This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft File: xT8GoF_V8dkjXh-VMPLNPOMREOI.mft (raw, json) Hash identifier: yk7M4rjauBRRM/3vH+6OlLZ1A1AyCzUgfNiCUSNidH4= Subject key identifier: 79:E4:06:9E:E0:40:DF:35:C3:E7:FD:AB:EA:C1:37:7F:01:FD:33:FF Authority key identifier: C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2 Certificate issuer: /CN=A918190B/serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft Manifest number: 12 Signing time: Fri 19 Dec 2025 06:51:33 +0000 Manifest this update: Fri 19 Dec 2025 06:51:32 +0000 Manifest next update: Fri 26 Dec 2025 06:51:32 +0000 Files and hashes: 1: xT8GoF_V8dkjXh-VMPLNPOMREOI.crl (hash: MW+PG/R1xZprnK5M8aNzovxYb5gjhosMWHiWl/mO6RQ=) 2: 329CC664C5C611F0A1D9E964C4F9AE02.roa (hash: qZba1UodyDp1cfoTx0rV7/2LZUMA4jg2jpfttVNILHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918190B, serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2 Validity Not Before: Dec 19 06:51:32 2025 GMT Not After : Dec 26 06:51:32 2025 GMT Subject: CN=6944f5f5-b805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:e0:6d:10:ea:de:4c:2e:a8:85:ab:03:cf: 5a:6e:2f:5b:94:44:21:6c:f0:f0:da:84:fb:a5:7a: 7f:34:bf:5f:b4:36:75:4b:d2:af:a6:86:21:0d:1f: d3:8d:ec:81:38:52:e2:97:2b:89:ff:4f:98:de:29: b8:1e:61:ef:20:36:7e:af:75:f4:da:bb:8d:a6:f5: c6:fe:78:29:cf:a8:a5:e3:00:5e:9b:a5:7b:3d:74: d9:2c:4d:44:2b:96:78:4d:88:51:2c:22:9d:a8:96: 0e:92:2a:fb:bc:f8:bc:68:c1:cf:9d:ff:eb:a8:41: 9e:58:ea:1d:f9:7e:13:16:70:de:8f:c3:3e:52:9c: 43:df:f4:b6:fa:fd:e8:3b:d9:9c:7a:4b:c2:bc:94: 06:3f:25:90:8c:1c:f2:37:bb:8d:e1:5e:76:22:42: 0f:86:59:3d:4c:05:29:df:67:1b:07:bb:79:5d:e1: 14:4b:09:7e:63:87:aa:d9:bf:42:e2:b3:c3:e1:98: 66:60:c6:cf:ab:2f:8e:3f:59:39:e4:2a:4e:1d:2a: 81:a5:81:c2:cb:99:cd:de:f4:5b:a4:d4:6b:34:ad: 95:c1:ba:5b:58:07:71:62:24:78:5a:e5:33:09:87: 06:0c:f3:69:1b:af:4b:e5:fd:bb:c5:d4:ee:55:02: 5f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E4:06:9E:E0:40:DF:35:C3:E7:FD:AB:EA:C1:37:7F:01:FD:33:FF X509v3 Authority Key Identifier: keyid:C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:db:f1:7e:29:14:76:3e:21:11:40:c4:72:bc:fa:48:5c:90: cf:3a:ee:04:a8:2b:c0:2b:eb:70:6c:d3:5e:25:86:58:38:bd: 3d:a8:3f:be:b7:03:6c:2d:34:4d:9c:0f:81:40:10:e2:da:2c: 45:51:9e:c0:0d:e9:32:90:c0:41:86:63:eb:f0:49:13:a9:b7: df:70:ac:44:53:24:94:52:99:d5:c0:5d:8c:30:11:30:81:0f: d7:e7:28:01:db:f6:5d:88:ca:78:96:71:0a:e1:14:aa:04:b4: a7:f6:24:92:c8:a8:e3:3f:77:06:c1:13:14:16:79:5d:b4:35: 2a:23:b5:64:e6:19:c6:09:16:9d:6a:44:45:20:54:49:a6:d9: 0a:6c:42:23:bc:76:9e:c5:97:0e:87:a2:f3:1c:b5:66:a3:d8: a5:bc:87:55:ab:47:cf:2f:56:80:5d:b6:3d:2b:09:7f:74:89: 84:95:3e:83:0d:66:5e:ca:f0:e6:1b:16:01:5c:67:3f:83:e4: cf:be:e0:85:e0:d3:a1:50:cf:44:dc:af:6a:22:1e:0d:e9:ad: b7:66:6f:b1:b4:a5:0f:e8:2e:8d:03:93:00:a9:83:5c:ee:e9: 09:4d:82:33:78:50:b9:be:a8:86:41:6b:7d:34:d4:69:4c:00: 3b:87:95:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTkwQjExMC8GA1UEBRMoQzUzRjA2QTA1RkQ1RjFEOTIzNUUxRjk1MzBGMkNEM0NF MzExMTBFMjAeFw0yNTEyMTkwNjUxMzJaFw0yNTEyMjYwNjUxMzJaMBgxFjAUBgNV BAMMDTY5NDRmNWY1LWI4MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCobeBtEOreTC6ohasDz1puL1uURCFs8PDahPulen80v1+0NnVL0q+mhiENH9ON 7IE4UuKXK4n/T5jeKbgeYe8gNn6vdfTau42m9cb+eCnPqKXjAF6bpXs9dNksTUQr lnhNiFEsIp2olg6SKvu8+Lxowc+d/+uoQZ5Y6h35fhMWcN6Pwz5SnEPf9Lb6/eg7 2Zx6S8K8lAY/JZCMHPI3u43hXnYiQg+GWT1MBSnfZxsHu3ld4RRLCX5jh6rZv0Li s8PhmGZgxs+rL44/WTnkKk4dKoGlgcLLmc3e9Fuk1Gs0rZXBultYB3FiJHha5TMJ hwYM82kbr0vl/bvF1O5VAl93AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeeQGnuBA 3zXD5/2r6sE3fwH9M/8wHwYDVR0jBBgwFoAUxT8GoF/V8dkjXh+VMPLNPOMREOIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxOTBCL0ExNDBDMTUyQzVD NTExRjBBQUE0Q0YwRkM0RjlBRTAyL3hUOEdvRl9WOGRralhoLVZNUExOUE9NUkVP SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveFQ4R29GX1Y4ZGtqWGgtVk1QTE5QT01SRU9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx OTBCL0ExNDBDMTUyQzVDNTExRjBBQUE0Q0YwRkM0RjlBRTAyL3hUOEdvRl9WOGRr alhoLVZNUExOUE9NUkVPSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHbb8X4pFHY+IRFAxHK8+khckM867gSoK8Ar63Bs014lhlg4vT2oP763 A2wtNE2cD4FAEOLaLEVRnsAN6TKQwEGGY+vwSROpt99wrERTJJRSmdXAXYwwETCB D9fnKAHb9l2IyniWcQrhFKoEtKf2JJLIqOM/dwbBExQWeV20NSojtWTmGcYJFp1q REUgVEmm2QpsQiO8dp7Flw6HovMctWaj2KW8h1WrR88vVoBdtj0rCX90iYSVPoMN Zl7K8OYbFgFcZz+D5M++4IXg06FQz0Tcr2oiHg3prbdmb7G0pQ/oLo0DkwCpg1zu 6QlNgjN4ULm+qIZBa3001GlMADuHldk= -----END CERTIFICATE-----Generated at Fri Dec 19 18:08:47 2025 by rpki-client