This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: uYJBq9L8mFQCNqD22geuzhBpEj4g5MMOpTqiCgmjJOI= Subject key identifier: EF:D8:A3:BF:E0:E2:00:E7:A0:DB:3D:24:DC:59:D6:43:A6:00:84:D2 Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 02DE Signing time: Tue 23 Dec 2025 00:20:31 +0000 Manifest this update: Tue 23 Dec 2025 00:20:31 +0000 Manifest next update: Tue 30 Dec 2025 00:20:31 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: FwNY7ooAk4smf5lkG/Xo9MJy4Ai6d9O+cHxKsFJx68s=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: ipAHoMEeSi68f+rJDCwmxc6LIwQCY1InwnKCCeoYyk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: Dec 23 00:20:31 2025 GMT Not After : Dec 30 00:20:31 2025 GMT Subject: CN=6949e04f-cdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:f8:f4:f4:25:e2:90:81:95:5e:79:36:73: ae:fb:42:3b:9d:7f:9c:cc:b4:ca:be:ef:de:bb:c4: 8c:06:0e:24:75:3b:60:76:84:75:a7:ec:87:1b:4d: bc:2a:72:7a:db:b1:9d:1e:8e:d9:73:c7:d4:70:60: ce:63:c5:99:fa:f3:12:cb:05:ea:ec:a1:c2:b0:e4: 97:96:9f:f7:b3:8d:6f:d1:a4:67:69:0e:65:57:07: ba:95:8d:48:c0:fa:af:f1:01:38:0d:f8:21:ed:d9: b7:1a:e4:0c:f6:46:e7:25:48:29:c2:4c:62:37:72: 54:23:e9:a8:e4:eb:be:67:a7:0c:ff:b6:2c:f5:0f: 16:3e:6f:a4:0b:5b:e4:39:aa:e6:8d:04:dd:1b:7d: 77:f5:35:82:74:86:26:34:4b:9c:e1:e2:01:d9:bf: 5a:cd:09:00:ef:53:a5:8c:87:1e:84:71:9f:66:21: 5c:93:82:b1:61:85:89:0a:99:de:5d:29:f1:ba:1c: c4:d3:b1:3c:cd:e6:95:16:f0:35:c4:a7:12:45:e2: 21:f5:be:5d:b2:40:b6:be:f7:14:89:4e:8a:ee:f4: ba:07:fa:0a:ff:1a:e6:69:4f:c2:8c:7e:e0:b2:d1: 42:12:40:7f:8f:70:38:cd:c7:a2:ee:38:a1:df:a2: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D8:A3:BF:E0:E2:00:E7:A0:DB:3D:24:DC:59:D6:43:A6:00:84:D2 X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:98:d7:29:cd:b0:3b:a2:1b:81:81:79:05:48:d2:82:0b:94: df:48:c3:21:1f:45:3d:51:23:17:34:b3:cd:f8:22:b6:aa:5d: 90:06:c9:91:72:fd:99:03:72:e2:ab:9f:9d:b1:66:52:fa:58: 63:5c:b3:4a:cb:f9:ee:8c:f1:7d:17:ce:e9:88:18:a5:4b:fc: 3a:cd:6f:54:ec:76:a1:cf:8e:0c:82:c1:af:34:f8:c3:fe:89: 3a:28:f6:38:07:27:97:c1:82:76:d7:49:10:fb:be:26:c2:9a: be:51:6d:f3:f7:77:eb:48:1b:cb:3d:2b:dc:49:d9:5c:39:17: 0c:b7:f9:e4:bf:ed:6f:b0:a0:ee:b8:6a:cb:8e:69:a5:d3:b7: 7b:47:26:8d:57:e2:b0:9b:c1:b2:be:80:4e:6d:75:a2:39:f2: 71:d7:6d:29:8c:0f:38:fa:2c:c7:24:44:28:32:13:e5:6e:dc: 70:67:44:7f:37:d4:b5:e5:eb:9d:56:b1:02:3a:d9:39:e5:ab: 71:95:d3:f5:ef:b4:a0:b6:cc:e7:fb:1d:aa:db:1a:4a:4b:a3: 9d:96:b8:b5:a5:d8:0b:4a:37:6d:90:34:50:5e:5f:53:64:b2: d4:51:6e:db:8e:8c:a2:e7:dc:82:0d:88:2c:ef:08:93:62:c9: 90:2c:f7:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjUxMjIzMDAyMDMxWhcNMjUxMjMwMDAyMDMxWjAYMRYwFAYD VQQDDA02OTQ5ZTA0Zi1jZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm349PQl4pCBlV55NnOu+0I7nX+czLTKvu/eu8SMBg4kdTtgdoR1p+yHG028 KnJ627GdHo7Zc8fUcGDOY8WZ+vMSywXq7KHCsOSXlp/3s41v0aRnaQ5lVwe6lY1I wPqv8QE4Dfgh7dm3GuQM9kbnJUgpwkxiN3JUI+mo5Ou+Z6cM/7Ys9Q8WPm+kC1vk OarmjQTdG3139TWCdIYmNEuc4eIB2b9azQkA71OljIcehHGfZiFck4KxYYWJCpne XSnxuhzE07E8zeaVFvA1xKcSReIh9b5dskC2vvcUiU6K7vS6B/oK/xrmaU/CjH7g stFCEkB/j3A4zcei7jih36I+6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/Yo7/g 4gDnoNs9JNxZ1kOmAITSMB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvmNcpzbA7ohuBgXkFSNKCC5TfSMMhH0U9USMXNLPN+CK2ql2QBsmR cv2ZA3Liq5+dsWZS+lhjXLNKy/nujPF9F87piBilS/w6zW9U7Hahz44MgsGvNPjD /ok6KPY4ByeXwYJ210kQ+74mwpq+UW3z93frSBvLPSvcSdlcORcMt/nkv+1vsKDu uGrLjmml07d7RyaNV+Kwm8GyvoBObXWiOfJx120pjA84+izHJEQoMhPlbtxwZ0R/ N9S15eudVrECOtk55atxldP177Sgtszn+x2q2xpKS6Odlri1pdgLSjdtkDRQXl9T ZLLUUW7bjoyi59yCDYgs7wiTYsmQLPc9 -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:38 2025 by rpki-client