This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json) Hash identifier: qwThvOCprDLfYaqgG4LpHpI/HPE/ZdNUPUPuSBv0MAg= Subject key identifier: A3:DD:C4:35:82:DD:C5:70:29:1C:B7:A7:8F:57:8A:1A:51:87:59:AB Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft Manifest number: 0477 Signing time: Thu 18 Dec 2025 23:27:38 +0000 Manifest this update: Thu 18 Dec 2025 23:27:38 +0000 Manifest next update: Thu 25 Dec 2025 23:27:38 +0000 Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: Z9tC2U7yqwWREWIwFhiM1aIOHaxGfw4U/w7KT/jbju0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918767B, serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Validity Not Before: Dec 18 23:27:38 2025 GMT Not After : Dec 25 23:27:38 2025 GMT Subject: CN=69448dea-7432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2d:0f:01:3e:9c:51:7d:0e:87:36:be:ec:94: ba:b9:49:63:9b:1f:46:f1:0c:7c:01:ce:2d:b0:0b: 60:a2:bf:15:33:23:62:86:5d:36:44:df:be:ea:17: 43:97:a2:6e:2a:cb:eb:f1:06:88:f4:1f:ff:86:c6: 0c:66:d3:04:91:61:db:92:1a:e7:6b:13:b4:00:da: 1d:05:b5:50:10:f5:71:83:85:6f:8a:19:b5:ba:58: 58:e7:24:3a:23:de:b5:b4:5a:06:ca:96:f4:d4:32: 20:92:18:ab:96:7b:37:25:e1:0a:89:55:25:dc:c4: 1f:7e:52:2c:c8:d5:9d:4d:f3:e0:8f:70:a4:27:37: d1:3a:3c:32:90:16:f5:ae:77:ad:f8:4f:ff:51:c8: e0:dc:9b:1f:f4:f7:15:eb:6a:c0:37:f4:24:ff:ee: 8a:00:f8:5b:12:56:7f:5a:52:37:e7:d0:0b:94:5d: 37:48:ba:d3:af:de:39:90:1a:27:f3:99:65:d3:a3: a3:23:4a:ba:71:2a:7c:38:84:9c:99:08:e8:ef:82: f0:6b:ca:7d:85:ce:f0:50:ec:36:f4:46:9a:be:de: 07:8f:db:f0:ee:1a:8e:04:65:47:23:bd:5f:19:08: e1:1b:27:bb:fa:46:22:97:56:59:c8:70:9d:83:b2: ce:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DD:C4:35:82:DD:C5:70:29:1C:B7:A7:8F:57:8A:1A:51:87:59:AB X509v3 Authority Key Identifier: keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:10:58:2e:4f:fe:de:fe:af:27:81:02:29:d4:e8:a6:97:fa: 1f:19:50:a8:27:b6:5c:b3:c4:a3:6a:f5:a2:32:5d:81:36:a4: 3b:49:fa:20:10:2c:25:29:b1:c7:1d:9e:e7:f2:67:ed:9c:f8: 94:f7:af:5b:32:da:bb:ba:71:17:61:6e:8c:74:49:9c:c2:b7: 51:e3:82:ef:50:7b:be:30:b9:83:e7:9c:5f:83:89:ee:45:ce: a1:0c:64:bc:92:09:a6:14:2d:29:f4:9f:c4:73:10:1f:cb:16: ab:6e:b6:99:a3:59:c3:61:1e:78:5c:6a:6a:73:62:0c:a4:3a: 8b:34:f8:9f:c8:58:ff:f8:c2:69:37:06:dd:68:97:56:f6:0f: e7:07:34:28:71:2e:0e:b1:44:c4:8d:71:23:2e:de:83:93:b1: 23:7f:ba:9f:99:f1:62:83:6b:45:aa:c3:b3:38:17:aa:a5:82: 74:db:4f:1b:3e:29:4f:71:f8:06:e9:49:ae:d4:99:f0:16:92: 42:12:3d:ff:3b:b0:1c:ba:44:7d:cb:ca:97:cd:6a:f1:03:b6: c0:16:aa:f5:e4:c2:fd:b2:8c:19:f3:9e:be:84:c9:95:2b:39: 43:68:61:2d:83:3d:65:5e:80:56:83:50:c1:b4:c9:ed:90:4f: be:75:1a:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2N0IxMTAvBgNVBAUTKEM1MzQyMzI4OEY5RkZDMTAwNDg0MkJDQzQwQTUxOTIz ODkzNEFBNzcwHhcNMjUxMjE4MjMyNzM4WhcNMjUxMjI1MjMyNzM4WjAYMRYwFAYD VQQDDA02OTQ0OGRlYS03NDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiS0PAT6cUX0Ohza+7JS6uUljmx9G8Qx8Ac4tsAtgor8VMyNihl02RN++6hdD l6JuKsvr8QaI9B//hsYMZtMEkWHbkhrnaxO0ANodBbVQEPVxg4Vvihm1ulhY5yQ6 I961tFoGypb01DIgkhirlns3JeEKiVUl3MQfflIsyNWdTfPgj3CkJzfROjwykBb1 rnet+E//Ucjg3Jsf9PcV62rAN/Qk/+6KAPhbElZ/WlI359ALlF03SLrTr945kBon 85ll06OjI0q6cSp8OIScmQjo74Lwa8p9hc7wUOw29Eaavt4Hj9vw7hqOBGVHI71f GQjhGye7+kYil1ZZyHCdg7LOXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPdxDWC 3cVwKRy3p49XihpRh1mrMB8GA1UdIwQYMBaAFMU0IyiPn/wQBIQrzEClGSOJNKp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY3Qi9GODdGQUQ5MjZB QzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9CQUVoQ3ZNUUtVWkk0azBx bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUUWpLSS1mX0JBRWhDdk1RS1VaSTRrMHFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY3Qi9GODdGQUQ5MjZBQzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9C QUVoQ3ZNUUtVWkk0azBxbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTEFguT/7e/q8ngQIp1Oiml/ofGVCoJ7Zcs8SjavWiMl2BNqQ7Sfog ECwlKbHHHZ7n8mftnPiU969bMtq7unEXYW6MdEmcwrdR44LvUHu+MLmD55xfg4nu Rc6hDGS8kgmmFC0p9J/EcxAfyxarbraZo1nDYR54XGpqc2IMpDqLNPifyFj/+MJp NwbdaJdW9g/nBzQocS4OsUTEjXEjLt6Dk7Ejf7qfmfFig2tFqsOzOBeqpYJ0208b PilPcfgG6Umu1JnwFpJCEj3/O7AcukR9y8qXzWrxA7bAFqr15ML9sowZ856+hMmV KzlDaGEtgz1lXoBWg1DBtMntkE++dRoK -----END CERTIFICATE-----Generated at Sat Dec 20 07:16:39 2025 by rpki-client