This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json) Hash identifier: yi20knY3RuYG/1UxmT3mx9b8jHsbkicvmKukLOy8lAw= Subject key identifier: CF:62:CA:AF:74:04:18:0B:AC:8C:A3:1A:62:22:40:BA:CE:A5:68:F6 Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft Manifest number: 72 Signing time: Tue 23 Dec 2025 05:44:26 +0000 Manifest this update: Tue 23 Dec 2025 05:44:26 +0000 Manifest next update: Tue 30 Dec 2025 05:44:26 +0000 Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: UpQzwDnl/Zo9kx1n+mhpZnZmAPp5YPxmrs94YzKhPMg=) 2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Validity Not Before: Dec 23 05:44:26 2025 GMT Not After : Dec 30 05:44:26 2025 GMT Subject: CN=694a2c3a-2874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:38:cb:0f:9b:3c:1e:92:4b:60:aa:07:d5: 58:98:03:23:6b:a4:fb:fc:08:bf:94:c6:79:46:26: 0c:04:44:f5:10:55:0e:bd:6d:8f:e1:fe:e1:c3:17: ed:4a:56:30:0c:56:82:05:ef:b1:34:fd:19:d2:a5: fb:97:92:56:3f:e8:e2:b1:93:7b:18:f9:32:bb:6f: e7:5a:69:5d:ea:30:40:cd:83:27:3b:a6:3c:3b:0d: 96:2f:2a:3b:4a:ca:4b:3d:0c:ca:47:c9:31:17:01: 50:06:99:b8:5f:0d:32:a4:47:9b:7a:e6:d7:1f:cb: fb:c3:24:7e:87:ca:52:bc:9c:8d:9a:f6:51:7e:bc: c2:a7:10:a3:03:ad:f8:26:3c:de:e2:39:5b:46:2e: 6d:6b:b2:c5:95:53:0b:f4:60:95:b3:11:e2:e7:f1: aa:05:a9:ee:32:97:3f:c0:c0:8f:c6:ea:17:fc:fd: 7e:fb:25:e4:50:5c:05:d7:b7:0a:36:f2:5b:a5:12: 5a:1d:36:6a:37:9c:32:78:cd:bd:b8:d6:e4:79:1f: bf:fa:1b:0b:a6:30:d3:d1:9b:df:13:20:d6:0f:64: 12:ed:35:d8:6e:66:fd:28:bc:e2:05:a2:39:93:d9: 34:c8:e8:e7:5d:60:4f:66:02:7a:9b:81:8b:3f:1f: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:62:CA:AF:74:04:18:0B:AC:8C:A3:1A:62:22:40:BA:CE:A5:68:F6 X509v3 Authority Key Identifier: keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a1:b6:b8:aa:1b:8d:0d:c6:5e:15:48:a8:bd:7b:53:0d:84: ac:dd:0a:48:e4:4e:e3:45:c9:f5:fb:fc:51:91:10:4f:8e:06: 1f:ef:dd:47:e7:8c:89:c1:38:04:48:f9:05:b0:a0:3b:09:ea: ab:e9:cc:ed:65:2e:b5:b0:79:a4:78:e1:f2:39:bc:a6:50:33: 92:1f:bb:56:34:b2:d5:c6:ed:6f:cd:9d:88:2e:1d:3d:cf:33: 22:bd:9d:9a:cf:13:2d:5b:5d:46:92:44:53:0b:5f:1d:d4:78: 01:cc:4d:e7:6c:47:a2:2f:09:65:39:3d:18:de:99:48:d6:34: d4:89:dd:1f:38:d3:7c:20:20:2e:ac:e7:70:59:84:7d:9e:dc: fe:32:3d:ba:d1:32:50:15:e5:0c:62:65:a4:2e:00:ec:6e:86: 5f:6c:5a:98:cc:46:ff:19:17:1d:e2:7f:16:ad:5f:37:1e:2b: 82:8a:ec:7d:6f:12:a3:c5:a6:71:69:cc:24:e9:6f:3e:0e:35: 81:89:cb:5b:93:69:0b:ca:95:e0:bd:1e:81:38:9a:87:50:c3: 33:3e:7e:2f:c4:dc:9c:88:5b:71:a0:1b:5c:d6:ad:eb:70:d4: f7:bc:de:07:6c:a0:8e:45:84:3c:1f:64:cc:68:5b:07:2d:aa: 1a:19:7e:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzMxMTExMC8GA1UEBRMoQzZERTM2QTRFNDVFN0E5OTFGQzQ0NEY4Q0IxQjQ1NUYx NzQ2MkM4RDAeFw0yNTEyMjMwNTQ0MjZaFw0yNTEyMzAwNTQ0MjZaMBgxFjAUBgNV BAMMDTY5NGEyYzNhLTI4NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWjjjLD5s8HpJLYKoH1ViYAyNrpPv8CL+UxnlGJgwERPUQVQ69bY/h/uHDF+1K VjAMVoIF77E0/RnSpfuXklY/6OKxk3sY+TK7b+daaV3qMEDNgyc7pjw7DZYvKjtK yks9DMpHyTEXAVAGmbhfDTKkR5t65tcfy/vDJH6HylK8nI2a9lF+vMKnEKMDrfgm PN7iOVtGLm1rssWVUwv0YJWzEeLn8aoFqe4ylz/AwI/G6hf8/X77JeRQXAXXtwo2 8lulElodNmo3nDJ4zb241uR5H7/6GwumMNPRm98TINYPZBLtNdhuZv0ovOIFojmT 2TTI6OddYE9mAnqbgYs/H6/7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz2LKr3QE GAusjKMaYiJAus6laPYwHwYDVR0jBBgwFoAUxt42pOReepkfxET4yxtFXxdGLI0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMzExL0YxRjdBRjI2MkZC RjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHQ0MnBPUmVlcGtmeEVUNHl4dEZYeGRHTEkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MzExL0YxRjdBRjI2MkZCRjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBr ZnhFVDR5eHRGWHhkR0xJMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALChtriqG40Nxl4VSKi9e1MNhKzdCkjkTuNFyfX7/FGREE+OBh/v3Ufn jInBOARI+QWwoDsJ6qvpzO1lLrWweaR44fI5vKZQM5Ifu1Y0stXG7W/NnYguHT3P MyK9nZrPEy1bXUaSRFMLXx3UeAHMTedsR6IvCWU5PRjemUjWNNSJ3R8403wgIC6s 53BZhH2e3P4yPbrRMlAV5QxiZaQuAOxuhl9sWpjMRv8ZFx3ifxatXzceK4KK7H1v EqPFpnFpzCTpbz4ONYGJy1uTaQvKleC9HoE4modQwzM+fi/E3JyIW3GgG1zWretw 1Pe83gdsoI5FhDwfZMxoWwctqhoZfuA= -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:46 2025 by rpki-client