This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json) Hash identifier: XrJhqHCE25oOYJTT+gH9FdJyNoboionjxxFaobiSfvE= Subject key identifier: CA:6A:0A:44:21:DD:8D:B6:80:11:0C:65:D2:C8:D5:67:FC:2E:BA:1A Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft Manifest number: 62 Signing time: Wed 03 Dec 2025 05:16:17 +0000 Manifest this update: Wed 03 Dec 2025 05:16:17 +0000 Manifest next update: Wed 10 Dec 2025 05:16:17 +0000 Files and hashes: 1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: YMXmdhnNRaJfAmQhzqDq8rHpZfLo7og4Voqj37aoVZQ=) 2: C053613E38B311F08DB63209C4F9AE02.roa (hash: uKfaLXcOCNJdE2XGkLLuO2/nisMUjVXsuFOacDhWkTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Validity Not Before: Dec 3 05:16:17 2025 GMT Not After : Dec 10 05:16:17 2025 GMT Subject: CN=692fc7a1-dc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:3b:35:5e:c7:59:02:89:46:06:83:77:20: 04:8a:d1:57:5f:41:28:ca:9e:7a:f8:39:ee:de:d0: 3f:c0:e5:68:c5:e3:ce:67:4c:12:db:a8:10:76:fb: 99:7e:44:6a:3a:60:3f:88:69:a9:dc:89:9b:b5:0b: 4b:5f:a8:c7:b0:16:ac:58:c7:3f:a4:60:4c:d4:9f: d2:db:ca:c0:04:b3:1b:47:cb:1b:98:40:12:80:55: 1c:6e:32:74:7b:84:dc:68:1c:24:29:ac:17:21:4b: cb:35:b7:d0:1b:95:33:b1:4b:c7:50:c7:4c:21:ca: 3d:9a:3b:f4:00:c9:ea:8b:6e:46:c3:db:a3:76:f5: 10:d7:b1:1a:55:32:89:d7:7b:0f:17:21:74:e8:1e: cf:5b:12:cf:ca:f8:b3:08:99:76:e5:32:bf:3e:f9: cb:0d:99:8e:e7:82:ba:9b:1a:0b:72:00:97:69:f1: 30:62:e8:3c:2c:85:5d:0f:ae:41:61:cc:69:ad:61: 71:dd:60:7e:52:8f:fb:43:43:e9:73:93:44:05:03: eb:b6:07:53:17:7d:73:91:4a:12:38:6f:bf:6f:98: 04:a5:92:fe:a6:ae:8b:4f:ea:a2:3a:0a:f0:ef:d6: 9e:b3:ba:da:43:d7:f9:bd:2c:3a:a5:9a:aa:17:9d: e4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6A:0A:44:21:DD:8D:B6:80:11:0C:65:D2:C8:D5:67:FC:2E:BA:1A X509v3 Authority Key Identifier: keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:cd:79:f2:db:c7:b0:a4:e2:16:32:29:d2:3b:d8:73:5b:69: e3:86:ba:18:cf:53:48:ad:d7:f3:47:31:d3:ca:c2:a8:c2:53: 07:76:e8:fa:2e:07:68:45:e2:15:9e:3b:3e:42:76:5b:f7:3f: 98:98:c2:b6:d4:91:ce:2b:a1:18:b8:4e:91:04:f6:6a:4f:3d: 3b:1c:6e:28:90:5d:cd:63:39:3a:eb:0c:bb:fa:01:a3:15:1a: 17:c1:0d:75:49:09:17:59:c1:c9:80:20:c4:69:11:ac:96:6b: 18:42:ca:d3:3a:3d:44:04:86:4d:47:ab:10:6c:73:37:8f:57: 1e:a4:3b:11:6a:61:e8:25:8b:3f:55:19:db:4e:c6:53:77:5f: ed:88:c5:97:2d:23:57:b1:96:38:80:22:3b:ef:ed:e4:ee:88: c2:4d:64:b7:05:40:82:37:95:b0:91:d5:01:85:fd:f5:a5:f8: 5e:41:6d:a8:77:2f:cb:9b:0f:68:e1:1c:10:ca:52:e2:2e:96: 5e:84:49:1c:bf:f8:0b:c4:4c:eb:71:cd:36:9f:c1:68:51:02: 1a:0f:45:bd:ca:c3:7f:ed:ff:86:eb:65:7d:d8:0d:5e:ab:fd: e2:92:70:1c:78:97:f6:95:8e:b5:47:cb:ba:ce:7b:cf:9e:e2: c0:d8:6c:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoNUVDNUZCMzM0RUU1MkI5MDA5Q0I5MjNDNjkzQkQyMEYw NDc4QTE0NDAeFw0yNTEyMDMwNTE2MTdaFw0yNTEyMTAwNTE2MTdaMBgxFjAUBgNV BAMTDTY5MmZjN2ExLWRjMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr9js1XsdZAolGBoN3IASK0VdfQSjKnnr4Oe7e0D/A5WjF485nTBLbqBB2+5l+ RGo6YD+IaanciZu1C0tfqMewFqxYxz+kYEzUn9LbysAEsxtHyxuYQBKAVRxuMnR7 hNxoHCQprBchS8s1t9AblTOxS8dQx0whyj2aO/QAyeqLbkbD26N29RDXsRpVMonX ew8XIXToHs9bEs/K+LMImXblMr8++csNmY7ngrqbGgtyAJdp8TBi6DwshV0PrkFh zGmtYXHdYH5Sj/tDQ+lzk0QFA+u2B1MXfXORShI4b79vmASlkv6mrotP6qI6CvDv 1p6zutpD1/m9LDqlmqoXneQPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUymoKRCHd jbaAEQxl0sjVZ/wuuhowHwYDVR0jBBgwFoAUXsX7M07lK5AJy5I8aTvSDwR4oUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzM0MDA4MDIyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVBSnk1SThhVHZTRHdSNG9V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHNYN00wN2xLNUFKeTVJOGFUdlNEd1I0b1VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzM0MDA4MDIyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVB Snk1SThhVHZTRHdSNG9VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHnNefLbx7Ck4hYyKdI72HNbaeOGuhjPU0it1/NHMdPKwqjCUwd26Pou B2hF4hWeOz5Cdlv3P5iYwrbUkc4roRi4TpEE9mpPPTscbiiQXc1jOTrrDLv6AaMV GhfBDXVJCRdZwcmAIMRpEayWaxhCytM6PUQEhk1HqxBsczePVx6kOxFqYegliz9V GdtOxlN3X+2IxZctI1exljiAIjvv7eTuiMJNZLcFQII3lbCR1QGF/fWl+F5Bbah3 L8ubD2jhHBDKUuIull6ESRy/+AvETOtxzTafwWhRAhoPRb3Kw3/t/4brZX3YDV6r /eKScBx4l/aVjrVHy7rOe8+e4sDYbKE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:35 2025 by rpki-client