This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json) Hash identifier: yTl54J3TwApXABZ/9d0CrSeywVJz8RRxX+BheAGBIAo= Subject key identifier: ED:CE:3F:95:D5:40:A4:9A:4F:85:EF:E7:9C:CA:C0:54:8A:2E:81:FC Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft Manifest number: 014C Signing time: Tue 23 Dec 2025 03:19:58 +0000 Manifest this update: Tue 23 Dec 2025 03:19:58 +0000 Manifest next update: Tue 30 Dec 2025 03:19:58 +0000 Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: O2m4gGGBxI0/bzdOJ/6JvF2xTfvSUEpmjWQ65f2DkeQ=) 2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: AhOHyTR8Y1BKmfRUj0AuSJ2KJPys3xbmw5f4K4GCzjI=) 3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: EKYVn1LnE/qYTW245x3NVrE53P336TlJMyIXtYLhWG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Validity Not Before: Dec 23 03:19:58 2025 GMT Not After : Dec 30 03:19:58 2025 GMT Subject: CN=694a0a5e-d440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:cc:2d:2c:73:ff:40:16:a6:7d:ac:7c:0e: 93:2d:b7:0f:5a:44:a8:ac:c3:cb:71:6b:54:ca:34: 68:a0:bb:71:96:e3:0f:53:0c:1d:84:f4:47:b4:bd: 68:0e:33:27:79:0a:8c:f0:39:8c:6b:6a:06:f8:ff: e8:9d:1b:ab:de:3f:30:80:8c:04:e9:75:01:8e:6f: 49:f3:f6:46:05:c3:c1:4a:85:72:7c:17:f7:43:69: 3a:28:87:1a:fd:b0:70:b7:33:06:79:87:36:ef:33: 1f:8f:d3:8c:9b:52:31:ea:1b:a8:5a:19:28:27:84: fe:13:9e:61:2d:cc:79:79:84:d6:ac:dd:6d:83:ca: 5d:0f:b0:a3:6f:fc:2e:96:84:01:14:10:05:57:52: a1:39:bf:5f:01:21:e1:d4:4c:c0:6f:ad:64:3f:57: 84:f7:36:87:0a:54:3a:cb:15:97:5d:dd:db:6f:8d: 5d:4d:3f:65:93:5c:0c:96:ea:8f:a1:90:d0:89:79: 84:f2:6a:de:0c:74:e6:3e:d0:0f:14:57:73:a8:91: 37:02:e6:37:9f:e2:3c:4e:47:bd:dc:44:09:cf:7e: a8:05:3d:8a:6c:5a:f5:4b:85:8a:df:96:d2:88:d5: 7b:e2:7d:97:73:1b:7f:b4:09:1c:b5:1a:ac:d9:18: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:3F:95:D5:40:A4:9A:4F:85:EF:E7:9C:CA:C0:54:8A:2E:81:FC X509v3 Authority Key Identifier: keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1d:66:e6:3d:fd:a4:34:34:02:80:a4:a4:c2:d6:28:b1:ec: e8:87:1d:81:9a:58:f0:53:1c:1a:e9:20:82:d0:cb:cc:80:56: 43:9f:99:c8:18:d4:93:94:34:62:b1:ca:fd:3c:c2:79:67:0b: 85:9f:93:f4:e9:8a:b0:e1:2d:a9:14:d1:a6:ca:9c:9b:ad:17: 51:ad:9b:ee:b1:96:3f:8e:b2:af:50:5d:d0:54:3b:14:db:94: 07:55:78:f9:3f:08:3c:43:ba:e2:f3:0d:28:42:62:b4:99:3c: 45:36:9a:12:ef:31:8e:a0:7c:28:53:cc:8d:4c:3b:bd:c0:59: 62:b2:fd:b4:9b:ca:90:06:8b:8d:4d:cb:a0:a6:d1:04:b2:97: 5a:0d:36:8d:f0:2c:b6:ce:7d:5e:be:ba:6e:ac:69:60:b2:d5: f0:9a:c2:02:f6:5c:fb:aa:d2:36:13:18:49:12:09:e1:58:19: 82:c8:c5:f6:0e:6f:d4:f8:89:a0:0c:4b:37:ae:fc:99:50:eb: 55:e8:78:94:90:7c:98:f0:97:af:c9:29:d0:f7:28:08:1a:29: 7d:19:29:91:81:34:1c:00:f6:95:2a:55:1e:d1:b9:7d:58:66: 9a:3a:fc:43:6f:8c:4f:23:af:3c:38:ee:31:55:06:85:bd:5c: 4c:ae:62:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF RTFEOTM1Q0YwHhcNMjUxMjIzMDMxOTU4WhcNMjUxMjMwMDMxOTU4WjAYMRYwFAYD VQQDDA02OTRhMGE1ZS1kNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5/MLSxz/0AWpn2sfA6TLbcPWkSorMPLcWtUyjRooLtxluMPUwwdhPRHtL1o DjMneQqM8DmMa2oG+P/onRur3j8wgIwE6XUBjm9J8/ZGBcPBSoVyfBf3Q2k6KIca /bBwtzMGeYc27zMfj9OMm1Ix6huoWhkoJ4T+E55hLcx5eYTWrN1tg8pdD7Cjb/wu loQBFBAFV1KhOb9fASHh1EzAb61kP1eE9zaHClQ6yxWXXd3bb41dTT9lk1wMluqP oZDQiXmE8mreDHTmPtAPFFdzqJE3AuY3n+I8Tke93EQJz36oBT2KbFr1S4WK35bS iNV74n2Xcxt/tAkctRqs2RhkrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3OP5XV QKSaT4Xv55zKwFSKLoH8MB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4 MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0IyOS82MTdFOTQ0OEU4MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6 ZGZoRmFJWDJvUWZ1SFpOYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqHWbmPf2kNDQCgKSkwtYosezohx2BmljwUxwa6SCC0MvMgFZDn5nI GNSTlDRiscr9PMJ5ZwuFn5P06Yqw4S2pFNGmypybrRdRrZvusZY/jrKvUF3QVDsU 25QHVXj5Pwg8Q7ri8w0oQmK0mTxFNpoS7zGOoHwoU8yNTDu9wFlisv20m8qQBouN TcugptEEspdaDTaN8Cy2zn1evrpurGlgstXwmsIC9lz7qtI2ExhJEgnhWBmCyMX2 Dm/U+ImgDEs3rvyZUOtV6HiUkHyY8JevySnQ9ygIGil9GSmRgTQcAPaVKlUe0bl9 WGaaOvxDb4xPI688OO4xVQaFvVxMrmJ6 -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:05 2025 by rpki-client