This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft File: XLz7z59AY6eYAiqPHiafvf6jb_g.mft (raw, json) Hash identifier: hvmFX+U4OPdndRXfedQSXUqtU7QeuHg7qXt6R/30WYs= Subject key identifier: A8:33:FD:E5:79:0A:41:E9:E3:98:A0:8C:83:8F:CF:1D:7F:CB:E9:DD Authority key identifier: 5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 Certificate issuer: /CN=A917F4F2/serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Certificate serial: 0355 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft Manifest number: 0351 Signing time: Mon 22 Dec 2025 23:58:35 +0000 Manifest this update: Mon 22 Dec 2025 23:58:35 +0000 Manifest next update: Mon 29 Dec 2025 23:58:35 +0000 Files and hashes: 1: XLz7z59AY6eYAiqPHiafvf6jb_g.crl (hash: xTT9agxcIoYOCdWHP/NVDBRo+PiEstGRKKRuGwbe90w=) 2: CA455C5CE0B311ECBC9BEA63C4F9AE02.roa (hash: +ZSBEXRcgClmiO74ln8lB46inGp0vsN6jKOzaxEdX6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4F2, serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Validity Not Before: Dec 22 23:58:35 2025 GMT Not After : Dec 29 23:58:35 2025 GMT Subject: CN=6949db2b-496f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:eb:b8:c3:57:27:b7:45:c8:bf:79:35:38: ae:06:eb:12:e3:5c:2e:99:41:95:1a:8c:2a:25:93: db:00:6e:86:6e:cc:d3:a6:de:ca:15:43:1c:00:54: 5a:a2:96:49:a6:b6:3b:b6:56:f5:a1:12:45:91:99: ea:aa:03:ec:6b:e2:e0:d9:14:e7:ea:d9:d9:27:c2: 50:6c:1b:f3:cc:b1:08:fd:4a:cf:5f:1d:c1:e5:1c: 1f:48:7e:2c:00:3a:7d:57:c8:a4:71:e8:2b:5c:09: 2f:af:d1:6e:81:34:0e:27:29:84:44:30:f7:bb:61: 9a:2c:d6:90:6d:0d:1c:19:d0:65:d3:85:e1:fe:41: 26:0b:9e:cd:3c:2a:c8:56:67:00:6c:99:a3:33:18: 8f:fd:40:48:b6:04:c4:65:19:e8:4c:33:e6:83:6b: bb:9c:5a:ce:2d:6c:1e:2a:3d:46:bf:35:03:9d:52: 18:52:f8:4f:c9:64:71:b4:65:d7:dd:c9:51:2f:64: f0:22:da:3c:22:63:95:6d:69:27:b2:67:9d:87:5f: e1:aa:f0:00:c1:a5:12:75:b7:db:ad:4e:5f:8f:a2: f2:72:6e:30:ad:60:62:e4:3f:e8:99:a0:89:13:ab: 65:c9:7e:32:eb:e9:c9:fa:1d:9b:c8:c5:63:f5:9b: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:33:FD:E5:79:0A:41:E9:E3:98:A0:8C:83:8F:CF:1D:7F:CB:E9:DD X509v3 Authority Key Identifier: keyid:5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d5:a2:b3:eb:2d:8a:68:95:2f:f6:2e:70:fc:a3:51:f0:2f: 35:c7:fb:12:f2:cc:fb:21:14:71:69:23:fb:5c:04:c9:59:83: 02:9f:7e:22:c5:44:59:31:91:16:67:3a:d1:a1:6c:95:fd:ac: e8:12:d7:87:90:7e:d0:b6:69:ea:04:cd:87:d1:46:78:75:07: 7f:05:8f:a3:8e:f1:29:40:24:29:ae:90:5f:ad:6e:6e:eb:93: bb:cc:34:6a:18:46:0d:b5:23:31:e5:2f:e8:ef:65:48:bb:e7: 13:69:94:e1:31:1a:ab:8c:e7:2b:21:60:4a:17:6f:00:19:ee: 63:c4:81:f9:a5:69:db:31:c5:5b:51:fd:14:ef:2d:c6:28:d2: 13:e4:00:88:e7:a8:8e:1f:08:a6:71:a3:e9:b6:52:86:b1:f8: da:d8:b2:dc:e2:ac:12:f2:55:5b:d0:b3:d8:de:44:17:2b:97: ba:6c:62:5e:26:45:8a:74:2c:77:dd:24:84:86:75:22:c0:1b: 93:98:32:01:31:29:02:27:a5:1e:67:f0:cc:1e:d6:65:ea:60: 00:1c:d9:f6:28:e1:a7:40:8d:73:fc:67:b6:9e:f3:95:cf:90: 97:ff:8b:0c:74:e6:05:ad:3a:5c:7e:db:aa:1e:4d:f8:74:1c: e3:e0:f9:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RjIxMTAvBgNVBAUTKDVDQkNGQkNGOUY0MDYzQTc5ODAyMkE4RjFFMjY5RkJE RkVBMzZGRjgwHhcNMjUxMjIyMjM1ODM1WhcNMjUxMjI5MjM1ODM1WjAYMRYwFAYD VQQDDA02OTQ5ZGIyYi00OTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX3ruMNXJ7dFyL95NTiuBusS41wumUGVGowqJZPbAG6GbszTpt7KFUMcAFRa opZJprY7tlb1oRJFkZnqqgPsa+Lg2RTn6tnZJ8JQbBvzzLEI/UrPXx3B5RwfSH4s ADp9V8ikcegrXAkvr9FugTQOJymERDD3u2GaLNaQbQ0cGdBl04Xh/kEmC57NPCrI VmcAbJmjMxiP/UBItgTEZRnoTDPmg2u7nFrOLWweKj1GvzUDnVIYUvhPyWRxtGXX 3clRL2TwIto8ImOVbWknsmedh1/hqvAAwaUSdbfbrU5fj6Lycm4wrWBi5D/omaCJ E6tlyX4y6+nJ+h2byMVj9ZuIxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgz/eV5 CkHp45igjIOPzx1/y+ndMB8GA1UdIwQYMBaAFFy8+8+fQGOnmAIqjx4mn73+o2/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRGMi8zNEQ1NTQzMkUw QUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2ZVlBaXFQSGlhZnZmNmpi X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hMejd6NTlBWTZlWUFpcVBIaWFmdmY2amJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjRGMi8zNEQ1NTQzMkUwQUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2 ZVlBaXFQSGlhZnZmNmpiX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB1aKz6y2KaJUv9i5w/KNR8C81x/sS8sz7IRRxaSP7XATJWYMCn34i xURZMZEWZzrRoWyV/azoEteHkH7QtmnqBM2H0UZ4dQd/BY+jjvEpQCQprpBfrW5u 65O7zDRqGEYNtSMx5S/o72VIu+cTaZThMRqrjOcrIWBKF28AGe5jxIH5pWnbMcVb Uf0U7y3GKNIT5ACI56iOHwimcaPptlKGsfja2LLc4qwS8lVb0LPY3kQXK5e6bGJe JkWKdCx33SSEhnUiwBuTmDIBMSkCJ6UeZ/DMHtZl6mAAHNn2KOGnQI1z/Ge2nvOV z5CX/4sMdOYFrTpcftuqHk34dBzj4Png -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:43 2025 by rpki-client