This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft File: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft (raw, json) Hash identifier: p+ePzUl5MlqMxJ9dwj7AcKY6PfL4qx3qEB3QhJDmY7k= Subject key identifier: E5:3F:13:A2:8E:67:BD:ED:E3:7C:C2:FF:47:47:38:F2:5B:C9:C5:73 Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48 Certificate issuer: /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft Manifest number: 58 Signing time: Tue 23 Dec 2025 06:02:17 +0000 Manifest this update: Tue 23 Dec 2025 06:02:16 +0000 Manifest next update: Tue 30 Dec 2025 06:02:16 +0000 Files and hashes: 1: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl (hash: i7OsYRWgo9IucHjTLz7Pf9JPqxcrUAkvkMyh6SmVMdA=) 2: BD71164A59A211F09EC86C38C4F9AE02.roa (hash: LzVxtpFkoDUrbmBrIAWx2A82oGmfgpKdIsb6/8/yXfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348 Validity Not Before: Dec 23 06:02:16 2025 GMT Not After : Dec 30 06:02:16 2025 GMT Subject: CN=694a3068-8bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:c8:f8:dd:1c:b7:57:29:a2:4d:20:d8:93: 51:8b:6c:97:6f:19:7a:c1:bb:8d:8b:04:db:10:f8: e9:1b:d5:2d:2b:b9:3d:7f:17:e8:75:6f:3f:a0:d2: 98:4c:9e:fd:99:e7:c9:8f:33:69:d1:64:58:6d:c7: 63:c8:43:28:c9:f7:99:58:a0:36:f3:6b:42:eb:20: ad:cc:9e:c9:c9:6c:b9:0f:df:93:67:c3:14:5f:2b: 97:a4:f0:7a:2c:3d:d4:63:9a:a4:81:c3:8f:14:75: f8:c0:09:21:81:06:1b:0e:36:e6:a8:58:35:9f:d8: f3:af:69:b8:c6:1c:e5:22:04:64:f1:7f:99:16:d4: 8e:ad:62:ac:87:38:c5:37:fd:4c:e9:ef:7b:46:ca: 1b:e2:f5:f7:89:7b:8e:58:f6:f0:f7:56:1b:dd:66: dc:12:b2:0b:0b:05:74:14:dd:6f:47:f4:78:95:69: 5a:71:48:2d:a4:77:77:d2:7f:83:f9:4b:c4:dc:5b: a3:cf:c6:b8:c5:22:08:02:0e:87:17:a7:f4:a7:b6: 05:a2:26:da:8a:00:e5:52:d9:0f:da:76:a5:de:89: a5:04:e2:7a:d5:8f:e2:bf:94:06:1d:6f:84:15:0e: 78:f8:95:83:9c:e6:71:5e:bc:a0:18:69:c5:45:9b: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3F:13:A2:8E:67:BD:ED:E3:7C:C2:FF:47:47:38:F2:5B:C9:C5:73 X509v3 Authority Key Identifier: keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:7c:bf:85:17:15:4c:f8:2c:41:96:b0:49:a8:fc:8a:7e:a4: cd:01:1c:22:bc:bb:55:11:6a:51:e2:03:d5:38:94:70:db:c1: c5:f1:f7:64:0b:e7:76:14:6d:fd:1e:da:09:da:5a:80:96:a8: f7:f8:01:bd:44:b8:b5:27:73:a3:5a:d4:86:0b:d0:cd:fc:2b: cd:2a:1c:50:71:23:66:f9:05:44:63:6a:a5:3a:fc:69:6b:d8: 70:fa:ef:4e:0b:f6:4c:61:3f:50:c8:4c:2a:a3:23:a0:65:28: a1:2a:ea:42:f0:75:38:a5:47:ea:bb:90:07:e2:df:08:6f:68: 8d:84:23:dd:69:ec:15:09:fa:10:21:39:ec:0c:4a:9d:3b:03: ad:63:01:e9:e4:02:e5:4a:ab:0e:d7:4f:91:31:53:62:a1:38: cb:25:62:f9:58:d1:dc:94:0b:c7:fd:8e:5e:46:35:63:40:90: ba:e5:5a:0a:55:87:03:94:32:2d:c8:e2:a5:43:79:bd:ca:33: 7e:9b:63:a7:b4:7b:a5:a6:41:47:6c:75:b0:47:da:56:fa:a3: 79:eb:49:a7:e3:8e:e9:e3:2d:39:47:5d:27:91:01:0f:8e:99: 81:15:4d:50:60:fb:00:0f:6f:40:04:98:04:a1:da:d4:d7:1a: 00:df:ef:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjM3MjExMC8GA1UEBRMoNUU2MEI4NERCOTFCNkMwODY1MDIwQ0UwRjIwNkM1MzQ5 RTRCODM0ODAeFw0yNTEyMjMwNjAyMTZaFw0yNTEyMzAwNjAyMTZaMBgxFjAUBgNV BAMMDTY5NGEzMDY4LThiY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUEMj43Ry3VymiTSDYk1GLbJdvGXrBu42LBNsQ+Okb1S0ruT1/F+h1bz+g0phM nv2Z58mPM2nRZFhtx2PIQyjJ95lYoDbza0LrIK3MnsnJbLkP35NnwxRfK5ek8Hos PdRjmqSBw48UdfjACSGBBhsONuaoWDWf2POvabjGHOUiBGTxf5kW1I6tYqyHOMU3 /Uzp73tGyhvi9feJe45Y9vD3VhvdZtwSsgsLBXQU3W9H9HiVaVpxSC2kd3fSf4P5 S8TcW6PPxrjFIggCDocXp/SntgWiJtqKAOVS2Q/adqXeiaUE4nrVj+K/lAYdb4QV Dnj4lYOc5nFevKAYacVFm5DBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5T8Too5n ve3jfML/R0c48lvJxXMwHwYDVR0jBBgwFoAUXmC4TbkbbAhlAgzg8gbFNJ5Lg0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MzcyL0U2RDk1MjYwNTlB MDExRjA4Mjg2RDMzMkM0RjlBRTAyL1htQzRUYmtiYkFobEFnemc4Z2JGTko1TGcw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWG1DNFRia2JiQWhsQWd6ZzhnYkZOSjVMZzBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MzcyL0U2RDk1MjYwNTlBMDExRjA4Mjg2RDMzMkM0RjlBRTAyL1htQzRUYmtiYkFo bEFnemc4Z2JGTko1TGcwZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABh8v4UXFUz4LEGWsEmo/Ip+pM0BHCK8u1URalHiA9U4lHDbwcXx92QL 53YUbf0e2gnaWoCWqPf4Ab1EuLUnc6Na1IYL0M38K80qHFBxI2b5BURjaqU6/Glr 2HD6704L9kxhP1DITCqjI6BlKKEq6kLwdTilR+q7kAfi3whvaI2EI91p7BUJ+hAh OewMSp07A61jAenkAuVKqw7XT5ExU2KhOMslYvlY0dyUC8f9jl5GNWNAkLrlWgpV hwOUMi3I4qVDeb3KM36bY6e0e6WmQUdsdbBH2lb6o3nrSafjjunjLTlHXSeRAQ+O mYEVTVBg+wAPb0AEmASh2tTXGgDf78k= -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:21 2025 by rpki-client