This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft File: X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json) Hash identifier: 7JTZikCdmzEPaQw64fnEhmAGFTV96C1HXv3vW/0cFPY= Subject key identifier: A0:05:29:B7:10:8F:99:43:8B:0C:AA:71:08:32:BC:E2:43:A4:12:64 Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 Certificate issuer: /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Certificate serial: 0796 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft Manifest number: 0789 Signing time: Sat 20 Dec 2025 20:54:03 +0000 Manifest this update: Sat 20 Dec 2025 20:54:02 +0000 Manifest next update: Sat 27 Dec 2025 20:54:02 +0000 Files and hashes: 1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: eI4YaAAbigwVyOpRPV0qRwEqM+9mmscFvWaqJ8GCTmA=) 2: FA93793637C011EB97405947C4F9AE02.roa (hash: 6Z7fqbPSs+Ml8QXXKGeIZgjWtWxNfN8N/e0vyGnhKx8=) 3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: 9iqcL2FIY8N8pXVdWDivMO7ELxF/u7CgCvSOlgjQSV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1942 (0x796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Validity Not Before: Dec 20 20:54:02 2025 GMT Not After : Dec 27 20:54:02 2025 GMT Subject: CN=69470ceb-b7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:e6:d0:e9:f0:38:af:25:d7:77:84:82:9f: fa:00:0d:62:17:2e:38:f5:df:76:05:62:b6:45:0c: 2e:3a:8d:0f:10:c8:90:bb:c5:dd:bc:da:40:d9:90: f4:eb:69:3f:8a:95:79:f2:01:1c:b1:9b:c5:1f:72: 96:2a:63:c4:cc:a6:50:d2:d4:6b:28:92:0d:c7:ee: 46:73:6a:41:79:08:ed:c8:15:f2:2b:95:41:2f:e2: d6:a3:ca:ba:a4:c9:4c:8c:7f:65:1d:52:e7:22:93: 95:ea:5b:00:07:e0:02:a0:96:96:50:5e:ec:38:fa: 90:f8:3d:e5:ca:01:cd:ea:7c:05:5f:5a:bf:ca:53: fb:4e:08:58:f6:f5:2b:69:4b:a6:1a:6b:14:8e:8f: 36:c1:c4:be:a8:f8:fc:54:9b:7b:f5:9c:b7:71:c5: fa:12:b0:d2:da:36:aa:fd:62:0a:08:aa:09:03:d9: ae:e0:89:ef:cd:ff:d7:7a:9e:53:58:dc:8f:0c:ad: 15:6f:78:4b:c1:80:14:60:35:e2:05:35:a7:e9:d8: b9:69:00:d7:db:05:92:54:4a:ff:7f:36:32:cd:1f: c1:d5:30:2b:e1:d2:bb:d0:cc:ab:15:8d:ba:bb:59: f6:6f:c3:3b:dc:44:bd:f4:73:81:7b:cd:11:0d:4c: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:05:29:B7:10:8F:99:43:8B:0C:AA:71:08:32:BC:E2:43:A4:12:64 X509v3 Authority Key Identifier: keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:00:5a:e4:28:64:0b:b3:40:fe:50:81:7e:60:90:87:bb:be: 16:fc:91:51:d8:bc:e9:29:c9:88:36:e3:35:52:00:4a:75:a6: 61:17:db:66:04:1a:9f:28:4b:a1:f2:b3:4a:0f:1d:0d:69:12: ac:49:b5:fb:64:b9:ab:e2:a6:ed:b1:38:ce:c1:95:9d:52:cc: c2:3d:ef:45:69:b5:29:67:ca:bc:9d:86:98:36:08:a8:eb:10: f9:ab:fd:27:3f:6d:04:1f:49:97:78:c0:ce:0b:25:90:dc:4c: 0d:39:69:ad:fa:8f:ba:4f:a4:95:00:3f:fb:8e:3f:67:26:fa: b6:c2:5d:c7:1b:42:d8:5f:8c:0f:78:c7:4e:ac:76:62:86:7c: e0:7c:a2:7c:6a:9e:20:80:0c:8a:95:7a:f4:63:57:de:09:44: b0:ef:a3:27:11:63:c9:8e:d0:07:cd:9e:97:af:76:03:b1:e1: 91:8e:58:93:55:1d:de:72:be:dd:d2:53:cc:3f:53:58:e1:a9: 11:ee:75:26:ff:2f:84:cd:03:27:c3:9f:c6:09:ab:b1:cc:36: 94:e4:dd:be:e8:d3:bf:bb:1a:d0:ac:6c:1e:a6:f9:9c:50:70: 0e:9b:fd:e4:ce:ab:26:2e:7c:8d:7e:bf:b2:e1:be:9d:5d:c5: dd:e1:b9:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA0OTExMTAvBgNVBAUTKDVGQzNFODZEQUU0MzUzMTU4OEVCMDE1RDUwMUUzMTcx MjA1RjA4NTEwHhcNMjUxMjIwMjA1NDAyWhcNMjUxMjI3MjA1NDAyWjAYMRYwFAYD VQQDDA02OTQ3MGNlYi1iN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMrm0OnwOK8l13eEgp/6AA1iFy449d92BWK2RQwuOo0PEMiQu8XdvNpA2ZD0 62k/ipV58gEcsZvFH3KWKmPEzKZQ0tRrKJINx+5Gc2pBeQjtyBXyK5VBL+LWo8q6 pMlMjH9lHVLnIpOV6lsAB+ACoJaWUF7sOPqQ+D3lygHN6nwFX1q/ylP7TghY9vUr aUumGmsUjo82wcS+qPj8VJt79Zy3ccX6ErDS2jaq/WIKCKoJA9mu4Invzf/Xep5T WNyPDK0Vb3hLwYAUYDXiBTWn6di5aQDX2wWSVEr/fzYyzR/B1TAr4dK70MyrFY26 u1n2b8M73ES99HOBe80RDUzIWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAFKbcQ j5lDiwyqcQgyvOJDpBJkMB8GA1UdIwQYMBaAFF/D6G2uQ1MViOsBXVAeMXEgXwhR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQ5MS85MjlCREJDMjM3 QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4V0k2d0ZkVUI0eGNTQmZD RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4UG9iYTVEVXhXSTZ3RmRVQjR4Y1NCZkNGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDQ5MS85MjlCREJDMjM3QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4 V0k2d0ZkVUI0eGNTQmZDRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOAFrkKGQLs0D+UIF+YJCHu74W/JFR2LzpKcmINuM1UgBKdaZhF9tm BBqfKEuh8rNKDx0NaRKsSbX7ZLmr4qbtsTjOwZWdUszCPe9FabUpZ8q8nYaYNgio 6xD5q/0nP20EH0mXeMDOCyWQ3EwNOWmt+o+6T6SVAD/7jj9nJvq2wl3HG0LYX4wP eMdOrHZihnzgfKJ8ap4ggAyKlXr0Y1feCUSw76MnEWPJjtAHzZ6Xr3YDseGRjliT VR3ecr7d0lPMP1NY4akR7nUm/y+EzQMnw5/GCauxzDaU5N2+6NO/uxrQrGwepvmc UHAOm/3kzqsmLnyNfr+y4b6dXcXd4bmQ -----END CERTIFICATE-----Generated at Sun Dec 21 12:16:26 2025 by rpki-client