This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json) Hash identifier: m9XtmoZ28T3nyXNL2BHnjRbXN4lGUD6K8q7DcMXXHvg= Subject key identifier: 17:95:9C:FC:84:D9:CB:A9:C3:66:5C:66:F0:68:AD:54:9B:B5:8F:AD Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft Manifest number: 077E Signing time: Sun 14 Dec 2025 20:59:10 +0000 Manifest this update: Sun 14 Dec 2025 20:59:10 +0000 Manifest next update: Sun 21 Dec 2025 20:59:10 +0000 Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: CBSFRG/j5gckStlfWgCVZAehejXOGYFSHka2Iq6/bQc=) 2: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: ZsYDlTfdZ4GWQgL9mV+7VPUB+1RhWLSObaxg0y98Kxs=) 3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: SFXCFjWV3nIjHDr4Y0nX1h+ByORJe0z+8s0nBYc0bds=) 4: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: qHbtyOGNfvy85AlmzO8CEnT5fTz9AwvvFi0y6XbFwG0=) 5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: aIhdOoGq/5IV6Mhns4F3omRFw08MxMY0t1LOWZhYXz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Validity Not Before: Dec 14 20:59:10 2025 GMT Not After : Dec 21 20:59:10 2025 GMT Subject: CN=693f251e-e58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:97:1b:f3:47:07:c4:c1:54:c6:7c:b6:84: 90:63:50:ae:6e:25:a9:77:65:bc:f1:bd:4e:4b:fe: b8:ef:9d:88:50:2f:60:a0:bf:9e:5f:3c:3c:58:95: b7:f2:f5:cc:3b:8a:a8:6b:99:89:65:2b:32:48:b7: 2c:ca:9f:46:a8:84:e9:02:d5:b0:04:b1:f5:8e:c6: 38:85:e9:34:ac:3c:6a:1d:b4:3e:c6:fd:83:be:65: e6:73:89:79:40:8c:70:bb:cf:14:3f:f4:eb:7e:82: 9c:8e:33:bf:40:01:f1:b4:39:cc:8b:3b:cc:85:32: 97:de:22:84:cd:88:25:a8:e1:5c:ea:e0:5a:d7:71: 2a:b4:f5:d9:3c:f9:27:b2:f5:71:2a:d0:4a:2a:c6: b9:7f:10:f9:e5:1a:9d:d8:56:11:87:cf:03:c9:6e: d9:dd:39:d7:7e:b8:f3:83:e2:f7:16:5c:a9:76:ef: 26:d5:e7:24:6e:07:ba:83:3c:4d:0a:f7:b8:9e:c2: d4:f6:46:e7:93:aa:4f:0b:d8:f8:4d:bb:42:18:96: ec:c8:c8:e6:a9:93:87:7e:1b:29:fb:45:37:f7:38: 25:c7:b0:ea:28:9a:eb:1f:99:47:0b:f7:e8:98:e8: 88:1f:47:27:95:dc:4f:c1:0a:c4:7c:b5:30:72:e3: 8c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:95:9C:FC:84:D9:CB:A9:C3:66:5C:66:F0:68:AD:54:9B:B5:8F:AD X509v3 Authority Key Identifier: keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6a:89:20:bc:c2:ba:3e:23:0a:b0:5d:5d:88:ca:8e:d7:21: c6:89:2c:3a:bd:0c:dc:3d:d1:4f:27:74:e7:7b:fa:26:a9:ce: 99:b5:a8:ba:28:67:7c:44:6c:de:be:c3:20:e2:4f:3a:59:ce: 8d:df:fd:81:81:8e:54:fd:b0:b2:b6:fa:58:8f:d6:ef:32:27: 89:15:bb:66:ae:77:0b:c0:15:33:9c:13:27:91:b5:55:57:e3: 1c:55:5c:cf:d8:a4:66:64:fd:60:c1:83:78:67:44:8a:9d:be: 09:6d:48:65:75:2f:eb:51:9e:73:78:fe:96:77:15:fe:f4:d5: 66:8d:84:21:12:6a:ba:38:c6:92:07:81:f1:93:4e:6d:0d:d7: 54:a2:e7:a6:fc:83:be:c1:e6:ca:a1:e8:d8:06:2c:1c:af:8e: 4e:8e:ae:7e:a5:5c:0b:d4:37:bc:c8:62:7e:b4:2f:92:f2:d9: 02:33:a8:e4:a2:78:a8:59:00:22:57:f3:32:22:18:98:01:79: 4e:fb:3c:1c:74:59:2f:90:0b:29:fb:a8:50:04:8c:3e:02:ce: 6c:8e:1f:02:48:d1:43:0e:df:12:2e:3e:b0:34:75:a0:ea:f1: 56:86:88:b4:a9:1c:a7:52:6d:29:59:2e:94:81:08:39:d3:c3: 3e:3c:93:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy NEVDMjRFOTIwHhcNMjUxMjE0MjA1OTEwWhcNMjUxMjIxMjA1OTEwWjAYMRYwFAYD VQQDDA02OTNmMjUxZS1lNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQOXG/NHB8TBVMZ8toSQY1CubiWpd2W88b1OS/64752IUC9goL+eXzw8WJW3 8vXMO4qoa5mJZSsySLcsyp9GqITpAtWwBLH1jsY4hek0rDxqHbQ+xv2DvmXmc4l5 QIxwu88UP/TrfoKcjjO/QAHxtDnMizvMhTKX3iKEzYglqOFc6uBa13EqtPXZPPkn svVxKtBKKsa5fxD55Rqd2FYRh88DyW7Z3TnXfrjzg+L3Flypdu8m1eckbge6gzxN Cve4nsLU9kbnk6pPC9j4TbtCGJbsyMjmqZOHfhsp+0U39zglx7DqKJrrH5lHC/fo mOiIH0cnldxPwQrEfLUwcuOMgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeVnPyE 2cupw2ZcZvBorVSbtY+tMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m WVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUaokgvMK6PiMKsF1diMqO1yHGiSw6vQzcPdFPJ3Tne/omqc6Ztai6 KGd8RGzevsMg4k86Wc6N3/2BgY5U/bCytvpYj9bvMieJFbtmrncLwBUznBMnkbVV V+McVVzP2KRmZP1gwYN4Z0SKnb4JbUhldS/rUZ5zeP6WdxX+9NVmjYQhEmq6OMaS B4Hxk05tDddUouem/IO+webKoejYBiwcr45Ojq5+pVwL1De8yGJ+tC+S8tkCM6jk onioWQAiV/MyIhiYAXlO+zwcdFkvkAsp+6hQBIw+As5sjh8CSNFDDt8SLj6wNHWg 6vFWhoi0qRynUm0pWS6UgQg508M+PJO1 -----END CERTIFICATE-----Generated at Tue Dec 16 16:11:58 2025 by rpki-client