This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: WXN2RPlMXJiyUPHQMAPuQMKg1muh1cUzaIk44wDd0YE= Subject key identifier: 46:BB:19:0E:39:97:5E:38:13:6D:03:4C:AB:92:A7:C0:42:E9:8F:14 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0AB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0AAB Signing time: Sat 20 Dec 2025 19:01:49 +0000 Manifest this update: Sat 20 Dec 2025 19:01:48 +0000 Manifest next update: Sat 27 Dec 2025 19:01:48 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: 8qv+1UnJZWQ18zMlhyrUqFxc9y2AMasAKShW8FpPE4I=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: FRaS1A9IeDGVweRTufxmQCe2ACl515gPhut7regZgoE=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: B5nwJ+mLBFnNT/8YSuFnlodEj+j6B/8srfS67vX0m7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2742 (0xab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Dec 20 19:01:48 2025 GMT Not After : Dec 27 19:01:48 2025 GMT Subject: CN=6946f29d-af0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:77:83:1b:01:e4:ca:9c:28:c5:41:1a:29: 53:57:47:36:15:23:de:3b:46:60:04:79:d1:59:06: 2e:8f:78:64:f2:7b:a1:23:96:12:8f:c7:1f:da:bc: a9:ee:2b:b5:79:93:93:8c:51:4b:bd:4e:f4:3a:32: f9:8e:dc:e0:3e:0f:74:3c:73:15:a2:a2:a0:d3:91: 78:9c:1f:65:17:09:0d:ff:bb:55:c5:e7:de:59:77: c8:e4:a2:86:09:75:e8:c9:3b:c4:d7:14:b1:b1:a8: bf:d0:4f:d7:f5:2c:04:07:5a:37:8e:ab:18:d4:f8: c3:9f:51:8f:00:51:f2:29:4a:ca:77:8e:15:8c:af: 48:b4:e5:bf:05:63:d4:bc:e1:9d:80:ff:bd:7d:9f: 63:50:5d:bb:25:c8:5b:e8:50:d5:01:16:c4:2b:46: 28:cd:25:d8:8d:bb:16:76:d0:da:e8:d0:06:35:86: 99:43:e6:2a:e7:34:7d:2d:ff:1b:ef:a0:4d:c7:79: 40:b2:28:6d:39:87:1f:11:c0:c1:7b:30:77:7f:cf: ba:46:29:4c:1a:73:4c:c3:c4:48:f0:f8:6f:cb:a9: 55:fc:9f:27:d4:10:21:b6:bb:d3:4d:6a:81:8a:85: 2e:dd:f7:eb:80:b2:69:41:82:49:ed:ad:70:45:6f: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BB:19:0E:39:97:5E:38:13:6D:03:4C:AB:92:A7:C0:42:E9:8F:14 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e4:2d:6e:75:f0:39:c6:21:5b:19:72:86:37:89:3e:67:3f: 4c:e2:68:97:7b:45:1a:78:8d:7e:98:72:ec:87:f7:f0:da:05: 68:5b:b5:dd:c2:96:b5:2d:6f:aa:ae:d0:61:87:49:4f:49:6a: 7c:b0:91:65:04:87:b2:65:02:1c:0b:b8:a9:2a:b6:db:2c:18: 33:83:03:b3:cd:ff:a6:04:85:fa:9f:ed:79:2a:d4:78:1d:9e: 23:41:9f:9c:2c:08:36:a9:f7:46:61:36:36:18:78:93:6d:46: 90:12:f0:84:71:9c:a4:f6:fd:4b:b6:51:04:e2:e2:83:b1:15: 30:04:43:11:5f:57:d1:de:23:33:a7:a2:aa:c6:71:32:ef:05: f4:aa:be:8c:c9:b7:4a:c8:00:b4:14:8e:15:ea:68:41:e8:74: 50:10:05:63:cc:62:5b:08:95:25:59:75:4c:be:74:08:f8:45: 27:5c:8e:77:7c:4d:64:7d:e1:06:fe:bf:25:10:a3:e3:d8:60: 09:85:67:3e:5c:a1:7e:8a:2c:5c:72:9a:36:b6:9d:95:0b:a3: 67:79:7c:02:05:d5:a9:e9:a8:0f:e4:0e:87:6c:bc:ba:07:78: eb:83:fc:93:6b:4f:47:df:a9:ad:43:b3:c7:f7:0a:e2:9f:9a: d2:60:a9:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUxMjIwMTkwMTQ4WhcNMjUxMjI3MTkwMTQ4WjAYMRYwFAYD VQQDDA02OTQ2ZjI5ZC1hZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT13gxsB5MqcKMVBGilTV0c2FSPeO0ZgBHnRWQYuj3hk8nuhI5YSj8cf2ryp 7iu1eZOTjFFLvU70OjL5jtzgPg90PHMVoqKg05F4nB9lFwkN/7tVxefeWXfI5KKG CXXoyTvE1xSxsai/0E/X9SwEB1o3jqsY1PjDn1GPAFHyKUrKd44VjK9ItOW/BWPU vOGdgP+9fZ9jUF27Jchb6FDVARbEK0YozSXYjbsWdtDa6NAGNYaZQ+Yq5zR9Lf8b 76BNx3lAsihtOYcfEcDBezB3f8+6RilMGnNMw8RI8Phvy6lV/J8n1BAhtrvTTWqB ioUu3ffrgLJpQYJJ7a1wRW8E/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEa7GQ45 l144E20DTKuSp8BC6Y8UMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb5C1udfA5xiFbGXKGN4k+Zz9M4miXe0UaeI1+mHLsh/fw2gVoW7Xd wpa1LW+qrtBhh0lPSWp8sJFlBIeyZQIcC7ipKrbbLBgzgwOzzf+mBIX6n+15KtR4 HZ4jQZ+cLAg2qfdGYTY2GHiTbUaQEvCEcZyk9v1LtlEE4uKDsRUwBEMRX1fR3iMz p6KqxnEy7wX0qr6MybdKyAC0FI4V6mhB6HRQEAVjzGJbCJUlWXVMvnQI+EUnXI53 fE1kfeEG/r8lEKPj2GAJhWc+XKF+iixccpo2tp2VC6NneXwCBdWp6agP5A6HbLy6 B3jrg/yTa09H36mtQ7PH9wrin5rSYKnd -----END CERTIFICATE-----Generated at Sat Dec 20 23:15:02 2025 by rpki-client