This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft File: RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft (raw, json) Hash identifier: FzX2A1dhlPEXm6CO1sUu729l/CbovnD0ZWcPI03MaDA= Subject key identifier: 37:58:1D:B4:84:16:0B:15:D5:9A:B9:2D:C7:15:77:BF:3A:17:59:70 Authority key identifier: 45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01 Certificate issuer: /CN=A917BEDF/serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft Manifest number: 0A Signing time: Fri 19 Dec 2025 06:58:08 +0000 Manifest this update: Fri 19 Dec 2025 06:58:08 +0000 Manifest next update: Fri 26 Dec 2025 06:58:08 +0000 Files and hashes: 1: RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl (hash: K5YGp3C5GEmO3HYdYZvOr8XhYxU5Hw3r3stkwN/ZOuQ=) 2: BFE98870D00911F08B3BE011C4F9AE02.roa (hash: KEDuB0fCQDUlpa61Kum8U1+z81WHmNVyBobvxXJKyg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701 Validity Not Before: Dec 19 06:58:08 2025 GMT Not After : Dec 26 06:58:08 2025 GMT Subject: CN=6944f780-6ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:14:94:48:63:2d:f1:e5:8c:94:9e:53:28: a0:f1:5a:11:04:5f:88:02:23:a3:87:53:f5:28:d7: a4:d2:8a:a5:67:e1:c1:cf:08:7d:22:04:7d:1a:9b: e6:1f:9b:d8:92:98:ce:9d:8f:f8:c8:cc:16:1b:48: 96:c3:de:a9:57:6e:d7:ea:a6:00:88:82:c2:e1:05: 54:5c:f6:21:34:f7:36:08:45:bb:81:7c:bc:56:85: 40:1e:26:b5:e0:e3:cc:2b:b0:e9:fa:9b:bc:ad:6f: 97:5c:cd:5a:99:ed:a5:f4:5e:e0:e6:1f:1b:3d:c7: c5:f7:71:c9:05:c1:a4:3e:5f:d9:98:e4:c8:6b:2f: d8:e3:02:88:3d:30:a2:cb:7c:70:83:5e:24:d2:be: 10:1a:8a:1d:f2:ec:0a:2c:52:c0:1e:10:d6:0c:2e: e0:37:83:80:90:4a:64:8f:41:f5:c4:7d:8a:1c:68: 9b:7a:c1:37:09:eb:34:64:e5:3b:ec:c3:77:ef:dc: ed:08:05:7e:a6:22:5e:9a:b6:d1:6c:8b:fc:16:5e: 58:66:3a:40:f6:e9:d7:6c:8b:2c:59:43:7b:81:17: a3:32:41:b3:35:5d:55:e3:a9:98:cb:7e:58:f8:6b: f2:56:0a:67:60:95:15:fe:22:34:07:53:78:39:26: 3b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:58:1D:B4:84:16:0B:15:D5:9A:B9:2D:C7:15:77:BF:3A:17:59:70 X509v3 Authority Key Identifier: keyid:45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b6:e2:44:96:a9:ed:fc:ef:f0:88:0e:57:49:b8:e5:e6:cd: c6:bd:d8:f5:78:5f:d2:91:51:3e:90:31:c3:fd:d7:2d:97:14: 1c:07:22:bf:eb:a8:c2:ed:c2:5f:5e:ef:f3:d6:61:66:61:68: 66:a3:59:cd:e8:21:03:93:c3:a1:fb:c1:e3:40:1f:36:9d:8f: 84:2c:ca:8c:44:e8:42:af:c0:1f:2a:36:eb:b0:e9:0f:33:24: 96:67:b0:fd:9f:0e:d3:d0:fa:ad:b9:8d:49:4f:35:af:84:36: 97:7b:54:f6:ed:3d:ee:f6:0c:23:76:4d:12:e5:f1:d2:fd:c3: a7:86:19:4f:16:dc:d9:3b:b3:37:76:f7:42:51:16:0c:c5:3a: 2b:72:57:01:9a:11:f0:22:57:89:2e:f3:cf:1b:17:27:46:b7: ea:dc:3a:4d:43:80:8b:d2:34:01:9d:04:e6:9e:b6:70:ff:fc: 14:a2:ff:71:60:91:a8:95:87:a9:5c:35:48:ba:b6:fd:13:b3: 0f:b6:ee:82:d5:04:6a:94:03:e9:39:04:c4:b1:a4:d4:85:6d: 53:48:75:b2:68:8e:00:9c:54:4c:14:db:31:8b:ac:4f:61:18: 0e:e8:fd:cf:98:57:57:64:84:f2:82:7d:f4:fb:f1:d6:b7:e0: ce:f1:a3:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoNDUzNUNGMUQxMjIxQjcxNDA3QzE0MUNFNkJCNTczQThC NkJFODcwMTAeFw0yNTEyMTkwNjU4MDhaFw0yNTEyMjYwNjU4MDhaMBgxFjAUBgNV BAMMDTY5NDRmNzgwLTZmZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYgBSUSGMt8eWMlJ5TKKDxWhEEX4gCI6OHU/Uo16TSiqVn4cHPCH0iBH0am+Yf m9iSmM6dj/jIzBYbSJbD3qlXbtfqpgCIgsLhBVRc9iE09zYIRbuBfLxWhUAeJrXg 48wrsOn6m7ytb5dczVqZ7aX0XuDmHxs9x8X3cckFwaQ+X9mY5MhrL9jjAog9MKLL fHCDXiTSvhAaih3y7AosUsAeENYMLuA3g4CQSmSPQfXEfYocaJt6wTcJ6zRk5Tvs w3fv3O0IBX6mIl6attFsi/wWXlhmOkD26ddsiyxZQ3uBF6MyQbM1XVXjqZjLflj4 a/JWCmdglRX+IjQHU3g5JjvVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN1gdtIQW CxXVmrktxxV3vzoXWXAwHwYDVR0jBBgwFoAURTXPHRIhtxQHwUHOa7VzqLa+hwEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzJFODEyNzlFRDAw OTExRjA4MzcwMEU2QkM0RjlBRTAyL1JUWFBIUklodHhRSHdVSE9hN1Z6cUxhLWh3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUlRYUEhSSWh0eFFId1VIT2E3VnpxTGEtaHdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RURGLzJFODEyNzlFRDAwOTExRjA4MzcwMEU2QkM0RjlBRTAyL1JUWFBIUklodHhR SHdVSE9hN1Z6cUxhLWh3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABK24kSWqe387/CIDldJuOXmzca92PV4X9KRUT6QMcP91y2XFBwHIr/r qMLtwl9e7/PWYWZhaGajWc3oIQOTw6H7weNAHzadj4QsyoxE6EKvwB8qNuuw6Q8z JJZnsP2fDtPQ+q25jUlPNa+ENpd7VPbtPe72DCN2TRLl8dL9w6eGGU8W3Nk7szd2 90JRFgzFOityVwGaEfAiV4ku888bFydGt+rcOk1DgIvSNAGdBOaetnD//BSi/3Fg kaiVh6lcNUi6tv0Tsw+27oLVBGqUA+k5BMSxpNSFbVNIdbJojgCcVEwU2zGLrE9h GA7o/c+YV1dkhPKCffT78da34M7xowE= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:56 2025 by rpki-client