This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: b+Q3ghEn4t7yHr04dTC+2ryMeO8tI7C9BvybByC+1TM= Subject key identifier: 41:EE:CE:1D:4B:61:7A:CC:D8:B2:F6:56:98:2B:EC:5E:0A:FC:B9:1D Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 0597 Signing time: Mon 22 Dec 2025 22:19:35 +0000 Manifest this update: Mon 22 Dec 2025 22:19:35 +0000 Manifest next update: Mon 29 Dec 2025 22:19:35 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: /fbhcslNuJ/1nwwamCFVEaZRfGa4mc7a+HAQ+/aAWKE=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 2XbXZcyCmkwNngGPogkbhBm8QONSr+SCdJI+4quVjcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: Dec 22 22:19:35 2025 GMT Not After : Dec 29 22:19:35 2025 GMT Subject: CN=6949c3f7-a8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:c0:b3:7f:32:0e:66:98:b0:1a:1a:f2:e2: 35:ff:0c:cd:dd:b5:d1:34:36:6a:b2:b2:ce:e2:2e: 3f:dc:86:58:e1:f7:a0:44:26:f6:cb:03:4b:46:62: fa:a6:e8:ca:e5:59:34:9d:a7:92:c3:29:83:b2:78: 8a:73:3c:50:d8:4c:ae:00:bf:1c:8c:e3:92:5b:57: 02:10:a6:43:73:53:10:46:8f:8b:5f:6e:99:9d:18: 4f:36:63:c5:9b:78:4c:10:b1:a3:79:2b:8b:ce:f4: 8b:27:b4:ec:55:8a:12:5c:bd:d6:e6:ee:2e:bb:0d: 00:2e:a5:3f:ff:32:97:2b:1c:d3:69:f7:89:48:01: f1:9f:9c:f8:74:d7:46:ae:f9:f3:bc:87:b7:28:00: 75:9c:94:27:24:9c:0c:68:20:5f:68:29:ff:dd:c3: 81:86:f4:7d:f5:40:fc:21:ae:78:ac:88:7d:a5:eb: 60:5e:a0:65:26:dd:f0:ce:f6:55:5b:5e:33:90:f1: 94:51:1a:a6:b3:b5:a0:6a:29:53:23:ab:b7:59:9e: a9:10:fb:85:f5:16:a4:70:21:7a:d9:8d:05:10:03: 88:19:38:78:4d:f6:55:70:54:47:9b:10:64:d5:8c: 76:de:39:85:ac:db:63:8f:6a:26:32:8a:1e:6b:25: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EE:CE:1D:4B:61:7A:CC:D8:B2:F6:56:98:2B:EC:5E:0A:FC:B9:1D X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:fd:b9:37:b8:55:50:97:37:49:b3:49:ff:64:4b:fd:cc:57: 37:12:00:92:56:1b:05:20:f8:ea:eb:34:21:03:1f:db:ac:13: 4a:f1:74:5d:b7:f6:4e:61:9b:12:94:31:e1:46:10:da:6b:6b: 19:d7:de:e3:ae:6f:4c:2b:65:a8:0f:a2:c5:44:b9:14:7c:72: 6a:cc:0b:0e:02:02:b6:dd:3c:d8:fb:92:7c:25:f2:f9:99:e5: 63:2d:6e:9d:70:ae:71:93:92:7a:0d:fb:32:d5:3b:14:2e:0b: 8c:4b:35:a2:03:88:38:f2:53:d2:3f:87:1a:cf:84:64:12:f1: 85:ca:3e:03:25:53:c7:0a:9a:ac:1c:1b:11:cd:c1:47:ce:1b: d2:6f:27:3b:f3:23:40:07:6a:48:80:61:92:de:2e:91:49:dc: 7f:c0:4f:35:53:9d:29:aa:6b:20:e1:f6:c0:ae:53:25:fe:35: 5b:42:07:14:8c:b6:03:43:da:10:66:c9:77:63:60:46:06:a0: c6:a2:8f:e4:77:16:f1:e8:92:3b:a2:6b:bf:73:33:00:ac:8a: ce:8e:59:de:6a:d6:e8:ec:0b:ca:82:71:76:e9:cb:a3:e4:7c: 8b:e5:39:cd:c5:4b:33:30:b0:71:e3:5d:d6:96:ae:4f:7e:e4: 20:f8:19:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjUxMjIyMjIxOTM1WhcNMjUxMjI5MjIxOTM1WjAYMRYwFAYD VQQDDA02OTQ5YzNmNy1hOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zfAs38yDmaYsBoa8uI1/wzN3bXRNDZqsrLO4i4/3IZY4fegRCb2ywNLRmL6 pujK5Vk0naeSwymDsniKczxQ2EyuAL8cjOOSW1cCEKZDc1MQRo+LX26ZnRhPNmPF m3hMELGjeSuLzvSLJ7TsVYoSXL3W5u4uuw0ALqU//zKXKxzTafeJSAHxn5z4dNdG rvnzvIe3KAB1nJQnJJwMaCBfaCn/3cOBhvR99UD8Ia54rIh9petgXqBlJt3wzvZV W14zkPGUURqms7WgailTI6u3WZ6pEPuF9RakcCF62Y0FEAOIGTh4TfZVcFRHmxBk 1Yx23jmFrNtjj2omMooeayV0KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHuzh1L YXrM2LL2Vpgr7F4K/LkdMB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0/bk3uFVQlzdJs0n/ZEv9zFc3EgCSVhsFIPjq6zQhAx/brBNK8XRd t/ZOYZsSlDHhRhDaa2sZ197jrm9MK2WoD6LFRLkUfHJqzAsOAgK23TzY+5J8JfL5 meVjLW6dcK5xk5J6Dfsy1TsULguMSzWiA4g48lPSP4caz4RkEvGFyj4DJVPHCpqs HBsRzcFHzhvSbyc78yNAB2pIgGGS3i6RSdx/wE81U50pqmsg4fbArlMl/jVbQgcU jLYDQ9oQZsl3Y2BGBqDGoo/kdxbx6JI7omu/czMArIrOjlneatbo7AvKgnF26cuj 5HyL5TnNxUszMLBx413Wlq5PfuQg+BnP -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:47 2025 by rpki-client