This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
File: xoquBsigaPIiEjEzLc1N8a8vB5Q.mft (raw, json)
Hash identifier: LE9e3Zo8XtErsqRMpy/6J9sDA4z5uoLiopIYf1qkAtM=
Subject key identifier: 6C:C7:4D:5D:81:83:31:46:0E:16:B2:F9:1F:E4:98:30:5E:3F:A5:0F
Authority key identifier: C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94
Certificate issuer: /CN=A915CC16/serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
Manifest number: 0885
Signing time: Mon 22 Dec 2025 20:05:52 +0000
Manifest this update: Mon 22 Dec 2025 20:05:52 +0000
Manifest next update: Mon 29 Dec 2025 20:05:52 +0000
Files and hashes: 1: xoquBsigaPIiEjEzLc1N8a8vB5Q.crl (hash: VEJ2u14Z3nxVGqvnyPEH79hxHNV2XuvhoZid2dXuGmo=)
2: 38A2CBB88DEE11F0B9918D1FC4F9AE02.roa (hash: z3byFN5IfEv+WZ84P4Hf1mQWrRSXQ5bot07gaZA1QjA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl
rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CC16, serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794
Validity
Not Before: Dec 22 20:05:52 2025 GMT
Not After : Dec 29 20:05:52 2025 GMT
Subject: CN=6949a4a0-b0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:86:81:f8:d4:60:06:63:ae:24:a2:15:8a:
fe:e9:b8:80:3b:11:6a:a7:1c:69:93:92:8b:af:f1:
3f:9c:82:a6:0d:62:69:a2:e9:b8:1d:a5:5d:68:e7:
ec:bd:89:24:1e:62:12:d5:12:48:e4:47:4a:2e:0f:
48:af:a2:de:e0:f7:41:4b:bc:0a:48:19:11:b1:a3:
71:8d:df:b1:b5:ce:c2:85:a4:83:72:72:ee:df:71:
71:0c:c5:00:7e:a9:24:c6:2e:92:28:51:92:1b:bf:
eb:6b:14:85:d4:c3:3c:24:f3:d9:42:1e:ad:c1:bc:
bc:b9:18:a9:e1:0b:a4:df:7e:be:55:3f:6b:33:12:
63:1e:17:18:e6:44:06:1c:bf:df:bc:a8:69:03:4b:
c2:39:1c:b8:4c:80:2f:70:0e:c0:9c:2a:fb:b8:d8:
1b:7c:b3:3e:98:0d:97:90:97:a1:31:37:a4:5c:4e:
a1:6c:99:84:89:5d:65:c8:10:50:0e:51:46:cf:e0:
ba:ca:ad:5c:e6:89:41:0f:c2:2e:34:5e:96:ce:a8:
96:26:c6:ab:6a:c6:e3:75:24:67:38:69:7a:dc:ff:
f7:f9:d9:6d:34:98:12:a6:88:7e:3b:8b:3f:db:b3:
cf:c6:3d:20:41:ac:eb:3f:b3:01:eb:4b:de:4f:0a:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C7:4D:5D:81:83:31:46:0E:16:B2:F9:1F:E4:98:30:5E:3F:A5:0F
X509v3 Authority Key Identifier:
keyid:C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:84:2f:c6:4c:08:7a:49:c0:d7:36:94:01:2b:1f:ac:d7:a8:
7f:67:00:2e:4a:90:89:ef:72:f7:a5:2a:8d:ff:c1:2f:1d:eb:
04:f2:9c:78:18:25:e0:c9:68:6e:d2:c7:a6:39:b4:b1:1c:8d:
cc:f7:7f:d7:1b:93:66:13:4a:29:ae:5d:2b:e3:fe:dd:9f:54:
03:9c:25:60:57:19:e7:9e:71:0f:d3:aa:92:76:b9:aa:b1:c1:
db:87:89:8b:63:a2:12:03:30:95:21:6f:2b:24:87:a8:93:73:
f8:b4:5f:4f:6b:26:c2:1a:f9:8a:89:b6:57:7a:19:46:1c:bb:
9e:18:72:85:17:d7:dc:79:ac:e7:e7:b6:11:c3:09:fd:30:e1:
71:22:0d:d6:09:c4:3b:5e:4f:12:e3:33:c7:18:8f:d0:54:53:
7d:6c:e8:54:17:e4:48:17:28:de:b5:2a:8f:b1:4d:5f:be:51:
5f:d5:7b:c8:93:ee:16:3a:b5:8d:36:81:f2:47:00:10:8e:68:
71:34:b8:a0:74:2c:9b:08:3c:06:37:e0:19:bd:93:55:30:1a:
af:61:d1:0f:f5:26:10:64:7f:2b:00:e7:97:ff:2c:62:af:1f:
bd:fd:2a:8c:52:79:6b:5a:77:12:88:65:d1:64:49:7a:c9:53:
5d:70:4a:46
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
Q0MxNjExMC8GA1UEBRMoQzY4QUFFMDZDOEEwNjhGMjIyMTIzMTMzMkRDRDRERjFB
RjJGMDc5NDAeFw0yNTEyMjIyMDA1NTJaFw0yNTEyMjkyMDA1NTJaMBgxFjAUBgNV
BAMMDTY5NDlhNGEwLWIwZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3+4aB+NRgBmOuJKIViv7puIA7EWqnHGmTkouv8T+cgqYNYmmi6bgdpV1o5+y9
iSQeYhLVEkjkR0ouD0ivot7g90FLvApIGRGxo3GN37G1zsKFpINycu7fcXEMxQB+
qSTGLpIoUZIbv+trFIXUwzwk89lCHq3BvLy5GKnhC6Tffr5VP2szEmMeFxjmRAYc
v9+8qGkDS8I5HLhMgC9wDsCcKvu42Bt8sz6YDZeQl6ExN6RcTqFsmYSJXWXIEFAO
UUbP4LrKrVzmiUEPwi40XpbOqJYmxqtqxuN1JGc4aXrc//f52W00mBKmiH47iz/b
s8/GPSBBrOs/swHrS95PCtUhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbMdNXYGD
MUYOFrL5H+SYMF4/pQ8wHwYDVR0jBBgwFoAUxoquBsigaPIiEjEzLc1N8a8vB5Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDQzE2LzI0RDM5RDYyRjA4
MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJaUVqRXpMYzFOOGE4dkI1
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveG9xdUJzaWdhUElpRWpFekxjMU44YTh2QjVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD
QzE2LzI0RDM5RDYyRjA4MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJ
aUVqRXpMYzFOOGE4dkI1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAmEL8ZMCHpJwNc2lAErH6zXqH9nAC5KkInvcvelKo3/wS8d6wTynHgY
JeDJaG7Sx6Y5tLEcjcz3f9cbk2YTSimuXSvj/t2fVAOcJWBXGeeecQ/TqpJ2uaqx
wduHiYtjohIDMJUhbyskh6iTc/i0X09rJsIa+YqJtld6GUYcu54YcoUX19x5rOfn
thHDCf0w4XEiDdYJxDteTxLjM8cYj9BUU31s6FQX5EgXKN61Ko+xTV++UV/Ve8iT
7hY6tY02gfJHABCOaHE0uKB0LJsIPAY34Bm9k1UwGq9h0Q/1JhBkfysA55f/LGKv
H739KoxSeWtadxKIZdFkSXrJU11wSkY=
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:47 2025 by rpki-client