This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: PE2OovUlSWQ1CfvzD5H18FGFSdOtngTmxPnWYnj+uYE= Subject key identifier: 10:17:54:7B:DE:BD:EE:2A:3F:C5:97:B7:B8:1F:D8:7D:14:26:A9:7F Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 01A8 Signing time: Tue 23 Dec 2025 02:14:51 +0000 Manifest this update: Tue 23 Dec 2025 02:14:51 +0000 Manifest next update: Tue 30 Dec 2025 02:14:51 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: guC7TOnOCyT/jVvMG0nLxHATbPnlObESFFNhIdAZeAI=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: Piv7VbbzumwO0tk/ipxojOk8nvFYW+4e20EuzVe+51E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Dec 23 02:14:51 2025 GMT Not After : Dec 30 02:14:51 2025 GMT Subject: CN=6949fb1b-810e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:0f:11:55:25:35:be:8e:d6:98:95:5a:ef: 43:46:e1:6e:7d:49:c2:f3:96:f0:ff:fa:eb:54:8d: f5:ba:e9:59:18:00:6f:20:1d:28:dd:1f:cc:ec:07: b0:6d:8b:17:bb:97:d0:d2:16:26:54:a1:b8:71:4b: 5f:63:a8:86:0c:f8:77:34:e6:4b:cb:e2:66:97:d4: 1d:bd:9f:3b:cf:f2:16:90:c7:73:2c:68:b9:43:7c: 2a:da:9d:32:87:00:90:36:2b:07:ef:1f:e9:36:3f: 34:c7:e6:c1:7b:08:2d:81:ed:b4:83:b4:00:0f:a1: a3:89:ab:7a:31:0d:4d:1c:70:e6:81:bc:ed:31:04: 12:a5:bf:42:8b:2f:e2:b0:a6:50:ee:46:23:0b:e4: bf:5d:0a:b0:fa:08:cc:27:df:7e:9c:56:d9:6f:09: 6b:c9:66:f3:bf:f5:04:54:f2:90:13:41:14:23:b2: 51:f7:b4:b3:0a:ed:47:f9:d2:95:c0:19:a2:df:4e: 2a:39:7c:cf:d7:c6:fe:3e:31:89:e1:a3:c1:b4:f8: fd:5f:7e:3a:f9:6f:78:92:f7:86:2d:f3:38:90:9a: 83:23:bd:ec:97:57:8e:c5:93:07:c2:ad:37:55:c1: 75:66:36:80:fa:e4:a9:e8:5d:ef:e6:cd:bc:d3:f1: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:17:54:7B:DE:BD:EE:2A:3F:C5:97:B7:B8:1F:D8:7D:14:26:A9:7F X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:56:9a:5e:75:f0:98:4e:2e:2c:8e:f4:15:a9:b4:e1:20:c9: 39:dd:62:a5:17:3e:73:cf:ef:fb:83:dc:46:2b:35:36:51:3a: 79:10:d7:0b:f6:67:69:f9:11:1c:15:65:6d:c6:91:8a:06:2d: c6:fb:90:88:44:83:94:ad:05:33:5a:84:15:8a:99:65:c2:f6: 8b:66:84:6e:5b:62:5b:54:84:f3:8c:b5:f5:f9:4d:51:f4:bf: 8e:88:39:73:41:ad:08:1a:cd:ab:dd:12:49:55:32:b0:c7:e2: 41:7c:14:4d:7c:c6:82:24:88:c9:39:8a:5b:62:e3:87:5b:69: 51:8f:b2:00:90:a5:bd:5e:a4:9e:3f:7d:a7:1f:d7:24:b2:ab: 1e:ef:6c:06:b6:86:41:c6:09:02:c9:64:af:11:d8:c3:f0:c1: e6:63:96:f4:09:02:aa:6f:cf:68:b0:d3:82:01:1f:8c:55:5a: 2a:06:ff:4f:49:db:6d:63:9b:ae:f5:e1:ec:9c:23:c3:17:16: 8f:3b:eb:c7:f4:71:3b:3d:09:2a:1e:ef:3f:db:34:5d:6e:87: 7b:07:ac:ec:90:b0:c3:ec:69:49:e4:64:aa:6d:a3:26:24:32: fa:4f:d2:53:1b:b1:41:7d:2e:d5:81:08:ce:b6:d9:36:85:76: 5c:fc:43:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjUxMjIzMDIxNDUxWhcNMjUxMjMwMDIxNDUxWjAYMRYwFAYD VQQDDA02OTQ5ZmIxYi04MTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj94PEVUlNb6O1piVWu9DRuFufUnC85bw//rrVI31uulZGABvIB0o3R/M7Aew bYsXu5fQ0hYmVKG4cUtfY6iGDPh3NOZLy+Jml9QdvZ87z/IWkMdzLGi5Q3wq2p0y hwCQNisH7x/pNj80x+bBewgtge20g7QAD6Gjiat6MQ1NHHDmgbztMQQSpb9Ciy/i sKZQ7kYjC+S/XQqw+gjMJ99+nFbZbwlryWbzv/UEVPKQE0EUI7JR97SzCu1H+dKV wBmi304qOXzP18b+PjGJ4aPBtPj9X346+W94kveGLfM4kJqDI73sl1eOxZMHwq03 VcF1ZjaA+uSp6F3v5s280/FA4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAXVHve ve4qP8WXt7gf2H0UJql/MB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdVppedfCYTi4sjvQVqbThIMk53WKlFz5zz+/7g9xGKzU2UTp5ENcL 9mdp+REcFWVtxpGKBi3G+5CIRIOUrQUzWoQVipllwvaLZoRuW2JbVITzjLX1+U1R 9L+OiDlzQa0IGs2r3RJJVTKwx+JBfBRNfMaCJIjJOYpbYuOHW2lRj7IAkKW9XqSe P32nH9cksqse72wGtoZBxgkCyWSvEdjD8MHmY5b0CQKqb89osNOCAR+MVVoqBv9P SdttY5uu9eHsnCPDFxaPO+vH9HE7PQkqHu8/2zRdbod7B6zskLDD7GlJ5GSqbaMm JDL6T9JTG7FBfS7VgQjOttk2hXZc/EMG -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:17 2025 by rpki-client