This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft File: xWFyqoU5BINNkF08MAE0TdKhjp4.mft (raw, json) Hash identifier: HyVnYXrS9x+0dklzRd8SfwOzt2eZgzcu1ZPpA/SxVvM= Subject key identifier: B7:F4:5B:95:22:FB:C1:39:ED:76:AA:AD:E4:5B:70:AC:1E:C2:9D:CA Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft Manifest number: 01DF Signing time: Tue 09 Dec 2025 01:00:09 +0000 Manifest this update: Tue 09 Dec 2025 01:00:09 +0000 Manifest next update: Tue 16 Dec 2025 01:00:08 +0000 Files and hashes: 1: xWFyqoU5BINNkF08MAE0TdKhjp4.crl (hash: B3SpGcUVRG1gjmRrIbgY0qZKQv2VDQ+tIwdrlAAw3Yk=) 2: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (hash: QJic5b/HC6ZO9L9AzouyI1f/AhHlKpyjlXdUDRpV06s=) 3: 6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (hash: fvrvhYuIB4wEmKs1ycLwW/A4j4ALVpjcmKJeAfUulIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 01:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Validity Not Before: Dec 9 01:00:09 2025 GMT Not After : Dec 16 01:00:08 2025 GMT Subject: CN=69377499-fdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:e0:bf:36:2d:72:2d:48:9d:ae:1d:e6:43: 7b:39:f0:79:07:cb:e9:9c:7d:13:f4:37:35:84:e9: 29:04:1a:2a:9c:36:ec:16:18:6d:3f:68:15:3c:04: d9:aa:26:46:c9:f1:6e:27:5b:f0:2c:8f:2d:0f:e4: 6c:c8:d3:d2:d8:e7:54:aa:de:f3:48:30:a5:12:7e: 72:c9:43:b8:99:8b:00:24:a4:66:82:d9:97:0d:96: 3f:1a:95:8e:0e:ab:5d:8d:be:c6:db:1f:fc:c1:eb: c7:e2:16:69:87:47:fe:5a:f8:46:cc:44:dc:c1:6b: 23:69:96:ff:8d:7c:19:bf:aa:c8:8b:f5:a0:7d:fa: 33:8f:6f:e6:d3:b0:89:8c:c1:c4:96:a2:08:83:15: c3:42:a6:b2:2f:54:09:94:12:3b:c6:2b:1b:1e:1c: 6e:7f:d9:61:fa:e7:f9:e3:e0:00:0c:24:f7:5c:bf: bb:7f:4a:75:c9:89:b5:d2:d5:e7:ec:8e:7b:88:9b: e1:af:df:a6:64:f8:44:51:49:02:86:57:57:de:97: 3f:a2:6e:90:79:e5:17:05:37:84:fd:1a:7d:91:a6: 14:af:6b:ad:92:ad:d7:66:2d:ed:fb:74:ee:7c:50: d3:fd:05:97:9d:01:8e:a2:ae:20:a7:9f:71:27:35: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F4:5B:95:22:FB:C1:39:ED:76:AA:AD:E4:5B:70:AC:1E:C2:9D:CA X509v3 Authority Key Identifier: keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8c:0c:f7:6f:ae:ea:2c:24:fd:bb:1d:89:c5:30:99:c9:86: 1a:bc:56:a6:3e:1c:c2:4c:1c:58:b7:3d:79:67:a0:e9:be:5a: d6:79:de:4e:6d:5a:59:93:af:71:48:23:3a:ca:ef:a1:27:6d: 9c:85:b7:48:c8:ac:af:fd:8a:8a:8c:d4:b9:aa:71:f2:26:7e: 23:66:ea:b5:a9:8a:aa:e9:5f:cd:89:b1:e4:33:f4:7e:25:06: 78:0e:42:6d:9b:13:a5:df:1f:de:40:c4:d7:25:91:80:47:54: 5d:6d:45:9e:c3:b8:c2:6e:71:ea:fa:63:8f:ce:0d:40:40:2e: 32:43:13:a3:cc:c4:79:8e:34:fa:20:9c:8d:67:60:9b:de:b9: 08:13:09:66:2e:f6:8f:c6:38:22:a5:ce:9d:a6:e6:52:a6:1f: d4:48:64:e5:42:fa:f9:90:8a:28:d6:13:f5:5c:5a:8f:b8:cd: d7:40:1e:13:04:71:c9:52:34:f8:9e:a8:5e:f1:d3:ef:41:1f: 88:14:4c:46:ee:a7:0e:73:ef:ee:39:7d:16:d0:9a:86:f9:81: 73:e6:7e:6f:3f:72:20:eb:91:c8:2e:1c:52:ff:e6:2c:a2:16: 7c:ee:6d:8d:18:07:4f:0b:2b:25:80:32:54:8e:67:2c:ee:71: 9a:4b:16:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzMjExMTAvBgNVBAUTKEM1NjE3MkFBODUzOTA0ODM0RDkwNUQzQzMwMDEzNDRE RDJBMThFOUUwHhcNMjUxMjA5MDEwMDA5WhcNMjUxMjE2MDEwMDA4WjAYMRYwFAYD VQQDEw02OTM3NzQ5OS1mZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz/gvzYtci1Ina4d5kN7OfB5B8vpnH0T9Dc1hOkpBBoqnDbsFhhtP2gVPATZ qiZGyfFuJ1vwLI8tD+RsyNPS2OdUqt7zSDClEn5yyUO4mYsAJKRmgtmXDZY/GpWO Dqtdjb7G2x/8wevH4hZph0f+WvhGzETcwWsjaZb/jXwZv6rIi/Wgffozj2/m07CJ jMHElqIIgxXDQqayL1QJlBI7xisbHhxuf9lh+uf54+AADCT3XL+7f0p1yYm10tXn 7I57iJvhr9+mZPhEUUkChldX3pc/om6QeeUXBTeE/Rp9kaYUr2utkq3XZi3t+3Tu fFDT/QWXnQGOoq4gp59xJzXCkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLf0W5Ui +8E57XaqreRbcKwewp3KMB8GA1UdIwQYMBaAFMVhcqqFOQSDTZBdPDABNE3SoY6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDMyMS81MkIyRTAxNjAw QzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJTk5rRjA4TUFFMFRkS2hq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hXRnlxb1U1QklOTmtGMDhNQUUwVGRLaGpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDMyMS81MkIyRTAxNjAwQzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJ Tk5rRjA4TUFFMFRkS2hqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOjAz3b67qLCT9ux2JxTCZyYYavFamPhzCTBxYtz15Z6DpvlrWed5O bVpZk69xSCM6yu+hJ22chbdIyKyv/YqKjNS5qnHyJn4jZuq1qYqq6V/NibHkM/R+ JQZ4DkJtmxOl3x/eQMTXJZGAR1RdbUWew7jCbnHq+mOPzg1AQC4yQxOjzMR5jjT6 IJyNZ2Cb3rkIEwlmLvaPxjgipc6dpuZSph/USGTlQvr5kIoo1hP1XFqPuM3XQB4T BHHJUjT4nqhe8dPvQR+IFExG7qcOc+/uOX0W0JqG+YFz5n5vP3Ig65HILhxS/+Ys ohZ87m2NGAdPCyslgDJUjmcs7nGaSxYo -----END CERTIFICATE-----Generated at Wed Dec 10 12:53:18 2025 by rpki-client