This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: 1aBcMWkXcIby/VDqw/WWwZEWLElqTDPxYC9dHGuGjk4= Subject key identifier: 51:47:FA:91:AD:FA:00:4F:3D:B8:0C:1F:8F:79:5F:E4:78:4F:03:B9 Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 0183 Signing time: Sun 07 Dec 2025 02:04:16 +0000 Manifest this update: Sun 07 Dec 2025 02:04:16 +0000 Manifest next update: Sun 14 Dec 2025 02:04:16 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: 1UAjaMd+3jMJ8Gkn8ysLjSKuQZYh01BeoKi4rFPlwWM=) 2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: x3typY+Rz1v7YQKoz8/eFq0vzVSoB9fMyJducWo5h8o=) 3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: Zs0S8blgDDMs3jrlGY37AkPWRyP83xeb73R0yUfKf24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Validity Not Before: Dec 7 02:04:16 2025 GMT Not After : Dec 14 02:04:16 2025 GMT Subject: CN=6934e0a0-85ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:2c:cf:a9:e4:15:be:a6:48:7f:ef:9d:62: 3b:eb:08:79:72:c4:27:66:60:8b:ce:6c:70:ad:7b: 2c:c1:7b:ed:de:5d:82:7b:d3:47:fb:c0:4e:f2:e7: ba:3c:44:3e:7e:e2:11:1d:35:da:ec:0b:41:a1:f6: 1d:9d:66:c1:28:8e:97:29:31:f2:d2:43:2c:ab:05: b8:46:08:59:04:b2:aa:36:06:62:8b:cb:6b:c9:6a: 80:dc:cc:4b:95:8e:7d:7a:e6:86:15:2c:64:ec:5c: ca:94:15:10:38:16:8d:41:4f:74:b1:fc:73:f8:d3: 6c:c9:ca:50:d1:b9:09:95:43:ac:53:08:e0:74:7b: c3:6a:1b:f5:75:99:4f:e8:78:8c:68:ec:02:47:69: af:93:3b:8a:0b:fd:a8:4b:91:fd:c8:80:86:ce:59: 60:69:f6:e8:b8:2e:ca:6c:03:ab:ad:31:35:52:97: 32:d3:c7:41:67:b3:4b:ea:11:76:f3:70:f3:9f:cf: e5:c6:67:d5:cc:ad:5c:c9:b5:b6:da:76:5a:e3:2a: 75:b6:3c:44:3f:3a:a2:58:eb:b6:24:ed:19:e3:20: 6a:c0:fb:62:b1:6e:ca:8b:08:db:c7:fc:77:bb:04: 8b:02:66:f5:10:af:6f:36:fe:1e:a9:fd:93:a4:1d: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:47:FA:91:AD:FA:00:4F:3D:B8:0C:1F:8F:79:5F:E4:78:4F:03:B9 X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d7:2b:2d:c8:4a:75:94:5e:c0:fa:d3:9a:22:1b:35:dc:d0: 21:11:ed:8f:ae:47:b0:f2:c1:a2:0e:6e:de:47:00:1f:d2:7d: 21:40:c1:2d:39:39:e8:22:e0:26:23:d4:86:71:0d:89:7c:e0: ce:69:17:f0:80:ed:af:ca:91:9b:97:77:75:21:3d:68:22:0f: b3:d9:cb:a5:42:a5:b3:08:25:65:72:3d:04:08:09:9d:cf:60: 38:56:45:9c:13:a0:a3:02:1d:bf:39:eb:cb:54:86:6f:4e:e3: a4:17:97:0f:aa:6d:ff:1b:81:b0:7e:67:44:95:59:60:3d:63: 02:c1:46:23:ac:30:a9:39:23:91:d5:d8:b1:0d:16:6d:68:99: ee:d0:f5:c3:b5:05:1b:f6:c3:e0:c1:8f:91:08:15:5d:19:25: ef:c4:fb:ff:5c:6c:03:9d:33:be:ed:16:b9:de:de:80:0d:32: 30:b7:02:e2:fa:68:ef:d5:a6:f8:ce:4f:b2:a1:5e:0f:7e:21: 63:9f:c3:33:c8:f2:3a:2b:55:1f:9e:93:a8:53:ca:62:52:0f: 21:94:ec:85:21:97:2e:fc:7b:12:d4:35:35:8a:b0:cc:eb:dd: 15:ba:4a:c7:b7:6d:1d:25:34:b9:a1:b7:52:6a:16:45:a1:a9: e1:ce:17:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjUxMjA3MDIwNDE2WhcNMjUxMjE0MDIwNDE2WjAYMRYwFAYD VQQDEw02OTM0ZTBhMC04NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/ksz6nkFb6mSH/vnWI76wh5csQnZmCLzmxwrXsswXvt3l2Ce9NH+8BO8ue6 PEQ+fuIRHTXa7AtBofYdnWbBKI6XKTHy0kMsqwW4RghZBLKqNgZii8tryWqA3MxL lY59euaGFSxk7FzKlBUQOBaNQU90sfxz+NNsycpQ0bkJlUOsUwjgdHvDahv1dZlP 6HiMaOwCR2mvkzuKC/2oS5H9yICGzllgafbouC7KbAOrrTE1Upcy08dBZ7NL6hF2 83Dzn8/lxmfVzK1cybW22nZa4yp1tjxEPzqiWOu2JO0Z4yBqwPtisW7Kiwjbx/x3 uwSLAmb1EK9vNv4eqf2TpB27ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFH+pGt +gBPPbgMH495X+R4TwO5MB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR1ystyEp1lF7A+tOaIhs13NAhEe2Prkew8sGiDm7eRwAf0n0hQMEt OTnoIuAmI9SGcQ2JfODOaRfwgO2vypGbl3d1IT1oIg+z2culQqWzCCVlcj0ECAmd z2A4VkWcE6CjAh2/OevLVIZvTuOkF5cPqm3/G4GwfmdElVlgPWMCwUYjrDCpOSOR 1dixDRZtaJnu0PXDtQUb9sPgwY+RCBVdGSXvxPv/XGwDnTO+7Ra53t6ADTIwtwLi +mjv1ab4zk+yoV4PfiFjn8MzyPI6K1UfnpOoU8piUg8hlOyFIZcu/HsS1DU1irDM 690VukrHt20dJTS5obdSahZFoanhzhfn -----END CERTIFICATE-----Generated at Sun Dec 7 15:29:38 2025 by rpki-client