This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: WnSarqdUWaJTh/DaiuXvnTwzLnXG3bbbW/SI0f8G+gM= Subject key identifier: 31:FC:DC:AA:57:0B:EE:AA:B4:34:87:18:A6:B9:83:C5:B5:CA:E6:14 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 03E8 Signing time: Mon 08 Dec 2025 22:58:44 +0000 Manifest this update: Mon 08 Dec 2025 22:58:44 +0000 Manifest next update: Mon 15 Dec 2025 22:58:44 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: cK7wgFXNJ+WpdaE61RwA60oyL0AI1nWlk7ikv9Ztc0s=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: DbGKbMecwcykqDAfU21+x6Kvm9Z6g5WTzg4SdqXRisc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 22:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Dec 8 22:58:44 2025 GMT Not After : Dec 15 22:58:44 2025 GMT Subject: CN=69375824-b22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:62:b6:da:59:02:29:25:ee:a2:56:60:38:02: 97:c8:cc:fe:52:7a:62:46:87:ff:d0:9c:96:7c:af: 55:e8:96:96:6b:eb:2a:56:26:c4:00:87:99:7d:30: e9:6f:e5:d2:ce:d8:b2:ff:82:00:b0:f6:79:60:0c: 17:40:fe:ea:4d:b4:80:34:26:ab:41:42:69:2e:1f: e8:19:9f:b3:46:e6:f0:ed:7d:b7:ab:22:a2:57:24: bd:99:9e:18:bf:df:bc:be:5b:f3:d2:9c:b0:cc:2f: a9:34:c1:44:b7:55:17:5c:ed:70:2f:c2:b0:bd:b2: 8b:69:ac:35:e6:df:91:65:b4:ac:e2:0e:2d:99:39: 27:7e:f7:d2:22:92:e1:9f:88:3a:91:16:be:26:34: 12:47:d3:d0:0a:28:2f:a4:e5:e9:a1:05:b2:40:5e: 3f:0d:23:b5:30:33:2b:3c:a2:cf:ad:f2:c8:ab:6f: e0:ac:12:4b:f8:5e:77:96:cf:a6:54:48:24:9f:73: 55:92:89:7c:a3:01:e7:9d:6c:84:4e:b2:b4:2c:df: 8f:de:45:17:58:1f:59:f0:ab:c9:96:72:bc:de:1d: 03:84:bc:18:f6:cc:41:fd:5e:56:35:9b:ce:dd:aa: 0e:b6:e4:45:b5:ff:9b:54:09:ed:5a:39:22:a7:3a: 6b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FC:DC:AA:57:0B:EE:AA:B4:34:87:18:A6:B9:83:C5:B5:CA:E6:14 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:77:d9:f7:a0:a2:28:e6:f7:57:db:0c:a9:07:53:cc:d9:92: e2:e1:5e:78:41:de:97:b9:eb:6f:cc:23:7c:00:56:1a:7a:34: 21:66:03:3e:97:06:d5:91:52:33:db:e6:8b:ae:e7:48:16:fe: 1f:c4:44:9b:71:47:92:53:4d:53:10:02:d4:ae:e8:60:5a:59: ff:38:92:f9:ca:67:11:b8:e7:29:e2:94:07:e1:b1:94:78:82: 6b:bc:d7:f8:07:88:34:cc:4d:4b:47:69:26:65:33:1c:79:c2: 67:74:82:6f:de:53:c9:e8:d0:a7:4e:fd:94:8a:ff:8a:e5:99: ab:ac:76:91:cb:af:aa:9b:93:9e:01:fc:cb:38:99:a6:1c:6f: b8:01:8c:2a:01:7c:bf:f1:f1:6e:6b:3a:24:b2:a0:67:99:8c: f4:26:bf:76:57:5b:da:bb:94:dc:fe:0f:d8:3b:4a:a6:16:26: bb:08:6e:6c:04:8f:22:ef:54:2c:4f:5a:c0:8f:ef:ea:9d:af: 15:eb:b1:86:71:31:54:1f:c7:d7:84:38:5d:e9:9e:2f:10:b2: a4:10:7f:25:57:43:82:09:e0:8a:37:12:6f:d6:6e:14:ae:a4: 83:37:36:e8:54:bf:64:27:56:dc:a4:82:af:9f:7d:6b:b8:f9: 34:9d:00:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjUxMjA4MjI1ODQ0WhcNMjUxMjE1MjI1ODQ0WjAYMRYwFAYD VQQDEw02OTM3NTgyNC1iMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mK22lkCKSXuolZgOAKXyMz+UnpiRof/0JyWfK9V6JaWa+sqVibEAIeZfTDp b+XSztiy/4IAsPZ5YAwXQP7qTbSANCarQUJpLh/oGZ+zRubw7X23qyKiVyS9mZ4Y v9+8vlvz0pywzC+pNMFEt1UXXO1wL8KwvbKLaaw15t+RZbSs4g4tmTknfvfSIpLh n4g6kRa+JjQSR9PQCigvpOXpoQWyQF4/DSO1MDMrPKLPrfLIq2/grBJL+F53ls+m VEgkn3NVkol8owHnnWyETrK0LN+P3kUXWB9Z8KvJlnK83h0DhLwY9sxB/V5WNZvO 3aoOtuRFtf+bVAntWjkipzprtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH83KpX C+6qtDSHGKa5g8W1yuYUMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhd9n3oKIo5vdX2wypB1PM2ZLi4V54Qd6XuetvzCN8AFYaejQhZgM+ lwbVkVIz2+aLrudIFv4fxESbcUeSU01TEALUruhgWln/OJL5ymcRuOcp4pQH4bGU eIJrvNf4B4g0zE1LR2kmZTMcecJndIJv3lPJ6NCnTv2Uiv+K5ZmrrHaRy6+qm5Oe AfzLOJmmHG+4AYwqAXy/8fFuazoksqBnmYz0Jr92V1vau5Tc/g/YO0qmFia7CG5s BI8i71QsT1rAj+/qna8V67GGcTFUH8fXhDhd6Z4vELKkEH8lV0OCCeCKNxJv1m4U rqSDNzboVL9kJ1bcpIKvn31ruPk0nQCL -----END CERTIFICATE-----Generated at Wed Dec 10 09:02:56 2025 by rpki-client