This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json) Hash identifier: eMADG+uXjvY2RIUdAxFGXQFOLSu+8Z8CzkJHC7NRoJA= Subject key identifier: 43:DF:2A:31:30:83:E7:F7:CC:A3:2E:F8:71:27:AF:05:71:9A:1B:67 Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft Manifest number: 02E7 Signing time: Tue 23 Dec 2025 00:17:03 +0000 Manifest this update: Tue 23 Dec 2025 00:17:03 +0000 Manifest next update: Tue 30 Dec 2025 00:17:03 +0000 Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: zIAD9DtWRWmFdsXfE8ijlc9xHL/Iv2z3VGnaeSxbGZQ=) 2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: llGHaeZeNwyGtBSSkhkdbPBkxPf6MV+xeeQondsSA8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178ACB, serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Validity Not Before: Dec 23 00:17:03 2025 GMT Not After : Dec 30 00:17:03 2025 GMT Subject: CN=6949df7f-6ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:48:0a:95:7a:20:53:14:3c:9f:c4:11:cd: b6:19:9f:c7:b1:78:bd:1f:16:e5:17:7a:6d:20:93: da:d0:94:3e:27:dc:08:52:8a:f2:b2:c0:2f:31:d1: 74:5f:53:fb:54:68:5a:68:42:2c:5e:26:a1:73:2d: d7:c4:84:1c:08:44:a5:cf:a9:1d:6a:c4:e6:42:60: 9c:1a:66:4d:18:8a:fe:4d:6d:cf:21:71:a3:6b:9f: eb:b1:9b:95:af:c1:bc:50:6b:11:94:38:50:e8:d9: 02:92:ba:74:79:a0:71:9a:cd:1b:1c:c8:0b:71:92: 2a:45:89:0e:92:8d:28:e2:e7:f7:77:1a:4d:89:75: 36:a2:27:43:61:06:05:2f:ca:b4:da:bb:ec:1c:fe: 5b:fc:03:2e:d4:26:0b:6a:e3:51:37:ea:d2:c1:fe: 61:97:69:fd:aa:75:2d:ca:50:b5:6a:e1:7c:bc:23: d7:ab:05:85:4c:7e:fa:fe:3e:dc:5f:72:ef:34:1d: a5:7e:57:23:06:68:e2:b3:a6:16:9a:e8:6a:2a:97: dc:cb:78:82:a3:46:e4:4b:97:d7:17:45:2f:52:69: 8e:f6:38:7d:17:81:5a:2c:93:60:c7:2c:5d:16:33: f1:57:3e:b2:0d:e6:f7:fc:a2:b4:ff:6c:32:31:0e: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DF:2A:31:30:83:E7:F7:CC:A3:2E:F8:71:27:AF:05:71:9A:1B:67 X509v3 Authority Key Identifier: keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:17:0e:6d:af:ac:d6:63:f3:cd:50:f8:0b:7f:f7:fe:fb:d5: ed:d2:c1:e5:18:85:e4:7d:22:ad:48:ac:9d:80:25:f1:c4:d5: af:74:08:5c:24:d5:55:97:1b:24:b9:d8:c3:06:12:e3:cb:56: f6:91:53:cc:41:26:d8:33:b2:9e:2a:0d:a4:13:02:91:35:96: a1:1d:f2:6a:90:a9:89:66:05:92:20:30:12:46:74:b5:92:0c: af:7b:ee:3f:46:ab:c3:63:35:b9:7c:92:8e:82:c1:ff:4f:14: ae:77:a7:0c:7b:e2:2b:9b:1d:88:36:37:91:95:08:21:3d:5e: ce:4a:40:fe:94:c4:8e:54:95:0f:4f:aa:42:3c:d5:66:4b:92: f2:05:4e:bd:0a:23:ad:36:a7:90:e8:7d:5e:b5:47:cb:de:d2: 53:2f:8f:7d:ce:ad:4c:fe:f7:60:fb:a6:b4:f6:0b:33:06:f0: d8:bb:5f:a8:bd:0c:a0:2c:0c:d7:6f:22:33:e8:91:8f:61:12: 78:c6:60:8b:24:11:c5:53:b4:67:ff:47:7c:84:20:b7:70:36: 1a:d1:ed:1f:80:f6:9b:7c:1b:5e:fa:7a:47:0d:18:c6:b8:35: 7b:b3:38:aa:09:b8:58:68:d6:b5:b5:f2:ae:63:7f:3a:75:39: 9c:d0:e5:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBQ0IxMTAvBgNVBAUTKDVDMjdENTNEMEYyMzgxM0M4RUExNjM4QUYwNkM4RDM0 RDhGMkRGRjEwHhcNMjUxMjIzMDAxNzAzWhcNMjUxMjMwMDAxNzAzWjAYMRYwFAYD VQQDDA02OTQ5ZGY3Zi02YWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyZICpV6IFMUPJ/EEc22GZ/HsXi9HxblF3ptIJPa0JQ+J9wIUoryssAvMdF0 X1P7VGhaaEIsXiahcy3XxIQcCESlz6kdasTmQmCcGmZNGIr+TW3PIXGja5/rsZuV r8G8UGsRlDhQ6NkCkrp0eaBxms0bHMgLcZIqRYkOko0o4uf3dxpNiXU2oidDYQYF L8q02rvsHP5b/AMu1CYLauNRN+rSwf5hl2n9qnUtylC1auF8vCPXqwWFTH76/j7c X3LvNB2lflcjBmjis6YWmuhqKpfcy3iCo0bkS5fXF0UvUmmO9jh9F4FaLJNgxyxd FjPxVz6yDeb3/KK0/2wyMQ71rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPfKjEw g+f3zKMu+HEnrwVxmhtnMB8GA1UdIwQYMBaAFFwn1T0PI4E8jqFjivBsjTTY8t/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFDQi81MjNBOEY1NjBC QTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdUeU9vV09LOEd5Tk5Oankz X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDZlZQUThqZ1R5T29XT0s4R3lOTk5qeTNfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFDQi81MjNBOEY1NjBCQTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdU eU9vV09LOEd5Tk5OankzX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6Fw5tr6zWY/PNUPgLf/f++9Xt0sHlGIXkfSKtSKydgCXxxNWvdAhc JNVVlxskudjDBhLjy1b2kVPMQSbYM7KeKg2kEwKRNZahHfJqkKmJZgWSIDASRnS1 kgyve+4/RqvDYzW5fJKOgsH/TxSud6cMe+Irmx2INjeRlQghPV7OSkD+lMSOVJUP T6pCPNVmS5LyBU69CiOtNqeQ6H1etUfL3tJTL499zq1M/vdg+6a09gszBvDYu1+o vQygLAzXbyIz6JGPYRJ4xmCLJBHFU7Rn/0d8hCC3cDYa0e0fgPabfBte+npHDRjG uDV7sziqCbhYaNa1tfKuY386dTmc0OWT -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:36 2025 by rpki-client