This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft File: xDfVjxI6auBXxgjiFrtr_WWER2o.mft (raw, json) Hash identifier: FjDUJXeMH1eUs+uk8j+YWU1h4LbJ5CPATBzrJK61khg= Subject key identifier: D1:CE:B6:1B:68:CB:CF:98:27:8B:70:7C:87:C5:EC:8A:E3:5A:2D:2C Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A Certificate issuer: /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Certificate serial: 0622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft Manifest number: 061C Signing time: Mon 22 Dec 2025 21:59:16 +0000 Manifest this update: Mon 22 Dec 2025 21:59:15 +0000 Manifest next update: Mon 29 Dec 2025 21:59:15 +0000 Files and hashes: 1: xDfVjxI6auBXxgjiFrtr_WWER2o.crl (hash: uNncrdPxcM4wN/j8d8CjwdqBgWSHo3sGGJsVyKEsfk4=) 2: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (hash: bXFPKdh1DOKKzF1VDrO1xVCyooUJXcE+RZoWJywL3IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169903, serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Validity Not Before: Dec 22 21:59:15 2025 GMT Not After : Dec 29 21:59:15 2025 GMT Subject: CN=6949bf34-8fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:e2:e6:2b:e4:a3:72:30:e1:88:8d:2d:e3: aa:c4:fe:39:37:60:df:54:9a:81:30:a5:f1:ac:50: f3:46:e1:3f:1e:d5:ea:23:52:91:44:e1:4c:b2:45: 55:25:bc:b7:37:ea:ae:35:17:0e:68:8f:db:78:04: ad:fa:19:b0:12:c5:64:46:2d:5a:93:e7:bf:0a:b5: 62:b7:c5:db:4b:14:cb:e3:0a:d6:dd:d9:6d:a3:35: 69:cb:e2:ca:72:85:de:d7:06:71:e9:38:3e:d8:3f: 4e:03:a6:2f:a3:2e:c3:ea:9f:c6:ca:cd:89:ff:01: 4f:a4:07:71:3c:83:3c:24:dc:a7:e9:88:2b:23:dd: 92:d9:5e:e4:b2:01:dd:5a:b0:19:fc:79:05:5a:ce: 47:e3:10:d1:43:f5:c6:03:42:9b:af:5b:25:80:1b: 1e:79:77:c4:98:4e:2e:8b:53:18:1d:83:78:26:89: ea:4e:90:c2:2e:19:44:92:dc:44:63:aa:9b:99:cd: 1d:77:9e:5e:fd:24:5e:1b:6a:66:fa:48:f2:7f:f4: 88:24:04:f4:c3:4f:c6:3b:f4:d9:f0:38:22:ab:48: 84:3d:e2:1c:ea:5d:d8:e7:1b:f3:32:2c:b3:03:df: 0b:40:e2:74:e3:8a:50:e8:77:93:83:5d:ac:e2:b3: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CE:B6:1B:68:CB:CF:98:27:8B:70:7C:87:C5:EC:8A:E3:5A:2D:2C X509v3 Authority Key Identifier: keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:aa:2d:42:ea:19:56:bf:2a:fc:fb:cf:cc:cf:ea:fd:5c:db: 66:e9:d0:76:25:61:90:68:b3:be:1d:b0:79:ca:f9:34:e2:18: dd:e0:6b:be:85:7e:6d:50:e6:73:db:02:ab:e5:b5:b5:27:00: 87:27:cf:3e:cb:fd:41:14:36:21:bd:d5:03:6e:28:e1:33:6c: 3e:e3:70:ed:3e:9b:ac:45:e1:b5:b6:fb:73:90:90:50:68:48: 71:a3:e7:ba:b3:f4:75:d7:c4:ab:1b:ff:ea:32:eb:96:9e:8c: d8:a1:31:ea:08:cd:3a:39:e4:9b:25:bf:ef:b4:bd:12:05:9f: bc:42:05:b1:1e:06:7f:a5:cf:ac:1d:fc:4f:5b:26:9b:3a:6f: e7:26:db:6b:20:40:2a:83:17:0c:7c:5f:1f:e2:99:54:7c:77: 0e:51:97:7d:34:f2:2c:39:99:f8:7a:31:b5:76:21:28:16:87: 10:ed:22:28:ac:ae:d5:68:6d:d5:81:95:e4:18:ac:7f:57:b4: ee:b6:0e:85:5e:88:0e:dd:61:68:c3:06:f2:47:c8:41:f6:20: 9c:62:07:67:e7:4b:83:ff:64:8f:a6:f9:d8:96:12:33:85:d8: 11:21:01:9c:e0:67:b3:f4:0a:c4:13:ed:68:39:f6:0c:a7:8b: 50:57:f1:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk5MDMxMTAvBgNVBAUTKEM0MzdENThGMTIzQTZBRTA1N0M2MDhFMjE2QkI2QkZE NjU4NDQ3NkEwHhcNMjUxMjIyMjE1OTE1WhcNMjUxMjI5MjE1OTE1WjAYMRYwFAYD VQQDDA02OTQ5YmYzNC04ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj6vi5ivko3Iw4YiNLeOqxP45N2DfVJqBMKXxrFDzRuE/HtXqI1KRROFMskVV Jby3N+quNRcOaI/beASt+hmwEsVkRi1ak+e/CrVit8XbSxTL4wrW3dltozVpy+LK coXe1wZx6Tg+2D9OA6Yvoy7D6p/Gys2J/wFPpAdxPIM8JNyn6YgrI92S2V7ksgHd WrAZ/HkFWs5H4xDRQ/XGA0Kbr1slgBseeXfEmE4ui1MYHYN4JonqTpDCLhlEktxE Y6qbmc0dd55e/SReG2pm+kjyf/SIJAT0w0/GO/TZ8Dgiq0iEPeIc6l3Y5xvzMiyz A98LQOJ044pQ6HeTg12s4rMTMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHOthto y8+YJ4twfIfF7IrjWi0sMB8GA1UdIwQYMBaAFMQ31Y8SOmrgV8YI4ha7a/1lhEdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTkwMy9FRTZCNzQxOEM4 MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1Qlh4Z2ppRnJ0cl9XV0VS Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEZlZqeEk2YXVCWHhnamlGcnRyX1dXRVIyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTkwMy9FRTZCNzQxOEM4MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1 Qlh4Z2ppRnJ0cl9XV0VSMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdqi1C6hlWvyr8+8/Mz+r9XNtm6dB2JWGQaLO+HbB5yvk04hjd4Gu+ hX5tUOZz2wKr5bW1JwCHJ88+y/1BFDYhvdUDbijhM2w+43DtPpusReG1tvtzkJBQ aEhxo+e6s/R118SrG//qMuuWnozYoTHqCM06OeSbJb/vtL0SBZ+8QgWxHgZ/pc+s HfxPWyabOm/nJttrIEAqgxcMfF8f4plUfHcOUZd9NPIsOZn4ejG1diEoFocQ7SIo rK7VaG3VgZXkGKx/V7Tutg6FXogO3WFowwbyR8hB9iCcYgdn50uD/2SPpvnYlhIz hdgRIQGc4Gez9ArEE+1oOfYMp4tQV/EO -----END CERTIFICATE-----Generated at Wed Dec 24 02:17:44 2025 by rpki-client