This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: ShmI27hgYa11oIQ63lsviMpLtP3TqHimT2NYhfG0naU= Subject key identifier: A8:13:41:9B:13:BC:84:5A:09:15:0B:08:7A:C6:26:5B:CF:00:D4:0E Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 01CA Signing time: Sun 21 Dec 2025 02:21:23 +0000 Manifest this update: Sun 21 Dec 2025 02:21:23 +0000 Manifest next update: Sun 28 Dec 2025 02:21:23 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: S2bfHvRIdwndalP642dOvIVAkDzO4gGv8zQJZFyO4z0=) 2: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: 0lzHMRu/BEbN9XyM7Nn7lU0Tdf9VP7CQevvwrhAJ9I4=) 3: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: oQkH3u9NTYvKUYQPQlkbYyuLgyzF8QlzdxljTJ0MaOk=) 4: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: 2gtTc6ZU74S7+Yus2EBYeK424P/75ngpI7OxmlHbzq4=) 5: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: ySS8x+DTKoqsAepHwvR2qHqY0ZCmV9P1QKOa76HzTlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Dec 21 02:21:23 2025 GMT Not After : Dec 28 02:21:23 2025 GMT Subject: CN=694759a3-0af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:e7:4a:4f:12:d7:5d:ec:39:0c:10:51:53: 8e:12:5d:3c:3e:71:de:1d:9e:8d:cc:98:d2:fe:14: bd:fc:5e:13:c6:56:b2:1f:0e:92:95:11:0a:24:b9: 89:16:6d:6c:cd:4c:7a:55:eb:7e:81:b5:c0:61:56: c5:94:23:b3:af:ba:56:10:f1:61:2c:0e:4e:a9:4e: 32:94:d0:b3:5c:aa:b3:4b:28:7f:e2:a4:00:ff:6a: a4:ed:26:b9:f5:29:28:9c:34:b1:bd:eb:29:79:10: 37:f5:1f:8c:45:bc:ed:17:39:6b:fd:42:a0:d5:ee: bf:6d:34:74:04:a5:b0:0c:bd:11:ae:3c:24:02:cd: 1e:61:92:7e:95:e4:5e:d5:eb:01:2d:ba:4f:41:39: 2d:91:19:75:fd:67:bd:84:15:88:c8:97:f4:8e:87: 35:32:fb:b3:84:8c:9a:c7:fd:fb:2d:63:ff:97:fd: ee:0c:14:a9:f9:07:72:14:81:91:6c:e8:08:99:c1: 6f:3b:12:5c:74:63:f4:5b:56:7c:63:f0:cc:38:f7: a1:a0:61:f8:6c:50:34:9e:ea:e1:6d:af:77:fc:25: 87:66:1d:1f:12:d6:a5:94:1e:c9:3d:d9:32:1f:60: a3:7a:65:b9:09:cb:a4:6e:3d:e2:22:a9:43:c8:c5: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:13:41:9B:13:BC:84:5A:09:15:0B:08:7A:C6:26:5B:CF:00:D4:0E X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:12:c5:bd:f6:0c:de:95:3b:84:24:bd:dd:e1:8b:4d:1d:29: a6:b8:4e:66:7c:07:89:c5:03:ea:60:36:74:d5:9d:e6:43:5f: 88:01:e5:f6:51:c4:9e:72:25:fa:11:dc:91:71:e3:e4:d4:9a: d3:48:94:83:76:f4:b7:8c:f5:85:8a:75:23:ec:99:d8:4b:36: 2e:e9:58:02:a2:97:8b:19:96:30:c9:17:e7:19:41:0d:8d:57: 46:b8:42:71:ac:32:ab:0e:95:e6:f5:29:59:11:32:82:92:c3: 94:33:a7:fc:53:03:90:03:c1:f1:0e:0e:55:23:a9:20:05:78: 50:9a:7a:b9:00:7e:ca:57:09:9b:1f:fc:28:57:da:29:6f:c4: 99:03:fc:a9:10:96:81:43:ef:95:9e:f1:bc:37:f9:88:f9:55: dc:d4:d6:72:72:75:53:f8:cd:72:f4:57:f8:0c:3c:a2:e8:91: 06:e7:57:3d:38:d5:24:f3:72:e8:5f:94:47:b7:34:52:03:51: 37:68:b1:3f:bd:6f:eb:14:c7:8d:77:80:69:d0:b0:32:89:7f: dc:8e:32:64:c7:d2:dd:42:2d:7e:1d:be:20:f4:8b:4d:e3:06: db:b1:48:4e:8b:cd:05:ac:74:2f:af:da:18:7a:4e:25:32:22: 7e:57:df:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjUxMjIxMDIyMTIzWhcNMjUxMjI4MDIyMTIzWjAYMRYwFAYD VQQDDA02OTQ3NTlhMy0wYWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul7nSk8S113sOQwQUVOOEl08PnHeHZ6NzJjS/hS9/F4TxlayHw6SlREKJLmJ Fm1szUx6Vet+gbXAYVbFlCOzr7pWEPFhLA5OqU4ylNCzXKqzSyh/4qQA/2qk7Sa5 9SkonDSxvespeRA39R+MRbztFzlr/UKg1e6/bTR0BKWwDL0RrjwkAs0eYZJ+leRe 1esBLbpPQTktkRl1/We9hBWIyJf0joc1MvuzhIyax/37LWP/l/3uDBSp+QdyFIGR bOgImcFvOxJcdGP0W1Z8Y/DMOPehoGH4bFA0nurhba93/CWHZh0fEtallB7JPdky H2CjemW5Ccukbj3iIqlDyMXoJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgTQZsT vIRaCRULCHrGJlvPANQOMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIEsW99gzelTuEJL3d4YtNHSmmuE5mfAeJxQPqYDZ01Z3mQ1+IAeX2 UcSeciX6EdyRcePk1JrTSJSDdvS3jPWFinUj7JnYSzYu6VgCopeLGZYwyRfnGUEN jVdGuEJxrDKrDpXm9SlZETKCksOUM6f8UwOQA8HxDg5VI6kgBXhQmnq5AH7KVwmb H/woV9opb8SZA/ypEJaBQ++VnvG8N/mI+VXc1NZycnVT+M1y9Ff4DDyi6JEG51c9 ONUk83LoX5RHtzRSA1E3aLE/vW/rFMeNd4Bp0LAyiX/cjjJkx9LdQi1+Hb4g9ItN 4wbbsUhOi80FrHQvr9oYek4lMiJ+V98h -----END CERTIFICATE-----Generated at Tue Dec 23 01:26:03 2025 by rpki-client