This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json) Hash identifier: +JA1011XcTkDLulMyLsfpCFpHz0nf69YvzKB7TX8UME= Subject key identifier: 0D:E1:F3:E4:2C:36:D1:0A:A2:ED:30:BC:2E:81:AC:11:CF:01:5D:C0 Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft Manifest number: 01DF Signing time: Fri 19 Dec 2025 01:54:11 +0000 Manifest this update: Fri 19 Dec 2025 01:54:11 +0000 Manifest next update: Fri 26 Dec 2025 01:54:11 +0000 Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: 7rsvE4w7s7lKrPEYLagPe26Tg0hZlf4BuvwK4mbiKkA=) 2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Validity Not Before: Dec 19 01:54:11 2025 GMT Not After : Dec 26 01:54:11 2025 GMT Subject: CN=6944b043-d940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0d:e0:15:2b:9f:68:8c:73:6a:89:28:ec:0c: b2:e7:07:5b:dd:fb:0e:f0:5b:b7:a8:77:78:b6:1e: 51:a1:a5:3a:33:66:a8:f8:21:e4:2b:9b:c0:ca:3f: 19:5b:b9:ee:86:57:2d:6f:ea:90:85:23:fb:03:db: 41:98:75:35:0e:35:33:16:34:6a:b0:45:57:fb:a1: a6:25:df:52:c7:1b:9b:90:8c:d6:f4:97:af:82:37: b5:79:49:f7:b3:c3:64:a5:2e:15:c9:11:a7:2b:3b: 8a:dd:9d:08:53:29:ba:c4:f2:3b:ed:38:b2:af:d0: d7:9b:71:50:c2:6f:52:6a:09:dd:6c:f2:54:d8:73: 64:6f:5f:78:84:4a:7c:e8:07:60:5c:fa:cc:32:40: eb:64:91:d6:83:88:18:0f:e2:56:e0:82:ce:e9:9a: ee:3f:43:cb:12:49:1b:88:21:c4:34:74:98:71:b5: b1:f3:ed:c8:17:81:2d:f3:ba:f4:4d:f9:c7:3b:f4: 1a:80:64:6e:0a:a1:f2:ff:a3:17:76:43:63:4b:fc: 92:ab:2a:d3:c3:d2:a1:74:c9:f4:25:1f:b1:81:24: 9f:53:5c:35:eb:5c:ec:ad:3e:b5:ba:07:4c:29:e0: 02:99:80:40:9d:c6:03:3b:aa:ac:f9:00:b7:ef:b0: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E1:F3:E4:2C:36:D1:0A:A2:ED:30:BC:2E:81:AC:11:CF:01:5D:C0 X509v3 Authority Key Identifier: keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:34:5c:38:4a:9e:71:2e:db:61:0e:e9:fd:82:d4:57:e6:19: 7f:c2:de:f0:f9:bc:49:e4:a6:4a:53:20:de:1b:77:cb:a0:79: 3d:d0:d6:0e:4d:c6:9c:27:ce:62:53:a5:5c:60:ce:62:1a:f7: 02:8f:b1:7d:0c:01:03:ae:6e:e4:ae:ef:b9:25:7e:26:33:95: 38:6a:d8:28:00:4e:aa:d2:34:18:8f:77:5b:00:db:82:fe:95: 18:7e:bd:cb:ed:22:8a:b3:8c:d3:c1:f8:33:59:73:34:b5:9a: bb:1c:00:ed:eb:93:93:60:02:c8:d4:e7:72:bd:a5:80:98:6b: 1d:cc:f1:7d:76:30:c8:88:20:56:1f:a3:09:61:46:fb:96:bb: 72:cc:be:cd:c2:14:11:90:e2:ea:01:6e:ec:ed:2e:9a:7d:36: 22:ca:46:3b:70:1a:a1:e1:37:2c:63:7e:4e:7c:1c:ff:b6:dd: 82:a5:3a:a3:b3:17:82:3e:62:8e:7f:5e:d0:9e:e8:bb:b7:b7: ce:21:4c:74:45:1b:27:26:8e:59:f4:45:a9:1d:4f:1d:84:cb: d9:9a:21:c8:a0:8d:4e:e4:40:d6:54:28:02:75:1c:85:4a:d1: b1:00:d1:4e:d3:17:3d:ec:41:40:f9:cb:90:cf:8d:f7:8b:98: d7:f8:0b:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3 ODkxN0UwRkQwHhcNMjUxMjE5MDE1NDExWhcNMjUxMjI2MDE1NDExWjAYMRYwFAYD VQQDDA02OTQ0YjA0My1kOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+A3gFSufaIxzaoko7Ayy5wdb3fsO8Fu3qHd4th5RoaU6M2ao+CHkK5vAyj8Z W7nuhlctb+qQhSP7A9tBmHU1DjUzFjRqsEVX+6GmJd9SxxubkIzW9Jevgje1eUn3 s8NkpS4VyRGnKzuK3Z0IUym6xPI77Tiyr9DXm3FQwm9SagndbPJU2HNkb194hEp8 6AdgXPrMMkDrZJHWg4gYD+JW4ILO6ZruP0PLEkkbiCHENHSYcbWx8+3IF4Et87r0 TfnHO/QagGRuCqHy/6MXdkNjS/ySqyrTw9KhdMn0JR+xgSSfU1w161zsrT61ugdM KeACmYBAncYDO6qs+QC377BSswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3h8+Qs NtEKou0wvC6BrBHPAV3AMB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoNFw4Sp5xLtthDun9gtRX5hl/wt7w+bxJ5KZKUyDeG3fLoHk90NYO TcacJ85iU6VcYM5iGvcCj7F9DAEDrm7kru+5JX4mM5U4atgoAE6q0jQYj3dbANuC /pUYfr3L7SKKs4zTwfgzWXM0tZq7HADt65OTYALI1OdyvaWAmGsdzPF9djDIiCBW H6MJYUb7lrtyzL7NwhQRkOLqAW7s7S6afTYiykY7cBqh4TcsY35OfBz/tt2CpTqj sxeCPmKOf17Qnui7t7fOIUx0RRsnJo5Z9EWpHU8dhMvZmiHIoI1O5EDWVCgCdRyF StGxANFO0xc97EFA+cuQz433i5jX+AvA -----END CERTIFICATE-----Generated at Sat Dec 20 16:05:04 2025 by rpki-client