This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json) Hash identifier: uMyVWH12Dy/dYuEwFiDClVh0qWkBk72vLr1lXGvZfpw= Subject key identifier: F1:FD:D7:37:D1:BC:1A:3F:1B:6C:B4:9D:68:E7:0C:F2:73:C5:CE:55 Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft Manifest number: 0780 Signing time: Thu 18 Dec 2025 21:02:59 +0000 Manifest this update: Thu 18 Dec 2025 21:02:59 +0000 Manifest next update: Thu 25 Dec 2025 21:02:59 +0000 Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: GQ0xIG8v7VlGPBS9q9YQJyc9GoAwRwGQfyAW7+ZaUxQ=) 2: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: aIhdOoGq/5IV6Mhns4F3omRFw08MxMY0t1LOWZhYXz8=) 3: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: qHbtyOGNfvy85AlmzO8CEnT5fTz9AwvvFi0y6XbFwG0=) 4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: ZsYDlTfdZ4GWQgL9mV+7VPUB+1RhWLSObaxg0y98Kxs=) 5: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: SFXCFjWV3nIjHDr4Y0nX1h+ByORJe0z+8s0nBYc0bds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Validity Not Before: Dec 18 21:02:59 2025 GMT Not After : Dec 25 21:02:59 2025 GMT Subject: CN=69446c03-0c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:7f:f7:c8:5a:3d:86:b8:47:92:c3:c1:56: 60:76:ea:3e:4c:6d:59:4d:76:32:02:64:98:38:4e: e5:5a:e7:9c:e9:5b:da:ff:a6:2c:d1:21:07:c1:5b: 41:ac:9c:33:71:ee:45:42:45:2b:03:c3:6c:d5:c6: 6d:a9:30:b5:7e:61:d6:48:e9:0d:59:3c:b6:51:46: 8b:e5:e0:d9:9d:b6:df:d9:95:16:f1:fe:22:c1:76: 04:97:c3:e4:3d:5c:29:19:38:45:7a:46:40:f1:83: d3:83:59:f8:7f:cb:32:eb:e5:fb:4d:d3:c7:58:c2: 01:a7:b9:fb:1d:24:b6:93:4c:68:85:0c:ce:3c:d9: 68:9b:13:e7:ce:9d:7d:df:ca:c7:00:c3:61:ff:2a: c5:74:7c:ad:1a:88:fb:dc:d1:cd:fe:f5:5b:59:0b: 0f:ae:cc:0e:8e:4c:ed:9a:40:03:a5:7d:1c:7f:a3: 9f:04:33:dc:a8:82:d1:20:e0:8f:b8:f3:bc:75:56: 3a:f1:1e:18:53:30:74:a3:ad:f6:09:13:0f:1a:bc: bd:87:38:3c:5f:ab:12:bf:d8:22:39:a2:51:11:ec: 3e:58:e7:1c:79:82:73:45:cb:4f:df:9d:95:87:05: 15:c0:65:7a:ef:8c:65:d7:da:5b:38:ae:6b:d6:3e: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FD:D7:37:D1:BC:1A:3F:1B:6C:B4:9D:68:E7:0C:F2:73:C5:CE:55 X509v3 Authority Key Identifier: keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a7:d1:3d:c4:58:77:c3:43:ac:12:46:79:4b:ce:c9:e7:d9: 52:bb:fa:60:c5:f8:33:f6:45:1d:71:91:ac:2e:37:19:3c:24: 1a:13:6c:32:0c:79:b5:fb:18:b3:4b:7d:99:bf:40:a9:f7:de: bd:56:a3:03:46:0d:15:a4:7f:e6:5f:0e:50:37:19:28:89:2f: 75:5e:91:f9:79:9d:d4:45:d8:be:56:ed:7b:cb:5b:07:d4:0d: 59:e5:3b:6d:7e:ac:f7:b4:4b:29:a1:d2:23:1e:1c:82:63:32: c4:3b:b4:fb:88:f1:3e:e1:17:b7:05:8b:18:50:89:b0:84:18: 7e:49:c0:df:e8:80:24:40:fa:2b:9f:58:5a:9e:fa:77:33:6c: df:78:74:db:08:bc:b5:81:8d:d3:d3:aa:e7:4d:84:51:f7:5e: 66:1a:21:52:b0:62:0f:c9:8c:88:58:e8:13:00:e2:f2:97:94: 9d:38:00:ef:1c:04:df:ce:c4:b4:dc:b4:84:6a:2c:04:81:47: 47:b2:a1:c0:60:db:4e:7e:ba:9d:7b:c3:49:72:ef:87:5d:5d: ec:06:1b:1c:0c:25:39:c8:07:76:78:d2:27:a4:89:26:ec:03: fa:4c:c3:83:6c:9f:ae:7b:05:37:6d:43:36:55:44:d1:c9:62: 8c:8e:c7:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy NEVDMjRFOTIwHhcNMjUxMjE4MjEwMjU5WhcNMjUxMjI1MjEwMjU5WjAYMRYwFAYD VQQDDA02OTQ0NmMwMy0wYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqI9/98haPYa4R5LDwVZgduo+TG1ZTXYyAmSYOE7lWuec6Vva/6Ys0SEHwVtB rJwzce5FQkUrA8Ns1cZtqTC1fmHWSOkNWTy2UUaL5eDZnbbf2ZUW8f4iwXYEl8Pk PVwpGThFekZA8YPTg1n4f8sy6+X7TdPHWMIBp7n7HSS2k0xohQzOPNlomxPnzp19 38rHAMNh/yrFdHytGoj73NHN/vVbWQsPrswOjkztmkADpX0cf6OfBDPcqILRIOCP uPO8dVY68R4YUzB0o632CRMPGry9hzg8X6sSv9giOaJREew+WOcceYJzRctP352V hwUVwGV674xl19pbOK5r1j7j4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPH91zfR vBo/G2y0nWjnDPJzxc5VMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m WVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCup9E9xFh3w0OsEkZ5S87J59lSu/pgxfgz9kUdcZGsLjcZPCQaE2wy DHm1+xizS32Zv0Cp9969VqMDRg0VpH/mXw5QNxkoiS91XpH5eZ3URdi+Vu17y1sH 1A1Z5Tttfqz3tEspodIjHhyCYzLEO7T7iPE+4Re3BYsYUImwhBh+ScDf6IAkQPor n1hanvp3M2zfeHTbCLy1gY3T06rnTYRR915mGiFSsGIPyYyIWOgTAOLyl5SdOADv HATfzsS03LSEaiwEgUdHsqHAYNtOfrqde8NJcu+HXV3sBhscDCU5yAd2eNInpIkm 7AP6TMODbJ+uewU3bUM2VUTRyWKMjsf/ -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:06 2025 by rpki-client