This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: U9+84sNAHT1xijyRqYL2rnYrgd8blx9FyVEpC4cE1DI= Subject key identifier: 5A:9A:07:8E:75:F8:F1:BD:0B:BE:10:B3:B2:34:37:1A:0F:DB:C4:F8 Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 0227 Signing time: Sun 21 Dec 2025 01:18:44 +0000 Manifest this update: Sun 21 Dec 2025 01:18:43 +0000 Manifest next update: Sun 28 Dec 2025 01:18:43 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: icVp1usfPvLn6uGTJdy/k0M91fcnqlGOp6Nq4SiAGC0=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: Dec 21 01:18:43 2025 GMT Not After : Dec 28 01:18:43 2025 GMT Subject: CN=69474af3-5d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:bb:ac:f9:e4:26:96:e3:81:82:ef:c6:e0: 14:f1:72:b5:68:e7:5f:9b:3a:6e:7a:03:4d:1e:ce: 4e:43:06:e3:2d:7f:35:ea:a2:27:69:ac:b1:4e:b3: 1e:ce:04:f6:12:a6:86:ed:9a:cf:9e:5a:04:ac:54: 1c:a0:30:a0:a7:68:76:64:14:c0:82:77:fc:16:1e: 41:61:aa:64:5a:52:c7:eb:7a:9f:56:99:b9:3c:d8: cc:5b:c2:a3:b2:74:75:8c:75:58:e8:7a:92:91:02: 3c:db:40:65:de:1c:69:1e:96:63:33:29:dd:f5:de: 03:e2:4e:2d:e0:ca:0a:d2:3e:31:5a:52:14:e9:cb: 87:a5:5a:a6:0a:02:99:44:aa:fa:f2:a7:91:39:f0: c7:15:90:48:61:12:65:13:45:d1:7b:6d:b5:19:03: 72:27:54:31:3d:cc:3b:45:25:de:a2:71:eb:f8:1e: ae:7a:01:ba:9d:1c:79:a0:7a:aa:22:75:83:e4:7f: 6f:ee:ba:9e:74:b1:5c:dd:e7:76:bf:01:d7:d5:36: 72:0b:d5:7a:7f:0c:86:34:c7:82:24:b4:56:f5:19: 30:22:e2:f6:49:e8:b9:0f:c0:62:7f:bc:13:99:13: 64:c7:3f:55:17:80:00:5a:f5:09:da:c0:33:0e:4b: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9A:07:8E:75:F8:F1:BD:0B:BE:10:B3:B2:34:37:1A:0F:DB:C4:F8 X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:88:45:96:cc:00:06:e6:b3:15:07:17:86:22:02:32:a0:bc: 4d:df:4c:19:8a:e3:89:40:a6:5e:21:60:f1:fe:95:24:8d:f9: ef:09:e6:63:82:58:49:9e:a1:95:3f:76:41:50:eb:9f:68:ef: 1b:06:f1:05:2e:bb:c6:95:9b:82:d3:61:5c:20:4d:eb:5c:da: d2:7a:ec:ee:c7:7d:7d:9a:0a:5d:13:53:12:cf:87:25:f7:2f: 87:cd:45:59:7a:9d:65:89:e0:05:d5:a3:37:d7:0f:72:e6:1e: f2:61:5a:02:4b:f6:8e:22:71:86:d1:be:f6:9e:5b:7a:dd:4f: 2b:cd:c9:8c:73:76:ad:bd:dc:22:b9:86:f0:b0:5f:90:4f:90: 5e:7c:f6:c3:b1:c0:71:af:27:01:c2:ab:09:bd:24:96:fa:c4: 36:37:3c:a8:55:a2:d6:89:bd:ac:13:b2:a0:31:95:54:2d:fa: 39:b2:4e:02:1b:f3:9b:93:d5:84:4c:41:d7:57:7f:32:da:37: 34:ac:4a:fb:43:ae:59:0e:03:10:a7:97:31:31:4c:e4:4b:f7: 66:bf:a6:be:1c:94:27:a4:a6:28:23:e6:5e:de:3d:4d:fc:04: d5:f1:f2:21:ac:39:8a:71:55:01:f3:90:a1:7f:0e:ff:bc:af: 3f:5f:01:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjUxMjIxMDExODQzWhcNMjUxMjI4MDExODQzWjAYMRYwFAYD VQQDDA02OTQ3NGFmMy01ZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtga7rPnkJpbjgYLvxuAU8XK1aOdfmzpuegNNHs5OQwbjLX816qInaayxTrMe zgT2EqaG7ZrPnloErFQcoDCgp2h2ZBTAgnf8Fh5BYapkWlLH63qfVpm5PNjMW8Kj snR1jHVY6HqSkQI820Bl3hxpHpZjMynd9d4D4k4t4MoK0j4xWlIU6cuHpVqmCgKZ RKr68qeROfDHFZBIYRJlE0XRe221GQNyJ1QxPcw7RSXeonHr+B6uegG6nRx5oHqq InWD5H9v7rqedLFc3ed2vwHX1TZyC9V6fwyGNMeCJLRW9RkwIuL2Sei5D8Bif7wT mRNkxz9VF4AAWvUJ2sAzDkuP5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqaB451 +PG9C74Qs7I0NxoP28T4MB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwiEWWzAAG5rMVBxeGIgIyoLxN30wZiuOJQKZeIWDx/pUkjfnvCeZj glhJnqGVP3ZBUOufaO8bBvEFLrvGlZuC02FcIE3rXNrSeuzux319mgpdE1MSz4cl 9y+HzUVZep1lieAF1aM31w9y5h7yYVoCS/aOInGG0b72nlt63U8rzcmMc3atvdwi uYbwsF+QT5BefPbDscBxrycBwqsJvSSW+sQ2NzyoVaLWib2sE7KgMZVULfo5sk4C G/Obk9WETEHXV38y2jc0rEr7Q65ZDgMQp5cxMUzkS/dmv6a+HJQnpKYoI+Ze3j1N /ATV8fIhrDmKcVUB85Chfw7/vK8/XwGG -----END CERTIFICATE-----Generated at Sun Dec 21 21:16:06 2025 by rpki-client