This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: 1z5NLSFUKAf3oOxKFsAJB1MgU7JYTPW1QvUNQCsiVio= Subject key identifier: B5:FC:84:F7:1A:52:AB:D9:A9:3D:38:6E:C2:28:01:23:1E:24:21:AE Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 0251 Signing time: Sun 21 Dec 2025 00:58:20 +0000 Manifest this update: Sun 21 Dec 2025 00:58:19 +0000 Manifest next update: Sun 28 Dec 2025 00:58:19 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: E5c4NvyjWT3JqOrDGAcbkLwgusGatui++WKf8Nj7kKY=) 2: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: HWKUOlRf26vXVLrvzxoCBARsK7RmPl1k0ABbjAs3vlA=) 3: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: /pTedztaSiCOyPS1HOnaWKUVCcU322igmimIyTxJJbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Dec 21 00:58:19 2025 GMT Not After : Dec 28 00:58:19 2025 GMT Subject: CN=6947462c-3a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:94:25:ef:ac:6f:e2:d5:cd:bc:f2:9b:2c: ac:ca:d5:3f:09:05:0e:36:60:d1:4d:15:ac:4d:69: 54:5b:ad:9e:e3:65:2c:cb:e0:d4:00:00:db:b7:d0: 16:5b:a7:fe:07:c0:07:44:d4:d0:ed:94:ab:b8:16: 69:c7:2a:50:43:4b:62:a9:07:a4:f1:a8:8c:ac:1e: 6c:b5:d9:e9:07:2d:07:43:0a:fc:90:5c:74:e3:13: 0b:e0:0d:65:a4:d2:48:c3:91:9f:f2:27:4e:35:c1: 49:15:eb:58:c7:46:8c:da:e3:56:d3:8c:58:d0:be: 35:39:30:9a:78:e0:5a:be:d1:09:6d:8b:fe:cb:6d: 3d:c4:68:27:19:f7:83:92:38:f7:b5:cc:6a:44:15: db:0e:47:8b:ed:c1:ba:eb:20:58:1d:59:53:41:aa: cd:83:3e:9a:bd:7c:30:7b:70:8c:3a:2a:22:e5:1c: 7e:1a:2c:f5:83:e0:65:b4:bc:da:b4:05:45:6f:0e: 60:a8:4f:a7:ce:5b:ff:a0:1a:95:17:00:44:56:2a: 33:66:b8:8f:67:5d:f0:e5:a0:3b:bc:5c:60:40:6f: de:02:33:36:ae:53:b4:74:51:ed:62:5e:98:4f:1d: b7:1d:f5:dd:79:15:f6:05:e9:df:85:b6:ea:64:81: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FC:84:F7:1A:52:AB:D9:A9:3D:38:6E:C2:28:01:23:1E:24:21:AE X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:68:ae:4f:a8:42:bb:1f:74:31:aa:e6:48:44:3b:6a:21:d3: 65:92:c2:57:6d:ca:c3:eb:c4:cb:39:76:36:b0:19:38:d2:bf: d7:45:1e:fa:c8:60:3a:9e:96:6f:52:c0:82:b7:a2:30:1a:d2: e4:6c:fc:37:c9:a9:86:2b:58:08:8a:bf:f7:7e:2a:85:b8:69: ca:a2:c8:04:50:b2:9a:54:af:0d:ce:81:32:1a:24:98:d6:6b: d5:52:42:a3:31:04:eb:97:5f:a1:d2:a1:0f:e8:70:d3:03:1d: d5:f0:b1:2c:de:b9:d5:f3:0b:6d:c3:3e:04:68:be:a5:76:35: 42:8e:3c:4d:49:ff:f5:11:54:a8:a0:74:07:6b:d4:8d:54:45: 8d:fd:9e:df:72:d7:e2:9a:80:b5:02:49:cc:dc:66:64:6a:d6: d8:7a:13:52:6c:4b:fd:7b:ff:a4:0b:ee:47:fc:be:4b:cb:f4: eb:04:64:36:e4:36:63:1f:28:26:4f:bc:3d:55:05:9c:e4:93: 46:5c:f3:2e:8f:2e:77:be:1c:06:a1:94:fd:32:01:7e:90:8d: 59:a9:55:73:96:ea:9a:5a:c0:21:b7:cf:1e:a3:12:d2:b5:f6: 03:a1:1f:a7:0d:8b:4d:85:b6:1d:54:f9:2a:4d:cc:5f:bc:d3: 66:8f:d6:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjUxMjIxMDA1ODE5WhcNMjUxMjI4MDA1ODE5WjAYMRYwFAYD VQQDDA02OTQ3NDYyYy0zYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIaUJe+sb+LVzbzymyysytU/CQUONmDRTRWsTWlUW62e42Usy+DUAADbt9AW W6f+B8AHRNTQ7ZSruBZpxypQQ0tiqQek8aiMrB5stdnpBy0HQwr8kFx04xML4A1l pNJIw5Gf8idONcFJFetYx0aM2uNW04xY0L41OTCaeOBavtEJbYv+y209xGgnGfeD kjj3tcxqRBXbDkeL7cG66yBYHVlTQarNgz6avXwwe3CMOioi5Rx+Giz1g+BltLza tAVFbw5gqE+nzlv/oBqVFwBEViozZriPZ13w5aA7vFxgQG/eAjM2rlO0dFHtYl6Y Tx23HfXdeRX2BenfhbbqZIFGMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX8hPca UqvZqT04bsIoASMeJCGuMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzaK5PqEK7H3QxquZIRDtqIdNlksJXbcrD68TLOXY2sBk40r/XRR76 yGA6npZvUsCCt6IwGtLkbPw3yamGK1gIir/3fiqFuGnKosgEULKaVK8NzoEyGiSY 1mvVUkKjMQTrl1+h0qEP6HDTAx3V8LEs3rnV8wttwz4EaL6ldjVCjjxNSf/1EVSo oHQHa9SNVEWN/Z7fctfimoC1AknM3GZkatbYehNSbEv9e/+kC+5H/L5Ly/TrBGQ2 5DZjHygmT7w9VQWc5JNGXPMujy53vhwGoZT9MgF+kI1ZqVVzluqaWsAht88eoxLS tfYDoR+nDYtNhbYdVPkqTcxfvNNmj9bc -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:52 2025 by rpki-client