This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft File: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft (raw, json) Hash identifier: YUWRtkMfzUCcvzvwp9Ja51fsQ4TnOCjQcBwpgDVu1hM= Subject key identifier: 2F:0C:4C:40:4E:94:6A:54:6C:72:1E:DC:F4:23:4A:C2:3E:BB:08:42 Authority key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24 Certificate issuer: /CN=A913EF9C/serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft Manifest number: AF Signing time: Tue 23 Dec 2025 05:05:02 +0000 Manifest this update: Tue 23 Dec 2025 05:05:02 +0000 Manifest next update: Tue 30 Dec 2025 05:05:02 +0000 Files and hashes: 1: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl (hash: blt2sExCEPBut0tGwTh4mxxv1x91Dyn30ACjhIoIXXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524 Validity Not Before: Dec 23 05:05:02 2025 GMT Not After : Dec 30 05:05:02 2025 GMT Subject: CN=694a22fe-73ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:61:d4:f6:ff:0f:1d:5c:77:eb:41:5e:91: 45:63:3a:9f:ae:cf:dc:2b:e0:70:8e:fa:87:d3:ff: fa:8c:01:5d:0a:d8:ce:c1:af:c1:a9:fd:1d:5e:72: 28:60:2c:dd:ed:0e:29:e6:22:4e:4f:18:eb:5f:f8: 8d:97:b2:48:23:0c:b7:0f:59:48:a1:a9:68:e5:01: 4b:ba:50:f9:7e:1d:c5:f0:70:96:8f:38:1c:e7:4d: 96:ac:68:db:1d:cc:1a:c8:67:f9:c7:c3:9b:60:98: d8:20:ef:a3:3b:37:1c:6b:44:21:6d:1f:43:8b:79: 12:d1:2e:aa:d7:54:e8:67:ee:77:a3:56:18:af:7d: e5:00:62:c2:bd:12:b3:8c:3c:5e:17:ff:11:83:00: 02:e3:58:16:69:4e:e8:d7:e8:73:14:52:21:ce:4d: 36:1f:ec:30:92:74:ef:09:ff:0e:3a:d0:6e:04:01: 90:d3:c7:32:e4:37:5d:28:93:0b:01:67:39:89:7c: ab:f7:57:43:02:c6:c0:fa:f0:96:37:8d:3d:09:da: f7:3e:36:f2:3b:54:b1:c4:22:d2:c7:c2:d4:8a:35: fe:43:74:65:c5:25:3b:dc:af:f3:17:40:a8:8e:60: 13:9a:05:79:c7:72:c6:32:b5:92:d5:fe:78:bd:60: 6e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0C:4C:40:4E:94:6A:54:6C:72:1E:DC:F4:23:4A:C2:3E:BB:08:42 X509v3 Authority Key Identifier: keyid:C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:64:bc:f2:2f:90:2a:f6:de:5f:e3:be:9e:29:47:84:77:fd: ee:cc:7d:95:64:49:ea:21:01:eb:d2:28:d3:d5:63:04:86:cf: 7d:9d:ae:28:a6:b1:81:88:14:c5:40:e7:af:d4:14:8b:2e:34: 23:11:f4:aa:5f:7c:ba:4f:a2:94:7c:75:3c:e0:6f:77:7b:83: 57:d9:a6:ce:3e:a1:86:ae:f6:ce:a9:5a:76:f7:b9:16:a3:e0: e1:8f:b7:64:21:2c:dc:7e:92:08:0b:1f:3a:af:96:e2:85:7e: 73:1d:b1:6c:76:49:6c:5a:82:46:ac:90:59:7d:e0:91:11:b2: fa:9b:6f:5c:05:ec:52:23:6f:93:fe:73:31:24:3d:77:1e:61: f2:ca:64:e8:e5:c6:ca:f5:7f:b7:d9:e1:16:d9:46:7c:70:ce: 0c:64:ff:9d:fe:dd:fb:f9:33:d0:a3:40:d1:22:91:65:4c:59: 2a:fc:cb:64:7a:ab:f8:15:5f:58:82:34:19:1d:56:88:46:4f: b6:cc:ce:be:7b:db:21:4d:52:a0:88:3f:a1:a6:14:0d:2a:99: aa:ba:e6:cd:90:20:76:08:e2:c3:38:c3:e8:c7:a3:15:22:56: c5:99:fd:dc:00:d3:d0:30:0c:76:84:c6:64:d9:f8:30:ad:68: 37:f6:e5:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx M0VGOUMxMTAvBgNVBAUTKEM0NDM5REMwMUUyMEQxNkNDNUEwRUY5ODE3RDQxQkY2 Mjg5NzY1MjQwHhcNMjUxMjIzMDUwNTAyWhcNMjUxMjMwMDUwNTAyWjAYMRYwFAYD VQQDDA02OTRhMjJmZS03M2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkRh1Pb/Dx1cd+tBXpFFYzqfrs/cK+BwjvqH0//6jAFdCtjOwa/Bqf0dXnIo YCzd7Q4p5iJOTxjrX/iNl7JIIwy3D1lIoalo5QFLulD5fh3F8HCWjzgc502WrGjb HcwayGf5x8ObYJjYIO+jOzcca0QhbR9Di3kS0S6q11ToZ+53o1YYr33lAGLCvRKz jDxeF/8RgwAC41gWaU7o1+hzFFIhzk02H+wwknTvCf8OOtBuBAGQ08cy5DddKJML AWc5iXyr91dDAsbA+vCWN409Cdr3PjbyO1SxxCLSx8LUijX+Q3RlxSU73K/zF0Co jmATmgV5x3LGMrWS1f54vWBuXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8MTEBO lGpUbHIe3PQjSsI+uwhCMB8GA1UdIwQYMBaAFMRDncAeINFsxaDvmBfUG/Yol2Uk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUY5Qy9DRDJDQThGOEQz RUExMUVGQTY2QzQ3NjBDNEY5QUUwMi94RU9kd0I0ZzBXekZvTy1ZRjlRYjlpaVha U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFT2R3QjRnMFd6Rm9PLVlGOVFiOWlpWFpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUY5Qy9DRDJDQThGOEQzRUExMUVGQTY2QzQ3NjBDNEY5QUUwMi94RU9kd0I0ZzBX ekZvTy1ZRjlRYjlpaVhaU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoZLzyL5Aq9t5f476eKUeEd/3uzH2VZEnqIQHr0ijT1WMEhs99na4o prGBiBTFQOev1BSLLjQjEfSqX3y6T6KUfHU84G93e4NX2abOPqGGrvbOqVp297kW o+Dhj7dkISzcfpIICx86r5bihX5zHbFsdklsWoJGrJBZfeCREbL6m29cBexSI2+T /nMxJD13HmHyymTo5cbK9X+32eEW2UZ8cM4MZP+d/t37+TPQo0DRIpFlTFkq/Mtk eqv4FV9YgjQZHVaIRk+2zM6+e9shTVKgiD+hphQNKpmquubNkCB2COLDOMPox6MV IlbFmf3cANPQMAx2hMZk2fgwrWg39uW6 -----END CERTIFICATE-----Generated at Wed Dec 24 16:00:33 2025 by rpki-client