This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: hILqj22yszN/UIkxnhN3rZEVb6S8h0wNtYdG7Jdx0V0= Subject key identifier: E0:50:21:49:1D:21:9D:90:30:02:A5:71:5E:03:23:0A:07:44:75:AC Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 01BC Signing time: Tue 23 Dec 2025 02:04:53 +0000 Manifest this update: Tue 23 Dec 2025 02:04:52 +0000 Manifest next update: Tue 30 Dec 2025 02:04:52 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: +LTTX4x4KKAkNIg/Whq+yTwQoNMYYJxCpV/GZTXFokU=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: Ko2wZOucS0J/Gzb2C9yks7gKzQf0Lz0Srb4aABcYNMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: Dec 23 02:04:52 2025 GMT Not After : Dec 30 02:04:52 2025 GMT Subject: CN=6949f8c4-42c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c9:67:1c:bb:87:84:e4:7b:d7:66:29:61:d0: a2:62:d4:89:e7:83:91:b3:08:ff:25:bb:dd:f7:3e: 2f:83:b8:1b:26:38:ee:e3:86:ef:8e:f3:67:fe:06: 43:f7:d5:99:cf:2a:9f:ef:c5:9c:8e:d9:66:a5:00: d3:a9:25:d7:22:df:4a:70:a3:92:5e:c0:8b:e8:c0: e2:3b:f8:2e:57:35:72:76:15:13:3b:f8:16:f4:76: d5:14:51:c4:77:9c:cc:0f:51:92:fe:8c:05:4f:cf: be:67:d8:03:c2:b3:26:12:ee:b4:4e:3f:25:61:a9: 46:01:b1:77:34:73:6e:bf:ec:24:a1:12:0d:20:c6: 38:60:55:7f:f4:45:4c:78:45:bb:94:d9:fa:e9:2e: 32:2e:06:df:0b:2b:5c:2c:33:36:da:33:98:86:27: 6d:bd:58:e6:da:fa:13:2e:e9:b6:3e:28:47:0e:89: 43:2a:e7:54:b7:3f:6a:3d:18:63:4a:eb:f4:a3:25: d4:0f:46:e8:c8:e7:6b:a8:3f:e0:c8:aa:9a:bc:77: d4:99:ba:5d:1b:99:56:62:7f:bf:a9:61:7d:c0:56: 25:0a:99:7a:ea:b4:4e:7a:2b:45:85:4c:30:94:9d: 60:43:97:d6:b4:9b:78:8f:42:15:bc:2a:e9:97:ca: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:50:21:49:1D:21:9D:90:30:02:A5:71:5E:03:23:0A:07:44:75:AC X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:28:d8:49:2c:65:f4:f0:d8:60:6b:d7:61:3a:0f:29:d0:d0: da:9f:ef:6c:25:ef:52:a4:60:f9:a5:4e:fb:e7:a1:2f:2b:a7: 23:2c:89:09:67:c1:f6:d1:73:9c:d1:15:de:6e:83:99:a9:51: 4f:b1:ef:70:4a:c9:5e:26:50:d8:0b:b0:d0:4c:f6:d7:18:c1: 94:47:a4:d3:c2:87:82:72:f8:f5:80:61:df:0f:37:20:94:c7: a4:17:2d:8e:cc:04:0a:94:2c:15:c7:59:f3:6e:2e:06:f2:ec: ec:a0:5e:93:a3:8e:52:9c:bb:30:4b:01:17:d8:38:ec:cd:5d: 1c:5b:28:91:f5:9e:70:61:26:09:8b:93:f3:bc:cb:89:da:c2: f0:f9:18:33:5e:be:99:75:0a:d4:88:19:d1:b9:db:04:6f:b3: ea:64:5d:e1:ea:8e:d6:d2:74:99:0a:29:3f:ed:95:07:5a:d6: 68:70:a7:d3:bc:2c:ac:c9:19:32:71:5a:14:93:77:7f:a2:15: c5:21:bf:ca:ee:ca:37:60:56:ae:64:11:3d:9c:33:bd:bc:97: 13:f7:ca:e5:f8:ca:3d:e4:f1:a2:32:58:49:2e:32:fd:6f:e2: 11:82:de:4b:f1:13:15:53:c1:81:8c:d8:62:4a:4b:3b:9c:c9: 63:6b:3d:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjUxMjIzMDIwNDUyWhcNMjUxMjMwMDIwNDUyWjAYMRYwFAYD VQQDDA02OTQ5ZjhjNC00MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+slnHLuHhOR712YpYdCiYtSJ54ORswj/Jbvd9z4vg7gbJjju44bvjvNn/gZD 99WZzyqf78WcjtlmpQDTqSXXIt9KcKOSXsCL6MDiO/guVzVydhUTO/gW9HbVFFHE d5zMD1GS/owFT8++Z9gDwrMmEu60Tj8lYalGAbF3NHNuv+wkoRINIMY4YFV/9EVM eEW7lNn66S4yLgbfCytcLDM22jOYhidtvVjm2voTLum2PihHDolDKudUtz9qPRhj Suv0oyXUD0boyOdrqD/gyKqavHfUmbpdG5lWYn+/qWF9wFYlCpl66rROeitFhUww lJ1gQ5fWtJt4j0IVvCrpl8rJ/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBQIUkd IZ2QMAKlcV4DIwoHRHWsMB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvKNhJLGX08Nhga9dhOg8p0NDan+9sJe9SpGD5pU7756EvK6cjLIkJ Z8H20XOc0RXeboOZqVFPse9wSsleJlDYC7DQTPbXGMGUR6TTwoeCcvj1gGHfDzcg lMekFy2OzAQKlCwVx1nzbi4G8uzsoF6To45SnLswSwEX2DjszV0cWyiR9Z5wYSYJ i5PzvMuJ2sLw+RgzXr6ZdQrUiBnRudsEb7PqZF3h6o7W0nSZCik/7ZUHWtZocKfT vCysyRkycVoUk3d/ohXFIb/K7so3YFauZBE9nDO9vJcT98rl+Mo95PGiMlhJLjL9 b+IRgt5L8RMVU8GBjNhiSks7nMljaz3x -----END CERTIFICATE-----Generated at Wed Dec 24 19:31:10 2025 by rpki-client