This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: 7TCOzu8L5JGYQXsgI9xjBY9MQCV1yQn3xGi0jn7RXyM= Subject key identifier: 9B:98:06:56:44:BD:D8:AD:CC:E9:F3:8C:9E:DC:C4:DA:AA:86:E0:16 Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0A7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0A6F Signing time: Fri 26 Dec 2025 19:03:59 +0000 Manifest this update: Fri 26 Dec 2025 19:03:58 +0000 Manifest next update: Fri 02 Jan 2026 19:03:58 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: 3Ng5jzTv6iCr4a+On7ReWNDlZtD9UdDYURb/d+oG4Gg=) 2: 51D92BD25DD711F09B20C44DC4F9AE02.roa (hash: GSOu67thxVMGW+aBdpC8IU1FXpmsRcWLr3fcMku7g6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 19:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2682 (0xa7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Dec 26 19:03:58 2025 GMT Not After : Jan 2 19:03:58 2026 GMT Subject: CN=694edc1f-9bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:73:6e:35:c6:6d:82:6a:9f:fd:d2:6d:4e: b4:42:b2:2c:21:b5:ee:c2:ed:17:61:e6:94:e1:e2: 50:4d:30:2e:f1:22:3d:24:81:54:4d:1b:3c:aa:d6: 4d:19:f3:17:0c:2f:6d:81:a8:e0:47:6f:76:c6:75: fe:19:61:91:e9:10:6a:89:70:71:48:28:db:ca:ff: 5a:cc:7d:32:0f:26:93:fe:95:74:c8:07:49:b8:aa: 88:b8:ad:94:27:4a:cf:2f:2a:34:da:4b:03:3c:d1: c9:ce:03:c5:62:b4:e6:21:1d:c5:5c:77:ac:be:50: e2:5e:d7:9f:a6:f7:38:76:3b:2e:6d:3a:c3:e4:59: 9a:9f:b7:71:f0:4a:5c:b0:e4:d0:f5:a1:7d:78:b5: 22:52:f9:db:bc:ff:82:81:9f:90:0b:01:e2:04:8a: ea:a7:68:93:68:91:ee:1a:71:05:fa:81:87:75:40: 4c:95:6f:5e:cc:f9:30:5a:fc:24:2c:c9:7a:f6:c2: 2c:31:8e:43:9f:cb:e8:60:57:ff:0e:56:e9:56:d0: c4:49:dc:a0:dd:79:34:0f:4c:28:7f:d8:b3:c1:8d: 41:a1:9a:53:38:69:2a:e3:8a:ae:78:b9:8c:b7:a2: e1:c9:b9:ec:36:d1:9e:4b:6d:7f:bd:9f:c3:85:1f: 5d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:98:06:56:44:BD:D8:AD:CC:E9:F3:8C:9E:DC:C4:DA:AA:86:E0:16 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b9:17:32:43:4b:6d:d6:8b:28:e5:6a:78:32:fd:70:04:80: b0:41:25:6d:1a:b0:cf:97:68:5e:76:3d:ca:a4:79:66:61:34: a7:c0:00:66:9d:e5:fe:d4:4c:5f:7a:0f:57:a1:04:42:f3:2a: 23:c1:56:9e:49:05:44:85:4b:13:72:1c:aa:f6:9e:cd:ad:60: 2c:c5:36:c7:6e:89:1e:44:b5:90:91:94:c6:05:d5:dc:ec:68: 35:16:14:5d:51:85:93:32:bd:b0:5a:ab:65:31:38:11:bd:4b: 05:2b:93:f2:28:f5:5c:ed:75:be:01:81:c6:bd:88:e0:d7:d0: 5e:b5:01:7e:ea:35:9f:76:0d:a6:ce:4e:e4:b3:fc:33:85:ee: 66:be:ce:bd:0b:bf:6e:52:35:bd:29:95:89:0a:b8:fb:98:8f: 10:2d:e4:5b:a4:a0:5f:e7:38:0e:b3:15:87:1c:8d:7a:c2:ca: 97:24:87:f6:18:cb:18:1a:ef:10:86:74:cc:8a:17:77:92:49: ea:e8:0c:d9:5a:9b:89:d8:65:35:d3:11:59:81:fe:cc:11:44: 96:39:04:d5:cf:a5:8b:00:9a:51:40:95:7a:85:bc:d3:43:74: ac:19:81:81:0f:16:bc:3f:b6:fa:1c:f3:75:cd:b6:33:49:b0: af:cf:fd:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUxMjI2MTkwMzU4WhcNMjYwMTAyMTkwMzU4WjAYMRYwFAYD VQQDDA02OTRlZGMxZi05YmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlxzbjXGbYJqn/3SbU60QrIsIbXuwu0XYeaU4eJQTTAu8SI9JIFUTRs8qtZN GfMXDC9tgajgR292xnX+GWGR6RBqiXBxSCjbyv9azH0yDyaT/pV0yAdJuKqIuK2U J0rPLyo02ksDPNHJzgPFYrTmIR3FXHesvlDiXtefpvc4djsubTrD5Fman7dx8Epc sOTQ9aF9eLUiUvnbvP+CgZ+QCwHiBIrqp2iTaJHuGnEF+oGHdUBMlW9ezPkwWvwk LMl69sIsMY5Dn8voYFf/DlbpVtDESdyg3Xk0D0wof9izwY1BoZpTOGkq44queLmM t6LhybnsNtGeS21/vZ/DhR9dfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuYBlZE vditzOnzjJ7cxNqqhuAWMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIuRcyQ0tt1oso5Wp4Mv1wBICwQSVtGrDPl2hedj3KpHlmYTSnwABm neX+1Exfeg9XoQRC8yojwVaeSQVEhUsTchyq9p7NrWAsxTbHbokeRLWQkZTGBdXc 7Gg1FhRdUYWTMr2wWqtlMTgRvUsFK5PyKPVc7XW+AYHGvYjg19BetQF+6jWfdg2m zk7ks/wzhe5mvs69C79uUjW9KZWJCrj7mI8QLeRbpKBf5zgOsxWHHI16wsqXJIf2 GMsYGu8QhnTMihd3kknq6AzZWpuJ2GU10xFZgf7MEUSWOQTVz6WLAJpRQJV6hbzT Q3SsGYGBDxa8P7b6HPN1zbYzSbCvz/3x -----END CERTIFICATE-----Generated at Sun Dec 28 09:43:28 2025 by rpki-client