This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft File: -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json) Hash identifier: mzi3xbfgboTUihk35OD2uWQG5q7JPxM0zXO1PBEsqI4= Subject key identifier: E1:46:EC:A3:05:F7:3F:74:6B:5A:42:60:0E:DB:F5:58:68:3A:C7:6F Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC Certificate issuer: /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft Manifest number: 023A Signing time: Fri 19 Dec 2025 01:11:59 +0000 Manifest this update: Fri 19 Dec 2025 01:11:58 +0000 Manifest next update: Fri 26 Dec 2025 01:11:58 +0000 Files and hashes: 1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: xFMj4BrzQ/NKHxVVZjr7TVKo+DKyoZzNQvO+zXlomwg=) 2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: P1cDwO0JwMVyMvSRcaDGiISLVg7IuTCLj2a8HaJzNI4=) 3: 69349714157D11F0876A4D62C4F9AE02.roa (hash: spR6GzQsviRpE5kB1PAg1GtPij2DNf/T1fZFU8oARv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196629, serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Validity Not Before: Dec 19 01:11:58 2025 GMT Not After : Dec 26 01:11:58 2025 GMT Subject: CN=6944a65f-d2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:dc:b9:88:b4:b1:7f:b1:53:b4:5c:4c:f7: ac:9b:c6:cc:93:8c:4c:a4:0e:03:02:e4:d6:7c:8b: 6f:92:a8:5a:03:e4:18:b3:63:45:e4:c4:41:49:69: cd:c6:d0:f1:a3:13:b2:ea:c0:dc:b7:35:81:8b:83: c1:3e:44:78:33:ed:dd:89:15:02:d0:25:47:29:79: 62:e7:75:73:06:19:ac:b3:7f:23:3a:6d:69:2d:b1: 79:a9:72:b6:e9:3e:5f:05:3a:d7:95:77:70:76:31: 3f:41:3b:af:3e:1d:59:00:22:c1:8a:9a:be:fd:04: 31:59:c9:87:d0:3e:fe:93:99:62:65:a1:5b:f0:c0: 9f:f8:f7:da:a8:b3:b5:d2:a2:9f:39:5d:1e:80:3c: 64:e8:fd:ed:60:b0:98:6a:09:49:a2:fc:8b:d7:bd: 10:e7:09:b5:01:13:4d:42:55:2b:1e:a6:ed:db:48: 29:93:a0:a8:86:96:58:63:76:52:59:94:5a:ea:9e: 03:bf:90:bc:7e:f4:e8:20:ee:fc:10:3f:30:4d:67: 9d:fe:30:65:78:ad:95:5b:e3:fd:25:b2:cb:2f:3b: af:ce:da:79:a3:09:f4:11:c7:be:0f:b6:bc:f4:29: 3b:4b:f5:6b:b2:98:7b:c4:08:e8:8b:df:11:4f:e3: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:46:EC:A3:05:F7:3F:74:6B:5A:42:60:0E:DB:F5:58:68:3A:C7:6F X509v3 Authority Key Identifier: keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d2:93:e5:3e:fe:47:e6:60:cf:84:21:bf:29:92:1d:ee:f5: 2d:50:c8:ea:7c:38:5f:31:29:68:d1:65:31:aa:d4:79:8d:0a: df:c9:cf:f0:b3:2e:5b:1a:24:3f:e0:3a:cf:b8:ae:a3:e7:de: 0b:6f:a4:b4:44:ae:c6:16:f7:a3:23:2d:87:05:b8:2e:3c:1e: 0c:40:8c:dc:5b:54:39:1a:b3:9b:10:bf:af:58:5f:21:21:a3: d9:2a:ed:21:06:cc:e0:38:d4:6d:1c:18:1c:dd:b2:f0:03:1e: ff:37:f5:99:56:61:31:53:8e:60:07:7b:a0:e8:10:31:c1:fc: c8:b9:04:73:18:23:95:7c:f2:12:49:a0:1d:8c:87:4e:d6:b7: e7:4c:7a:36:bb:47:02:a4:80:81:78:c0:8b:11:55:87:ac:4a: 84:3f:57:eb:70:81:11:7a:d8:1a:4b:84:57:68:0a:05:bf:ec: 6c:79:1a:d0:eb:05:d9:55:a1:ca:00:5c:ff:bd:5a:d1:44:ca: c6:87:22:17:19:75:e1:dd:ed:7f:a6:59:2f:1c:64:c2:94:a5: 50:80:cb:2c:82:3a:7c:10:10:75:c0:e1:8d:e5:72:81:f2:06: 35:cd:92:4a:b3:a3:9c:29:5e:59:be:f7:98:fb:76:23:c2:8f: 79:e9:03:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY2MjkxMTAvBgNVBAUTKEY5Nzc5Nzc4REE3MEM1OEE1QTc5NjQ1REQyODk2MTEx QkE2RkVCQ0MwHhcNMjUxMjE5MDExMTU4WhcNMjUxMjI2MDExMTU4WjAYMRYwFAYD VQQDDA02OTQ0YTY1Zi1kMmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhHcuYi0sX+xU7RcTPesm8bMk4xMpA4DAuTWfItvkqhaA+QYs2NF5MRBSWnN xtDxoxOy6sDctzWBi4PBPkR4M+3diRUC0CVHKXli53VzBhmss38jOm1pLbF5qXK2 6T5fBTrXlXdwdjE/QTuvPh1ZACLBipq+/QQxWcmH0D7+k5liZaFb8MCf+PfaqLO1 0qKfOV0egDxk6P3tYLCYaglJovyL170Q5wm1ARNNQlUrHqbt20gpk6CohpZYY3ZS WZRa6p4Dv5C8fvToIO78ED8wTWed/jBleK2VW+P9JbLLLzuvztp5own0Ece+D7a8 9Ck7S/Vrsph7xAjoi98RT+OHrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFG7KMF 9z90a1pCYA7b9VhoOsdvMB8GA1UdIwQYMBaAFPl3l3jacMWKWnlkXdKJYRG6b+vM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjYyOS9FMDk4NDYzRTdB QkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZcGFlV1JkMG9saEVicHY2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YZVhlTnB3eFlwYWVXUmQwb2xoRWJwdjY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjYyOS9FMDk4NDYzRTdBQkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZ cGFlV1JkMG9saEVicHY2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU0pPlPv5H5mDPhCG/KZId7vUtUMjqfDhfMSlo0WUxqtR5jQrfyc/w sy5bGiQ/4DrPuK6j594Lb6S0RK7GFvejIy2HBbguPB4MQIzcW1Q5GrObEL+vWF8h IaPZKu0hBszgONRtHBgc3bLwAx7/N/WZVmExU45gB3ug6BAxwfzIuQRzGCOVfPIS SaAdjIdO1rfnTHo2u0cCpICBeMCLEVWHrEqEP1frcIERetgaS4RXaAoFv+xseRrQ 6wXZVaHKAFz/vVrRRMrGhyIXGXXh3e1/plkvHGTClKVQgMssgjp8EBB1wOGN5XKB 8gY1zZJKs6OcKV5ZvveY+3Yjwo956QNP -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:03 2025 by rpki-client