This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json) Hash identifier: UsyFruub6eGDNkA/k1tLixde39uBLTcGJszFderoxvU= Subject key identifier: 7D:26:6C:5C:E4:CA:BF:6B:DF:3C:9F:38:1B:F2:0A:45:CA:A8:71:27 Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft Manifest number: 083E Signing time: Sat 20 Dec 2025 20:15:17 +0000 Manifest this update: Sat 20 Dec 2025 20:15:17 +0000 Manifest next update: Sat 27 Dec 2025 20:15:17 +0000 Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: o38waEvxEpd11tA/1B3HDWXV3KqxChXqTyBKl+A+sOU=) 2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: 433DCsbHOeQOFPBNJfYwdTpevwJm9hk5VYfRWCXU3fI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Validity Not Before: Dec 20 20:15:17 2025 GMT Not After : Dec 27 20:15:17 2025 GMT Subject: CN=694703d5-8880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3f:fa:3a:6b:ee:c2:07:62:ea:1b:25:79:bb: 33:41:9e:53:6b:ac:a2:bf:c5:0c:ef:86:f7:9b:d8: 75:03:4f:d8:ad:09:34:d7:c2:f4:e2:ff:66:e7:aa: be:ee:d1:5c:d1:c0:41:0f:2c:2a:b3:7f:34:f8:c0: ec:28:31:42:35:2b:e6:61:96:93:61:1a:29:70:3a: bf:37:24:7b:8c:00:e4:64:f7:4e:d2:ac:01:44:3a: 66:b1:79:2c:5e:a8:57:61:6e:6a:8d:ed:63:ac:04: 39:c2:bc:d4:de:96:95:5d:2f:3f:82:a8:e5:a5:8e: d4:7d:bc:1d:b1:ad:c6:3f:6f:a1:e0:2e:71:31:49: 10:5f:75:a7:de:d2:10:02:6f:8e:ad:48:b4:6d:5e: 5e:10:6a:07:ac:a4:9e:0d:bd:e6:28:5d:b3:61:5b: 91:bb:02:64:8d:e8:81:10:b0:d0:22:41:e8:23:29: a9:df:00:0d:99:e9:4e:f5:ed:77:10:9d:a9:a2:df: 49:ad:bc:9d:76:e2:f9:18:38:49:1a:76:fb:38:31: aa:b2:35:93:dd:1b:a7:64:05:93:95:5c:9a:e2:20: f7:2d:a8:70:e0:23:5d:02:8b:06:a0:82:f8:44:2a: 61:1a:ce:2d:46:3c:7c:7d:c6:44:b4:49:f9:f4:b7: 3e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:6C:5C:E4:CA:BF:6B:DF:3C:9F:38:1B:F2:0A:45:CA:A8:71:27 X509v3 Authority Key Identifier: keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:95:f1:c7:2e:e2:cb:b6:b8:a2:c1:43:e0:bd:d3:15:53:1c: 4e:c8:d8:e0:68:3e:88:dc:41:46:c2:86:4d:8f:af:e3:ee:1f: 80:f4:4a:cc:01:d6:c7:b2:fe:30:58:b1:3d:53:9e:f8:8e:94: 59:3f:70:e8:9c:62:4f:ee:29:6a:35:e9:be:ee:20:0e:12:f5: 76:41:14:45:4e:41:46:34:2c:ca:b2:c8:b8:74:d1:e3:3c:48: e3:c9:c2:41:8b:9c:b0:ed:40:7c:ef:f0:ed:88:64:e4:f7:ed: e0:c4:df:99:d2:f0:3d:1a:25:b7:3c:71:5c:a7:b4:9a:19:c7: f3:25:c0:c3:5d:1a:f4:fb:9c:d5:dc:63:46:27:16:67:1f:ea: aa:7f:88:0c:6c:25:60:d8:e4:22:10:94:40:12:67:ad:54:b3: be:d6:db:4a:6f:4f:3c:e3:c4:ee:76:55:95:62:a6:3c:6e:ba: 13:ab:95:e4:94:ff:ee:4f:c3:52:bd:12:86:79:b6:f1:e0:8d: 2f:17:81:4c:ed:3f:44:35:fc:29:f2:ef:06:4b:10:1b:57:7e: 52:a9:a1:ea:f2:78:76:00:9f:53:56:22:29:5f:b3:40:f5:0f: af:a9:8e:27:ae:e4:18:6b:0d:e4:86:fb:7d:51:26:d3:4e:58: f9:f2:2d:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz M0NEMDU0MzUwHhcNMjUxMjIwMjAxNTE3WhcNMjUxMjI3MjAxNTE3WjAYMRYwFAYD VQQDDA02OTQ3MDNkNS04ODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3z/6Omvuwgdi6hslebszQZ5Ta6yiv8UM74b3m9h1A0/YrQk018L04v9m56q+ 7tFc0cBBDywqs380+MDsKDFCNSvmYZaTYRopcDq/NyR7jADkZPdO0qwBRDpmsXks XqhXYW5qje1jrAQ5wrzU3paVXS8/gqjlpY7Ufbwdsa3GP2+h4C5xMUkQX3Wn3tIQ Am+OrUi0bV5eEGoHrKSeDb3mKF2zYVuRuwJkjeiBELDQIkHoIymp3wANmelO9e13 EJ2pot9JrbydduL5GDhJGnb7ODGqsjWT3RunZAWTlVya4iD3Lahw4CNdAosGoIL4 RCphGs4tRjx8fcZEtEn59Lc+ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0mbFzk yr9r3zyfOBvyCkXKqHEnMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4 QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTQwMy9BMUNDRUNGRUY4QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1z a1oweldxbE5Ebk16elFWRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCylfHHLuLLtriiwUPgvdMVUxxOyNjgaD6I3EFGwoZNj6/j7h+A9ErM AdbHsv4wWLE9U574jpRZP3DonGJP7ilqNem+7iAOEvV2QRRFTkFGNCzKssi4dNHj PEjjycJBi5yw7UB87/DtiGTk9+3gxN+Z0vA9GiW3PHFcp7SaGcfzJcDDXRr0+5zV 3GNGJxZnH+qqf4gMbCVg2OQiEJRAEmetVLO+1ttKb08848TudlWVYqY8broTq5Xk lP/uT8NSvRKGebbx4I0vF4FM7T9ENfwp8u8GSxAbV35SqaHq8nh2AJ9TViIpX7NA 9Q+vqY4nruQYaw3khvt9USbTTlj58i24 -----END CERTIFICATE-----Generated at Mon Dec 22 04:21:57 2025 by rpki-client