This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: UjD7FLsF3Pu8TGhaQ5K2HzeElEyu9bp/W1CjFca30A0= Subject key identifier: 65:B8:44:6F:67:3A:83:45:B5:1B:6C:9A:E0:93:94:38:0C:8F:C9:05 Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 045C Signing time: Sat 20 Dec 2025 23:29:07 +0000 Manifest this update: Sat 20 Dec 2025 23:29:07 +0000 Manifest next update: Sat 27 Dec 2025 23:29:07 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: LIa8Gx6p7jUEmzqAouhEE3bV8LEENmeEJ44JeM/ALRk=) 2: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PcnJ0SQLHGsAHxXxj0qo8jDhyNqxoXVPvv8v+GYk0TQ=) 3: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: SS7LsXp/x71VoteuW8pTuBwbWh8OyBISF5BhDwIPz/Q=) 4: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: +SD5oyeqwCVbJIR3Rca7WRwH9ic0DsTEAz6kXO4nmEw=) 5: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: wY9VV9yadFzt92HS27VdAQZvTr0RsiWh8bLwWXevekM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: Dec 20 23:29:07 2025 GMT Not After : Dec 27 23:29:07 2025 GMT Subject: CN=69473143-d277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:14:db:54:66:1a:88:d3:6e:87:e0:4a:d2: c6:30:9e:04:34:57:fc:2d:d3:19:16:d9:6c:e5:ca: 42:61:6c:56:b5:83:ab:47:a7:d2:11:4f:3f:5d:d8: 21:cc:e3:8e:b0:0c:69:4b:83:e4:9d:e5:da:20:ba: 7d:97:c6:78:ee:90:96:09:c6:2c:9e:cf:14:3c:d5: c2:86:ad:cc:d4:85:18:5a:56:e8:fb:2e:fb:c0:68: 73:a8:2e:aa:6c:07:38:f7:3f:79:0f:9f:83:60:65: f7:79:38:fc:eb:58:f4:ad:ab:9b:40:da:18:2c:8e: f4:f3:20:d7:c3:69:06:49:bb:a9:0c:ec:24:92:aa: a4:9a:b3:cf:51:07:71:02:58:c5:00:ba:1b:93:9d: 91:5d:f8:a2:00:98:f2:6d:28:c5:d5:4e:ec:0c:f6: 87:45:c6:96:03:ff:7b:80:24:8f:b0:35:4a:b2:8e: 00:a1:16:dc:ab:73:63:c9:7a:7d:13:03:9c:2e:f7: 03:3a:a8:c7:92:95:26:03:15:9a:ec:a4:4c:59:fb: 0f:be:32:01:e9:ed:a0:9a:4a:cc:ee:eb:35:46:10: 6b:1e:da:cb:4d:78:d1:55:45:0b:4e:0a:63:fb:33: 2a:25:d8:c3:9a:98:d1:64:bb:af:c9:1b:71:84:18: 10:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B8:44:6F:67:3A:83:45:B5:1B:6C:9A:E0:93:94:38:0C:8F:C9:05 X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fd:61:15:01:49:c3:ce:05:fb:b6:99:f8:48:96:95:02:82: cc:f2:18:43:ed:b9:19:08:2e:d5:fd:6a:f7:f3:a7:de:dc:16: 9a:0d:dd:5c:82:4b:cf:ff:7d:be:99:40:0b:c4:93:41:0f:f4: 58:d6:0d:a3:49:48:13:f0:f4:01:f8:58:b5:dc:d4:3c:90:92: d2:50:d3:26:56:f2:f3:c0:49:fd:5d:68:28:e6:fb:ed:51:69: 78:61:99:e1:d9:d9:6b:17:92:4a:78:87:02:5b:ed:3e:f6:46: 14:d7:97:14:aa:20:9d:03:8e:cb:a0:41:47:c7:6a:17:a1:1c: de:57:ae:11:d8:0f:9e:6b:6c:d8:03:d1:bb:54:b4:c4:fa:42: 6c:3d:ae:2b:74:1a:d9:59:95:fe:4d:7e:68:31:60:19:13:10: 10:3b:8f:b2:e1:81:40:17:f4:77:9b:52:55:ed:13:3a:84:e3: f8:b0:a7:85:8d:61:a4:2b:22:a6:71:0e:93:24:d3:06:f8:48: 3e:9b:61:2c:36:8d:df:64:36:18:e1:70:b7:5b:20:f2:a5:e7: 59:d0:24:4f:11:0d:2e:82:5a:91:d0:30:7f:17:02:7a:6c:b5: 2e:37:11:9d:bc:6e:04:f5:ad:b8:3e:3d:55:10:5c:7a:2b:1a: eb:94:1d:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUxMjIwMjMyOTA3WhcNMjUxMjI3MjMyOTA3WjAYMRYwFAYD VQQDDA02OTQ3MzE0My1kMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgAU21RmGojTbofgStLGMJ4ENFf8LdMZFtls5cpCYWxWtYOrR6fSEU8/Xdgh zOOOsAxpS4PkneXaILp9l8Z47pCWCcYsns8UPNXChq3M1IUYWlbo+y77wGhzqC6q bAc49z95D5+DYGX3eTj861j0raubQNoYLI708yDXw2kGSbupDOwkkqqkmrPPUQdx AljFALobk52RXfiiAJjybSjF1U7sDPaHRcaWA/97gCSPsDVKso4AoRbcq3NjyXp9 EwOcLvcDOqjHkpUmAxWa7KRMWfsPvjIB6e2gmkrM7us1RhBrHtrLTXjRVUULTgpj +zMqJdjDmpjRZLuvyRtxhBgQOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGW4RG9n OoNFtRtsmuCTlDgMj8kFMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP/WEVAUnDzgX7tpn4SJaVAoLM8hhD7bkZCC7V/Wr386fe3BaaDd1c gkvP/32+mUALxJNBD/RY1g2jSUgT8PQB+Fi13NQ8kJLSUNMmVvLzwEn9XWgo5vvt UWl4YZnh2dlrF5JKeIcCW+0+9kYU15cUqiCdA47LoEFHx2oXoRzeV64R2A+ea2zY A9G7VLTE+kJsPa4rdBrZWZX+TX5oMWAZExAQO4+y4YFAF/R3m1JV7RM6hOP4sKeF jWGkKyKmcQ6TJNMG+Eg+m2EsNo3fZDYY4XC3WyDypedZ0CRPEQ0uglqR0DB/FwJ6 bLUuNxGdvG4E9a24Pj1VEFx6KxrrlB3I -----END CERTIFICATE-----Generated at Mon Dec 22 09:57:40 2025 by rpki-client