This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft File: XFIDfgLgI3qkpHhukIwUJuu5qUc.mft (raw, json) Hash identifier: 41sWAif5GZa6Ne5JXu/ehPtmtYAW7ENDIv7BFfkq31I= Subject key identifier: C5:5A:D9:28:E3:65:98:73:69:67:22:76:DD:7E:53:46:72:C2:63:E4 Authority key identifier: 5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47 Certificate issuer: /CN=A912418E/serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft Manifest number: 21 Signing time: Tue 23 Dec 2025 06:35:46 +0000 Manifest this update: Tue 23 Dec 2025 06:35:46 +0000 Manifest next update: Tue 30 Dec 2025 06:35:46 +0000 Files and hashes: 1: XFIDfgLgI3qkpHhukIwUJuu5qUc.crl (hash: kUavWHf+qlL+fzhloumv5W+tfIOe3Mxq2vxt3ZD4ly4=) 2: E7126E0AB08111F0B4456572C4F9AE02.roa (hash: KRwjwSWWBywAGAbXEKvDlNQZp8JppNvRq0fzU/i7zgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912418E, serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947 Validity Not Before: Dec 23 06:35:46 2025 GMT Not After : Dec 30 06:35:46 2025 GMT Subject: CN=694a3842-af52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:a7:94:51:f8:8c:23:12:ed:b2:9f:9e:3a: fd:4b:c4:6b:af:a6:1d:c6:40:3c:eb:49:09:2b:a3: 10:01:44:a0:b4:9d:f7:1a:d7:d2:81:97:53:e7:1b: 8a:8a:52:d4:7e:fa:1d:54:9b:99:69:e1:5d:3d:98: 2a:aa:5e:57:e1:d3:ec:cc:c1:f5:c0:b6:20:56:a0: 15:28:32:55:88:8a:9a:03:a2:33:b1:a9:24:12:a6: 70:f2:df:8a:7e:b5:f4:5e:fd:fa:6c:03:a4:bc:33: b3:b4:74:ee:bb:3a:12:33:97:5b:55:a3:ef:c3:44: 5b:0d:17:fa:a1:29:d5:a6:dc:e5:68:30:7c:ce:19: b0:52:ff:ab:bd:a4:4b:09:b2:9c:4f:81:78:3b:a7: 8e:14:79:cb:28:04:8a:22:81:8d:5d:b3:58:67:8c: 86:08:2c:1b:db:8a:37:4e:27:ac:f9:8c:fe:06:a1: 37:28:0e:f7:cf:dd:cb:a0:f6:56:28:6d:0e:3a:73: 35:c6:f8:ce:02:a5:e1:99:09:7d:26:32:db:7e:6d: ff:96:1a:73:42:7c:4f:93:f4:6c:1a:ba:5a:b2:5b: 98:f1:f3:57:77:6c:ae:c9:b1:80:d7:4e:fd:dc:47: 88:e1:06:9a:4c:a7:c7:a6:43:cb:82:22:e9:e2:6b: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5A:D9:28:E3:65:98:73:69:67:22:76:DD:7E:53:46:72:C2:63:E4 X509v3 Authority Key Identifier: keyid:5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:fd:a6:69:56:a9:17:8f:19:2d:c8:e0:39:54:e2:a9:16:ce: 10:f1:32:b7:d6:9a:da:1d:15:5c:12:a5:5d:e0:8d:1b:a5:da: 5c:69:fa:2a:e7:e8:f8:ac:61:c8:36:5e:19:8f:21:aa:37:93: 0f:05:0c:6f:20:4b:c9:80:90:62:4d:bd:2e:81:6d:45:10:b8: 04:83:08:61:a0:d9:42:4f:96:06:5e:ec:16:83:c6:12:74:fe: f3:10:ee:20:43:af:03:d3:28:1c:81:08:5b:fb:79:47:31:98: 2b:3b:c2:a3:16:63:9e:9d:7d:97:c9:3e:5e:ef:87:bb:21:8f: 68:2e:b7:59:54:83:c0:39:a6:d8:f8:71:b9:4e:03:9e:b0:53: bb:a1:c5:a9:d8:54:1b:cc:6b:a9:ac:b0:17:87:80:1b:93:06: 9d:8a:2f:bd:66:4e:bf:01:2b:0d:02:9c:1c:ae:31:f5:1b:aa: e3:77:90:6b:7e:69:14:32:94:54:c0:8b:89:34:4c:66:19:c7: 04:cb:42:23:87:f8:dc:91:e7:1d:0b:60:bf:df:ca:ac:c0:86: d3:cb:5c:11:05:22:a2:fc:de:27:b6:03:7b:6a:02:9c:77:4d: 49:6b:79:74:39:22:55:8b:1e:76:10:fe:40:87:7d:01:d5:01: 4e:a2:fb:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDE4RTExMC8GA1UEBRMoNUM1MjAzN0UwMkUwMjM3QUE0QTQ3ODZFOTA4QzE0MjZF QkI5QTk0NzAeFw0yNTEyMjMwNjM1NDZaFw0yNTEyMzAwNjM1NDZaMBgxFjAUBgNV BAMMDTY5NGEzODQyLWFmNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCas6eUUfiMIxLtsp+eOv1LxGuvph3GQDzrSQkroxABRKC0nfca19KBl1PnG4qK UtR++h1Um5lp4V09mCqqXlfh0+zMwfXAtiBWoBUoMlWIipoDojOxqSQSpnDy34p+ tfRe/fpsA6S8M7O0dO67OhIzl1tVo+/DRFsNF/qhKdWm3OVoMHzOGbBS/6u9pEsJ spxPgXg7p44UecsoBIoigY1ds1hnjIYILBvbijdOJ6z5jP4GoTcoDvfP3cug9lYo bQ46czXG+M4CpeGZCX0mMtt+bf+WGnNCfE+T9GwaulqyW5jx81d3bK7JsYDXTv3c R4jhBppMp8emQ8uCIunia54XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxVrZKONl mHNpZyJ23X5TRnLCY+QwHwYDVR0jBBgwFoAUXFIDfgLgI3qkpHhukIwUJuu5qUcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MThFL0U1Njc2QkVDQjA4 MDExRjA4QTk1MDM1MUM0RjlBRTAyL1hGSURmZ0xnSTNxa3BIaHVrSXdVSnV1NXFV Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEZJRGZnTGdJM3FrcEhodWtJd1VKdXU1cVVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MThFL0U1Njc2QkVDQjA4MDExRjA4QTk1MDM1MUM0RjlBRTAyL1hGSURmZ0xnSTNx a3BIaHVrSXdVSnV1NXFVYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHL9pmlWqRePGS3I4DlU4qkWzhDxMrfWmtodFVwSpV3gjRul2lxp+irn 6PisYcg2XhmPIao3kw8FDG8gS8mAkGJNvS6BbUUQuASDCGGg2UJPlgZe7BaDxhJ0 /vMQ7iBDrwPTKByBCFv7eUcxmCs7wqMWY56dfZfJPl7vh7shj2gut1lUg8A5ptj4 cblOA56wU7uhxanYVBvMa6mssBeHgBuTBp2KL71mTr8BKw0CnByuMfUbquN3kGt+ aRQylFTAi4k0TGYZxwTLQiOH+NyR5x0LYL/fyqzAhtPLXBEFIqL83ie2A3tqApx3 TUlreXQ5IlWLHnYQ/kCHfQHVAU6i+zI= -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:22 2025 by rpki-client