This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft File: X-0ED6bGtlZOQCsut2NpLOJDB-o.mft (raw, json) Hash identifier: BPta1BfFxkIUm37AAG/kbhBdLbP8BP60MfboJM7S92Y= Subject key identifier: 98:B7:64:65:7C:E2:EB:06:DE:E8:84:D8:2B:75:2F:13:07:B1:4E:C9 Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA Certificate issuer: /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft Manifest number: 1E Signing time: Tue 23 Dec 2025 06:38:08 +0000 Manifest this update: Tue 23 Dec 2025 06:38:07 +0000 Manifest next update: Tue 30 Dec 2025 06:38:07 +0000 Files and hashes: 1: X-0ED6bGtlZOQCsut2NpLOJDB-o.crl (hash: QmlPEixHGT+EoBf9GYNN3DuIHyTGhW+xpgZL0U21tVU=) 2: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (hash: owXPWWTvbOHMdijTrjs5nUjJn72ZVck6W96FPsIZ2aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA Validity Not Before: Dec 23 06:38:07 2025 GMT Not After : Dec 30 06:38:07 2025 GMT Subject: CN=694a38d0-2c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:58:e5:69:a0:a7:c6:ca:3f:87:88:6e:dc: 57:65:c4:c8:11:d8:d1:21:5f:e8:7b:3c:72:9f:da: 2f:f6:c8:ca:33:58:01:85:c2:f8:f8:2e:22:64:c1: f1:4a:f2:1c:20:7f:ad:37:b3:65:92:8c:44:69:4e: aa:de:60:77:f7:3f:6b:bf:fa:7a:75:5c:4b:fc:f3: d2:cd:85:c3:b5:7c:e7:3e:1a:8e:9d:1a:ce:8e:b1: 3c:8f:e9:b3:e1:87:23:d2:0a:d1:e6:a0:03:1d:d8: 43:a1:78:13:8c:1d:d3:44:c7:9a:c5:e2:9a:9d:30: b9:f5:b9:42:72:6f:ac:42:d5:de:9f:34:04:33:6a: 5b:01:a1:02:28:f2:cc:fd:aa:45:a2:34:3b:17:ac: 00:30:ca:70:2f:4f:21:62:8a:7d:f3:0d:9e:6e:2d: 5f:51:18:b7:e6:11:2b:df:26:a4:ef:de:7f:b9:57: 6b:ba:78:e3:72:0f:90:7d:04:f1:47:7c:91:f6:92: 13:d5:60:18:b4:33:64:6e:77:a1:c3:80:25:27:5d: a7:25:c8:73:23:6b:8d:f2:52:f1:b7:83:6a:79:8c: e8:0f:a2:eb:b8:41:34:dc:a5:c5:40:d9:63:fa:d9: cf:b2:41:56:68:2d:af:c5:1a:76:85:b8:3a:6a:1b: 1a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B7:64:65:7C:E2:EB:06:DE:E8:84:D8:2B:75:2F:13:07:B1:4E:C9 X509v3 Authority Key Identifier: keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f3:95:16:7d:99:10:a3:10:56:0d:31:86:e3:ea:33:67:83: 30:fc:16:e1:2b:0c:c6:62:d8:03:a5:1f:0a:a4:86:33:5a:df: 44:06:31:01:6a:a6:05:92:c5:8e:46:89:04:87:95:32:b8:ff: b8:d5:a3:57:2b:1f:7c:eb:32:2d:c4:31:15:dd:af:28:48:64: d4:45:db:c9:05:d3:96:8b:30:08:90:63:ee:fc:71:e9:59:ee: b7:cb:18:a8:e5:af:c9:84:7f:93:35:95:0f:46:3d:fe:ec:1d: 07:0e:f0:40:cd:96:81:a0:5f:7e:99:22:9c:ec:5d:b9:73:bc: 1e:83:64:2c:9b:f5:98:de:8d:b5:43:1b:09:4f:62:75:f1:be: 1e:6f:d2:86:3f:e0:54:21:73:f4:8b:79:89:82:e1:26:be:7b: 0e:21:46:7c:d2:53:81:cb:18:d4:96:85:52:70:9d:87:84:38: b9:2c:d3:d4:87:a6:f8:c3:f6:9b:47:77:06:e9:32:70:f1:48: ec:93:c6:25:da:4c:9c:bb:fc:de:ae:74:bb:16:10:66:35:7f: 0c:ee:8e:d2:88:48:04:0a:2b:e7:92:37:48:73:22:27:fc:5c: 67:d7:28:7e:2f:9c:5a:2b:b7:35:56:d0:ce:a3:26:af:94:d9: 51:8c:38:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkY1QjExMC8GA1UEBRMoNUZFRDA0MEZBNkM2QjY1NjRFNDAyQjJFQjc2MzY5MkNF MjQzMDdFQTAeFw0yNTEyMjMwNjM4MDdaFw0yNTEyMzAwNjM4MDdaMBgxFjAUBgNV BAMMDTY5NGEzOGQwLTJjOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuT1jlaaCnxso/h4hu3FdlxMgR2NEhX+h7PHKf2i/2yMozWAGFwvj4LiJkwfFK 8hwgf603s2WSjERpTqreYHf3P2u/+np1XEv889LNhcO1fOc+Go6dGs6OsTyP6bPh hyPSCtHmoAMd2EOheBOMHdNEx5rF4pqdMLn1uUJyb6xC1d6fNAQzalsBoQIo8sz9 qkWiNDsXrAAwynAvTyFiin3zDZ5uLV9RGLfmESvfJqTv3n+5V2u6eONyD5B9BPFH fJH2khPVYBi0M2Rud6HDgCUnXaclyHMja43yUvG3g2p5jOgPouu4QTTcpcVA2WP6 2c+yQVZoLa/FGnaFuDpqGxodAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmLdkZXzi 6wbe6ITYK3UvEwexTskwHwYDVR0jBBgwFoAUX+0ED6bGtlZOQCsut2NpLOJDB+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyRjVCL0Q3MURDMjU0QjRC MTExRjBBREMyQjExRkM0RjlBRTAyL1gtMEVENmJHdGxaT1FDc3V0Mk5wTE9KREIt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWC0wRUQ2Ykd0bFpPUUNzdXQyTnBMT0pEQi1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky RjVCL0Q3MURDMjU0QjRCMTExRjBBREMyQjExRkM0RjlBRTAyL1gtMEVENmJHdGxa T1FDc3V0Mk5wTE9KREItby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjzlRZ9mRCjEFYNMYbj6jNngzD8FuErDMZi2AOlHwqkhjNa30QGMQFq pgWSxY5GiQSHlTK4/7jVo1crH3zrMi3EMRXdryhIZNRF28kF05aLMAiQY+78celZ 7rfLGKjlr8mEf5M1lQ9GPf7sHQcO8EDNloGgX36ZIpzsXblzvB6DZCyb9ZjejbVD GwlPYnXxvh5v0oY/4FQhc/SLeYmC4Sa+ew4hRnzSU4HLGNSWhVJwnYeEOLks09SH pvjD9ptHdwbpMnDxSOyTxiXaTJy7/N6udLsWEGY1fwzujtKISAQKK+eSN0hzIif8 XGfXKH4vnFortzVW0M6jJq+U2VGMOI8= -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:59 2025 by rpki-client