This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json) Hash identifier: Ih8VVHkD20Ppo7QGJRjbodZ1WYLBIR+f+GhvN8FpXE4= Subject key identifier: B2:BC:A2:27:8C:69:51:93:2D:6B:D0:64:BF:1A:3C:B5:E5:EB:D7:2E Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft Manifest number: 021E Signing time: Sun 21 Dec 2025 01:25:27 +0000 Manifest this update: Sun 21 Dec 2025 01:25:27 +0000 Manifest next update: Sun 28 Dec 2025 01:25:27 +0000 Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: gbbeGw1IBwVLsicnvxQxK2StUR4DQQSFTnp4K7m7ml8=) 2: 6A9D79ECD6E311EE94842842C4F9AE02.roa (hash: lxKtarKsATY2wiXkVbh3EFTMWa9NQc/B8XJ8gCOAwlc=) 3: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: okvmN+fO8yeb8sv3bijRR7qzwb2TLJ+EV1o8F+ji/G8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Validity Not Before: Dec 21 01:25:27 2025 GMT Not After : Dec 28 01:25:27 2025 GMT Subject: CN=69474c87-47de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:e9:a0:5a:b5:d1:b0:95:73:e0:68:d9:c0: 12:15:59:9a:04:01:64:95:b5:0c:32:b6:1c:59:d1: 1f:29:b3:b1:22:c9:83:9d:c4:ba:d2:80:65:48:03: ea:70:84:5d:18:47:00:c0:fe:03:3c:26:bd:2b:d3: c0:c1:57:2e:50:d3:5c:77:81:39:3c:e9:01:b7:4b: 4b:e3:7f:94:35:b8:a0:89:dc:76:a9:b1:fa:37:42: 4e:42:f1:a7:7e:19:5a:8f:1f:6a:79:59:75:62:45: 92:69:54:de:fa:a6:e1:14:fc:4c:ca:52:13:d0:e0: f4:cc:e6:8f:c0:8f:c7:ce:de:57:61:29:80:65:16: dd:71:33:cb:e3:92:4a:ca:16:e3:a6:c0:02:c4:72: bd:6f:01:56:1b:d6:61:0c:66:ec:d5:cb:9d:8b:80: 18:8e:86:2d:30:53:c9:9c:98:33:ef:c2:b6:92:0f: 0f:3d:e2:d5:6b:ad:77:80:47:18:3d:e9:2c:f2:5e: ad:5c:0b:2b:75:86:e8:ff:99:a4:eb:d4:8a:6f:b4: 1b:1e:7c:89:ce:ec:e5:c9:21:ff:2e:67:d0:34:d6: c7:f8:69:5a:17:c4:9b:f0:0a:2a:7a:7d:3b:93:9b: 4f:54:df:1e:3f:b4:d2:88:38:e0:b0:14:2a:40:05: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:A2:27:8C:69:51:93:2D:6B:D0:64:BF:1A:3C:B5:E5:EB:D7:2E X509v3 Authority Key Identifier: keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:10:9e:b0:f7:d2:b8:7d:29:3d:ee:50:ea:41:ed:2e:ad:6d: 91:4f:bb:73:2e:52:07:a3:d9:63:15:46:e6:0b:82:e3:98:a2: fb:1e:a0:b8:32:c9:59:c2:77:6d:9e:48:13:8b:cc:58:62:3b: 25:66:bc:3e:c7:95:73:e8:ae:ea:25:53:bd:7f:3c:8e:d4:96: 27:51:68:b8:5c:27:fb:d7:ea:b6:8a:e9:28:92:16:aa:e4:19: ee:f9:3a:e8:2d:77:0b:30:9c:f3:49:75:eb:58:0c:36:2c:23: ff:d3:67:91:4b:82:51:e3:1d:30:64:f8:11:f6:18:ff:3f:d0: 24:d3:36:1a:5b:4d:5b:6c:82:78:12:0d:d6:3b:07:db:a3:b0: 2b:91:40:6f:ec:b7:31:db:8f:c9:85:55:71:15:8d:c7:8f:99: 64:e9:59:48:4e:a4:21:c9:1c:72:79:ed:a6:f8:cb:fb:c9:1e: 76:a9:74:5a:c7:fd:90:eb:75:08:96:3a:a7:9a:82:9f:41:b0: a4:37:05:82:1f:a7:9b:7e:63:79:8f:cf:f6:46:ce:de:96:16: 95:3a:74:45:15:39:a2:0f:4b:81:b2:63:df:1d:e8:5a:ad:57: f5:f3:2c:64:f9:28:34:a0:bb:5d:86:05:f8:27:91:cf:f1:17: f9:0b:d7:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1MUIxMTAvBgNVBAUTKDVGRTA0Qzk1N0E2Q0JDNTQwQTM0RjQ1M0QxM0UzRjgw NTBDOEY0RUUwHhcNMjUxMjIxMDEyNTI3WhcNMjUxMjI4MDEyNTI3WjAYMRYwFAYD VQQDDA02OTQ3NGM4Ny00N2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ/poFq10bCVc+Bo2cASFVmaBAFklbUMMrYcWdEfKbOxIsmDncS60oBlSAPq cIRdGEcAwP4DPCa9K9PAwVcuUNNcd4E5POkBt0tL43+UNbigidx2qbH6N0JOQvGn fhlajx9qeVl1YkWSaVTe+qbhFPxMylIT0OD0zOaPwI/Hzt5XYSmAZRbdcTPL45JK yhbjpsACxHK9bwFWG9ZhDGbs1cudi4AYjoYtMFPJnJgz78K2kg8PPeLVa613gEcY Peks8l6tXAsrdYbo/5mk69SKb7QbHnyJzuzlySH/LmfQNNbH+GlaF8Sb8Aoqen07 k5tPVN8eP7TSiDjgsBQqQAU5AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK8oieM aVGTLWvQZL8aPLXl69cuMB8GA1UdIwQYMBaAFF/gTJV6bLxUCjT0U9E+P4BQyPTu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTUxQi8wMENBOThGMkEx QTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZGUUtOUFJUMFQ0X2dGREk5 TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtQk1sWHBzdkZRS05QUlQwVDRfZ0ZESTlPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTUxQi8wMENBOThGMkExQTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZG UUtOUFJUMFQ0X2dGREk5TzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaEJ6w99K4fSk97lDqQe0urW2RT7tzLlIHo9ljFUbmC4LjmKL7HqC4 MslZwndtnkgTi8xYYjslZrw+x5Vz6K7qJVO9fzyO1JYnUWi4XCf71+q2iukokhaq 5Bnu+TroLXcLMJzzSXXrWAw2LCP/02eRS4JR4x0wZPgR9hj/P9Ak0zYaW01bbIJ4 Eg3WOwfbo7ArkUBv7Lcx24/JhVVxFY3Hj5lk6VlITqQhyRxyee2m+Mv7yR52qXRa x/2Q63UIljqnmoKfQbCkNwWCH6ebfmN5j8/2Rs7elhaVOnRFFTmiD0uBsmPfHeha rVf18yxk+Sg0oLtdhgX4J5HP8Rf5C9cA -----END CERTIFICATE-----Generated at Sun Dec 21 07:44:06 2025 by rpki-client