This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft File: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json) Hash identifier: k5HVPpYtd7q0gfWQ2A0l95CLEd2M8MGZV53hHeEUdWg= Subject key identifier: 05:64:71:95:DE:F0:5E:38:5D:A5:82:21:15:AC:2B:2B:59:CA:8C:CE Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E Certificate issuer: /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Certificate serial: 0DFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft Manifest number: 0DF7 Signing time: Wed 24 Dec 2025 17:32:20 +0000 Manifest this update: Wed 24 Dec 2025 17:32:20 +0000 Manifest next update: Wed 31 Dec 2025 17:32:20 +0000 Files and hashes: 1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: nySVZYXH6Hj1u6ikjuPMvCWQPLF+aP3EpwYpjaCWhl4=) 2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: nnMRznD8HI2Yb7yh15XfK/3vrMLq6BY/UPlfXXuokSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3582 (0xdfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Validity Not Before: Dec 24 17:32:20 2025 GMT Not After : Dec 31 17:32:20 2025 GMT Subject: CN=694c23a4-c728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:ec:78:a5:95:92:55:bb:17:b1:2b:9e:b7: 17:ec:91:fb:3b:5d:2e:b1:eb:9e:06:32:2b:40:f3: 84:ae:13:51:53:94:e4:74:7d:3a:47:7f:d4:31:be: bc:28:cc:47:ae:ec:47:7d:9b:ee:a9:6c:bd:df:ca: 71:52:5c:e1:00:e9:97:9e:07:e6:f2:4c:e6:93:17: 74:69:6d:06:16:e1:39:86:f7:1a:c9:9d:da:31:c7: 2b:92:fb:92:98:ba:dd:4e:1c:d3:3d:25:e1:43:5b: 62:b4:ef:9f:75:48:6e:8f:d2:71:c7:a6:3f:a2:76: 22:27:50:a0:4c:a3:10:7b:0b:d3:f2:25:69:a3:eb: bf:80:a7:12:17:2c:df:34:8c:37:fe:04:d9:92:cb: 56:ff:35:df:ab:66:40:58:8e:ba:eb:af:c3:52:17: 52:0b:ec:52:2c:88:cc:14:82:1c:a8:01:54:db:3e: bb:ee:bc:df:a9:d6:88:a8:29:04:6e:57:8d:ce:08: 21:b4:ed:2d:df:10:2e:e4:96:25:50:b0:15:92:42: 78:bf:3f:28:f1:4a:55:78:21:74:04:68:ea:11:4c: 03:46:04:a0:c7:70:c2:4e:2f:a1:7e:8b:1f:e2:07: d9:c9:b7:ad:3b:9c:13:58:42:e2:02:fb:3c:7a:31: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:64:71:95:DE:F0:5E:38:5D:A5:82:21:15:AC:2B:2B:59:CA:8C:CE X509v3 Authority Key Identifier: keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:38:51:3d:7c:e8:b2:8c:49:cd:b6:60:44:35:29:c1:5e:fe: 87:21:d2:00:56:19:ce:19:1c:fb:a9:f0:90:9d:72:9f:0f:2b: 86:6e:60:2b:1e:6e:e6:5f:a9:a5:e0:da:e9:e3:75:4e:71:d5: d2:55:5b:e5:b9:c2:f8:73:ba:aa:0b:9a:89:a3:d0:17:70:d6: 17:e0:ca:70:df:9b:a7:56:c7:4a:37:53:41:d3:ac:b4:18:d7: 66:83:5a:58:22:4b:9d:2b:6b:76:e3:21:ed:92:50:e7:b3:c8: 2f:d5:48:76:93:6e:8f:8b:d7:f4:a5:89:06:fe:06:13:a1:be: 86:6c:03:63:b3:48:3f:2c:c0:6d:b8:b0:4f:48:01:99:44:9a: 08:e3:67:c9:d1:65:3b:b8:b0:fb:03:89:37:99:f4:04:9d:90: 3a:23:49:03:57:a7:fe:87:5a:f3:4e:1f:c2:57:75:5d:d8:f5: 29:57:cd:86:8e:59:e6:1c:81:a6:5d:1f:9d:79:56:75:ce:38: 26:c3:e7:fc:18:0c:bc:e6:dc:fd:2c:0a:b8:86:13:80:2d:b8: 3a:02:54:c3:09:23:95:6b:11:62:10:a0:29:7e:95:ce:b0:e3: a7:5b:67:8c:f1:27:c5:85:af:2a:36:a8:a7:42:5b:82:55:82: ef:2a:dc:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRCRTYxMTAvBgNVBAUTKEM1MUY3QkZEOTQ1RDAwNzc3OUI3RjFGRjQyNURCRjI3 QjlDMjk4MkUwHhcNMjUxMjI0MTczMjIwWhcNMjUxMjMxMTczMjIwWjAYMRYwFAYD VQQDDA02OTRjMjNhNC1jNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJnseKWVklW7F7ErnrcX7JH7O10useueBjIrQPOErhNRU5TkdH06R3/UMb68 KMxHruxHfZvuqWy938pxUlzhAOmXngfm8kzmkxd0aW0GFuE5hvcayZ3aMccrkvuS mLrdThzTPSXhQ1titO+fdUhuj9Jxx6Y/onYiJ1CgTKMQewvT8iVpo+u/gKcSFyzf NIw3/gTZkstW/zXfq2ZAWI6666/DUhdSC+xSLIjMFIIcqAFU2z677rzfqdaIqCkE bleNzgghtO0t3xAu5JYlULAVkkJ4vz8o8UpVeCF0BGjqEUwDRgSgx3DCTi+hfosf 4gfZybetO5wTWELiAvs8ejHwewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVkcZXe 8F44XaWCIRWsKytZyozOMB8GA1UdIwQYMBaAFMUfe/2UXQB3ebfx/0Jdvye5wpgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEJFNi9FRThCQ0FBNEM0 ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFIZDV0X0hfUWwyX0o3bkNt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hSOTdfWlJkQUhkNXRfSF9RbDJfSjduQ21DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEJFNi9FRThCQ0FBNEM0ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFI ZDV0X0hfUWwyX0o3bkNtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNOFE9fOiyjEnNtmBENSnBXv6HIdIAVhnOGRz7qfCQnXKfDyuGbmAr Hm7mX6ml4Nrp43VOcdXSVVvlucL4c7qqC5qJo9AXcNYX4Mpw35unVsdKN1NB06y0 GNdmg1pYIkudK2t24yHtklDns8gv1Uh2k26Pi9f0pYkG/gYTob6GbANjs0g/LMBt uLBPSAGZRJoI42fJ0WU7uLD7A4k3mfQEnZA6I0kDV6f+h1rzTh/CV3Vd2PUpV82G jlnmHIGmXR+deVZ1zjgmw+f8GAy85tz9LAq4hhOALbg6AlTDCSOVaxFiEKApfpXO sOOnW2eM8SfFha8qNqinQluCVYLvKtzK -----END CERTIFICATE-----Generated at Thu Dec 25 02:43:11 2025 by rpki-client