This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: +49DR9e08dAYkSu/2xZhWYhUwCkeTY4xRg93TcGj+gY= Subject key identifier: A8:8C:EE:EE:F4:AE:24:22:94:0D:A9:A7:C6:F6:FC:5B:B8:94:D6:27 Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0B7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0B66 Signing time: Sat 20 Dec 2025 18:45:16 +0000 Manifest this update: Sat 20 Dec 2025 18:45:15 +0000 Manifest next update: Sat 27 Dec 2025 18:45:15 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: 3YLW/4s9Az23UrkoiAsExWZZXag6Q++mxdQP+t99o04=) 2: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: DPGURiy/ga59xiLR42DrUhd2krbJVgQk+C5+WjMHgzg=) 3: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: +YYg5jcS99lfynPlhAhxkr4lADd5koWQrubtajtUn1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2938 (0xb7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Dec 20 18:45:15 2025 GMT Not After : Dec 27 18:45:15 2025 GMT Subject: CN=6946eebc-a35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:f4:16:5b:d5:f9:e3:39:b2:07:79:d3:8e: 4b:72:4d:18:11:a7:77:c8:dd:49:5c:09:20:72:ee: 04:fd:b7:33:07:5c:1b:07:b9:42:77:a0:11:e7:fc: eb:87:64:35:68:0b:f5:2d:29:db:a9:51:37:69:18: dd:57:cc:79:5a:c3:c3:45:f9:cb:e5:05:de:93:d0: d8:b1:07:6f:73:cc:99:32:8f:bb:af:af:58:aa:6a: 0a:dc:09:f1:c8:7a:15:90:70:0d:82:fb:36:14:e0: 52:22:6c:8b:48:15:7e:c6:08:89:99:01:e0:89:a0: 6b:47:de:13:a5:ab:5f:61:aa:46:32:3a:49:10:a8: 2b:55:8a:e9:d0:72:99:f3:c2:f5:5a:cb:dc:36:4e: 2e:7f:59:cd:cd:51:4b:91:2d:12:96:56:60:e1:82: 4d:47:72:cc:5b:67:fd:01:93:e4:ed:af:63:b8:4c: 4e:91:f2:bc:96:d1:77:ea:fe:f7:c3:6c:3a:06:31: f2:40:c3:fe:2d:3e:fa:e7:85:b5:36:ec:40:af:e8: 90:2d:ed:32:ee:f9:49:6b:8d:19:bd:87:19:a0:43: 8d:f9:f2:3e:a8:5b:89:5b:a1:c9:4c:8e:a9:f9:f5: 1f:2b:6d:0f:9a:37:7f:54:92:3d:f6:71:e6:64:30: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8C:EE:EE:F4:AE:24:22:94:0D:A9:A7:C6:F6:FC:5B:B8:94:D6:27 X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e9:57:ff:75:64:76:a2:dc:96:68:dd:39:d2:27:28:05:97: b9:2f:ea:83:35:cc:02:27:6a:38:5f:3d:4f:7a:2c:34:8d:87: 2f:f2:0c:b3:97:7f:84:20:71:c5:71:94:37:df:fd:e8:7c:d6: b6:4d:51:95:24:dc:fb:90:46:b3:8f:eb:ff:03:2e:fa:59:9f: 48:1c:66:fa:78:47:31:ea:e6:f3:30:3b:77:2c:81:e3:7f:8d: 61:fb:71:20:9f:1a:b6:d4:67:85:cc:40:5d:d5:e9:47:57:4e: f5:a9:f5:d9:5c:7d:00:cd:d9:03:ac:a1:17:0a:67:78:c9:8a: 3d:12:d3:57:dc:3a:f4:ea:fb:84:85:7f:ea:3f:84:6a:40:da: bd:ee:94:d2:bb:b1:2e:bc:12:9d:08:96:2e:9c:fb:80:18:8d: 49:d6:7e:81:11:c8:a9:f2:9c:c7:7d:b7:d8:91:e2:77:9b:73: ef:bb:99:e9:ec:eb:f1:e4:8c:34:4a:39:c7:36:7e:9d:bc:66: 81:ae:40:2e:32:01:d2:93:6a:68:ca:45:00:3d:9a:a8:0a:dc: cc:b0:42:05:68:b2:2b:f5:f9:b2:b8:73:a5:ad:5a:e3:ad:27: 63:8d:7e:68:71:fb:36:c8:95:11:5c:c6:bb:83:0c:d4:4a:dc: 7e:81:2f:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjUxMjIwMTg0NTE1WhcNMjUxMjI3MTg0NTE1WjAYMRYwFAYD VQQDDA02OTQ2ZWViYy1hMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDn0FlvV+eM5sgd5045Lck0YEad3yN1JXAkgcu4E/bczB1wbB7lCd6AR5/zr h2Q1aAv1LSnbqVE3aRjdV8x5WsPDRfnL5QXek9DYsQdvc8yZMo+7r69YqmoK3Anx yHoVkHANgvs2FOBSImyLSBV+xgiJmQHgiaBrR94TpatfYapGMjpJEKgrVYrp0HKZ 88L1WsvcNk4uf1nNzVFLkS0SllZg4YJNR3LMW2f9AZPk7a9juExOkfK8ltF36v73 w2w6BjHyQMP+LT7654W1NuxAr+iQLe0y7vlJa40ZvYcZoEON+fI+qFuJW6HJTI6p +fUfK20Pmjd/VJI99nHmZDA4dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiM7u70 riQilA2pp8b2/Fu4lNYnMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB16Vf/dWR2otyWaN050icoBZe5L+qDNcwCJ2o4Xz1Peiw0jYcv8gyz l3+EIHHFcZQ33/3ofNa2TVGVJNz7kEazj+v/Ay76WZ9IHGb6eEcx6ubzMDt3LIHj f41h+3Egnxq21GeFzEBd1elHV071qfXZXH0AzdkDrKEXCmd4yYo9EtNX3Dr06vuE hX/qP4RqQNq97pTSu7EuvBKdCJYunPuAGI1J1n6BEcip8pzHfbfYkeJ3m3Pvu5np 7Ovx5Iw0SjnHNn6dvGaBrkAuMgHSk2poykUAPZqoCtzMsEIFaLIr9fmyuHOlrVrj rSdjjX5ocfs2yJURXMa7gwzUStx+gS/g -----END CERTIFICATE-----Generated at Mon Dec 22 12:24:11 2025 by rpki-client