This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json) Hash identifier: 617vxK7YcZhRCSSQDjAKiz6IH0Rsneck3sTECgAs6Lc= Subject key identifier: A3:0C:1B:20:BE:E4:56:91:FE:0B:2C:48:1F:7C:31:96:74:49:24:EB Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Certificate serial: 34CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft Manifest number: 34C9 Signing time: Thu 18 Dec 2025 15:14:37 +0000 Manifest this update: Thu 18 Dec 2025 15:14:37 +0000 Manifest next update: Thu 25 Dec 2025 15:14:37 +0000 Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: QpLqh1NOoJ6vaNrHG96pnK/GQoGh6/iYuj/FH9tlQmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13514 (0x34ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Validity Not Before: Dec 18 15:14:37 2025 GMT Not After : Dec 25 15:14:37 2025 GMT Subject: CN=69441a5d-11f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4a:06:3f:53:d7:c3:70:9d:c3:b2:f4:28:51: 0a:42:0f:55:ed:95:0f:44:4b:ed:b8:b7:63:59:fd: a7:6b:28:26:91:a4:f5:80:55:e0:8f:45:0b:5c:64: 48:d8:85:71:b0:81:8b:46:e9:fd:80:a0:b0:1c:83: 15:bc:78:62:44:8f:b7:fe:fe:c7:e6:98:15:89:cd: 3f:c3:67:6b:9a:49:3c:40:a4:7a:56:4c:59:d8:68: 58:74:55:e2:e7:eb:86:3f:41:a7:d5:3b:22:ba:c5: 75:de:4b:f5:09:6c:20:51:91:22:39:b9:9e:61:be: fd:c1:b3:b7:2a:bf:f7:fe:aa:70:6f:f1:82:24:af: bd:35:d1:81:54:ff:92:9b:e0:cd:34:af:06:1c:94: c2:b1:ce:f0:85:a4:d1:53:bb:6b:26:71:bd:93:f3: f7:9a:f0:84:2e:16:a9:9f:93:23:64:d4:24:eb:61: 9c:ee:3b:9e:3e:78:ed:65:f2:30:60:97:04:15:5c: cb:3c:28:ff:6f:1d:9c:f6:d5:de:c7:d5:4a:9f:0d: 53:f8:11:79:2c:90:03:98:0c:ee:45:dd:a3:5e:43: bf:4e:07:a4:65:6f:8d:a5:df:5a:29:27:90:21:ad: c5:ad:ab:cf:71:fe:8c:e0:fc:e6:8e:85:cd:21:f7: 96:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0C:1B:20:BE:E4:56:91:FE:0B:2C:48:1F:7C:31:96:74:49:24:EB X509v3 Authority Key Identifier: keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a9:43:9c:e2:3d:6b:2e:8d:0f:90:aa:e8:5d:56:66:df:5b: 74:21:b9:4a:3e:5c:20:23:e4:b2:75:e4:66:bf:2b:7f:f7:ed: 7a:7c:ec:8e:9c:08:19:0f:c7:90:c9:0f:05:a4:4e:19:a8:72: a5:09:39:45:86:db:f2:f5:05:50:ac:6d:22:a9:f9:db:a1:db: 23:87:4a:79:a1:48:f8:bc:fd:6c:ee:02:3b:59:7c:29:95:5e: 21:49:22:f1:05:1f:55:4c:03:b5:a0:97:e5:1b:6e:f9:3c:16: 27:4f:7c:78:58:fc:18:69:57:44:c9:21:0e:7c:5c:3b:fb:0e: ab:23:ad:d1:61:68:01:fe:33:4e:73:5e:e7:5e:a7:71:98:d7: 72:d6:d7:b8:23:dc:2a:f9:fc:ef:30:e6:39:7c:79:6e:02:7c: 82:ae:ea:c2:80:4c:c8:83:e6:02:5d:1b:39:08:51:86:f5:db: 84:38:43:99:89:ad:d5:5b:55:d6:af:07:62:3f:ce:73:82:22: 29:61:89:21:6e:9c:6a:78:85:69:02:1d:7e:c5:6b:c4:9b:3d: 7c:4d:95:96:14:1c:9f:71:86:c9:dc:41:41:f1:69:e1:68:8b: f0:9c:aa:fd:9f:ee:6d:34:6c:8d:b6:cf:8e:98:4e:19:c9:b1: f1:c5:a8:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2QjM0RjFGM0JE NjgxQTUzRTcwHhcNMjUxMjE4MTUxNDM3WhcNMjUxMjI1MTUxNDM3WjAYMRYwFAYD VQQDDA02OTQ0MWE1ZC0xMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60oGP1PXw3Cdw7L0KFEKQg9V7ZUPREvtuLdjWf2naygmkaT1gFXgj0ULXGRI 2IVxsIGLRun9gKCwHIMVvHhiRI+3/v7H5pgVic0/w2drmkk8QKR6VkxZ2GhYdFXi 5+uGP0Gn1TsiusV13kv1CWwgUZEiObmeYb79wbO3Kr/3/qpwb/GCJK+9NdGBVP+S m+DNNK8GHJTCsc7whaTRU7trJnG9k/P3mvCELhapn5MjZNQk62Gc7juePnjtZfIw YJcEFVzLPCj/bx2c9tXex9VKnw1T+BF5LJADmAzuRd2jXkO/TgekZW+Npd9aKSeQ Ia3FravPcf6M4PzmjoXNIfeWywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMMGyC+ 5FaR/gssSB98MZZ0SSTrMB8GA1UdIwQYMBaAFJl2+3FtL6ObvUc8azTx871oGlPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU5OC8zRTFEMUIyMjIz MzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81dTlSenhyTlBIenZXZ2FV LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21YYjdjVzB2bzV1OVJ6eHJOUEh6dldnYVUtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81 dTlSenhyTlBIenZXZ2FVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1qUOc4j1rLo0PkKroXVZm31t0IblKPlwgI+SydeRmvyt/9+16fOyO nAgZD8eQyQ8FpE4ZqHKlCTlFhtvy9QVQrG0iqfnbodsjh0p5oUj4vP1s7gI7WXwp lV4hSSLxBR9VTAO1oJflG275PBYnT3x4WPwYaVdEySEOfFw7+w6rI63RYWgB/jNO c17nXqdxmNdy1te4I9wq+fzvMOY5fHluAnyCrurCgEzIg+YCXRs5CFGG9duEOEOZ ia3VW1XWrwdiP85zgiIpYYkhbpxqeIVpAh1+xWvEmz18TZWWFByfcYbJ3EFB8Wnh aIvwnKr9n+5tNGyNts+OmE4ZybHxxajh -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:15 2025 by rpki-client