This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: ld8DFkVlEF+2+bLcD3B3YSSi4jCHG9kPMN+n1BjHhPk= Subject key identifier: 5C:32:86:CB:F7:44:64:9A:D2:ED:CF:F0:C5:BA:B8:66:FF:AB:9E:72 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 07FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 07F3 Signing time: Mon 22 Dec 2025 20:26:53 +0000 Manifest this update: Mon 22 Dec 2025 20:26:52 +0000 Manifest next update: Mon 29 Dec 2025 20:26:52 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: 56UTJHJo3u+0BdaXcv3PAabGae91abc70niAFl1A9tg=) 2: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: RDAuo0ukbkiW2gxiKwesJ3g1zTBr8ESAl1lXLcl6ncU=) 3: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: Z1uRbBBo1ykDesKGyzNhoAS+Q0kH4ecEfYyBIro/My0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Dec 22 20:26:52 2025 GMT Not After : Dec 29 20:26:52 2025 GMT Subject: CN=6949a98c-ccc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:ee:0a:3d:8e:c1:48:d2:ea:dc:cc:20:b1: f4:52:47:fd:4a:ed:b5:5b:42:cc:2c:b4:ae:17:e7: 5e:7f:ba:b3:74:3a:f9:38:f5:4d:f8:da:a0:97:f8: 89:f5:a1:29:e3:a4:56:a2:55:bb:08:82:3b:35:6a: 0b:8c:6c:e0:fd:68:0c:b7:de:6e:bf:3d:11:11:43: 45:e7:b9:8d:60:c9:7f:71:88:9c:a2:11:5d:18:1b: 12:88:b6:03:c2:2b:c4:84:13:31:0b:a5:ab:de:c5: 2f:ab:e0:a1:c3:c4:bc:b9:a8:fd:33:ea:7c:9b:77: 62:d3:7c:b9:0c:7e:34:e1:4f:5f:9c:f1:c8:93:b6: 3a:22:4b:3d:a2:01:b8:20:f8:70:cb:30:cb:be:ab: d1:58:18:b6:0b:71:b3:5d:29:c5:fb:b5:41:46:68: 76:fc:21:b1:fb:07:0d:64:a1:11:02:f9:41:f4:bc: 8f:0e:39:ba:d7:27:f4:fd:c8:9f:28:3e:5c:40:0d: 7c:a5:87:12:54:c6:24:a8:3d:a5:5f:01:86:99:ef: ff:d1:be:90:11:db:c5:34:61:8c:64:f0:93:aa:b1: ff:9a:33:d5:b4:e8:78:b3:67:c2:1b:5c:49:46:7a: e8:3f:a3:fe:81:d1:eb:52:4e:79:7e:58:1b:54:10: 4e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:32:86:CB:F7:44:64:9A:D2:ED:CF:F0:C5:BA:B8:66:FF:AB:9E:72 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6a:ab:f0:38:04:67:e2:80:fc:94:5a:d4:e1:66:f9:08:e0: 2b:e3:b5:bf:24:51:07:c4:84:3f:4c:1f:b0:5c:f4:65:ec:69: 07:cb:82:18:d1:0b:19:71:65:8d:f4:d0:f1:34:17:dc:d0:a8: 7c:25:73:a8:74:b0:0a:03:5b:ec:4f:64:6f:65:79:07:59:b7: 30:6f:ed:f6:fb:ac:cf:18:97:58:96:bb:65:b2:c0:8a:78:ef: e4:e3:58:fe:34:d9:27:5c:a1:18:ae:a5:29:a9:f9:cf:c9:c2: ed:c8:2c:e8:81:36:7f:bb:1f:2b:23:56:ad:0d:c6:f8:77:6b: d6:e6:6a:62:f9:22:25:15:84:c9:ee:3a:b6:19:a8:63:c4:4d: 0e:f8:5b:8d:14:9d:46:c1:ff:6a:4d:97:de:32:53:65:db:83: ee:43:16:40:98:b5:8d:d9:bc:bf:cb:61:8b:ea:d6:e1:64:88: 04:61:85:a4:9b:b3:7c:76:f4:90:6c:aa:5e:60:e7:7a:ef:08: 4d:39:a8:ca:c6:6e:fe:3e:05:ac:5a:3f:99:9c:06:37:67:61: da:ec:51:cb:7e:f1:ea:27:e4:5b:23:a6:f7:51:aa:75:dc:29: f2:65:0a:2c:11:28:5e:87:b7:21:1a:39:e0:a0:c2:2c:3b:67: 19:62:d8:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUxMjIyMjAyNjUyWhcNMjUxMjI5MjAyNjUyWjAYMRYwFAYD VQQDDA02OTQ5YTk4Yy1jY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D/uCj2OwUjS6tzMILH0Ukf9Su21W0LMLLSuF+def7qzdDr5OPVN+Nqgl/iJ 9aEp46RWolW7CII7NWoLjGzg/WgMt95uvz0REUNF57mNYMl/cYicohFdGBsSiLYD wivEhBMxC6Wr3sUvq+Chw8S8uaj9M+p8m3di03y5DH404U9fnPHIk7Y6Iks9ogG4 IPhwyzDLvqvRWBi2C3GzXSnF+7VBRmh2/CGx+wcNZKERAvlB9LyPDjm61yf0/cif KD5cQA18pYcSVMYkqD2lXwGGme//0b6QEdvFNGGMZPCTqrH/mjPVtOh4s2fCG1xJ RnroP6P+gdHrUk55flgbVBBOhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwyhsv3 RGSa0u3P8MW6uGb/q55yMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDaqvwOARn4oD8lFrU4Wb5COAr47W/JFEHxIQ/TB+wXPRl7GkHy4IY 0QsZcWWN9NDxNBfc0Kh8JXOodLAKA1vsT2RvZXkHWbcwb+32+6zPGJdYlrtlssCK eO/k41j+NNknXKEYrqUpqfnPycLtyCzogTZ/ux8rI1atDcb4d2vW5mpi+SIlFYTJ 7jq2GahjxE0O+FuNFJ1Gwf9qTZfeMlNl24PuQxZAmLWN2by/y2GL6tbhZIgEYYWk m7N8dvSQbKpeYOd67whNOajKxm7+PgWsWj+ZnAY3Z2Ha7FHLfvHqJ+RbI6b3Uap1 3CnyZQosESheh7chGjngoMIsO2cZYthB -----END CERTIFICATE-----Generated at Tue Dec 23 07:42:59 2025 by rpki-client