This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json) Hash identifier: P6uk2JjOQQ4gRlEH16tYVrKOtCmKqo174wVY81LNWiQ= Subject key identifier: 13:02:3B:BD:67:D8:5C:7A:B0:7E:C7:DF:02:BA:AB:2D:81:A1:CB:4B Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Certificate serial: 06DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft Manifest number: 06D9 Signing time: Mon 22 Dec 2025 21:17:01 +0000 Manifest this update: Mon 22 Dec 2025 21:17:00 +0000 Manifest next update: Mon 29 Dec 2025 21:17:00 +0000 Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: 2ssZG4Kl53Ej+d0dw7n81jZhyvjsxUPcQa/fJG6RRqE=) 2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: LymCYpP9ODjDnMZgIvd8/QCM8E6rGc1JYF+pBCdV8o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Validity Not Before: Dec 22 21:17:00 2025 GMT Not After : Dec 29 21:17:00 2025 GMT Subject: CN=6949b54d-5c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:97:b8:36:a6:65:ad:d9:e8:b9:49:9a:08: f1:0f:29:53:d8:b6:b3:2d:62:1d:62:82:f0:28:57: bf:3f:69:da:3c:5b:fa:00:0a:8b:ac:3b:f8:5b:9e: b9:93:fd:00:52:bf:7b:96:5a:06:44:48:45:95:17: fb:46:d4:12:f4:ca:e4:d1:55:6e:68:5f:d7:f4:1b: c2:9d:a0:2b:e8:d8:67:40:95:32:e2:70:96:c4:10: 7f:81:a8:72:9f:2b:51:64:96:46:07:83:ff:22:06: de:01:8c:a1:28:b0:3c:29:b4:45:b5:3f:c0:1d:ac: 5b:f4:48:db:03:f2:14:a5:04:e5:1e:1d:88:c6:ac: c6:99:d4:d1:34:1e:76:10:41:75:f7:ca:c5:e7:73: 3c:42:1b:80:b4:18:31:df:67:eb:bf:19:9b:bd:bd: 66:25:34:95:5b:34:68:1d:7b:f5:fd:6d:26:a7:01: cb:1a:34:5c:f0:8c:ad:03:f9:2b:e4:cc:95:2e:3c: a3:92:57:41:83:ac:7d:72:6f:ee:96:05:16:26:e0: a1:aa:84:56:c8:e2:27:88:ae:64:e8:1d:c3:48:39: 26:f7:7c:81:96:c3:b2:52:9c:3e:ca:9a:c3:09:73: fa:ae:a8:9b:7a:6f:1a:98:7f:e8:2e:60:d7:7a:09: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:02:3B:BD:67:D8:5C:7A:B0:7E:C7:DF:02:BA:AB:2D:81:A1:CB:4B X509v3 Authority Key Identifier: keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c0:bd:6d:03:a3:99:d0:2a:3c:01:af:32:0e:ee:a5:87:8d: 71:f4:3d:e6:00:f4:cb:98:28:0f:00:f4:46:83:f1:9b:0c:4f: ef:7a:81:d1:00:4e:36:0d:93:20:fa:f0:36:77:80:78:f2:6f: d6:ba:e5:9e:61:04:f0:df:b9:fb:8f:09:49:69:5a:04:af:73: 9a:bb:fe:c8:1c:ce:38:9a:df:f1:45:d9:cc:19:e3:ac:c8:90: 39:53:6c:4a:c9:bf:fc:a5:9a:49:49:9c:a4:b0:a2:fc:8e:54: 27:74:2d:a2:62:ce:1e:a1:75:ca:9c:77:f3:a4:b5:50:59:5a: 97:f5:b8:81:59:a9:93:b3:86:ee:40:ff:ea:38:d0:1e:09:f5: ed:46:b5:32:06:8a:d3:c8:19:65:e9:d1:7c:c4:3c:a3:2b:ff: d0:1a:a9:4f:49:b5:e5:53:fe:92:37:80:bd:bf:c5:22:7f:81: 59:4e:26:28:e0:7b:c4:44:f7:a2:41:7d:6b:c3:29:4b:ff:34: 15:43:c8:e7:86:38:74:81:e6:29:4f:47:b5:e0:65:15:d2:d9: c0:b4:35:74:31:91:d2:0a:d5:9b:25:a9:09:4c:6e:f2:46:ab: ea:5d:a2:af:4d:58:63:01:0b:f7:cc:8f:d6:cd:8b:a3:5e:88: ad:33:7d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2RTE0QjEwMDFD MDgxOUREQTkwHhcNMjUxMjIyMjExNzAwWhcNMjUxMjI5MjExNzAwWjAYMRYwFAYD VQQDDA02OTQ5YjU0ZC01YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1OXuDamZa3Z6LlJmgjxDylT2LazLWIdYoLwKFe/P2naPFv6AAqLrDv4W565 k/0AUr97lloGREhFlRf7RtQS9Mrk0VVuaF/X9BvCnaAr6NhnQJUy4nCWxBB/gahy nytRZJZGB4P/IgbeAYyhKLA8KbRFtT/AHaxb9EjbA/IUpQTlHh2IxqzGmdTRNB52 EEF198rF53M8QhuAtBgx32frvxmbvb1mJTSVWzRoHXv1/W0mpwHLGjRc8IytA/kr 5MyVLjyjkldBg6x9cm/ulgUWJuChqoRWyOIniK5k6B3DSDkm93yBlsOyUpw+yprD CXP6rqibem8amH/oLmDXegl/JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMCO71n 2Fx6sH7H3wK6qy2BoctLMB8GA1UdIwQYMBaAFMaTmbEy4a5rLqMRbhSxABwIGd2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDA1Qy9ERUNFMEYwQTdC RDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJtc3VveEZ1RkxFQUhBZ1oz YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwT1pzVExocm1zdW94RnVGTEVBSEFnWjNhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJt c3VveEZ1RkxFQUhBZ1ozYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTwL1tA6OZ0Co8Aa8yDu6lh41x9D3mAPTLmCgPAPRGg/GbDE/veoHR AE42DZMg+vA2d4B48m/WuuWeYQTw37n7jwlJaVoEr3Oau/7IHM44mt/xRdnMGeOs yJA5U2xKyb/8pZpJSZyksKL8jlQndC2iYs4eoXXKnHfzpLVQWVqX9biBWamTs4bu QP/qONAeCfXtRrUyBorTyBll6dF8xDyjK//QGqlPSbXlU/6SN4C9v8Uif4FZTiYo 4HvERPeiQX1rwylL/zQVQ8jnhjh0geYpT0e14GUV0tnAtDV0MZHSCtWbJakJTG7y RqvqXaKvTVhjAQv3zI/WzYujXoitM33C -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:33 2025 by rpki-client