This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: /hNs1mqM4k1nWKBfkMQr5XpaaEDyNfCrSNPV9nzrLCg= Subject key identifier: FA:E4:38:9A:DC:EB:A7:0D:0E:33:8D:BA:4C:BB:9B:7E:20:A3:F8:03 Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: 0208 Signing time: Fri 19 Dec 2025 01:39:06 +0000 Manifest this update: Fri 19 Dec 2025 01:39:06 +0000 Manifest next update: Fri 26 Dec 2025 01:39:06 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: 1Wf+7zy6I3ctzhLJHWjeAg0jE44Aop5IxfObLQMf76o=) 2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: 8oKi9g3FW28uCT296akypss1lnTC3S8VPwt27zeBIKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: Dec 19 01:39:06 2025 GMT Not After : Dec 26 01:39:06 2025 GMT Subject: CN=6944acba-2315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:fd:8e:8d:ba:a8:f4:b5:f2:ab:cb:b8:b1: 2d:70:f9:06:bf:97:b9:a6:c3:1b:24:a7:8e:60:3a: 42:2e:33:03:77:4d:3c:e7:82:1f:b8:47:e3:99:11: fe:91:75:07:b3:ee:1c:fd:fa:57:15:9c:47:d1:08: c4:41:79:a2:de:45:77:20:19:b4:7a:fa:29:47:52: fd:59:10:1d:96:3b:0d:47:0c:49:89:0e:44:18:9b: 48:68:fa:39:27:b1:d5:9c:3e:bf:61:5a:41:dd:41: 0b:fe:e3:a5:cd:86:a2:93:3a:ed:6d:e9:98:26:15: 56:b5:4f:47:de:54:e4:3f:be:ad:8c:49:a0:5c:8e: 21:fd:53:1d:a1:c9:a5:3f:f3:db:db:d7:45:8e:52: ed:50:33:10:d7:67:99:17:6b:db:2e:08:76:ad:84: 95:44:a8:4a:bd:14:7b:49:57:50:1c:7a:56:0f:3d: 1a:41:0f:c4:fd:ff:a9:ff:30:16:5e:9f:44:91:94: ff:c3:f5:35:1f:61:0a:ae:99:fe:82:ee:88:8e:9d: 14:62:de:92:d2:bd:c6:af:da:80:df:aa:8e:e1:ef: 20:e1:68:d1:58:3b:d4:0e:55:9c:bb:93:90:5d:17: 5d:30:36:fa:09:e6:ea:3b:7f:45:59:4a:79:0e:66: a8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E4:38:9A:DC:EB:A7:0D:0E:33:8D:BA:4C:BB:9B:7E:20:A3:F8:03 X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f1:c2:7f:fa:51:fe:08:af:a4:79:2f:39:94:43:95:51:30: 0d:a2:07:35:66:c3:f7:fe:7d:9f:3e:0b:5b:49:41:08:93:2d: da:b9:eb:e0:e8:33:b9:83:6f:56:66:0c:99:14:43:f3:43:ef: 6c:82:6f:bb:5f:84:17:12:b2:3d:8c:c2:72:1f:1c:cb:3d:ac: c9:36:c0:ae:18:22:54:9e:00:ad:c1:8a:02:8f:06:06:87:a3: 66:78:83:0c:14:9d:91:80:fc:cb:aa:c8:7e:b3:1f:27:3b:3f: e3:96:de:a8:a3:a0:4c:3d:81:85:c6:2f:3b:10:d8:14:4e:85: f3:9e:40:b2:ff:0b:8c:2c:0b:a6:48:6e:02:72:68:96:fe:d8: b1:9c:14:18:4c:2d:48:97:62:35:df:40:52:30:1b:6d:e2:ac: 08:96:51:43:2e:b1:24:b8:f7:51:de:2f:ee:4f:21:ca:bd:0d: 3b:6b:02:de:a0:58:b5:f4:b6:b4:6a:cd:0b:ed:10:e8:4a:ce: bd:7e:18:01:92:9a:2a:21:1a:a5:2f:3d:ae:a1:a1:35:3a:90: af:1b:3b:0d:bb:f7:2d:b4:49:0d:af:ac:a9:7d:87:b2:1b:5c: 87:0c:f1:4d:61:6e:97:fc:80:9e:ac:a3:3d:bd:3f:f4:e9:aa: 80:61:4b:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjUxMjE5MDEzOTA2WhcNMjUxMjI2MDEzOTA2WjAYMRYwFAYD VQQDDA02OTQ0YWNiYS0yMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoj9jo26qPS18qvLuLEtcPkGv5e5psMbJKeOYDpCLjMDd00854IfuEfjmRH+ kXUHs+4c/fpXFZxH0QjEQXmi3kV3IBm0evopR1L9WRAdljsNRwxJiQ5EGJtIaPo5 J7HVnD6/YVpB3UEL/uOlzYaikzrtbemYJhVWtU9H3lTkP76tjEmgXI4h/VMdocml P/Pb29dFjlLtUDMQ12eZF2vbLgh2rYSVRKhKvRR7SVdQHHpWDz0aQQ/E/f+p/zAW Xp9EkZT/w/U1H2EKrpn+gu6Ijp0UYt6S0r3Gr9qA36qO4e8g4WjRWDvUDlWcu5OQ XRddMDb6CebqO39FWUp5DmaoGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrkOJrc 66cNDjONuky7m34go/gDMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR8cJ/+lH+CK+keS85lEOVUTANogc1ZsP3/n2fPgtbSUEIky3auevg 6DO5g29WZgyZFEPzQ+9sgm+7X4QXErI9jMJyHxzLPazJNsCuGCJUngCtwYoCjwYG h6NmeIMMFJ2RgPzLqsh+sx8nOz/jlt6oo6BMPYGFxi87ENgUToXznkCy/wuMLAum SG4CcmiW/tixnBQYTC1Il2I130BSMBtt4qwIllFDLrEkuPdR3i/uTyHKvQ07awLe oFi19La0as0L7RDoSs69fhgBkpoqIRqlLz2uoaE1OpCvGzsNu/cttEkNr6ypfYey G1yHDPFNYW6X/ICerKM9vT/06aqAYUvi -----END CERTIFICATE-----Generated at Sat Dec 20 22:09:27 2025 by rpki-client