This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json) Hash identifier: Rs5QADS74MKFNEQVeEBc4XLqJBxjF4UU+zqrSv4pUiI= Subject key identifier: 1F:43:23:9C:80:8F:16:24:A5:4E:C8:B5:73:21:8C:29:36:61:A6:25 Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft Manifest number: 0517 Signing time: Thu 18 Dec 2025 23:01:24 +0000 Manifest this update: Thu 18 Dec 2025 23:01:23 +0000 Manifest next update: Thu 25 Dec 2025 23:01:23 +0000 Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: gxPvmCoFgBWEMB4vkctDMROmUsA+gOzcU9U1ibgdkBc=) 2: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: 91lchPpa042FpgG6srtZePU2M6YFFk53ibQ4Z1+SlLE=) 3: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: NqCe6ivtot+2EiDBeB5rI+v3Md3AvU9IqI8GrM7MqMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: Dec 18 23:01:23 2025 GMT Not After : Dec 25 23:01:23 2025 GMT Subject: CN=694487c4-5cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:41:92:52:9a:8b:c6:c7:da:da:c6:bf:0b: 70:f7:72:18:50:12:05:ca:5c:34:ad:79:25:81:08: db:20:8f:32:4c:ff:9f:7e:e5:22:f3:b8:fa:85:10: 15:6d:5c:38:a2:9e:8c:b9:fe:97:19:17:16:11:83: 42:1d:73:ce:dc:c5:5a:9f:82:31:4e:ee:83:27:3c: ab:8b:c0:fd:32:fe:dd:b0:c9:67:63:2f:95:24:c4: 04:c6:c4:eb:bc:18:16:da:87:f5:e6:88:48:8f:31: e5:e9:44:e9:f0:82:cf:fa:1b:63:6b:49:75:0c:07: 16:8e:5c:be:fb:4a:1d:76:53:e0:53:91:ab:cc:15: f5:e8:ef:f3:1c:f8:0a:9d:1b:2a:2a:50:39:e7:ce: 50:2d:5a:10:cd:4f:9d:2d:0b:8a:42:ee:4f:da:ba: 12:d8:9f:0c:de:75:45:d9:3b:ac:b6:9e:f4:8e:c7: a5:6b:87:61:05:f2:af:f5:ba:05:ea:63:61:2d:a4: 16:d8:40:16:ce:f8:fd:b5:24:36:e2:95:97:56:b3: 7c:1a:73:26:ac:1a:1d:8b:a8:6f:0f:b3:99:75:9a: 1e:1a:11:92:fa:6d:0a:58:0a:f8:f3:e8:13:e0:93: 35:9f:e6:80:50:ef:e0:df:9c:c5:30:36:d3:76:5d: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:23:9C:80:8F:16:24:A5:4E:C8:B5:73:21:8C:29:36:61:A6:25 X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:12:90:4d:f8:1d:b6:d5:9b:db:47:38:86:02:b5:e1:c3:f6: d1:5d:92:d1:8f:b2:f3:41:c8:05:21:da:2e:cf:ec:a1:b3:b9: f5:6a:59:dd:1b:04:d6:69:12:1e:51:49:8f:05:64:50:5a:b9: c5:6c:26:5a:52:04:ef:17:d3:82:95:39:c5:94:d2:07:4c:16: 2c:d2:5f:51:2a:b4:78:24:dc:d0:27:4b:12:16:ff:09:0a:5f: bb:44:64:96:cb:86:91:18:b1:47:e6:ab:eb:82:dc:79:97:08: c9:0f:06:12:85:10:e1:bb:1c:19:2e:3e:7f:98:7d:e7:99:41: 2c:29:f1:3b:48:d9:89:64:f9:cc:58:c4:be:5b:fd:9b:39:cf: 0b:95:2a:ea:62:99:ff:27:72:b7:c2:10:a3:c0:6b:47:52:13: 90:ff:dd:29:2d:6a:36:c0:45:e0:47:76:9a:1b:22:a5:9c:85: 4c:33:76:43:20:59:d3:cd:1a:43:0c:1f:c8:8d:d9:e0:a2:9d: 10:f2:a9:24:1a:3c:9a:b7:93:8f:03:3f:eb:b0:ae:ea:be:06: 6b:57:dc:df:86:51:09:ac:7b:f0:cb:9a:1a:52:32:ae:7d:87: 7b:50:79:4a:1c:4d:b4:5f:6a:2b:09:d4:10:77:e9:c5:0f:84: 86:00:0e:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjUxMjE4MjMwMTIzWhcNMjUxMjI1MjMwMTIzWjAYMRYwFAYD VQQDDA02OTQ0ODdjNC01Y2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArL5BklKai8bH2trGvwtw93IYUBIFylw0rXklgQjbII8yTP+ffuUi87j6hRAV bVw4op6Muf6XGRcWEYNCHXPO3MVan4IxTu6DJzyri8D9Mv7dsMlnYy+VJMQExsTr vBgW2of15ohIjzHl6UTp8ILP+htja0l1DAcWjly++0oddlPgU5GrzBX16O/zHPgK nRsqKlA5585QLVoQzU+dLQuKQu5P2roS2J8M3nVF2Tustp70jsela4dhBfKv9boF 6mNhLaQW2EAWzvj9tSQ24pWXVrN8GnMmrBodi6hvD7OZdZoeGhGS+m0KWAr48+gT 4JM1n+aAUO/g35zFMDbTdl1uCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9DI5yA jxYkpU7ItXMhjCk2YaYlMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTc5MS8xOUM2OEQwNjNBMDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQ WEJpU2NqTU52Y3JTcDlBVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYEpBN+B221ZvbRziGArXhw/bRXZLRj7LzQcgFIdouz+yhs7n1alnd GwTWaRIeUUmPBWRQWrnFbCZaUgTvF9OClTnFlNIHTBYs0l9RKrR4JNzQJ0sSFv8J Cl+7RGSWy4aRGLFH5qvrgtx5lwjJDwYShRDhuxwZLj5/mH3nmUEsKfE7SNmJZPnM WMS+W/2bOc8LlSrqYpn/J3K3whCjwGtHUhOQ/90pLWo2wEXgR3aaGyKlnIVMM3ZD IFnTzRpDDB/Ijdngop0Q8qkkGjyat5OPAz/rsK7qvgZrV9zfhlEJrHvwy5oaUjKu fYd7UHlKHE20X2orCdQQd+nFD4SGAA4K -----END CERTIFICATE-----Generated at Fri Dec 19 20:53:32 2025 by rpki-client