This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: G0AIeLPhHeMNgG/V94RYSlE7TbJ0HBZLEOcmMgtFtYA= Subject key identifier: DC:9E:EC:FC:61:E6:65:DA:EB:E1:93:0A:D6:47:5B:1B:69:5B:B5:0D Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0CA3 Signing time: Mon 22 Dec 2025 17:57:18 +0000 Manifest this update: Mon 22 Dec 2025 17:57:18 +0000 Manifest next update: Mon 29 Dec 2025 17:57:18 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: NeOpJl8wmOiNqlYnoLxbGMsng3+JQbHd+Cc0GfatEVc=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Dec 22 17:57:18 2025 GMT Not After : Dec 29 17:57:18 2025 GMT Subject: CN=6949867e-ae5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:f1:d4:d5:7d:16:13:70:52:7c:e0:f5:2d: 3b:d2:4a:87:72:88:25:19:03:32:5d:df:0a:ba:8d: 89:63:68:ff:d7:3d:34:e2:07:35:2f:64:9b:8c:e3: 79:cf:78:fc:72:36:17:56:25:97:d9:12:94:b6:c5: fc:c8:01:d3:50:75:8d:e9:83:48:80:ea:b3:f4:f4: b5:1c:bf:68:c8:a1:16:0f:dc:f0:e8:13:6a:1c:e1: 1c:8e:48:c7:f9:31:1e:2c:42:e7:28:11:8b:b9:10: 9e:07:9d:31:ba:66:16:2f:89:17:75:a9:2d:5f:63: b0:dc:24:77:13:25:86:61:59:3c:87:12:f2:cb:a4: 6d:98:c8:7f:43:52:5a:b5:ef:f3:27:41:f0:99:fb: f9:f0:2c:80:90:bb:6e:6d:fa:c0:fe:4e:b4:73:53: 59:60:ea:dc:81:30:30:b7:cd:c1:96:a7:80:d8:bc: a0:b6:67:6e:0e:ad:49:29:a9:c0:fd:76:15:31:e3: 5e:43:53:56:32:6a:2f:dd:e2:0b:e0:af:de:ef:8c: d0:1e:83:f7:61:85:99:e4:ea:7b:b1:8f:c5:90:4a: e3:69:1e:3a:92:a4:5d:38:58:5b:48:c3:2d:66:66: bb:d1:58:df:57:ca:f6:35:25:49:e4:2a:f2:2a:a6: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9E:EC:FC:61:E6:65:DA:EB:E1:93:0A:D6:47:5B:1B:69:5B:B5:0D X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:f0:f0:49:ec:e0:fc:aa:d9:41:aa:1a:61:7a:0b:0c:47:f3: b2:1e:e3:38:c4:62:9d:60:40:d3:c2:b1:93:82:70:8a:b5:3f: 3c:d4:fa:76:30:e8:85:ee:4a:3b:54:d1:0a:18:99:88:1e:6f: d6:76:07:9d:2c:f1:c7:ad:87:b1:c3:e1:3d:e2:74:3b:b8:80: a4:95:88:8a:be:5c:a3:8a:01:63:f8:db:ff:98:95:54:31:5f: 59:17:94:11:29:29:ef:0c:c2:b5:0f:e3:bf:2e:66:69:4b:fa: 10:e6:1b:7d:76:03:48:f2:9f:bc:ee:ee:8a:9a:0c:9b:aa:97: 4b:45:c5:3a:59:21:e5:c6:9b:f4:49:ac:4d:74:0c:7c:4a:7c: 72:dd:50:88:00:a6:b5:30:4e:df:a0:e1:83:dd:ea:1b:6c:e0: ad:56:eb:8a:eb:b2:04:45:5f:5c:84:a6:d1:94:5d:46:c8:1e: bb:ea:cf:93:65:5b:26:91:ab:54:e6:25:88:67:a2:f1:30:27: 44:76:25:ee:d0:17:f7:02:b8:cb:40:cb:3a:35:7d:77:62:ea: 16:5b:73:cd:0f:2a:47:bc:8e:b7:65:ed:47:d3:37:14:d4:19: 4b:45:78:4f:40:47:0b:bd:98:58:7e:43:13:c2:ee:88:5e:e5: 0a:79:a3:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUxMjIyMTc1NzE4WhcNMjUxMjI5MTc1NzE4WjAYMRYwFAYD VQQDDA02OTQ5ODY3ZS1hZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPnx1NV9FhNwUnzg9S070kqHcoglGQMyXd8Kuo2JY2j/1z004gc1L2SbjON5 z3j8cjYXViWX2RKUtsX8yAHTUHWN6YNIgOqz9PS1HL9oyKEWD9zw6BNqHOEcjkjH +TEeLELnKBGLuRCeB50xumYWL4kXdaktX2Ow3CR3EyWGYVk8hxLyy6RtmMh/Q1Ja te/zJ0Hwmfv58CyAkLtubfrA/k60c1NZYOrcgTAwt83BlqeA2LygtmduDq1JKanA /XYVMeNeQ1NWMmov3eIL4K/e74zQHoP3YYWZ5Op7sY/FkErjaR46kqRdOFhbSMMt Zma70VjfV8r2NSVJ5CryKqZmGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNye7Pxh 5mXa6+GTCtZHWxtpW7UNMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG8PBJ7OD8qtlBqhphegsMR/OyHuM4xGKdYEDTwrGTgnCKtT881Pp2 MOiF7ko7VNEKGJmIHm/WdgedLPHHrYexw+E94nQ7uICklYiKvlyjigFj+Nv/mJVU MV9ZF5QRKSnvDMK1D+O/LmZpS/oQ5ht9dgNI8p+87u6KmgybqpdLRcU6WSHlxpv0 SaxNdAx8Snxy3VCIAKa1ME7foOGD3eobbOCtVuuK67IERV9chKbRlF1GyB676s+T ZVsmkatU5iWIZ6LxMCdEdiXu0Bf3ArjLQMs6NX13YuoWW3PNDypHvI63Ze1H0zcU 1BlLRXhPQEcLvZhYfkMTwu6IXuUKeaNL -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:29 2025 by rpki-client