This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft File: XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json) Hash identifier: sNDXwNaIXGNiEz5ZMu7Td4k8PWgl7WXBJIHZ3cWrT7s= Subject key identifier: 5E:4C:9F:2C:3E:82:56:B5:7B:D4:04:A5:08:E3:1D:91:94:18:DE:60 Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft Manifest number: 0130 Signing time: Tue 23 Dec 2025 03:35:06 +0000 Manifest this update: Tue 23 Dec 2025 03:35:06 +0000 Manifest next update: Tue 30 Dec 2025 03:35:06 +0000 Files and hashes: 1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: pyGXhohHLgrE5ZazF5Tt0+L8b8fBiNVygflKk7mnij0=) 2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: 1j2rFTty2/H954Iwvk/ZWmtqptjhE7lYs+ZEPtYw42E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Validity Not Before: Dec 23 03:35:06 2025 GMT Not After : Dec 30 03:35:06 2025 GMT Subject: CN=694a0dea-5a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:6c:64:d1:97:63:c8:db:c4:a4:3d:ba:a8: ea:0f:7b:92:ed:85:fc:e6:07:2f:33:e1:71:73:50: 06:f1:7c:1d:59:11:c9:61:d3:70:2a:bc:b4:b5:34: 34:97:bf:1a:76:df:39:17:71:36:b6:4e:bf:8d:94: c2:13:0c:6e:98:76:b8:dc:70:37:22:7c:68:2f:e3: 8e:18:8d:83:00:91:71:14:b9:f1:c6:b5:e8:f0:72: 3b:a5:63:72:4d:2c:3c:d3:38:10:48:0f:fd:d6:23: 51:83:9b:cb:a1:cc:9d:c5:c4:43:12:01:c8:a5:c2: 3f:65:f2:03:1e:b2:bd:49:eb:e2:8b:89:3c:5a:94: 12:0e:d6:dd:10:1b:d2:63:74:92:6b:10:63:26:9e: b6:8f:bc:04:59:5d:e5:47:8b:a7:1f:e8:cd:0a:92: 69:3d:61:e4:b0:36:09:88:f7:8c:e3:d0:34:8a:88: 4a:05:9c:c8:09:50:f5:fd:cb:8c:7e:9f:ac:84:38: 38:4a:b8:aa:47:70:e4:90:ea:ec:a2:7a:4b:e9:80: e3:f5:b1:bf:8d:af:43:55:60:09:c1:2d:aa:9d:f1: 4a:da:42:61:9a:ac:7a:89:88:89:ad:0e:0a:03:c4: f8:b6:68:8c:ec:bf:88:a5:93:29:7b:05:00:9a:09: de:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4C:9F:2C:3E:82:56:B5:7B:D4:04:A5:08:E3:1D:91:94:18:DE:60 X509v3 Authority Key Identifier: keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:1d:22:6b:69:55:89:aa:7d:bf:67:23:ee:54:65:84:7f:03: 7f:94:b0:49:7e:8d:95:3c:ba:77:0b:fe:1a:6f:bb:6f:08:76: 26:ba:5b:55:c3:dd:a2:6a:21:64:b3:52:1d:84:0f:88:d1:6e: bf:a0:ff:c3:df:6b:97:34:48:d0:f4:ad:16:73:9a:2f:c4:9e: 56:f1:97:23:0b:78:ec:0b:e4:c9:3f:e1:86:4d:09:b8:f5:da: b1:0e:d5:f4:39:7e:ed:6d:4f:10:93:82:83:7b:66:aa:45:d7: 5f:3f:ef:49:bf:a7:35:90:ff:52:fd:96:be:a3:41:52:e6:db: 89:ea:a6:29:3e:e4:57:b5:b0:26:c7:d2:4c:df:62:99:61:36: 39:64:f9:be:a0:9e:be:8d:db:29:56:5c:84:de:80:8e:35:6a: b1:64:13:07:71:e6:de:f7:07:43:48:77:59:70:54:f5:3c:a1: 82:d0:77:d9:c6:82:8e:d2:e1:36:46:e8:3f:10:c3:24:0e:fb: 26:91:32:0e:52:d3:7a:aa:d8:8b:db:8c:68:1a:3e:7b:10:3f: b9:91:90:fc:a2:cc:4e:26:68:c7:c1:3c:df:12:97:bd:24:26: 7b:97:0e:40:f5:df:83:bb:24:20:91:49:07:bb:78:c9:58:f0: b5:6c:44:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCNDcxMTAvBgNVBAUTKDVERjU2NkQ3NjIzNjdDMjhDN0YzRjEyNTYxQjQ3MTZC OENBMUI5NjYwHhcNMjUxMjIzMDMzNTA2WhcNMjUxMjMwMDMzNTA2WjAYMRYwFAYD VQQDDA02OTRhMGRlYS01YTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnM5sZNGXY8jbxKQ9uqjqD3uS7YX85gcvM+Fxc1AG8XwdWRHJYdNwKry0tTQ0 l78adt85F3E2tk6/jZTCEwxumHa43HA3InxoL+OOGI2DAJFxFLnxxrXo8HI7pWNy TSw80zgQSA/91iNRg5vLocydxcRDEgHIpcI/ZfIDHrK9Sevii4k8WpQSDtbdEBvS Y3SSaxBjJp62j7wEWV3lR4unH+jNCpJpPWHksDYJiPeM49A0iohKBZzICVD1/cuM fp+shDg4SriqR3DkkOrsonpL6YDj9bG/ja9DVWAJwS2qnfFK2kJhmqx6iYiJrQ4K A8T4tmiM7L+IpZMpewUAmgneowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5Mnyw+ gla1e9QEpQjjHZGUGN5gMB8GA1UdIwQYMBaAFF31ZtdiNnwox/PxJWG0cWuMoblm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0I0Ny84NzFCOTI5NDBG QTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZDakg4X0VsWWJSeGE0eWh1 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmVm0xMkkyZkNqSDhfRWxZYlJ4YTR5aHVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0I0Ny84NzFCOTI5NDBGQTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZD akg4X0VsWWJSeGE0eWh1V1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWHSJraVWJqn2/ZyPuVGWEfwN/lLBJfo2VPLp3C/4ab7tvCHYmultV w92iaiFks1IdhA+I0W6/oP/D32uXNEjQ9K0Wc5ovxJ5W8ZcjC3jsC+TJP+GGTQm4 9dqxDtX0OX7tbU8Qk4KDe2aqRddfP+9Jv6c1kP9S/Za+o0FS5tuJ6qYpPuRXtbAm x9JM32KZYTY5ZPm+oJ6+jdspVlyE3oCONWqxZBMHcebe9wdDSHdZcFT1PKGC0HfZ xoKO0uE2Rug/EMMkDvsmkTIOUtN6qtiL24xoGj57ED+5kZD8osxOJmjHwTzfEpe9 JCZ7lw5A9d+DuyQgkUkHu3jJWPC1bEQW -----END CERTIFICATE-----Generated at Wed Dec 24 10:50:57 2025 by rpki-client