO5PEhLe lkJ2sDMc5wdzJeezmwCNn9g0XWx8Xt6shCb8SVBVYqQkm+Xadc9JVdLTptv8VNrF gvSvMOaNqVPiQsCtHfE9+mPkvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLaHlxG CL/FSrEO3R6wBPpN9YVgMB8GA1UdIwQYMBaAFMaTmbEy4a5rLqMRbhSxABwIGd2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDA1Qy9ERUNFMEYwQTdC RDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJtc3VveEZ1RkxFQUhBZ1oz YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwT1pzVExocm1zdW94RnVGTEVBSEFnWjNhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJt c3VveEZ1RkxFQUhBZ1ozYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk06PKiyy0Fu2KLKDqR+ERKguNqpZwjTANU1jjoLbMp7v1m3Av1/3J cRn9S7OtyWA7H9DZ597wtq+lX4vUPcUywTRBqU1xkY/zNJ+La7BkosZwgXmf/MAW GVezPY1pDPBXi87iH32FY1OBHXs2mTIy9EIfXidZp50UlUHTgg7ESlzpWE05VuUd zmqzlXhyn/rf6GWVnCvra8sXV2AzDEYYVfLj7epSx0w1a+EoWKrWGPTnJLnRNhxL aSZ0pD8Rq1wsWJAWZEg1P24zw75AVqSfUFjJXquT1L+xURMbfBKnoAdDW3tma8F3 1NapSfKhRX9fX43EvKEpP17oVmSGZAkx -----END CERTIFICATE-----Generated at Wed Dec 31 21:05:37 2025 by rpki-client