This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: GU/JePXYp++nmjFlCbyX5pCTMGa9FcxKsYla5t8C9EI= Subject key identifier: E2:B0:BB:82:46:D0:DE:1E:9C:4F:E4:A7:34:D0:EE:93:CC:2F:BB:22 Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 0820 Signing time: Mon 08 Dec 2025 19:58:44 +0000 Manifest this update: Mon 08 Dec 2025 19:58:43 +0000 Manifest next update: Mon 15 Dec 2025 19:58:43 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: SsrkEm83lnn9hOMD5bx7DV+rgY50e/uwK5OkCPgZR5Q=) 2: FC4EA8D8918511EDB3CBB378C4F9AE02.roa (hash: dilEGv2iZBQzFzwhwvVJSxZZ4wuXFi05D/OlPs0ZrtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 19:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Dec 8 19:58:43 2025 GMT Not After : Dec 15 19:58:43 2025 GMT Subject: CN=69372df4-865c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:b6:c5:99:96:dd:6c:83:41:e2:be:19:e5: 42:da:83:79:4d:3b:87:28:84:d8:8f:cb:bf:9d:81: 2c:9f:b2:e4:18:1b:4d:10:b1:13:2a:14:d2:0c:8b: 09:ef:9b:4b:93:32:af:a3:aa:5d:ff:e1:3d:17:50: d6:f1:e2:7e:3d:ed:8e:94:06:06:55:72:cc:c2:43: 2b:7a:d6:93:57:29:85:90:7b:ad:f0:d8:2c:7a:5b: cf:03:c4:c1:ff:eb:91:dc:48:b3:5d:46:a6:04:23: 75:68:25:0f:1c:21:50:92:53:50:69:5b:ff:d2:05: f1:87:df:dc:7f:9b:b8:ea:e5:ae:cd:d2:cb:b2:19: b4:e9:7b:04:21:bb:9d:48:ac:5f:7f:e7:60:23:38: a2:99:a4:9e:39:b7:46:04:b3:d0:c0:e7:28:05:7c: c0:6f:68:52:eb:23:c0:5f:7b:53:bc:e5:fe:c6:b9: 2b:94:8e:d7:0f:23:8b:7f:0a:99:12:c4:98:f4:54: b9:5e:37:c6:c5:3f:7d:eb:60:a2:10:23:04:ee:b0: eb:b7:f8:3a:a3:10:36:c7:b5:af:9c:df:e3:2a:41: 9d:ba:a2:37:05:7e:b8:4c:44:cf:74:c9:e3:40:5a: da:dd:e2:41:de:8f:af:34:04:91:aa:51:2e:d5:fa: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B0:BB:82:46:D0:DE:1E:9C:4F:E4:A7:34:D0:EE:93:CC:2F:BB:22 X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d7:00:07:2a:b8:e7:9c:37:29:a8:d6:57:86:75:10:d8:95: ea:18:ec:81:84:55:57:49:20:5c:f1:ec:14:61:a1:10:45:7e: d7:d0:2a:7d:c4:05:0f:a0:60:54:88:1a:f5:8c:a1:44:40:55: 36:d0:fc:57:a3:17:12:fa:b0:1b:da:0a:7a:47:87:03:f2:7b: 28:ae:70:17:b1:3c:d9:d9:fb:16:f5:df:8e:af:8d:69:20:d4: 4f:5c:4f:88:4c:83:19:cc:c9:18:c7:60:8f:6f:b4:22:ec:00: 8d:1f:9b:5a:32:47:43:88:ca:e1:5a:8d:39:ac:54:fe:56:11: ab:07:cd:ec:18:24:5f:2a:56:d8:ce:3e:de:15:cd:f3:d6:23: 04:11:b2:be:40:d3:79:34:8b:04:cf:31:b4:f2:1e:97:76:b6: e4:eb:7a:c9:71:70:7a:b2:d5:ad:c1:2b:f0:13:8f:09:ab:cb: 30:26:46:1c:e3:84:80:fc:98:0e:16:ff:ca:c8:5f:46:5c:95: 7f:9a:7e:32:7a:1e:5f:2d:6c:aa:18:85:a9:79:d9:5f:6e:7f: 97:3f:49:ca:50:71:ed:b4:85:79:53:0a:b4:36:e1:69:1b:af: 9c:10:55:46:27:aa:e4:1a:7b:0d:a0:a7:b9:5f:06:ab:ec:74: 89:bb:8a:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjUxMjA4MTk1ODQzWhcNMjUxMjE1MTk1ODQzWjAYMRYwFAYD VQQDEw02OTM3MmRmNC04NjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXu2xZmW3WyDQeK+GeVC2oN5TTuHKITYj8u/nYEsn7LkGBtNELETKhTSDIsJ 75tLkzKvo6pd/+E9F1DW8eJ+Pe2OlAYGVXLMwkMretaTVymFkHut8NgselvPA8TB /+uR3EizXUamBCN1aCUPHCFQklNQaVv/0gXxh9/cf5u46uWuzdLLshm06XsEIbud SKxff+dgIziimaSeObdGBLPQwOcoBXzAb2hS6yPAX3tTvOX+xrkrlI7XDyOLfwqZ EsSY9FS5XjfGxT9962CiECME7rDrt/g6oxA2x7WvnN/jKkGduqI3BX64TETPdMnj QFra3eJB3o+vNASRqlEu1frC9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKwu4JG 0N4enE/kpzTQ7pPML7siMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa1wAHKrjnnDcpqNZXhnUQ2JXqGOyBhFVXSSBc8ewUYaEQRX7X0Cp9 xAUPoGBUiBr1jKFEQFU20PxXoxcS+rAb2gp6R4cD8nsornAXsTzZ2fsW9d+Or41p INRPXE+ITIMZzMkYx2CPb7Qi7ACNH5taMkdDiMrhWo05rFT+VhGrB83sGCRfKlbY zj7eFc3z1iMEEbK+QNN5NIsEzzG08h6Xdrbk63rJcXB6stWtwSvwE48Jq8swJkYc 44SA/JgOFv/KyF9GXJV/mn4yeh5fLWyqGIWpedlfbn+XP0nKUHHttIV5Uwq0NuFp G6+cEFVGJ6rkGnsNoKe5Xwar7HSJu4qc -----END CERTIFICATE-----Generated at Wed Dec 10 20:08:01 2025 by rpki-client