This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft File: fX8vgARwzrGTx-t4mDlZW3YnR08.mft (raw, json) Hash identifier: nch/IC+I1bzT++VwwMEDaGPlV8N7q2ivME0bOo8Fvv8= Subject key identifier: 66:BE:6B:07:27:8D:6A:1C:FF:29:45:B8:48:0F:64:F6:2D:DC:06:FD Authority key identifier: 7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F Certificate issuer: /CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F Certificate serial: 045E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft Manifest number: 0459 Signing time: Thu 18 Dec 2025 23:32:01 +0000 Manifest this update: Thu 18 Dec 2025 23:32:01 +0000 Manifest next update: Thu 25 Dec 2025 23:32:01 +0000 Files and hashes: 1: fX8vgARwzrGTx-t4mDlZW3YnR08.crl (hash: VNZnvsgpmRVSNmk6YX2GhJzxT0QilnpKljggkw6mLvw=) 2: 6D7B126C798111ECBBDBD359C4F9AE02.roa (hash: /YRqYU90YDZ0BB8h7DVq8vq1Y8LqXd8MHd/2GrUzXEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F700, serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F Validity Not Before: Dec 18 23:32:01 2025 GMT Not After : Dec 25 23:32:01 2025 GMT Subject: CN=69448ef1-fd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:95:b0:a9:45:b1:e7:aa:ac:28:ae:02:f0: e0:35:8a:94:21:7c:01:05:7f:0c:a8:db:8e:dd:dd: 8b:e1:f6:74:2c:62:7c:36:2b:b1:7d:97:5f:c9:44: 8e:b3:20:76:4d:fd:56:51:61:e1:0f:cf:bd:f5:f4: a1:2d:41:fb:2c:7a:32:14:80:d0:f3:ca:7a:2c:46: c6:08:15:10:d2:b4:24:a6:5a:cf:d3:7e:a5:18:c8: 4e:57:34:96:aa:0c:9c:24:fa:da:00:48:34:52:c7: d0:06:8f:b9:df:c2:af:26:8c:9c:52:58:8b:d4:3c: da:70:a4:9f:f3:ce:95:8e:f6:e4:5e:59:81:3f:5f: 6e:08:bc:5a:1c:f3:72:86:94:aa:a6:ce:da:7a:6a: b4:c0:ed:d2:89:bb:3e:ab:c5:25:46:9b:94:aa:89: d8:17:46:90:cb:c3:74:96:70:89:e3:0d:5a:9b:39: 06:91:13:78:c7:be:6e:cb:4c:68:e7:18:f5:d8:d4: 4e:46:79:77:4d:15:41:3e:7d:30:4a:44:e9:9d:9c: b7:57:4e:f7:6c:e1:0f:96:ab:c5:58:08:31:71:2d: 4c:24:ab:8b:a1:ed:5d:36:72:25:bf:a0:38:b1:34: b0:15:d4:07:e7:4c:3f:00:98:ae:0f:1c:06:f8:ca: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BE:6B:07:27:8D:6A:1C:FF:29:45:B8:48:0F:64:F6:2D:DC:06:FD X509v3 Authority Key Identifier: keyid:7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:73:d9:c0:5b:7f:ab:52:11:39:a6:73:71:6a:89:3a:4c:0f: 09:fb:40:34:10:e0:c2:af:9a:25:3a:ce:8c:b1:8e:f6:80:f0: 85:2f:0d:61:b1:b7:2a:00:7d:54:68:ec:b0:9f:bb:47:65:ea: 23:62:bb:d0:e6:c9:35:13:ce:22:fa:2c:69:ee:a7:6d:54:13: 12:01:0e:79:c0:7a:6a:54:32:08:1f:e7:a5:f2:27:13:e1:cf: d7:a4:db:c7:6f:2b:9f:ed:48:8c:55:64:53:eb:b1:b0:85:97: 20:c5:24:6c:01:ca:79:63:a6:01:39:01:c5:c5:40:75:ae:25: 5c:4e:b6:e7:e9:4f:90:04:aa:cd:b0:c0:2b:4d:d8:92:a9:5d: e1:15:ac:b8:af:1e:ab:37:24:69:ed:32:48:44:d0:59:9f:21: fd:7f:e4:4c:24:14:1a:94:96:32:e7:0d:4b:71:cd:8f:45:8e: fb:22:a5:51:b6:0b:5d:cc:fc:16:7a:ed:37:49:66:67:3a:cb: 75:3a:ed:68:d4:31:2b:1b:01:5a:1f:a0:63:c2:e8:fc:54:c9: e3:52:15:1f:39:2b:43:0c:54:50:8e:e7:32:e7:e3:bb:53:e4: 84:81:1e:63:b4:60:c7:41:3d:63:79:0c:a0:02:74:f6:a8:6a: 01:a5:8d:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY3MDAxMTAvBgNVBAUTKDdEN0YyRjgwMDQ3MENFQjE5M0M3RUI3ODk4Mzk1OTVC NzYyNzQ3NEYwHhcNMjUxMjE4MjMzMjAxWhcNMjUxMjI1MjMzMjAxWjAYMRYwFAYD VQQDDA02OTQ0OGVmMS1mZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpCVsKlFseeqrCiuAvDgNYqUIXwBBX8MqNuO3d2L4fZ0LGJ8NiuxfZdfyUSO syB2Tf1WUWHhD8+99fShLUH7LHoyFIDQ88p6LEbGCBUQ0rQkplrP036lGMhOVzSW qgycJPraAEg0UsfQBo+538KvJoycUliL1DzacKSf886VjvbkXlmBP19uCLxaHPNy hpSqps7aemq0wO3Sibs+q8UlRpuUqonYF0aQy8N0lnCJ4w1amzkGkRN4x75uy0xo 5xj12NRORnl3TRVBPn0wSkTpnZy3V073bOEPlqvFWAgxcS1MJKuLoe1dNnIlv6A4 sTSwFdQH50w/AJiuDxwG+Mpi2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGa+awcn jWoc/ylFuEgPZPYt3Ab9MB8GA1UdIwQYMBaAFH1/L4AEcM6xk8freJg5WVt2J0dP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjcwMC9ENEM1REIxMjc5 N0UxMUVDOENENzgyNTdDNEY5QUUwMi9mWDh2Z0FSd3pyR1R4LXQ0bURsWlczWW5S MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYOHZnQVJ3enJHVHgtdDRtRGxaVzNZblIwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjcwMC9ENEM1REIxMjc5N0UxMUVDOENENzgyNTdDNEY5QUUwMi9mWDh2Z0FSd3py R1R4LXQ0bURsWlczWW5SMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATc9nAW3+rUhE5pnNxaok6TA8J+0A0EODCr5olOs6MsY72gPCFLw1h sbcqAH1UaOywn7tHZeojYrvQ5sk1E84i+ixp7qdtVBMSAQ55wHpqVDIIH+el8icT 4c/XpNvHbyuf7UiMVWRT67GwhZcgxSRsAcp5Y6YBOQHFxUB1riVcTrbn6U+QBKrN sMArTdiSqV3hFay4rx6rNyRp7TJIRNBZnyH9f+RMJBQalJYy5w1Lcc2PRY77IqVR tgtdzPwWeu03SWZnOst1Ou1o1DErGwFaH6Bjwuj8VMnjUhUfOStDDFRQjucy5+O7 U+SEgR5jtGDHQT1jeQygAnT2qGoBpY0W -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:19 2025 by rpki-client