This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json) Hash identifier: i+yuVS6tmz7j7bKM9vWNyY0sJXkzwUCd++Jk4SUfIyw= Subject key identifier: 22:54:C3:7C:62:47:BE:D1:77:BE:EA:E1:AB:8E:4E:11:0E:BB:76:39 Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Certificate serial: 1975 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft Manifest number: 196A Signing time: Mon 22 Dec 2025 16:10:50 +0000 Manifest this update: Mon 22 Dec 2025 16:10:49 +0000 Manifest next update: Mon 29 Dec 2025 16:10:49 +0000 Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: Pb9FYVXYjynRXNNsQmYyO73yP/yUYSduKMNRiuYg5UQ=) 2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: CF41fEpYfOio5+N+rdP4mHFE/1R/CEvPcYP/7UAC+WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6517 (0x1975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Validity Not Before: Dec 22 16:10:49 2025 GMT Not After : Dec 29 16:10:49 2025 GMT Subject: CN=69496d8a-5f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:7b:b0:05:eb:5b:f7:49:a8:14:98:b2:48: fb:d6:f4:a0:ad:89:fb:73:90:52:99:38:b6:65:84: ad:a3:9e:d5:1f:9d:86:d2:bc:aa:85:fa:1c:f8:33: c1:b0:82:45:29:1f:29:70:34:58:47:11:3b:96:10: ca:aa:11:31:54:2e:0f:e4:4b:81:56:b8:1f:df:97: bd:38:6f:09:3d:61:30:05:06:b4:0b:01:59:52:eb: 0b:67:46:45:ba:f1:16:de:ff:37:d7:e0:e5:f1:cf: be:48:19:f9:a7:c3:54:15:6f:b0:e4:eb:e3:7c:10: 14:0d:2b:83:b9:46:00:77:19:0e:c3:45:42:9f:32: d2:d4:f2:e0:b4:90:19:46:29:ed:9e:09:75:0b:3c: 31:3a:82:93:d0:0e:ef:e5:ca:f7:ba:83:da:7a:9f: 27:d1:93:bf:87:57:4d:19:e0:5c:9e:85:4a:4e:aa: f0:fe:0d:3b:36:45:01:21:92:fc:d0:8f:9e:d7:a1: 9e:f1:4f:36:0d:55:48:7e:d3:f4:7e:73:29:fc:c9: bd:e4:04:c0:bc:36:f2:b2:ae:e9:d2:d2:f0:76:4e: ef:81:0b:44:6a:44:e7:8e:53:49:3c:b9:9b:6d:1d: 1b:25:cb:e1:33:51:89:3c:86:68:8b:e1:3e:a5:5c: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:54:C3:7C:62:47:BE:D1:77:BE:EA:E1:AB:8E:4E:11:0E:BB:76:39 X509v3 Authority Key Identifier: keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:9f:ae:26:af:a5:86:85:a0:09:3e:63:eb:51:c3:bb:65:ed: 64:cb:9c:23:c7:e6:43:bc:c4:8b:c3:84:fb:0c:4f:82:3b:84: 4e:74:f7:7d:7e:53:4e:ab:2e:38:31:e0:e1:f3:e3:6b:9a:c5: 7c:79:cb:f8:cd:2b:34:42:b8:0c:1f:c3:ea:99:56:ae:9a:ed: a3:40:b2:80:e3:28:46:59:59:b0:16:0e:81:59:56:72:37:16: b3:79:51:d5:43:22:96:6c:e1:d6:95:f3:19:93:53:9f:0d:15: ee:eb:06:db:88:46:31:0f:e0:9a:61:ff:9c:3e:91:14:31:3b: e7:a1:3e:a5:fb:b6:ef:d0:de:76:25:de:28:3d:77:f1:2e:52: 11:29:a2:2a:99:41:d8:86:15:fb:16:c3:2c:89:af:95:55:51: 92:80:8e:bb:1a:6f:cf:75:76:2b:7a:29:7f:66:e5:4c:d0:89: 1d:b6:c7:15:79:7c:80:28:e4:4f:c8:c1:24:07:28:e5:da:e6: 83:59:7e:9a:d5:e1:47:db:76:47:18:5c:7b:04:e8:fa:94:04: 92:30:23:32:78:93:6f:9e:e1:4a:e7:75:b6:8f:bd:64:33:55: 33:13:c1:47:2d:09:34:f9:32:c2:94:5f:e7:80:9b:57:8c:4e: f8:7b:c9:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNjExMTAvBgNVBAUTKEM0OEFBQ0VCNEREQUVFM0M2MDQyRTY2MjE2QUQ3OTE1 MDdCNDdDNkIwHhcNMjUxMjIyMTYxMDQ5WhcNMjUxMjI5MTYxMDQ5WjAYMRYwFAYD VQQDDA02OTQ5NmQ4YS01ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmh7sAXrW/dJqBSYskj71vSgrYn7c5BSmTi2ZYSto57VH52G0ryqhfoc+DPB sIJFKR8pcDRYRxE7lhDKqhExVC4P5EuBVrgf35e9OG8JPWEwBQa0CwFZUusLZ0ZF uvEW3v831+Dl8c++SBn5p8NUFW+w5OvjfBAUDSuDuUYAdxkOw0VCnzLS1PLgtJAZ Rintngl1CzwxOoKT0A7v5cr3uoPaep8n0ZO/h1dNGeBcnoVKTqrw/g07NkUBIZL8 0I+e16Ge8U82DVVIftP0fnMp/Mm95ATAvDbysq7p0tLwdk7vgQtEakTnjlNJPLmb bR0bJcvhM1GJPIZoi+E+pVx/DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJUw3xi R77Rd77q4auOThEOu3Y5MB8GA1UdIwQYMBaAFMSKrOtN2u48YELmYhateRUHtHxr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY2MS8xNkE2REM2MDgz REExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdqeGdRdVppRnExNUZRZTBm R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJcXM2MDNhN2p4Z1F1WmlGcTE1RlFlMGZHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY2MS8xNkE2REM2MDgzREExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdq eGdRdVppRnExNUZRZTBmR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUn64mr6WGhaAJPmPrUcO7Ze1ky5wjx+ZDvMSLw4T7DE+CO4ROdPd9 flNOqy44MeDh8+NrmsV8ecv4zSs0QrgMH8PqmVaumu2jQLKA4yhGWVmwFg6BWVZy NxazeVHVQyKWbOHWlfMZk1OfDRXu6wbbiEYxD+CaYf+cPpEUMTvnoT6l+7bv0N52 Jd4oPXfxLlIRKaIqmUHYhhX7FsMsia+VVVGSgI67Gm/PdXYreil/ZuVM0IkdtscV eXyAKORPyMEkByjl2uaDWX6a1eFH23ZHGFx7BOj6lASSMCMyeJNvnuFK53W2j71k M1UzE8FHLQk0+TLClF/ngJtXjE74e8nY -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:18 2025 by rpki-client