This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: uIXI20s+uJQsrscZ8a5/Fe8G5ZrWUhZIGSOBEbl8J6o= Subject key identifier: FC:02:82:8E:68:10:AE:F1:5B:0A:63:ED:FE:93:55:CF:00:0F:0A:B5 Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 0254 Signing time: Sat 27 Dec 2025 00:44:46 +0000 Manifest this update: Sat 27 Dec 2025 00:44:45 +0000 Manifest next update: Sat 03 Jan 2026 00:44:45 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: 9ZUMpVqwKcTC2di5xQk91JCliKWCKwEkBwpT/3VQugI=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: /pTedztaSiCOyPS1HOnaWKUVCcU322igmimIyTxJJbg=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: HWKUOlRf26vXVLrvzxoCBARsK7RmPl1k0ABbjAs3vlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 00:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Dec 27 00:44:45 2025 GMT Not After : Jan 3 00:44:45 2026 GMT Subject: CN=694f2bfe-9a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:09:15:b8:90:10:03:d7:93:68:48:21:e5: a6:b1:77:b4:68:50:d4:49:c1:6e:83:22:03:38:fd: 65:41:12:28:d4:99:99:96:b2:8f:be:08:5a:14:df: 75:be:89:31:ec:bc:1d:b1:de:8e:87:fc:a9:23:76: f0:db:b6:d3:4f:10:90:34:8f:2e:33:b7:8a:79:c1: 9b:be:de:97:90:d0:98:c0:c5:e2:db:e5:b7:fc:67: 75:ef:e5:ad:8b:14:db:bd:5b:96:fd:d3:25:a2:c1: 95:8c:3a:70:1f:14:e6:99:f0:1d:2a:2d:ac:19:d1: 20:35:c0:3d:29:47:3d:de:ce:80:b2:ed:d6:8c:f0: 24:36:50:b3:e2:3c:94:11:55:b2:be:6b:81:a1:7b: 2d:f1:e7:e4:e9:e1:62:14:c4:90:74:9c:fe:bb:04: e4:dd:b8:44:0d:d4:e3:06:58:7d:09:84:21:57:35: 54:44:b5:af:f2:89:c6:73:a4:73:11:e9:9b:b3:e6: 82:9c:56:a9:45:31:31:ba:a6:b1:b8:ad:8c:ea:66: 2f:f2:88:8a:79:48:7b:e0:bb:c9:6f:db:b8:3f:16: 7b:27:c6:cf:1b:1e:9d:ef:d3:b8:cc:bd:91:e5:67: 72:83:7f:28:66:1b:8b:11:7a:70:de:38:51:2a:69: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:02:82:8E:68:10:AE:F1:5B:0A:63:ED:FE:93:55:CF:00:0F:0A:B5 X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:14:e5:6a:70:59:83:85:26:36:c8:21:e3:6e:66:22:c8:ab: ea:c7:1d:6d:9d:c5:f9:9a:c2:5c:0a:13:88:0a:a9:22:16:35: 08:16:59:a5:b4:64:ee:70:ef:9c:c8:4b:01:00:fc:8a:3b:02: d7:91:3a:d5:b3:b4:0d:ea:5d:47:42:26:d8:cb:c9:8f:1f:67: be:08:ae:c7:bf:a2:ae:13:ce:96:2f:eb:4b:1a:c7:82:8c:77: a0:e9:f7:48:55:da:9c:32:a3:31:94:fc:17:66:86:a3:32:bf: 83:13:72:ff:06:ff:61:b8:ca:95:50:3e:66:2c:bc:97:32:ae: 3a:00:24:9e:bd:85:84:6e:83:98:fa:bb:35:e0:ea:eb:e3:a1: dd:30:14:b1:8d:29:16:7e:3a:00:3d:37:fe:2a:f4:2a:d2:e3: 77:98:a1:a8:3c:c5:5b:d9:b5:e0:c2:bc:67:31:6d:6f:ed:5d: 1e:46:33:a5:70:bd:4f:8d:07:59:9c:f2:f3:e6:46:50:7a:d0: 7e:ea:f0:47:d1:51:1a:1f:b3:56:78:fb:29:d3:e2:58:2b:21: 75:c3:aa:08:ab:06:7f:3c:23:c1:c5:5f:86:bd:89:cf:1f:47: 3c:ab:95:14:a6:ca:f3:a7:dd:80:65:3c:27:0a:d5:20:8f:7f: 52:be:1f:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjUxMjI3MDA0NDQ1WhcNMjYwMTAzMDA0NDQ1WjAYMRYwFAYD VQQDDA02OTRmMmJmZS05YTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpAJFbiQEAPXk2hIIeWmsXe0aFDUScFugyIDOP1lQRIo1JmZlrKPvghaFN91 vokx7Lwdsd6Oh/ypI3bw27bTTxCQNI8uM7eKecGbvt6XkNCYwMXi2+W3/Gd17+Wt ixTbvVuW/dMlosGVjDpwHxTmmfAdKi2sGdEgNcA9KUc93s6Asu3WjPAkNlCz4jyU EVWyvmuBoXst8efk6eFiFMSQdJz+uwTk3bhEDdTjBlh9CYQhVzVURLWv8onGc6Rz Eembs+aCnFapRTExuqaxuK2M6mYv8oiKeUh74LvJb9u4PxZ7J8bPGx6d79O4zL2R 5Wdyg38oZhuLEXpw3jhRKmnSJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwCgo5o EK7xWwpj7f6TVc8ADwq1MB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuFOVqcFmDhSY2yCHjbmYiyKvqxx1tncX5msJcChOICqkiFjUIFlml tGTucO+cyEsBAPyKOwLXkTrVs7QN6l1HQibYy8mPH2e+CK7Hv6KuE86WL+tLGseC jHeg6fdIVdqcMqMxlPwXZoajMr+DE3L/Bv9huMqVUD5mLLyXMq46ACSevYWEboOY +rs14Orr46HdMBSxjSkWfjoAPTf+KvQq0uN3mKGoPMVb2bXgwrxnMW1v7V0eRjOl cL1PjQdZnPLz5kZQetB+6vBH0VEaH7NWePsp0+JYKyF1w6oIqwZ/PCPBxV+GvYnP H0c8q5UUpsrzp92AZTwnCtUgj39Svh+h -----END CERTIFICATE-----Generated at Sun Dec 28 18:53:25 2025 by rpki-client