This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: zIpSGLv4L4DdGzyG6u1QPtmus06HgCK3I6S61CReMXI= Subject key identifier: F4:47:66:DB:31:FE:85:D2:24:68:FD:A1:2C:80:62:4E:46:89:2E:D6 Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0D55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0D4B Signing time: Thu 18 Dec 2025 17:47:33 +0000 Manifest this update: Thu 18 Dec 2025 17:47:32 +0000 Manifest next update: Thu 25 Dec 2025 17:47:32 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: ZTBP1tOCTCEESTPmTmSoTxUr1KgBfLRydkVngy2hexY=) 2: 41A8E738045111EA9C7DF516C4F9AE02.roa (hash: t9j99ouqyAO1DSlTWOraKVE9DSXzBdaScfcUdlzhboc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3413 (0xd55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: Dec 18 17:47:32 2025 GMT Not After : Dec 25 17:47:32 2025 GMT Subject: CN=69443e35-e2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:38:35:19:6a:22:ee:1e:09:c2:92:32:e3: 50:9e:be:e6:13:96:be:fb:23:5f:2a:20:7f:b3:8b: b6:82:b0:d3:e7:40:13:9f:d8:42:8c:aa:47:20:2c: 41:6e:9f:0c:5d:05:cf:2d:39:d3:e2:9d:ec:a2:14: d2:04:9f:2d:bc:f8:1a:29:5f:ba:33:30:83:b5:c2: 56:96:2c:78:5b:35:08:83:aa:06:fe:31:be:63:db: bb:d6:24:24:0e:7c:c6:49:3f:02:49:b9:70:ad:1f: 04:f7:0b:5d:5d:6e:93:1e:c9:36:0f:8a:94:d5:82: 72:30:1d:d7:fc:d1:37:e1:28:ff:9c:89:e4:20:a1: 63:05:64:2e:2c:67:c9:de:9d:fd:64:a1:ee:43:81: 8c:c8:25:f6:0c:83:9f:97:16:66:d9:7f:cd:44:c4: a0:4b:1d:c5:7e:74:f1:98:4e:59:aa:30:b6:08:91: d2:31:f2:95:94:4e:7a:9b:30:c7:61:25:50:88:f3: 9f:6f:df:ce:71:74:26:4a:38:9b:43:fd:02:7d:64: 56:b8:43:d3:f5:d2:62:5d:ab:ab:1c:ef:73:83:b7: 00:16:b4:c5:a1:00:9d:d9:da:fc:7b:24:61:4b:21: cd:b2:9b:64:64:08:df:74:76:64:0a:6b:e7:0b:73: 12:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:47:66:DB:31:FE:85:D2:24:68:FD:A1:2C:80:62:4E:46:89:2E:D6 X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:23:15:78:11:96:26:9f:56:83:df:3e:3f:65:03:1a:39:ad: 6f:1a:14:a1:b9:1b:cc:d3:b4:6b:54:15:1e:42:32:10:a8:c4: 65:24:a7:c4:2e:ec:4a:15:dd:ee:cd:ad:ed:53:6d:8a:f5:07: cb:78:7a:26:45:28:f8:c2:ae:d6:1b:ed:74:af:76:79:2d:52: fa:94:09:07:40:b3:f9:e3:73:26:2f:75:61:fa:55:12:58:77: ab:c2:77:90:f1:8e:3c:f4:67:f6:e0:fb:a8:cb:1c:b5:02:6e: 0b:e1:3e:76:9f:4d:ce:09:cf:d2:89:3a:7c:c3:c0:b5:74:a4: fd:64:fb:25:08:ab:7a:8b:58:97:5f:7b:14:7f:12:34:f4:2d: bc:ce:cb:44:ae:b7:ed:1d:7d:89:ce:1f:22:7f:4b:b2:e5:d1: 70:ee:45:8f:d5:e0:d6:b2:a0:13:de:be:37:f5:b5:6c:60:db: 75:e0:e6:0e:0e:25:37:c0:5c:f0:24:dd:d0:ad:5b:01:0b:df: 4d:37:22:79:bd:28:e4:d2:e5:5f:21:cf:b8:c4:0c:a9:18:85: 81:a7:3d:d6:c2:e0:04:25:67:08:bb:3e:40:b1:01:15:b7:25: 04:53:60:ce:b0:a7:31:1f:c5:f3:f6:25:1f:7a:b3:e6:a6:d8: 77:95:65:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjUxMjE4MTc0NzMyWhcNMjUxMjI1MTc0NzMyWjAYMRYwFAYD VQQDDA02OTQ0M2UzNS1lMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtd04NRlqIu4eCcKSMuNQnr7mE5a++yNfKiB/s4u2grDT50ATn9hCjKpHICxB bp8MXQXPLTnT4p3sohTSBJ8tvPgaKV+6MzCDtcJWlix4WzUIg6oG/jG+Y9u71iQk DnzGST8CSblwrR8E9wtdXW6THsk2D4qU1YJyMB3X/NE34Sj/nInkIKFjBWQuLGfJ 3p39ZKHuQ4GMyCX2DIOflxZm2X/NRMSgSx3FfnTxmE5ZqjC2CJHSMfKVlE56mzDH YSVQiPOfb9/OcXQmSjibQ/0CfWRWuEPT9dJiXaurHO9zg7cAFrTFoQCd2dr8eyRh SyHNsptkZAjfdHZkCmvnC3MSPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRHZtsx /oXSJGj9oSyAYk5GiS7WMB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBIxV4EZYmn1aD3z4/ZQMaOa1vGhShuRvM07RrVBUeQjIQqMRlJKfE LuxKFd3uza3tU22K9QfLeHomRSj4wq7WG+10r3Z5LVL6lAkHQLP543MmL3Vh+lUS WHerwneQ8Y489Gf24Puoyxy1Am4L4T52n03OCc/SiTp8w8C1dKT9ZPslCKt6i1iX X3sUfxI09C28zstErrftHX2Jzh8if0uy5dFw7kWP1eDWsqAT3r439bVsYNt14OYO DiU3wFzwJN3QrVsBC99NNyJ5vSjk0uVfIc+4xAypGIWBpz3WwuAEJWcIuz5AsQEV tyUEU2DOsKcxH8Xz9iUferPmpth3lWWD -----END CERTIFICATE-----Generated at Fri Dec 19 19:24:34 2025 by rpki-client